last executing test programs: 5m59.017005476s ago: executing program 32 (id=53): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xb4, 0x65, 0x0, 0x7f, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x41, 0x3, 0x7}]}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "754b9297d2f7d6ead1a8c625a6027c3da33ee7e67c5272bc672d774f827eecc0", "662cace2cd9bd233ecc708562880f2ed3e7915338888a348911f971c4561b852748b7796a4206c69face32b5aee53bea", "f239aecfba4b4ca42238c094d7c4c11f8264d679933e923937f3dbea", {"6bf7792a72a9a6bbc653880fadc8e4f6", "74281fb795e2ab813678f21e00"}}}}}}}, 0x0) 5m26.359417563s ago: executing program 33 (id=140): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000240)={[{@orlov}, {@lazytime}]}, 0x1, 0x4ee, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 5m25.221257012s ago: executing program 4 (id=149): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8010, &(0x7f00000000c0), 0x2, 0xbe2, &(0x7f0000001f40)="$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") r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002300)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x2f, {0x2f, 0x6, "25f4e4e9f494c657ebb4910a7d1e160d0e3c2199b77bb91ea647ba8c686a59370f60a1d38ebb6f07b1b1461dd1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x1, 0x11, "e69fd38877bb8d9b985fa08fb596a2a58c"}, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 5m20.718795289s ago: executing program 4 (id=162): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast1, @private2={0xfc, 0x2, '\x00', 0x4}, @remote, 0x5, 0x7, 0x0, 0x0, 0xe520, 0x80d80022, r2}) 5m16.623657833s ago: executing program 4 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000007c0)="640f2225670f2ec9c4c179d627ead95d00003d00b9800000c00f3235010000000f30f23e672e0f0966b8f2000f00d0670f01bb00780f01b48100600000b8090000000f23c00f21f83501000f000f23f8", 0x50}], 0x1, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018254655ebc30000"], &(0x7f0000000080)=""/159, 0x32, 0x9f, 0x1}, 0x28) syz_usb_connect(0x0, 0x73, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ea7c5708f0031d58b3120000000109026100040007200709045805007ec8ee020904fa0200ff"], 0x0) syz_usb_connect(0x2, 0x303, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m13.005584s ago: executing program 34 (id=178): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x80000001, 0x4) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000980)={[{@usrquota}]}, 0x0, 0x280, &(0x7f0000001300)="$eJzs3c1rHGUcB/Df7EtiTAgRL14UQUQ0EOJBELzoRSEgQUQEFSIiniQRYnLNevLiwXtbcuollN6a9lh6Cb30D0jbHNJLL6GHhhbaw5Td2aWb7SbZdl+GZj4f2MzM7jzzPBv2+8wk7PNMAIU1ExFfRkQ5ImYjohoRSfsO72ePmebm5sTOUkSafv8gaeyXbWda5SYjohYRn0dUWq+tb/+8/2j3m4/+W6t+eHH7p4lRvb92B/t73x5eWPz3ysKn66Xmc1PNZfv7OKq/piZdnqskzV/QGZVU8m4Bvbl8u577tyPig0b+q1FqRvb/1bEb1fjkfPdyY4ejbScwDGlarZ8DaylQOKXGNXBSmouIbL1UmpvLruHvlJP4c2X179k/VtaWf8+7pwIGIKllf/fufX1t/OpkR/7vl7P89+SzIbcUGIp6/n/4butuff2wnHdrgJF4N1vU8z/768bHIf9QOPIPxSX/UFzyD2fASdkdP/4l+Yfikn8orl7z3/E19TeG3S5gAKqtle4DTfo//z9O0zQ10gNeK9ONn67/obg68p/LeFwgH+35BwCKJR1/Pha49Z/CHIcjAyOUc/cDAAAAAAAAAAAAAAAAAAB0sTmxs9R6jKrOm+ciDr6KiMrR+rPbFpQb9yNuTTn85sMk2icbTbJiffmlz/L9ujTg0deLJ9zvoZvpe4Ot/2Xdem84x/3n6Oaxc9ttLEfU6jvPVyovfv6T5ufvVMce/61TClZ/662CQUk6tr/4cbT1d3q6lW/9C7sR1+v9z3y3/q8U7zSW3fufqfYpll/RX0/6PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj8ywAAP//5GpnYw==") 5m12.826370724s ago: executing program 4 (id=180): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB='namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',=\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000004301,iocharset=ascii,errors=continue,keep_last_dots,errors=remount-ro,errors=continue,iocharset=ascii,namecase=1,\x00'], 0x1, 0x1531, &(0x7f0000001f80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6c}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) chdir(&(0x7f0000000240)='./file0\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x2cdc) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) 5m11.214167822s ago: executing program 4 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000030c0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003080)={&(0x7f0000000bc0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x869e, 0x3}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x34) 5m10.73856225s ago: executing program 4 (id=186): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x3, 0x8, 0x81, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x0, 0xe, 0x101, 0x0, 0x4, 0x1ff, 0x8000, 0x3ff, 0x6, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x3, 0x808, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x1, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0xffffffff, 0x7fff, 0x72c, 0x3, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0xfffffffd, 0x29a, 0x5, 0x0, 0xfffffffa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000000, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0x8001, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x104, 0x0, 0x2, 0x401, 0xc, 0x10001, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0x2, 0x1, 0x1, 0x8, 0x6, 0x203, 0x2003], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x80000004, 0x4, 0x5, 0x9, 0x200002, 0x5, 0x80, 0x9, 0x9, 0x8001, 0x2, 0x7, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x1, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x8, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x0, 0x0, 0x9, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x7, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x9, 0x3, 0x2, 0x84, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) read(r1, &(0x7f0000000040)=""/63, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x10, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x6, 0x20}}}}}]}}]}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1}, 0x4) syz_usb_control_io$hid(r3, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, 'zd'}, @global=@item_012={0x1, 0x1, 0x6, 'D'}]}}, 0x0}, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0x800000}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) 5m10.427316524s ago: executing program 35 (id=186): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x3, 0x8, 0x81, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x0, 0xe, 0x101, 0x0, 0x4, 0x1ff, 0x8000, 0x3ff, 0x6, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x3, 0x808, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x1, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0xffffffff, 0x7fff, 0x72c, 0x3, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0xfffffffd, 0x29a, 0x5, 0x0, 0xfffffffa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000000, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0x8001, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x104, 0x0, 0x2, 0x401, 0xc, 0x10001, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0x2, 0x1, 0x1, 0x8, 0x6, 0x203, 0x2003], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x80000004, 0x4, 0x5, 0x9, 0x200002, 0x5, 0x80, 0x9, 0x9, 0x8001, 0x2, 0x7, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x1, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x8, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x0, 0x0, 0x9, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x7, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x9, 0x3, 0x2, 0x84, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) read(r1, &(0x7f0000000040)=""/63, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x10, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x6, 0x20}}}}}]}}]}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1}, 0x4) syz_usb_control_io$hid(r3, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, 'zd'}, @global=@item_012={0x1, 0x1, 0x6, 'D'}]}}, 0x0}, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0x800000}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) 4m28.500477655s ago: executing program 5 (id=287): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffffffffffff, 0x3fc}}) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x7, {0x4, 0x6, "70c527", 0x800, 0xff, 0x1, @mcast1, @loopback, [], "805bcb1e9f2c10fc"}}}}}}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x92) chdir(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000008e00000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0xd4800, 0x188, 0x20}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff0000000071109500000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) mkdirat(r5, &(0x7f0000000480)='./file0\x00', 0x1f0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 4m27.350781216s ago: executing program 5 (id=292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @rand_addr=0x64010102}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e1e, @empty=0xe00}}) 4m27.102747806s ago: executing program 5 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c0003"], 0x10c}}, 0x10) 4m26.862754634s ago: executing program 5 (id=296): syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000100)=ANY=[], 0xfe, 0x66b, &(0x7f0000000680)="$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") creat(&(0x7f0000000000)='./file2/file0\x00', 0xa) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x9edd5782728076f1) recvmmsg(r6, &(0x7f0000000300), 0x6c4, 0x1000000120fe, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m25.4106897s ago: executing program 5 (id=300): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = eventfd2(0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0x27800000000, 0x2002, 0x1, r0, 0xf}) 4m22.554399706s ago: executing program 5 (id=302): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2, 0x5e490420, 0x4, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008b40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000031000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f973e697d12e9f0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_NOTIFY_POLL(r2, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x4}}, 0x18) 4m21.524620557s ago: executing program 36 (id=302): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2, 0x5e490420, 0x4, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008b40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000031000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f973e697d12e9f0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_NOTIFY_POLL(r2, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x4}}, 0x18) 3m36.616560164s ago: executing program 3 (id=392): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3m36.215405856s ago: executing program 3 (id=396): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@init_itable_val}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) syz_genetlink_get_family_id$devlink(0x0, r6) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 3m34.802008568s ago: executing program 3 (id=398): semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 3m34.174631397s ago: executing program 3 (id=400): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x452, &(0x7f00000005c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xc5) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x16187f, 0x1d2) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 3m32.338655993s ago: executing program 3 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000000102e10400000000000000000a0000003c0001802c00018014000300"], 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) 3m30.246748278s ago: executing program 3 (id=406): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x22, 0x0, &(0x7f00000000c0)="111e801b4568bb288cf02319a048b5da92cd29b577ffdea89ff0a775772702b4e812", 0x0, 0x4, 0x0, 0x7}, 0x50) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f00000006c0)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04030b00c800ce5dd37d19965fc01aff701b650101000000000000000000be0fd2b9228fdd729d2e844f66b0148e71729157fb7c50a2989575f160fc528c56d6af7f52ea4658fd464746d2e5480edb141a43f8e0cbfd424089c91e71b0eae1bab0"], 0xe) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 3m29.243063838s ago: executing program 37 (id=406): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x22, 0x0, &(0x7f00000000c0)="111e801b4568bb288cf02319a048b5da92cd29b577ffdea89ff0a775772702b4e812", 0x0, 0x4, 0x0, 0x7}, 0x50) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f00000006c0)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04030b00c800ce5dd37d19965fc01aff701b650101000000000000000000be0fd2b9228fdd729d2e844f66b0148e71729157fb7c50a2989575f160fc528c56d6af7f52ea4658fd464746d2e5480edb141a43f8e0cbfd424089c91e71b0eae1bab0"], 0xe) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 2m9.036343031s ago: executing program 8 (id=543): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="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", @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$eJzs3AuYjtX6MPB1r7UehqS3SQ7Dutf98KbBMkmSQ0IOSZIkSU4JSZMkCYkhp6QhCTlOmhyGkBymMWmcz4eckyZbmiQJySlZ38Vub7uv/W/v/7f39/e/9ty/61rXrPt93nu99zP3XPOu55lr3u96jqrXon7tZkQk/iXw5y9JQogYIcQwIcR1QohACFEptlLspeP5FCT9ay/C/r0eTrvaFbCrifufu3H/czfuf+7G/c/duP+5G/c/d+P+527cf8Zys22zi13PI/cOvv+fm/H7/3+QnPKTv9pQ/sZe/40U7n/uxv3P3bj/uRv3P3fj/udu3P//fLX+4Bj3P3fj/jOWm/31XvAF7/3/gvvRPP5nx9X++WOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxljuc9VdoIcRf5le7LsYYY4wxxhhjjP37+LxXuwLGGGOMMcYYY4z9/wdCCiW0CEQekVfEiHwiv7hGFBDXioLiOhER14tYcYMoJG4UhUURUVQUE3GiuCghjEBhBYlQlBSlRFTcJEqLm0W8KCPKinLCifIiQdwiKohbRUVxm6gkbheVxR2iiqgqqonq4k5RQ9wlaopaora4W9QRdUU9UV/cIxqIe0VDcZ9oJO4XjcUDool4UDQVD4lm4mHRXDwiWohHRUvxmGglWos2oq1o9/+U/5LoK14W/UR/kSQGiIHiFTFIDBZDxFAxTLwqhovXxAjxukgWI8Uo8YYYLd4UY8RbYqwYJ8aLt8UEMVFMEpPFFDFVpIh3xDTxrkgV74npYoaYKWaJNDFbzBHvi7linpgvPhALxIdioVgkFoslIl18JDLEUpEpPhbLxCciSywXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU18KraLHWKn2CV2iz1ir/hM7BOfi/3iC5Etvvxv5p/5v/J7gQABEiRo0JAH8kAMxEB+yA8FoAAUhIIQgQjEQiwUgkJQGApDUSgKcRAHJaAEICAQEJSEkhCFKJSG0hAP8VAWyoIDBwmQABXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCiZAIXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB2SYSSMgjfgDXgTxsBpGAvjYDyMhxpyIkyCyUByKqRACkyDaZAKqTAdZsAMmAVpMBvmwByYC/NgHnwAC+BD+BAWwSJYAumQDhmwFDIhE5bBGciC5bACVsIqWA2rYC2sg7WwATbCBtgMm2ErbIVP4VPYATtgF+yCPbAHPoPP4HP4HJIhG7LhAByAg3AQDsEhyIEcOAyH4QgcgaNwFI7BMTgOJ+AknIBTcApOwxk4C2fhPJyHC/BC3DfN95RZnyzkJVpqmUfmkTEyRuaX+WUBWUAWlAVlREZkrIyVhWQhWVgWlkVlURkn42QJWUKiREkylCVlSRmVUVlalpbxMl6WlWWlk04myARZQVaQFWVFWUneLivLO2QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUT+aBsKgfAEHhYXupMCzkSWspR0Eq2lm1kW/kmPC7byzHQQXaUneSTchyMhS6yvUuUz8iuchJ0k8/JyfC87CGnQk/5ouwle8s+8iXZV3Zw/WR/OR0GyIFyFgySg+UQOVTOhbryUsfqyddlshwpR8k35BJ4U46Rb8mxcpwcL9+WE+REOUlOllPkVJki35HT5LsyVb4np8sZcqacJdPkbDlHvi/nynlyvvxALpAfyoVykVwsl8h0+ZHMkEtlpvxYLpOfyCy5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2+ancLnfInXKX3C33yL3yM7lPfi73yy9ktvxSHpB/kgflV/KQ/FrmyG/kYfmtPCK/k0fl9/KY/EEelyfkSfmjPCV/kqflGXlWnpPn5c/ygvxFXpReCgVKKqW0ClQelVfFqHwqv7pGFVDXqoLqOhVR16tYdYMqpG5UhVURVVQVU3GquCqhjEJlFalQlVSlVFTdpEqrm1W8KqPKqnLKqfIqQd2iKqhbVUV1m6qkbleV1R2qiqqqqqnq6k5VQ92laqpaqra6W9VRdVU9VV/doxqoe1VDdZ9qpO5XjdUDqol6UDVVD6lm6mHVXD2iWqhHVUv1mGqlWqs2qq1qpx5X7dUTqoPqqDqpJ1Vn9ZTqop5WieoZ1VU9q7qp51R39bzqoV5QPdWLqpfqrfqoX9RF5VU/1V8lqQFqoHpFDVKD1RA1VA1Tr6rh6jU1Qr2uktVINUq9oUarN9UY9ZYaq8ap8eptNUFNVJPUZDVFTVUp6h01Tb2rUtV7arqaoWaqWSpNzVZDfl1p/j+R/+7fyR9x+dW3qm3qU7Vd7VA71S61W+1Re9VetU/tU/vVfpWtstUBdUAdVAfVIXVI5agcdVgdVkfUEXVUHVXH1DF1XJ1Q59SP6pT6SZ1WZ9QZdU6dV+fVhV+/B0KDllpprQOdR+fVMTqfzq+v0QX0tbqgvk5H9PU6Vt+gC+kbdWFdRBfVxXScLq5LaKNRW0061CV1KR3VN+nS+mYdr8vosrqcdrq8TtC3/Mv5/6i+drqdbq/b6w66g+6kO+nOurPuorvoRJ2ou+quupvuprvr7rqH7qF76p66l+6l++g+uq/uq/vpfjpJJ+mB+hU9SA/WQ/RQPUy/qofr4XqEHqGTdbIepUfp0Xq0HqPH6LF6rB6vx+sJeoKepCfpKXqKTtEpepqeplN1qp6up+uZeqZO02l6jp6j5+q5er6erxfoBXqhXqgX68U6XafrDJ2hM3WmXqaX6Sy9XC/XK/VKvVqv1mv1Wr1er9cb9Ua9WW/WWXqb3qa36+16p96pd+vdeq/eq/fpfXq/3q+zdbY+oA/og/qgPqQP6Rydow/rw/qIPqKP6qP6mD6mj+vj+qQ+qU/pU/q0Pq3P6rP6vD6vL+gL+qK+eGnbF8hABjrQQZ4gTxATxAT5g/xBgaBAUDAoGESCSBAbxAaFghuDwkGRoGhQLIgLigclAhNgYAMKwqBkUCqIBjcFpYObg/igTFA2KBe4oHyQENwSVAhuDSoGtwWVgtuDysEdQZWgalAtqB7cGdQI7gpqBrWC2sHdQZ2g7l/+DhXcGzQM7gsaBfcHjYMHgibBg0HT4KGgWfBw0Dx4JGgRPBq0DB4LWgWtgzZB26DdP7t+UC+oH9wTNPjD9b0/XeQJ18/0N0lmgBloXjGDzGAzxAw1w8yrZrh5zYwwr5tkM9KMMm+Y0eZNM8a8ZcaacWa8edtMMBPNJDPZTDFTTYp5x0wz75pU856ZbmaYmWaWSTOzzRzzvplr5pn55gOzwHxoFppFZrFZYtLNRybDLDWZ5mOzzHxissxys8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMp2a72WF2ml1mt9lj9prPzD7zudlvvjDZ5ktzwPzJHDRfmUPma5NjvjGHzbfmiPnOHDXfm2PmB3PcnDAnzY/mlPnJnDZnzFlzzpw3P5sL5hdz0fhLm/tLb++oUWMezIMxGIP5MT8WwAJYEAtiBCMYi7FYCAthYSyMRbEoxmEclsASeAkhYUksiVGMYmksjfEYj2WxLDp0mIAJWAErYEWsiJWwElbGylgFq2A1rIZ34p14F96FtbAW3o13Y12si/WxPjbABtgQG2IjbISNsTE2wSbYFJtiM2yGzbE5tsAW2BJbYitshW2wDbbDdtge22MH7ICdsBN2xs7YBbtgIiZiV+yK3bAbdsfu2AN7YE/sib2wF/bBPtgX+2K/c/0wCZNwIA7EQTgIh+AQHIbDcDgOxxE4ApMxGUfhKByNo3EMjsGxOA7H49s4ASfiJJyMU3AqpmAKTsNpmIqpOB2n40yciWmYhnNwDs7FuTgf5+MCXIALcSEuxsWYjumYgRmYiZm4DJdhFmbhClyBq3AVrsE1uA7X4QbcgJtwE27BLbgNt+F23I47cSfuxt24F/fiPtyH+3E/ZmM2HsADeBAP4iE8hDmYg4fxMB7BI3gUj+IxPIbH8TiexJN4Ck/haTyNZ/Esnsef8QL+ghfRY4yVIr+9xhaw19qC9jobY/PZv42L2mI2zha3JayxhW2R38RorY23ZWxZW846W94m2Ft+F1exVW01W93eaWvYu2zN38UN7L22ob3PNrL32/r2nt/Eje0Dtol91Da1j9lmtrVtbtvaFvZR29I+ZlvZ1raNbWs726dsF/u0TbTP2K722d/FGXapXWfX2w12o91nP7dn7Tl7xH5nz9ufbT/b3w6zr9rh9jU7wr5ukxuN/G1sR9rx9m07wU60k+xkO8VO/V08086yaXa2nWPft3PtvN/F6fYju8Bm2oV2kV1sl1yOL9WUaT+2y+wnNssutyvsSrvKrrZr7Nq/1rrSbrZb7Fa7135mt9sddqfdZXfbPZfjS+ex335hs+2X9rD91h60X9lD9qjNsd9cji+d31H7vT1mf7DH7Ql70v5oT9mf7Gl75vL5Xzr3H+0v9qL1VhCQJEWaAspDeSmG8lF+uoYK0LVUkK6jCF1PsXQDFaIbqTAVoaJUjOKoOJUgQ0iWiEIqSaUoSjdRabqZ4qkMlaVy5Kg8JdAtVIFupYp0G1Wi26ky3UFVqCpVo+p0J9Wgu6gm1aLadDfVobpUj+rTPdSA7qWGdB81ovupMT1ATehBakoPUTN6mJrTI9SCHqWW9Bi1otbUhtpSO3qc2tMT1IE6Uid6kjrTU9SFnqZEeoa60rPUjZ6j7vQ89aAXqCe9SL2oN/Whl6gvvUz9qD8l0QAaSK/QIBpMQ2goDaNXaTi9RiPodUqmkTSK3qDR9CaNobdoLI2j8fQ2TaCJNIkm0xSaSin0Dk2jdymV3qPpNINm0ixKo9k0h96nuTSP5tMHtIA+pIW0iBbTEkqnjyiDllImfUzL6BPKouW0glbSKlpNa2gtraP1tIE20ibaTFtoK22jT2k77aCdtIt20x7aS5/RPvqc9tMXlE1f0gH6Ex2kr+gQfU059A0dpm/pCH1HR+l7OkY/0HE6QSfpRzpFP9FpOkNn6Rydp5/pAv1CF8mTCCGUoQp1GIR5wrxhTJgvzB9eExYIrw0LhteFkfD6MDa8ISwU3hgWDouERcNiYVxYPCwRmhBDG1IYhiXDUmE0vCksHd4cxodlwrJhudCF5cOE8JawQnhrWDG8LawU3h5WDu8Iq4RVw0fvrx7eGdYI7wprhrXC2uHdYZ2wblgvrB/eEzYI7w0bhveFjcL7w4rhA2GT8MGwafhQ2Cx8OGwePhK2CB8NW4aPha3C1mGbsG3YLnw8bB8+EXYIO4adwifDzuFTYZfw6TAxfCbsGj77D48nhQPCgeEr4Suh9/epxdEl0fToR9GM6NJoZvTj6LLoJ9Gs6PLoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujWqPf18woHTjrltAtcHpfXxbh8Lr+7xhVw17qC7joXcde7WHeDK+RudIVdEVfUFXNxrrgr4YxDZx250JV0pVzU3eRKu5tdvCvjyrpyzrnyLsG1de1cO9fePeE6uI6uk3vSPemeck+5p93T7hnX1T3rurnnXHf3vOvhXnAvuBddL9fb9XEvub7uZdfP9XdJLskNdAPdIDfIDXFD8vy6B3Mj3AiX7JLdKDfKjXaj3Rg3xo11Y914N95NcBPcJDfJTXFTXIpLcdPcNJfqUt10N93NdDNdmktzc9wcN9fNdfPdfLcgfoFb6Ba6xW6xS3fpLsNluEyX6Za5ZS7LZbkVboVb5Va5NW6NW+fWuQ1ug9vkNrktbovb5ra57W672+l2ut1ut9vr9rp9bp/b7/a7bJftDrgD7qA76A65r12O+8Yddt+6I+47d9R97465H9xxd8KddD+6U+4nd9qdcWfdOXfe/ewuuF/cReddSuSdyLTIu5HUyHuR6ZEZkZmRWZG0yOzInMj7kbmReZH5kQ8iCyIfRhZGFkUWR5ZE0iMfRTIiSyOZkY8jyyKfRLIiyyMrIisjqyKrI94X3x76kr6Uj/qbfGl/s4/3ZXxZX847X94n+Ft8BX+rr+hv85X87b6yv8NX8VV9Nf+Yb+Vb+za+rW/nH/ft/RO+g+/oO/knfWf/lO/in/aJ/hnf1T/ru/nnfHf/vO/hX/A9/Yu+l+/t+/iXfF//su/n+/skP8AP9K/4QX6wH+KH+mH+VT/cv+ZH+Nd9sh/pR/k3/Gj/ph/j3/Jj/Tg/3r/tJ/iJfpKf7Kf4qT7Fv+On+Xd9qn/PT/cz/Ew/y6f52X6Of9/P9fP8fP+BX+A/9Av9Ir/YL/Hp/iOf4Zf6TP+xX+Y/8Vl+uV/hV/pVfrVf49f6dX693+A3+k1+s9/it/pt/lO/3e/wO/0uv9vv8Xv9Z36f/9zv91/4bP+lP+D/5A/6r/wh/7XP8d/4w/5bf8R/54/67/0x/4M/7k/4k/5Hf8r/5E/7M/6sP+fP+5/9Bf+Lv8j/s8YYY4wx9k9JPfTHxwf8ncfkr+OSgUKIa3cUy/nb41oIsanwn+eDZVzniBDimf49H/7LqFMnKSnp1+dmKRGUWiSEiFzJv3wZ8mu8XHQST4lE0VFU+Lv1DZa9z9MfrA/HvY/eLkT+v8mJEVfiK+vf+l+s//iT4zMqh2djf7v+hV/3m5fqjy4SIr7UlZx84kp8Zf2K/8X6Rdr/Uf1ZSuT7KkWIDn+TU0Bcia+snyCeEM+KxN88kzHGGGOMMcYY+7PBslr3f3D9efn6PE5fDi8/nFf8Nf6H1+eMMcYYY4wxxhi7+p7v3efpxxMTO3bnCU94wpO/Tq72bybGGGOMMcbYv9uVTf/VroQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/ic+TuxqnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2fAAAA///9QkNA") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000180)={[{@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@resuid}, {@resuid}, {@usrjquota}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc142c00", 0x9, 0x4, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m3.660620966s ago: executing program 8 (id=561): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 1m57.412389051s ago: executing program 8 (id=578): setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setgroups(0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 1m57.236422125s ago: executing program 8 (id=571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0xf, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac6390b86fa00000000004faa2ae2c084a0ea000000000000008000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c) 1m56.03644126s ago: executing program 8 (id=574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40345410, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) socket$netlink(0x10, 0x3, 0x9) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x7b, 0xc00) gettid() 1m55.335888036s ago: executing program 8 (id=579): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@init_itable_val}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0xee00) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1m53.76418842s ago: executing program 38 (id=579): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@init_itable_val}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0xee00) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1m40.324831554s ago: executing program 6 (id=597): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x11, 0x80}, 0x0, 0x2000040e, 0x7fffffff, {0x74, 0xf}, 0x80, 0x2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT], 0xfe, 0x677, &(0x7f0000000c00)="$eJzs3UtvG9fdx/HfUNT1AYwHbREYhmOd2A0goy5NUrECwV2UHQ6lSUkOMUMV0ipwYykwTDmt7QK1Nqk2vQDtG+gumyz6Igp0nXXfQJcFgnZXoBsWc+NFnBFp3ew234+Q8HDOf+b85+I5GpFzRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZdL5crlppue2fX5LPrvtc6pT5e2rzuxoW7U9uVrPA/LS3pejzp+neG1e+E/7utm/G7m1oKX5Z09H/v/P/DbxcL6fynJHQWet0Fvnh19PRRr7f//Gyt9a2zzHcpJjJRYYa5tpy2G3huq7blGDfwzObGRvn+diMwDbfpBHtB12kZ23cKXc83a/ZdU9ncXDdOac/baW/Va00nnfjh96vl8ob5aDHZ/fc/KgX2tttsuu2tKCasDmMWB0eIU2sZc/Ckt78+LckwqDJLUHVaULVcrVYq1Wpl48Hmgw/L5eLEhPIJmogYHrRvz87HVbqgMzdwfoWw//+bJTW1pLZ2tCuT+WOrLl+eWjn1ibT/f/++c2q7o/1/2stfH1bfUNT/34rf3crr/3NyMTLRDFk1Vs70s/280Csd6akeqaee9vX8Ypa7enEZXu7PllSUXAXy5KqlmrbkyCRTjDa1oQ2V9bG21VAgo4ZcNeUo0J4CdeWoFe0TX45q6sqTL6M12boro4o2tal1GTkqaU+edtTWluqq6V/9fv9AT6Ltvn5KjkqDKrMEFQfH4GRQXv//08/jOV6v/8f/nsGxM0MM8Mb1k+v/fHNZE1cvLyMAAAAAAHDRrOiv71b02f27kvpquE2n/KbTAgAAAAAAFyj65P9m+DIflt6VlXP937/63AAAAAAAwMWwonvsLEkr0Zf6reGdULN8CSDz5gAAAAAAAPB2iT7/v7Ug9aOh1VZlvdb1PwAAAAAA+C/w25Ex9ovpGLv99GP9gqSgs2j9+R+L8uet487ud63DWlhTO0xiJr4B0G3csIqKB+qNxutdkBS9s52bVjI+cDIIphUP7Ct9fTBtrH/LP5HAwlz654uMBK4djSSwUUze6fd6L455L2n38VFBUU3cykrDbTol22s+rKhWu1boOrvdXzx78kvJH6znwZPefumTz3qPo1yOw0nHh2Een4+lU5iWy8tovIXonousNV5WI23yd+3WihW1W07Xf061w8JoQ7Ot/691O465vRK/rhyle0DWr5JCpRTtsuHaR6NDWMMsKifXPGtH5GSxFGVxJ465s3Ynfknzi/fC0vfmpGppch/4o1lUR7OYvi2sf05siylZhMfCepjFX8IF5WSx/npZTOwRAHhTDoa9UDSI+eQY+yf73Yyz3HLymnuWm967/3C8lZd/7Mc3HM5JRfUXk+6ln9+vKDyjr8VhC/Eo7sUbGWf0ctKvLCnnjF4+R+8WtvWn4TOQkqfVJDXFQRb/7vf7DytRu3840at+Ec7wRW67QbM6F27C+y8PfxYNgB/6dP/T/WfV6vpG+YNy+UFV89FqJC/0PQCADNOfsTMesTTszwZ99weDq+rHf38/Lo31u98afKWgpE/0mXp6rHvpIwRWs9tdGfkawr3Jq9YwNvqtYzy2onu5V3VRXzoSWx3EziudZfz3hWHs+mXvBgAArtTtKf3wyf4/69r9XnrdvXYj87p7vC8/+YTgvNjKFW8JAAC+ORz/a2ul+xvL993Ox5XNzUqtu+0Y37N/bHy3vuUYt911fHu71t5yTMf3up7tNU3H16JbdwIT7HQ6nt81Dc83HS9wd6Mnv5vk0e+B06q1u64ddJpOLXCM7bW7Nbtr6m5gm87Oj5pusO340cxBx7HdhmvXuq7XNoG3LNspGRM4zkigW3faXbfhhsW26fhuq+bvmZ94zZ2WY+pOYPtup+vFC0zbctsNz29Fiy2pf9qDDgEA+MZ48ero6aNeb//5KYVjxYX0+2hJ1VcZwQtZC3zDqwgAAE6glwYAAAAAAAAAAAAAAAAAAAAA4O03y/1/pxbSmwLTKfPKCJYGU35+baYlWxpO+fKv58rwDIXCySnJSLv96bN/FReKWTHLYWFBUi/d/KMxx1MTm8uYK6+wOtOaKi4UL34bLktZR8KlFX5wMH4cTsSElZlVi4OtWjz/P4eswrMvc6qmH1GL49tw4bQVHC8UJT1fOMcuuNrzEICr958AAAD//7gMOck=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, 0x0, 0x0) getdents64(r1, &(0x7f0000001f80)=""/4092, 0x100) 1m38.723080101s ago: executing program 6 (id=602): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="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", @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$eJzs3AuYjtX6MPB1r7UehqS3SQ7Dutf98KbBMkmSQ0IOSZIkSU4JSZMkCYkhp6QhCTlOmhyGkBymMWmcz4eckyZbmiQJySlZ38Vub7uv/W/v/7f39/e/9ty/61rXrPt93nu99zP3XPOu55lr3u96jqrXon7tZkQk/iXw5y9JQogYIcQwIcR1QohACFEptlLspeP5FCT9ay/C/r0eTrvaFbCrifufu3H/czfuf+7G/c/duP+5G/c/d+P+527cf8Zys22zi13PI/cOvv+fm/H7/3+QnPKTv9pQ/sZe/40U7n/uxv3P3bj/uRv3P3fj/udu3P//fLX+4Bj3P3fj/jOWm/31XvAF7/3/gvvRPP5nx9X++WOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxljuc9VdoIcRf5le7LsYYY4wxxhhjjP37+LxXuwLGGGOMMcYYY4z9/wdCCiW0CEQekVfEiHwiv7hGFBDXioLiOhER14tYcYMoJG4UhUURUVQUE3GiuCghjEBhBYlQlBSlRFTcJEqLm0W8KCPKinLCifIiQdwiKohbRUVxm6gkbheVxR2iiqgqqonq4k5RQ9wlaopaora4W9QRdUU9UV/cIxqIe0VDcZ9oJO4XjcUDool4UDQVD4lm4mHRXDwiWohHRUvxmGglWos2oq1o9/+U/5LoK14W/UR/kSQGiIHiFTFIDBZDxFAxTLwqhovXxAjxukgWI8Uo8YYYLd4UY8RbYqwYJ8aLt8UEMVFMEpPFFDFVpIh3xDTxrkgV74npYoaYKWaJNDFbzBHvi7linpgvPhALxIdioVgkFoslIl18JDLEUpEpPhbLxCciSywXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU18KraLHWKn2CV2iz1ir/hM7BOfi/3iC5Etvvxv5p/5v/J7gQABEiRo0JAH8kAMxEB+yA8FoAAUhIIQgQjEQiwUgkJQGApDUSgKcRAHJaAEICAQEJSEkhCFKJSG0hAP8VAWyoIDBwmQABXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCiZAIXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB2SYSSMgjfgDXgTxsBpGAvjYDyMhxpyIkyCyUByKqRACkyDaZAKqTAdZsAMmAVpMBvmwByYC/NgHnwAC+BD+BAWwSJYAumQDhmwFDIhE5bBGciC5bACVsIqWA2rYC2sg7WwATbCBtgMm2ErbIVP4VPYATtgF+yCPbAHPoPP4HP4HJIhG7LhAByAg3AQDsEhyIEcOAyH4QgcgaNwFI7BMTgOJ+AknIBTcApOwxk4C2fhPJyHC/BC3DfN95RZnyzkJVpqmUfmkTEyRuaX+WUBWUAWlAVlREZkrIyVhWQhWVgWlkVlURkn42QJWUKiREkylCVlSRmVUVlalpbxMl6WlWWlk04myARZQVaQFWVFWUneLivLO2QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUT+aBsKgfAEHhYXupMCzkSWspR0Eq2lm1kW/kmPC7byzHQQXaUneSTchyMhS6yvUuUz8iuchJ0k8/JyfC87CGnQk/5ouwle8s+8iXZV3Zw/WR/OR0GyIFyFgySg+UQOVTOhbryUsfqyddlshwpR8k35BJ4U46Rb8mxcpwcL9+WE+REOUlOllPkVJki35HT5LsyVb4np8sZcqacJdPkbDlHvi/nynlyvvxALpAfyoVykVwsl8h0+ZHMkEtlpvxYLpOfyCy5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2+ancLnfInXKX3C33yL3yM7lPfi73yy9ktvxSHpB/kgflV/KQ/FrmyG/kYfmtPCK/k0fl9/KY/EEelyfkSfmjPCV/kqflGXlWnpPn5c/ygvxFXpReCgVKKqW0ClQelVfFqHwqv7pGFVDXqoLqOhVR16tYdYMqpG5UhVURVVQVU3GquCqhjEJlFalQlVSlVFTdpEqrm1W8KqPKqnLKqfIqQd2iKqhbVUV1m6qkbleV1R2qiqqqqqnq6k5VQ92laqpaqra6W9VRdVU9VV/doxqoe1VDdZ9qpO5XjdUDqol6UDVVD6lm6mHVXD2iWqhHVUv1mGqlWqs2qq1qpx5X7dUTqoPqqDqpJ1Vn9ZTqop5WieoZ1VU9q7qp51R39bzqoV5QPdWLqpfqrfqoX9RF5VU/1V8lqQFqoHpFDVKD1RA1VA1Tr6rh6jU1Qr2uktVINUq9oUarN9UY9ZYaq8ap8eptNUFNVJPUZDVFTVUp6h01Tb2rUtV7arqaoWaqWSpNzVZDfl1p/j+R/+7fyR9x+dW3qm3qU7Vd7VA71S61W+1Re9VetU/tU/vVfpWtstUBdUAdVAfVIXVI5agcdVgdVkfUEXVUHVXH1DF1XJ1Q59SP6pT6SZ1WZ9QZdU6dV+fVhV+/B0KDllpprQOdR+fVMTqfzq+v0QX0tbqgvk5H9PU6Vt+gC+kbdWFdRBfVxXScLq5LaKNRW0061CV1KR3VN+nS+mYdr8vosrqcdrq8TtC3/Mv5/6i+drqdbq/b6w66g+6kO+nOurPuorvoRJ2ou+quupvuprvr7rqH7qF76p66l+6l++g+uq/uq/vpfjpJJ+mB+hU9SA/WQ/RQPUy/qofr4XqEHqGTdbIepUfp0Xq0HqPH6LF6rB6vx+sJeoKepCfpKXqKTtEpepqeplN1qp6up+uZeqZO02l6jp6j5+q5er6erxfoBXqhXqgX68U6XafrDJ2hM3WmXqaX6Sy9XC/XK/VKvVqv1mv1Wr1er9cb9Ua9WW/WWXqb3qa36+16p96pd+vdeq/eq/fpfXq/3q+zdbY+oA/og/qgPqQP6Rydow/rw/qIPqKP6qP6mD6mj+vj+qQ+qU/pU/q0Pq3P6rP6vD6vL+gL+qK+eGnbF8hABjrQQZ4gTxATxAT5g/xBgaBAUDAoGESCSBAbxAaFghuDwkGRoGhQLIgLigclAhNgYAMKwqBkUCqIBjcFpYObg/igTFA2KBe4oHyQENwSVAhuDSoGtwWVgtuDysEdQZWgalAtqB7cGdQI7gpqBrWC2sHdQZ2g7l/+DhXcGzQM7gsaBfcHjYMHgibBg0HT4KGgWfBw0Dx4JGgRPBq0DB4LWgWtgzZB26DdP7t+UC+oH9wTNPjD9b0/XeQJ18/0N0lmgBloXjGDzGAzxAw1w8yrZrh5zYwwr5tkM9KMMm+Y0eZNM8a8ZcaacWa8edtMMBPNJDPZTDFTTYp5x0wz75pU856ZbmaYmWaWSTOzzRzzvplr5pn55gOzwHxoFppFZrFZYtLNRybDLDWZ5mOzzHxissxys8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMp2a72WF2ml1mt9lj9prPzD7zudlvvjDZ5ktzwPzJHDRfmUPma5NjvjGHzbfmiPnOHDXfm2PmB3PcnDAnzY/mlPnJnDZnzFlzzpw3P5sL5hdz0fhLm/tLb++oUWMezIMxGIP5MT8WwAJYEAtiBCMYi7FYCAthYSyMRbEoxmEclsASeAkhYUksiVGMYmksjfEYj2WxLDp0mIAJWAErYEWsiJWwElbGylgFq2A1rIZ34p14F96FtbAW3o13Y12si/WxPjbABtgQG2IjbISNsTE2wSbYFJtiM2yGzbE5tsAW2BJbYitshW2wDbbDdtge22MH7ICdsBN2xs7YBbtgIiZiV+yK3bAbdsfu2AN7YE/sib2wF/bBPtgX+2K/c/0wCZNwIA7EQTgIh+AQHIbDcDgOxxE4ApMxGUfhKByNo3EMjsGxOA7H49s4ASfiJJyMU3AqpmAKTsNpmIqpOB2n40yciWmYhnNwDs7FuTgf5+MCXIALcSEuxsWYjumYgRmYiZm4DJdhFmbhClyBq3AVrsE1uA7X4QbcgJtwE27BLbgNt+F23I47cSfuxt24F/fiPtyH+3E/ZmM2HsADeBAP4iE8hDmYg4fxMB7BI3gUj+IxPIbH8TiexJN4Ck/haTyNZ/Esnsef8QL+ghfRY4yVIr+9xhaw19qC9jobY/PZv42L2mI2zha3JayxhW2R38RorY23ZWxZW846W94m2Ft+F1exVW01W93eaWvYu2zN38UN7L22ob3PNrL32/r2nt/Eje0Dtol91Da1j9lmtrVtbtvaFvZR29I+ZlvZ1raNbWs726dsF/u0TbTP2K722d/FGXapXWfX2w12o91nP7dn7Tl7xH5nz9ufbT/b3w6zr9rh9jU7wr5ukxuN/G1sR9rx9m07wU60k+xkO8VO/V08086yaXa2nWPft3PtvN/F6fYju8Bm2oV2kV1sl1yOL9WUaT+2y+wnNssutyvsSrvKrrZr7Nq/1rrSbrZb7Fa7135mt9sddqfdZXfbPZfjS+ex335hs+2X9rD91h60X9lD9qjNsd9cji+d31H7vT1mf7DH7Ql70v5oT9mf7Gl75vL5Xzr3H+0v9qL1VhCQJEWaAspDeSmG8lF+uoYK0LVUkK6jCF1PsXQDFaIbqTAVoaJUjOKoOJUgQ0iWiEIqSaUoSjdRabqZ4qkMlaVy5Kg8JdAtVIFupYp0G1Wi26ky3UFVqCpVo+p0J9Wgu6gm1aLadDfVobpUj+rTPdSA7qWGdB81ovupMT1ATehBakoPUTN6mJrTI9SCHqWW9Bi1otbUhtpSO3qc2tMT1IE6Uid6kjrTU9SFnqZEeoa60rPUjZ6j7vQ89aAXqCe9SL2oN/Whl6gvvUz9qD8l0QAaSK/QIBpMQ2goDaNXaTi9RiPodUqmkTSK3qDR9CaNobdoLI2j8fQ2TaCJNIkm0xSaSin0Dk2jdymV3qPpNINm0ixKo9k0h96nuTSP5tMHtIA+pIW0iBbTEkqnjyiDllImfUzL6BPKouW0glbSKlpNa2gtraP1tIE20ibaTFtoK22jT2k77aCdtIt20x7aS5/RPvqc9tMXlE1f0gH6Ex2kr+gQfU059A0dpm/pCH1HR+l7OkY/0HE6QSfpRzpFP9FpOkNn6Rydp5/pAv1CF8mTCCGUoQp1GIR5wrxhTJgvzB9eExYIrw0LhteFkfD6MDa8ISwU3hgWDouERcNiYVxYPCwRmhBDG1IYhiXDUmE0vCksHd4cxodlwrJhudCF5cOE8JawQnhrWDG8LawU3h5WDu8Iq4RVw0fvrx7eGdYI7wprhrXC2uHdYZ2wblgvrB/eEzYI7w0bhveFjcL7w4rhA2GT8MGwafhQ2Cx8OGwePhK2CB8NW4aPha3C1mGbsG3YLnw8bB8+EXYIO4adwifDzuFTYZfw6TAxfCbsGj77D48nhQPCgeEr4Suh9/epxdEl0fToR9GM6NJoZvTj6LLoJ9Gs6PLoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujWqPf18woHTjrltAtcHpfXxbh8Lr+7xhVw17qC7joXcde7WHeDK+RudIVdEVfUFXNxrrgr4YxDZx250JV0pVzU3eRKu5tdvCvjyrpyzrnyLsG1de1cO9fePeE6uI6uk3vSPemeck+5p93T7hnX1T3rurnnXHf3vOvhXnAvuBddL9fb9XEvub7uZdfP9XdJLskNdAPdIDfIDXFD8vy6B3Mj3AiX7JLdKDfKjXaj3Rg3xo11Y914N95NcBPcJDfJTXFTXIpLcdPcNJfqUt10N93NdDNdmktzc9wcN9fNdfPdfLcgfoFb6Ba6xW6xS3fpLsNluEyX6Za5ZS7LZbkVboVb5Va5NW6NW+fWuQ1ug9vkNrktbovb5ra57W672+l2ut1ut9vr9rp9bp/b7/a7bJftDrgD7qA76A65r12O+8Yddt+6I+47d9R97465H9xxd8KddD+6U+4nd9qdcWfdOXfe/ewuuF/cReddSuSdyLTIu5HUyHuR6ZEZkZmRWZG0yOzInMj7kbmReZH5kQ8iCyIfRhZGFkUWR5ZE0iMfRTIiSyOZkY8jyyKfRLIiyyMrIisjqyKrI94X3x76kr6Uj/qbfGl/s4/3ZXxZX847X94n+Ft8BX+rr+hv85X87b6yv8NX8VV9Nf+Yb+Vb+za+rW/nH/ft/RO+g+/oO/knfWf/lO/in/aJ/hnf1T/ru/nnfHf/vO/hX/A9/Yu+l+/t+/iXfF//su/n+/skP8AP9K/4QX6wH+KH+mH+VT/cv+ZH+Nd9sh/pR/k3/Gj/ph/j3/Jj/Tg/3r/tJ/iJfpKf7Kf4qT7Fv+On+Xd9qn/PT/cz/Ew/y6f52X6Of9/P9fP8fP+BX+A/9Av9Ir/YL/Hp/iOf4Zf6TP+xX+Y/8Vl+uV/hV/pVfrVf49f6dX693+A3+k1+s9/it/pt/lO/3e/wO/0uv9vv8Xv9Z36f/9zv91/4bP+lP+D/5A/6r/wh/7XP8d/4w/5bf8R/54/67/0x/4M/7k/4k/5Hf8r/5E/7M/6sP+fP+5/9Bf+Lv8j/s8YYY4wx9k9JPfTHxwf8ncfkr+OSgUKIa3cUy/nb41oIsanwn+eDZVzniBDimf49H/7LqFMnKSnp1+dmKRGUWiSEiFzJv3wZ8mu8XHQST4lE0VFU+Lv1DZa9z9MfrA/HvY/eLkT+v8mJEVfiK+vf+l+s//iT4zMqh2djf7v+hV/3m5fqjy4SIr7UlZx84kp8Zf2K/8X6Rdr/Uf1ZSuT7KkWIDn+TU0Bcia+snyCeEM+KxN88kzHGGGOMMcYY+7PBslr3f3D9efn6PE5fDi8/nFf8Nf6H1+eMMcYYY4wxxhi7+p7v3efpxxMTO3bnCU94wpO/Tq72bybGGGOMMcbYv9uVTf/VroQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/ic+TuxqnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2fAAAA///9QkNA") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000180)={[{@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@resuid}, {@resuid}, {@usrjquota}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 1m36.390698816s ago: executing program 6 (id=604): io_submit(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getcwd(&(0x7f0000000140)=""/237, 0xed) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) mount$bind(&(0x7f0000000240)='.\x00', 0x0, 0x0, 0x1005848, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 1m35.116164646s ago: executing program 6 (id=606): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000140)={[{@namecase}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x200}}, {@umask={'umask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1m33.950870569s ago: executing program 6 (id=609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe1b, 0x0, &(0x7f0000000080)="c14eb0800060d308098e00000000fbd1c168f956014ef772cbd4e89b8a937462a87eaffd19fb6c8b994df281ef4e51df22025c98e8da", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x1c) 1m33.168935541s ago: executing program 6 (id=611): pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x1800024, &(0x7f0000000000), 0x0, 0x241, &(0x7f00000007c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000100)='./mnt/file0\x00', 0x1298c2, 0x14a) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) setsockopt(r4, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) 1m32.67492802s ago: executing program 39 (id=611): pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x1800024, &(0x7f0000000000), 0x0, 0x241, &(0x7f00000007c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000100)='./mnt/file0\x00', 0x1298c2, 0x14a) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) setsockopt(r4, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) 53.096855065s ago: executing program 0 (id=659): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040fe130012804"], 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x200000c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 51.092024393s ago: executing program 0 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 50.285469487s ago: executing program 0 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe1b, 0x0, &(0x7f0000000080)="c14eb0800060d308098e00000000fbd1c168f956014ef772cbd4e89b8a937462a87eaffd19fb6c8b994df281ef4e51df22025c98e8da", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x1c) 48.404016316s ago: executing program 0 (id=667): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 44.670827492s ago: executing program 0 (id=673): io_submit(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(&(0x7f0000000140)=""/237, 0xed) 42.29792993s ago: executing program 0 (id=675): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5ceb7000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x3ff) fcntl$setstatus(r4, 0x4, 0x2800) 41.651261651s ago: executing program 40 (id=675): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5ceb7000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x3ff) fcntl$setstatus(r4, 0x4, 0x2800) 11.734477571s ago: executing program 2 (id=739): r0 = io_uring_setup(0x7b3b, &(0x7f0000000100)={0x0, 0x3974, 0x400, 0x2, 0xfffffffb}) r1 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10081, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.305450294s ago: executing program 2 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000007e80)={'syztnl2\x00', 0x0}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) semget(0x2, 0x4, 0x200) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f00000000c0)=0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x6, 0x0, @val=@tracing={0x0, 0x5}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r5, r6, 0x6, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r8, 0x4) 9.432005123s ago: executing program 2 (id=742): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500ecff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) 8.906587065s ago: executing program 1 (id=746): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.724004659s ago: executing program 1 (id=748): r0 = msgget$private(0x0, 0x2e0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x1, r2, 0x0, 0x0, 0x0, 0x2, 0xa}, 0x0, 0x0, 0xf0, 0x400, 0x9, 0x8, 0x800, 0x5, 0x9, 0x8, 0xffffffffffffffff}) 8.525222245s ago: executing program 1 (id=750): pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) pipe(&(0x7f0000000040)) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x1800024, &(0x7f0000000000), 0x0, 0x241, &(0x7f00000007c0)="$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") r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000100)='./mnt/file0\x00', 0x1298c2, 0x14a) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 7.056627391s ago: executing program 1 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000007e80)={'syztnl2\x00', 0x0}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) semget(0x2, 0x4, 0x200) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f00000000c0)=0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x6, 0x0, @val=@tracing={0x0, 0x5}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r5, r6, 0x6, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r8, 0x4) 6.606552987s ago: executing program 2 (id=753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe1b, 0x0, &(0x7f0000000080)="c14eb0800060d308098e00000000fbd1c168f956014ef772cbd4e89b8a937462a87eaffd19fb6c8b994df281ef4e51df22025c98e8da", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x1c) 4.770749762s ago: executing program 9 (id=760): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0xa, 0xf8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x64, 0x11, 0xff, @private1, @mcast2, {[], {0x4e20, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "1f0b4f706c142fbaeee0828b9ead0a53786f80768c9b7ed4a3cc0091dace043c", "9efd7edcca5abc059ef1d5d62c17c5db", {"cd8945b500f018df408a9ebe075420c0", "8ecd1500ee4c400671fa86c074bf4590"}}}}}}}}}, 0x9e) 3.91464612s ago: executing program 7 (id=762): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x11, &(0x7f00000002c0)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000006c0)=ANY=[], 0x0) 3.456322106s ago: executing program 7 (id=763): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x11, r0, 0x10000000000005, 0xfffffffffffffffa) 3.115430293s ago: executing program 2 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) 2.438624127s ago: executing program 9 (id=765): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x80000002, 0x4) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000200)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 2.251480842s ago: executing program 7 (id=766): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000040)={0x2, 0xf9ff, 0xa4, &(0x7f0000000240)=""/164}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800d50300000000000000000a0000000000000004000b000800010002"], 0x24}}, 0x0) 2.132167241s ago: executing program 2 (id=767): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xee7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc0, 0x2, 0x8}}}}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000080)) 2.094103814s ago: executing program 1 (id=768): r0 = syz_clone(0x23200100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1c3c42, 0x0) read(r1, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r3 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5cb, &(0x7f00000006c0)="$eJzs3U9vHGcdB/DvbhzHNmq6SZM20EpYRQKERWLvopKgqkApyEIVasUrsIjTWFm7lb1Fbg/IIM59DeVgqWfEFalSOcMrQEY9InE3J1czO7vrP1vXTlzvuv18pNnneeaZeeY3v/mTmbWiDfC1tTiXia3Usjj3+mbR3tlutXe2W6u9epIrSerJVJJaMftvST5NttKd8s1ex77yiDdffuqjD57/5JVua6qayuVrx613Mv1YGt1Yz3S8ZlU+vsEezia5XpUwcns9/xna/YTXEQAwzmrJpWHzG8lM9bBevAd0n4q7z9gX2taoAwAAAIBz8PRudrOZq6OOAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6S6vf/a9VU79VnU+v9/v9kNS9V/UL7eNQBAAAAAAAAAMAZ+PZudrOZq732Xq38m/+LZeNG+fmNvJuNLGc9t7OZpXTSyXoWkjT2DTS5udTprC+cYM3m0DWb57O/AAAAAAAAAPAV9acsDv7+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA46CWXOoW5XSjV2+kPpFkKslksdxW8q9e/SL7eNQBAAAAwDl4eje72czVXnuvVr7zP1u+90/l3aylk5V00s5y7pffBXTf+us72632znZrtZiOjvvz/50qjHLEdL97GL7lW+US03mQlXLO7fwub6ed+6mXaxZu9eIZHtcfi5hqP62cMLL7VVns+a+rcjw0yoxc7mdkvoqtyMa14zNxyqNzeEsLqfe/+bnxJeR8piqL/XltrHPe3Hf2PXt8JpKZf7f+/7C99ujhg4258dmlx3Q4E619mXjua5WJ+TITN/vtxfwqv81cZvNG1rOS32cpnSxnNq+VtaXqfC4+G8dn6mcHWm98USST1XG5VLVOE9OL5bpXs5Lf5O3cL6/yu2mmmZdyN/fSLK/63hG+eYKrvn66q/47368ql5P8sirHQ5HXa/28HrznNsq+/XMGWbp+9vfGiW9VleLseXXs7o3XDv0r0cvEM8dn4i97xedGe+3R+sOld064ve9VZZGBX4xVJorz5XpxsMrWwbOj6HtmaN9C2Xej31c/0nez3/dFV+pk9Qx3dKRm2ffc0L5W2XdrX9+w5y0Axt7MD2Ymp/87/c/pD6f/PP1w+vWpV6/cvfLCZC7/4/JPJuYvfbf+Qu2v+TB/GLz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj2/jvfcfLbXby+sqKioq/cqo70zAl+1OZ/WdOxvvvf/DldWlt5bfWl77UbP10r0ftxbuLdx5sNJenu9+jjpMAOAMDR76Rx0JAAAAAAAAAAAAAADwec7jvxOPeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvtsW5TGylloX52/NFe2e71S6mXn2w5FSSWlH5e5JPk610pzT2DVf7vO28+fJTH33w/CevDMaa6i1fO269kzkQS/1QTE86XvOJxxvs4WyS61UJI/dZAAAA///o4gGx") pidfd_getfd(0xffffffffffffffff, r3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x16}}}, 0x7) waitid(0x1, r0, 0x0, 0x8, 0x0) 1.978581333s ago: executing program 7 (id=769): pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) pipe(&(0x7f0000000040)) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x1800024, &(0x7f0000000000), 0x0, 0x241, &(0x7f00000007c0)="$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") r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000100)='./mnt/file0\x00', 0x1298c2, 0x14a) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.859184153s ago: executing program 9 (id=770): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 1.707543274s ago: executing program 7 (id=771): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x2, 0x40, r0, 0x40000000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0x700}, 0x38) 1.358583652s ago: executing program 7 (id=772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe1b, 0x0, &(0x7f0000000080)="c14eb0800060d308098e00000000fbd1c168f956014ef772cbd4e89b8a937462a87eaffd19fb6c8b994df281ef4e51df22025c98e8da", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x1c) 716.540803ms ago: executing program 9 (id=773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x29}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 611.813221ms ago: executing program 1 (id=774): ptrace(0x10, 0x0) r0 = userfaultfd(0x801) epoll_create1(0x0) rename(0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 178.728896ms ago: executing program 9 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) 0s ago: executing program 9 (id=776): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x11, r0, 0x10000000000005, 0xfffffffffffffffa) kernel console output (not intermixed with test programs): ly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.690862][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.712087][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.741685][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.781764][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.810831][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.846940][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.024034][ T7412] loop6: detected capacity change from 0 to 1024 [ 232.031466][ T7412] EXT4-fs: Ignoring removed bh option [ 232.032175][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.051755][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.061780][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.072411][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.096991][ T7410] loop7: detected capacity change from 0 to 2048 [ 232.110490][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 232.120115][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.131393][ T7410] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.154924][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.168834][ T7410] UDF-fs: error (device loop7): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 232.276140][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.290948][ T7412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.307953][ T7232] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.320753][ T7232] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.329520][ T7232] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.338676][ T7232] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.365916][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.395100][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.409407][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.424024][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.448534][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.474062][ T27] usb 4-1: config 0 descriptor?? [ 232.586074][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.616308][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.672692][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.689998][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.946374][ T27] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 233.155049][ T27] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 233.265336][ T7427] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 233.539227][ T27] usb 4-1: USB disconnect, device number 8 [ 234.251785][ T7429] fido_id[7429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 234.508475][ T6565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.280555][ T7445] loop3: detected capacity change from 0 to 512 [ 236.180431][ T7445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.212163][ T7445] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.239612][ T7452] loop6: detected capacity change from 0 to 128 [ 236.309919][ T5960] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.090185][ T28] audit: type=1800 audit(1765574417.003:20): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.359" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 238.470332][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.780499][ T7475] loop7: detected capacity change from 0 to 2048 [ 240.840951][ T7475] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.851752][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 241.116498][ T9] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 241.145192][ T9] usb 9-1: can't read configurations, error -71 [ 241.419186][ T7489] loop6: detected capacity change from 0 to 1024 [ 241.468756][ T7489] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.497696][ T7489] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 241.525327][ T7489] EXT4-fs (loop6): orphan cleanup on readonly fs [ 241.555489][ T7489] EXT4-fs error (device loop6): ext4_free_blocks:6676: comm syz.6.369: Freeing blocks not in datazone - block = 0, count = 4096 [ 241.642053][ T7489] EXT4-fs (loop6): 1 orphan inode deleted [ 241.651590][ T7489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.767369][ T7497] loop7: detected capacity change from 0 to 512 [ 241.786980][ T6565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.942857][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.974019][ T7497] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.997256][ T28] audit: type=1800 audit(1765574420.651:21): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.371" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 242.335808][ T6604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.766531][ T5080] Bluetooth: hci0: command tx timeout [ 243.690427][ T7520] loop7: detected capacity change from 0 to 1024 [ 243.977047][ T7520] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 244.366794][ T7520] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 244.541453][ T7520] EXT4-fs (loop7): orphan cleanup on readonly fs [ 244.564344][ T7520] EXT4-fs error (device loop7): ext4_free_blocks:6676: comm syz.7.375: Freeing blocks not in datazone - block = 0, count = 4096 [ 244.652176][ T7520] EXT4-fs (loop7): 1 orphan inode deleted [ 244.669289][ T7520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.946109][ T6604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.677740][ T5775] Bluetooth: hci0: command 0x0405 tx timeout [ 247.047564][ T7545] Illegal XDP return value 4294967282 on prog (id 63) dev syz_tun, expect packet loss! [ 247.341255][ T7547] loop6: detected capacity change from 0 to 2048 [ 247.972450][ T7547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.272893][ T7554] loop3: detected capacity change from 0 to 512 [ 248.396021][ T7554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.530817][ T7554] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 248.618430][ T7554] EXT4-fs (loop3): 1 truncate cleaned up [ 248.674816][ T7554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.756868][ T7554] EXT4-fs (loop3): shut down requested (1) [ 248.918641][ T7565] loop7: detected capacity change from 0 to 512 [ 249.001278][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.203536][ T7565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.265088][ T7565] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.399660][ T28] audit: type=1800 audit(1765574427.582:22): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.384" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 250.703636][ T6604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.437249][ T7603] loop8: detected capacity change from 0 to 512 [ 254.519722][ T7603] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2249: inode #15: comm syz.8.381: corrupted in-inode xattr: invalid ea_ino [ 254.557527][ T7603] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.381: couldn't read orphan inode 15 (err -117) [ 254.686159][ T7603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.826725][ T5869] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.173722][ T7232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.515861][ T7616] loop6: detected capacity change from 0 to 512 [ 255.653140][ T7618] loop3: detected capacity change from 0 to 512 [ 255.866888][ T7616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 255.876782][ T7618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.954288][ T7616] System zones: 1-12 [ 255.964167][ T7618] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.978932][ T7616] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.395: Directory hole found for htree index block 0 [ 256.070517][ T28] audit: type=1800 audit(1765574433.812:23): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.396" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 256.519320][ T7616] EXT4-fs (loop6): Remounting filesystem read-only [ 256.795021][ T7616] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 256.812442][ T7616] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 256.822149][ T7616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.871165][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.069028][ T7616] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 257.517039][ T7642] loop3: detected capacity change from 0 to 512 [ 257.529467][ T7641] loop8: detected capacity change from 0 to 128 [ 257.554459][ T6565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.084692][ T7642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 258.918221][ T7642] EXT4-fs (loop3): 1 truncate cleaned up [ 258.945823][ T7642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.219285][ T5769] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 259.447114][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.987161][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.995275][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.435617][ T7666] loop7: detected capacity change from 0 to 2048 [ 261.669376][ T7666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.720431][ T7670] loop6: detected capacity change from 0 to 512 [ 262.003136][ T5869] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.127573][ T7670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.229433][ T7670] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.501338][ T28] audit: type=1800 audit(1765574439.845:24): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.407" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 263.425100][ T5869] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.614615][ T6565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.860067][ T5869] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.991128][ T7689] futex_wake_op: syz.8.402 tries to shift op by -1; fix this program [ 264.243328][ T5869] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.311628][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.329993][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.339457][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.347876][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.355750][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 264.363401][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.458625][ T7697] loop6: detected capacity change from 0 to 128 [ 265.764876][ T6382] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.466424][ T7694] chnl_net:caif_netlink_parms(): no params data found [ 266.627801][ T5775] Bluetooth: hci1: command tx timeout [ 268.011380][ T7721] loop7: detected capacity change from 0 to 256 [ 268.048770][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.8.415'. [ 268.079039][ T7721] exfat: Bad value for 'uid' [ 268.454818][ T5855] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 268.569036][ T7741] loop8: detected capacity change from 0 to 128 [ 268.851474][ T5775] Bluetooth: hci1: command tx timeout [ 269.246293][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.287232][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.327642][ T7694] bridge_slave_0: entered allmulticast mode [ 269.367168][ T7694] bridge_slave_0: entered promiscuous mode [ 269.732569][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.762386][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.794549][ T7694] bridge_slave_1: entered allmulticast mode [ 269.832367][ T7694] bridge_slave_1: entered promiscuous mode [ 270.088859][ T5855] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 270.103876][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.991534][ T5775] Bluetooth: hci1: command tx timeout [ 272.002120][ T5855] usb 7-1: config 0 descriptor?? [ 272.112692][ T5855] usb 7-1: can't set config #0, error -71 [ 272.149659][ T5855] usb 7-1: USB disconnect, device number 6 [ 272.290742][ T7694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.322337][ T7694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.199276][ T7694] team0: Port device team_slave_0 added [ 273.234700][ T7694] team0: Port device team_slave_1 added [ 273.618697][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.625715][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.725012][ T7694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.791090][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.810878][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.885303][ T7694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.156852][ T5775] Bluetooth: hci1: command tx timeout [ 274.971213][ T7791] loop6: detected capacity change from 0 to 256 [ 275.155559][ T5869] hsr_slave_0: left promiscuous mode [ 275.240560][ T5869] hsr_slave_1: left promiscuous mode [ 275.335813][ T7797] loop7: detected capacity change from 0 to 512 [ 275.342497][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.378996][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.389427][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.406874][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.438337][ T7797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.479750][ T5869] bridge_slave_1: left allmulticast mode [ 275.485479][ T5869] bridge_slave_1: left promiscuous mode [ 275.553393][ T7797] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.564211][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.656368][ T28] audit: type=1800 audit(1765574452.146:25): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.431" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 275.702717][ T5869] bridge_slave_0: left allmulticast mode [ 275.708444][ T5869] bridge_slave_0: left promiscuous mode [ 275.733022][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.687654][ T5869] veth1_macvtap: left promiscuous mode [ 276.693296][ T5869] veth0_macvtap: left promiscuous mode [ 276.701374][ T5869] veth1_vlan: left promiscuous mode [ 276.706797][ T5869] veth0_vlan: left promiscuous mode [ 276.710253][ T6604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.952577][ T7832] loop6: detected capacity change from 0 to 512 [ 282.033878][ T6382] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.129039][ T7841] loop8: detected capacity change from 0 to 512 [ 284.214138][ T7841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.253900][ T7841] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.358607][ T28] audit: type=1800 audit(1765574460.284:26): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.444" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 284.540731][ T5869] team0 (unregistering): Port device team_slave_1 removed [ 284.629032][ T5869] team0 (unregistering): Port device team_slave_0 removed [ 285.266032][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.289355][ T7232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.576711][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.579831][ T7866] loop8: detected capacity change from 0 to 1024 [ 289.302285][ T7866] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.637903][ T7232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.797497][ T7875] loop8: detected capacity change from 0 to 128 [ 289.807517][ T5869] bond0 (unregistering): Released all slaves [ 290.032034][ T6382] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.735409][ T7694] hsr_slave_0: entered promiscuous mode [ 290.804091][ T7694] hsr_slave_1: entered promiscuous mode [ 290.867482][ T7694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.889983][ T7694] Cannot create hsr debugfs directory [ 291.254289][ T7887] loop6: detected capacity change from 0 to 512 [ 291.396877][ T7887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.438274][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 291.475653][ T7887] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.576448][ T28] audit: type=1800 audit(1765574467.038:27): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.454" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 292.274564][ T7896] loop8: detected capacity change from 0 to 2048 [ 292.403968][ T7896] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.471313][ T7694] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 292.484004][ T7694] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 292.495204][ T7694] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 292.497146][ T6565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.770432][ T7694] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 293.749327][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.7.458'. [ 294.560712][ T7694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.594244][ T7934] loop7: detected capacity change from 0 to 128 [ 294.643854][ T7694] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.666449][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.673693][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.871649][ T6382] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.285787][ T12] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 295.455301][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.462564][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.521518][ T12] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 295.598740][ T12] EXT4-fs (loop8): This should not happen!! Data will be lost [ 295.598740][ T12] [ 295.608463][ T12] EXT4-fs (loop8): Total free blocks count 0 [ 295.708609][ T12] EXT4-fs (loop8): Free/Dirty block details [ 295.714618][ T12] EXT4-fs (loop8): free_blocks=2415919504 [ 295.762878][ T12] EXT4-fs (loop8): dirty_blocks=32 [ 295.768162][ T12] EXT4-fs (loop8): Block reservation details [ 295.851238][ T12] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 295.886161][ T12] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 296.049152][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 296.603932][ T7694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.092762][ T7987] loop7: detected capacity change from 0 to 128 [ 300.361717][ T6382] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.957756][ T7994] syz.6.471 uses obsolete (PF_INET,SOCK_PACKET) [ 301.212890][ T7694] veth0_vlan: entered promiscuous mode [ 301.310884][ T7694] veth1_vlan: entered promiscuous mode [ 302.106647][ T7694] veth0_macvtap: entered promiscuous mode [ 302.119962][ T7694] veth1_macvtap: entered promiscuous mode [ 302.179840][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.360472][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.370578][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.382590][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.454106][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.492161][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.518995][ T8005] loop6: detected capacity change from 0 to 1024 [ 302.550099][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.585464][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.615765][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.639908][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.678856][ T8005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.713771][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.755402][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.798398][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.831025][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.897465][ T28] audit: type=1800 audit(1765574477.523:28): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.474" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 303.022584][ T7694] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.048428][ T7694] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.063210][ T7694] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.075236][ T7694] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.479794][ T6565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.617226][ T5869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.625191][ T5869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.690996][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.698876][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.176419][ T8032] loop8: detected capacity change from 0 to 16 [ 304.213125][ T8040] loop6: detected capacity change from 0 to 128 [ 304.794477][ T8032] erofs: (device loop8): mounted with root inode @ nid 36. [ 305.116012][ T8032] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 305.835026][ T8032] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 306.176112][ T8032] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 306.912623][ T8056] loop6: detected capacity change from 0 to 512 [ 306.982750][ T8056] EXT4-fs (loop6): orphan cleanup on readonly fs [ 306.993138][ T8056] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 307.004375][ T8056] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 307.013854][ T8056] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.482: Failed to acquire dquot type 1 [ 307.030830][ T8056] EXT4-fs (loop6): 1 truncate cleaned up [ 307.038972][ T8056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.915107][ T6565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.929399][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 307.957217][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.003866][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.016332][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.052572][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.068711][ T8067] loop8: detected capacity change from 0 to 512 [ 308.090881][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.125350][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.218173][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.253013][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.353023][ T8067] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.365726][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.429128][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.429425][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.429453][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.429477][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.429502][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.429526][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.429550][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.429574][ T5817] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 308.447230][ T5817] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 309.129689][ T8093] loop7: detected capacity change from 0 to 128 [ 310.575142][ T6382] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.066285][ T7232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.392848][ T8111] loop6: detected capacity change from 0 to 128 [ 313.397904][ T5080] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 313.493728][ T8111] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 315.780890][ T8111] Zero length message leads to an empty skb [ 315.841158][ T8111] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 316.043300][ T8111] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 318.019602][ T8136] loop6: detected capacity change from 0 to 128 [ 318.917127][ T6382] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 321.079494][ T8163] loop6: detected capacity change from 0 to 2048 [ 321.158619][ T8163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.597692][ T8163] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.503: bg 0: block 234: padding at end of block bitmap is not set [ 321.630074][ T8163] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 321.642646][ T8163] EXT4-fs (loop6): This should not happen!! Data will be lost [ 321.642646][ T8163] [ 321.652476][ T8163] EXT4-fs (loop6): Total free blocks count 0 [ 321.658506][ T8163] EXT4-fs (loop6): Free/Dirty block details [ 321.664505][ T8163] EXT4-fs (loop6): free_blocks=0 [ 321.669491][ T8163] EXT4-fs (loop6): dirty_blocks=8192 [ 321.674861][ T8163] EXT4-fs (loop6): Block reservation details [ 321.680865][ T8163] EXT4-fs (loop6): i_reserved_data_blocks=512 [ 321.745454][ T8172] loop7: detected capacity change from 0 to 2048 [ 321.755554][ T6572] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 321.840003][ T8172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.894624][ T8180] loop8: detected capacity change from 0 to 1024 [ 323.429487][ T6604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.340624][ T8203] fuse: Unknown parameter 'ÿÿÿÿ'' [ 325.488869][ T28] audit: type=1326 audit(1765574498.757:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 325.586031][ T28] audit: type=1326 audit(1765574498.757:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 325.635823][ T28] audit: type=1326 audit(1765574498.794:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 325.692203][ T787] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 325.697114][ T8211] loop7: detected capacity change from 0 to 164 [ 325.745482][ T28] audit: type=1326 audit(1765574498.794:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 325.819680][ T8211] Unable to read rock-ridge attributes [ 325.861071][ T28] audit: type=1326 audit(1765574498.794:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 325.939974][ T787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.969096][ T28] audit: type=1326 audit(1765574498.794:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 325.994510][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 326.023486][ T787] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 326.032600][ T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.115762][ T28] audit: type=1326 audit(1765574498.794:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 326.187045][ T787] usb 7-1: config 0 descriptor?? [ 326.251236][ T28] audit: type=1326 audit(1765574498.804:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 326.388336][ T28] audit: type=1326 audit(1765574498.804:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 326.414803][ T8230] loop9: detected capacity change from 0 to 512 [ 326.430077][ T787] Bluetooth: Can't get state to change to load ram patch err [ 326.437527][ T787] Bluetooth: Loading patch file failed [ 326.467379][ T8203] loop6: detected capacity change from 0 to 512 [ 327.617928][ T787] ath3k: probe of 7-1:0.0 failed with error -32 [ 327.629704][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.636196][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.664351][ T8203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.719833][ T8230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.766043][ T28] audit: type=1326 audit(1765574498.813:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.8.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc76098f749 code=0x7ffc0000 [ 327.796967][ T8203] EXT4-fs (loop6): invalid inodes per group: 50331680 [ 327.796967][ T8203] [ 327.930038][ T8230] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.317844][ T8243] loop8: detected capacity change from 0 to 2048 [ 328.477683][ T787] usb 7-1: USB disconnect, device number 7 [ 328.599292][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.688418][ T8243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.050070][ T8266] loop9: detected capacity change from 0 to 1024 [ 330.059200][ T7232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.153093][ T8266] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.114573][ T8276] EXT4-fs error (device loop9): ext4_lookup:1858: comm syz.9.521: inode #12: comm syz.9.521: iget: illegal inode # [ 332.583304][ T8276] EXT4-fs (loop9): Remounting filesystem read-only [ 332.810042][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.049471][ T8285] xt_hashlimit: max too large, truncated to 1048576 [ 337.182441][ T8323] loop6: detected capacity change from 0 to 256 [ 337.306880][ T8323] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 337.655041][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 337.655057][ T28] audit: type=1800 audit(1765574510.131:63): pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.524" name="file1" dev="loop6" ino=1048629 res=0 errno=0 [ 337.737490][ T28] audit: type=1800 audit(1765574510.141:64): pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.524" name="file1" dev="loop6" ino=1048629 res=0 errno=0 [ 338.165494][ T8339] loop9: detected capacity change from 0 to 2048 [ 338.176988][ T8340] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 338.249291][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.249291][ T1072] loop6: rw=1, sector=256, nr_sectors = 1 limit=256 [ 338.284874][ T1072] Buffer I/O error on dev loop6, logical block 256, lost async page write [ 338.295994][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.295994][ T1072] loop6: rw=1, sector=257, nr_sectors = 1 limit=256 [ 338.356176][ T8339] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.371054][ T1072] Buffer I/O error on dev loop6, logical block 257, lost async page write [ 338.379762][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.379762][ T1072] loop6: rw=1, sector=258, nr_sectors = 1 limit=256 [ 338.393465][ T1072] Buffer I/O error on dev loop6, logical block 258, lost async page write [ 338.402046][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.402046][ T1072] loop6: rw=1, sector=259, nr_sectors = 1 limit=256 [ 338.415765][ T1072] Buffer I/O error on dev loop6, logical block 259, lost async page write [ 338.424368][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.424368][ T1072] loop6: rw=1, sector=260, nr_sectors = 1 limit=256 [ 338.437777][ T1072] Buffer I/O error on dev loop6, logical block 260, lost async page write [ 338.446422][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.446422][ T1072] loop6: rw=1, sector=261, nr_sectors = 1 limit=256 [ 338.460095][ T1072] Buffer I/O error on dev loop6, logical block 261, lost async page write [ 338.469068][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.469068][ T1072] loop6: rw=1, sector=262, nr_sectors = 1 limit=256 [ 338.488679][ T1072] Buffer I/O error on dev loop6, logical block 262, lost async page write [ 338.489018][ T8344] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1215: group 0, [ 338.497264][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.497264][ T1072] loop6: rw=1, sector=263, nr_sectors = 1 limit=256 [ 338.497477][ T8344] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 338.520748][ T1072] Buffer I/O error on dev loop6, logical block 263, lost async page write [ 338.597776][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.597776][ T1072] loop6: rw=1, sector=264, nr_sectors = 1 limit=256 [ 338.613550][ T1072] Buffer I/O error on dev loop6, logical block 264, lost async page write [ 338.624779][ T1072] kworker/u4:5: attempt to access beyond end of device [ 338.624779][ T1072] loop6: rw=1, sector=265, nr_sectors = 1 limit=256 [ 338.651124][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.691992][ T1072] Buffer I/O error on dev loop6, logical block 265, lost async page write [ 339.027332][ T8354] loop7: detected capacity change from 0 to 256 [ 339.371864][ T8360] loop9: detected capacity change from 0 to 128 [ 339.479568][ T8360] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 339.607550][ T8367] netlink: 56 bytes leftover after parsing attributes in process `syz.6.538'. [ 339.653096][ T8367] netlink: 56 bytes leftover after parsing attributes in process `syz.6.538'. [ 339.900074][ T8368] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 339.985805][ T8368] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 342.957597][ T8] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 344.714164][ T5080] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 344.786849][ T8414] loop7: detected capacity change from 0 to 128 [ 344.837341][ T8414] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 344.971058][ T8418] loop8: detected capacity change from 0 to 256 [ 345.069576][ T8418] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 345.270515][ T8424] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 345.301598][ T8424] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 345.325773][ T28] audit: type=1800 audit(1765574517.297:65): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.543" name="file1" dev="loop8" ino=1048632 res=0 errno=0 [ 345.506484][ T28] audit: type=1800 audit(1765574517.297:66): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.543" name="file1" dev="loop8" ino=1048632 res=0 errno=0 [ 345.520093][ T8432] loop9: detected capacity change from 0 to 512 [ 345.677076][ T8432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.711438][ T8432] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.792045][ T28] audit: type=1800 audit(1765574517.755:67): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.554" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 347.843335][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.976930][ T59] bio_check_eod: 126 callbacks suppressed [ 347.976948][ T59] kworker/u4:4: attempt to access beyond end of device [ 347.976948][ T59] loop8: rw=1, sector=256, nr_sectors = 1 limit=256 [ 348.057440][ T59] buffer_io_error: 126 callbacks suppressed [ 348.057456][ T59] Buffer I/O error on dev loop8, logical block 256, lost async page write [ 348.094831][ T59] kworker/u4:4: attempt to access beyond end of device [ 348.094831][ T59] loop8: rw=1, sector=257, nr_sectors = 1 limit=256 [ 348.132812][ T59] Buffer I/O error on dev loop8, logical block 257, lost async page write [ 348.141462][ T59] kworker/u4:4: attempt to access beyond end of device [ 348.141462][ T59] loop8: rw=1, sector=258, nr_sectors = 1 limit=256 [ 348.209201][ T59] Buffer I/O error on dev loop8, logical block 258, lost async page write [ 348.250140][ T59] kworker/u4:4: attempt to access beyond end of device [ 348.250140][ T59] loop8: rw=1, sector=259, nr_sectors = 1 limit=256 [ 348.313360][ T59] Buffer I/O error on dev loop8, logical block 259, lost async page write [ 348.322000][ T59] kworker/u4:4: attempt to access beyond end of device [ 348.322000][ T59] loop8: rw=1, sector=260, nr_sectors = 1 limit=256 [ 349.195386][ T59] Buffer I/O error on dev loop8, logical block 260, lost async page write [ 349.211396][ T59] kworker/u4:4: attempt to access beyond end of device [ 349.211396][ T59] loop8: rw=1, sector=261, nr_sectors = 1 limit=256 [ 349.264851][ T59] Buffer I/O error on dev loop8, logical block 261, lost async page write [ 349.273475][ T59] kworker/u4:4: attempt to access beyond end of device [ 349.273475][ T59] loop8: rw=1, sector=262, nr_sectors = 1 limit=256 [ 349.437739][ T59] Buffer I/O error on dev loop8, logical block 262, lost async page write [ 349.478680][ T59] kworker/u4:4: attempt to access beyond end of device [ 349.478680][ T59] loop8: rw=1, sector=263, nr_sectors = 1 limit=256 [ 349.653239][ T59] Buffer I/O error on dev loop8, logical block 263, lost async page write [ 349.788916][ T59] kworker/u4:4: attempt to access beyond end of device [ 349.788916][ T59] loop8: rw=1, sector=264, nr_sectors = 1 limit=256 [ 349.976226][ T59] Buffer I/O error on dev loop8, logical block 264, lost async page write [ 350.055920][ T59] kworker/u4:4: attempt to access beyond end of device [ 350.055920][ T59] loop8: rw=1, sector=265, nr_sectors = 1 limit=256 [ 350.184442][ T59] Buffer I/O error on dev loop8, logical block 265, lost async page write [ 350.694167][ T8525] loop8: detected capacity change from 0 to 4096 [ 350.750490][ T8525] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.983468][ T8525] EXT4-fs error (device loop8): ext4_do_update_inode:5244: inode #15: comm syz.8.561: corrupted inode contents [ 351.000327][ T8538] loop7: detected capacity change from 0 to 8 [ 351.079127][ T8525] EXT4-fs error (device loop8): ext4_dirty_inode:6120: inode #15: comm syz.8.561: mark_inode_dirty error [ 351.111548][ T8525] EXT4-fs error (device loop8): ext4_do_update_inode:5244: inode #15: comm syz.8.561: corrupted inode contents [ 351.175895][ T8525] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #15: comm syz.8.561: mark_inode_dirty error [ 351.180205][ T8538] SQUASHFS error: Failed to read block 0x4de: -5 [ 351.226613][ T8525] EXT4-fs error (device loop8): ext4_do_update_inode:5244: inode #15: comm syz.8.561: corrupted inode contents [ 351.238494][ T8538] SQUASHFS error: Failed to read block 0x4de: -5 [ 351.245160][ T28] audit: type=1800 audit(1765574522.853:68): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.565" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 351.323854][ T8525] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #15: comm syz.8.561: mark_inode_dirty error [ 351.371308][ T8525] EXT4-fs error (device loop8): ext4_do_update_inode:5244: inode #15: comm syz.8.561: corrupted inode contents [ 351.470236][ T8525] EXT4-fs error (device loop8): ext4_truncate:4294: inode #15: comm syz.8.561: mark_inode_dirty error [ 351.501656][ T8525] EXT4-fs error (device loop8): ext4_evict_inode:263: comm syz.8.561: couldn't truncate inode 15 (err -117) [ 353.202670][ T8553] loop9: detected capacity change from 0 to 512 [ 353.209966][ T8551] loop7: detected capacity change from 0 to 1024 [ 353.217577][ T8551] EXT4-fs: Ignoring removed bh option [ 353.250727][ T7232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.262091][ T8551] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 353.294847][ T8553] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.392143][ T8553] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.495225][ T8551] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.524162][ T28] audit: type=1800 audit(1765574524.986:69): pid=8553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.568" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 353.665149][ T8551] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4031: comm syz.7.566: Allocating blocks 385-513 which overlap fs metadata [ 354.200795][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.433545][ T8581] loop9: detected capacity change from 0 to 256 [ 354.512565][ T8581] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 354.622888][ T8589] loop8: detected capacity change from 0 to 1024 [ 354.685795][ T8589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 354.733959][ T8589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.837503][ T28] audit: type=1800 audit(1765574526.211:70): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.570" name="file1" dev="loop9" ino=1048634 res=0 errno=0 [ 354.867546][ T28] audit: type=1800 audit(1765574526.239:71): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.570" name="file1" dev="loop9" ino=1048634 res=0 errno=0 [ 354.909622][ T28] audit: type=1800 audit(1765574526.258:72): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.571" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 354.942525][ T8589] loop8: detected capacity change from 1024 to 0 [ 354.955488][ T8598] bio_check_eod: 126 callbacks suppressed [ 354.955504][ T8598] syz.8.571: attempt to access beyond end of device [ 354.955504][ T8598] loop8: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 355.075466][ T8598] syz.8.571: attempt to access beyond end of device [ 355.075466][ T8598] loop8: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 355.096537][ T8598] syz.8.571: attempt to access beyond end of device [ 355.096537][ T8598] loop8: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 355.110441][ T8598] syz.8.571: attempt to access beyond end of device [ 355.110441][ T8598] loop8: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 355.124594][ T8598] syz.8.571: attempt to access beyond end of device [ 355.124594][ T8598] loop8: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 355.141323][ T8598] syz.8.571: attempt to access beyond end of device [ 355.141323][ T8598] loop8: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 355.155640][ T8598] syz.8.571: attempt to access beyond end of device [ 355.155640][ T8598] loop8: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 355.169847][ T8598] syz.8.571: attempt to access beyond end of device [ 355.169847][ T8598] loop8: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 355.193084][ T8598] syz.8.571: attempt to access beyond end of device [ 355.193084][ T8598] loop8: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 355.233443][ T8598] EXT4-fs error (device loop8): ext4_get_inode_loc:4627: inode #12: block 7: comm syz.8.571: unable to read itable block [ 355.249845][ T8598] syz.8.571: attempt to access beyond end of device [ 355.249845][ T8598] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 355.280748][ T8598] buffer_io_error: 126 callbacks suppressed [ 355.280767][ T8598] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 355.326985][ T8598] EXT4-fs (loop8): I/O error while writing superblock [ 355.340705][ T8598] EXT4-fs error (device loop8): ext4_get_inode_loc:4627: inode #12: block 7: comm syz.8.571: unable to read itable block [ 355.359788][ T8598] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 355.368397][ T8598] EXT4-fs (loop8): I/O error while writing superblock [ 355.376872][ T8598] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5916: IO failure [ 355.391871][ T8598] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 355.406899][ T8598] EXT4-fs (loop8): I/O error while writing superblock [ 355.421234][ T8598] EXT4-fs error (device loop8): ext4_dirty_inode:6120: inode #12: comm syz.8.571: mark_inode_dirty error [ 355.460113][ T8598] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 355.480418][ T8598] EXT4-fs (loop8): I/O error while writing superblock [ 355.510883][ T8505] Buffer I/O error on dev loop9, logical block 256, lost async page write [ 355.540637][ T8505] Buffer I/O error on dev loop9, logical block 257, lost async page write [ 355.549328][ T8505] Buffer I/O error on dev loop9, logical block 258, lost async page write [ 355.572494][ T8505] Buffer I/O error on dev loop9, logical block 259, lost async page write [ 355.576672][ T7232] EXT4-fs error (device loop8): ext4_get_inode_loc:4627: inode #2: block 5: comm syz-executor: unable to read itable block [ 355.581083][ T8505] Buffer I/O error on dev loop9, logical block 260, lost async page write [ 355.626421][ T7232] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 355.636034][ T7232] EXT4-fs (loop8): I/O error while writing superblock [ 355.657093][ T7232] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5916: IO failure [ 355.681740][ T7232] EXT4-fs (loop8): I/O error while writing superblock [ 355.692501][ T7232] EXT4-fs error (device loop8): ext4_dirty_inode:6120: inode #2: comm syz-executor: mark_inode_dirty error [ 355.704897][ T7232] EXT4-fs (loop8): I/O error while writing superblock [ 355.766277][ T8505] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4612: inode #12: block 7: comm kworker/u4:18: unable to read itable block [ 355.798981][ T8505] EXT4-fs (loop8): I/O error while writing superblock [ 355.810925][ T8505] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4612: inode #2: block 5: comm kworker/u4:18: unable to read itable block [ 355.860190][ T8505] EXT4-fs (loop8): I/O error while writing superblock [ 355.957147][ T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 356.183773][ T8] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 356.202048][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.235898][ T8] usb 7-1: config 0 descriptor?? [ 356.303402][ T8621] loop9: detected capacity change from 0 to 164 [ 356.329307][ T8621] Unable to read rock-ridge attributes [ 356.348189][ T8551] EXT4-fs (loop7): pa ffff88805a36f570: logic 16, phys. 129, len 24 [ 356.357453][ T8551] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 356.583197][ T8623] Unable to read rock-ridge attributes [ 356.963512][ T8623] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 356.979914][ T8622] Unable to read rock-ridge attributes [ 356.989178][ T8622] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 357.156490][ T8624] Unable to read rock-ridge attributes [ 357.284533][ T8] usb 7-1: Cannot read MAC address [ 357.312078][ T8] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 357.339814][ T6604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.380619][ T8] usb 7-1: USB disconnect, device number 9 [ 357.407623][ T8505] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.579411][ T8505] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.683565][ T8505] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.827316][ T8505] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.964527][ T8637] loop9: detected capacity change from 0 to 512 [ 358.027170][ T8643] loop6: detected capacity change from 0 to 256 [ 358.078548][ T8643] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 358.146090][ T6382] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 360.332653][ T28] audit: type=1800 audit(1765574531.356:73): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.583" name="file1" dev="loop6" ino=1048636 res=0 errno=0 [ 360.450373][ T28] audit: type=1800 audit(1765574531.393:74): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.583" name="file1" dev="loop6" ino=1048636 res=0 errno=0 [ 361.249371][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.584'. [ 362.723137][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.745894][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.789094][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.810328][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.821035][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 362.829076][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.661387][ T5775] Bluetooth: hci0: command tx timeout [ 365.756570][ T8687] loop9: detected capacity change from 0 to 1024 [ 366.172040][ T8697] loop9: detected capacity change from 0 to 256 [ 366.263532][ T5838] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 366.298155][ T8697] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 366.467982][ T5838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.489081][ T5838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.511190][ T5838] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.525106][ T28] audit: type=1800 audit(1765574537.146:75): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.594" name="file1" dev="loop9" ino=1048638 res=0 errno=0 [ 366.584809][ T5838] usb 7-1: config 1 interface 1 has no altsetting 0 [ 366.617550][ T28] audit: type=1800 audit(1765574537.174:76): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.594" name="file1" dev="loop9" ino=1048638 res=0 errno=0 [ 366.621938][ T5838] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.700139][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.719995][ T5838] usb 7-1: Product: syz [ 366.730609][ T8665] chnl_net:caif_netlink_parms(): no params data found [ 366.741526][ T5838] usb 7-1: Manufacturer: syz [ 366.754631][ T5838] usb 7-1: SerialNumber: syz [ 366.867175][ T8505] hsr_slave_0: left promiscuous mode [ 366.892476][ T8505] hsr_slave_1: left promiscuous mode [ 366.911226][ T8505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.924974][ T8505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.936020][ T8505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.943865][ T8505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.955412][ T8505] bridge_slave_1: left allmulticast mode [ 366.964934][ T8505] bridge_slave_1: left promiscuous mode [ 366.975501][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.993661][ T8505] bridge_slave_0: left allmulticast mode [ 367.001024][ T8505] bridge_slave_0: left promiscuous mode [ 367.006958][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.019895][ T8693] loop6: detected capacity change from 0 to 256 [ 367.579147][ T8505] veth1_macvtap: left promiscuous mode [ 367.675649][ T8505] veth0_macvtap: left promiscuous mode [ 367.681912][ T8505] veth1_vlan: left promiscuous mode [ 367.696272][ T8505] veth0_vlan: left promiscuous mode [ 367.898941][ T5775] Bluetooth: hci0: command tx timeout [ 367.978542][ T8715] loop9: detected capacity change from 0 to 8 [ 368.600269][ T8721] loop9: detected capacity change from 0 to 128 [ 369.582499][ T8721] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.595547][ T8721] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.884380][ T7694] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.112182][ T5775] Bluetooth: hci0: command tx timeout [ 370.333016][ T8505] team0 (unregistering): Port device team_slave_1 removed [ 370.399658][ T8505] team0 (unregistering): Port device team_slave_0 removed [ 370.460535][ T8505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.524537][ T8505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.155749][ T8505] bond0 (unregistering): Released all slaves [ 371.282235][ T5838] usb 7-1: selecting invalid altsetting 0 [ 371.304399][ T5838] usb 7-1: selecting invalid altsetting 0 [ 371.326109][ T5838] cdc_ncm 7-1:1.0: bind() failure [ 371.387022][ T5838] usb 7-1: selecting invalid altsetting 0 [ 371.392820][ T5838] cdc_ncm: probe of 7-1:1.1 failed with error -22 [ 371.399197][ T8728] loop9: detected capacity change from 0 to 128 [ 371.436808][ T5838] usb 7-1: selecting invalid altsetting 0 [ 371.450916][ T8728] FAT-fs (loop9): bogus number of reserved sectors [ 371.492027][ T5838] cdc_mbim: probe of 7-1:1.1 failed with error -22 [ 371.500233][ T8728] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 371.518805][ T8728] FAT-fs (loop9): Can't find a valid FAT filesystem [ 371.539163][ T5838] usb 7-1: selecting invalid altsetting 0 [ 371.543144][ T8731] loop6: detected capacity change from 0 to 164 [ 371.579544][ T5838] usbtest: probe of 7-1:1.1 failed with error -22 [ 371.607368][ T8731] Unable to read rock-ridge attributes [ 371.658139][ T5838] usb 7-1: USB disconnect, device number 10 [ 372.092213][ T8744] Unable to read rock-ridge attributes [ 372.335416][ T5775] Bluetooth: hci0: command tx timeout [ 372.719812][ T8744] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 372.759441][ T8743] Unable to read rock-ridge attributes [ 372.765045][ T8743] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 372.870225][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.573584][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.633876][ T8665] bridge_slave_0: entered allmulticast mode [ 374.644505][ T8665] bridge_slave_0: entered promiscuous mode [ 374.659893][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.679899][ T8749] loop6: detected capacity change from 0 to 1024 [ 374.709278][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.716622][ T8665] bridge_slave_1: entered allmulticast mode [ 374.718003][ T8753] loop7: detected capacity change from 0 to 1024 [ 374.740362][ T8753] EXT4-fs: Ignoring removed bh option [ 374.752895][ T8665] bridge_slave_1: entered promiscuous mode [ 374.791426][ T8753] EXT4-fs: Ignoring removed nobh option [ 374.803540][ T8749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 374.837986][ T8753] EXT4-fs: Ignoring removed bh option [ 374.906168][ T8753] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 374.942036][ T8749] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.002587][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.047580][ T8753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.101316][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.192141][ T6565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 375.233407][ T6604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.251831][ T8665] team0: Port device team_slave_0 added [ 375.285083][ T8665] team0: Port device team_slave_1 added [ 375.422813][ T8769] loop7: detected capacity change from 0 to 512 [ 375.454649][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.472602][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.509754][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.527172][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.579494][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.647047][ T8769] EXT4-fs (loop7): 1 truncate cleaned up [ 375.689885][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.715061][ T8769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.368510][ T8665] hsr_slave_0: entered promiscuous mode [ 376.413843][ T8665] hsr_slave_1: entered promiscuous mode [ 376.436095][ T8665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.472002][ T8665] Cannot create hsr debugfs directory [ 376.510743][ T8769] loop7: detected capacity change from 512 to 0 [ 376.569738][ C0] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 376.600538][ T8777] EXT4-fs error (device loop7): ext4_read_inode_bitmap:204: comm syz.7.605: Cannot read inode bitmap - block_group = 0, inode_bitmap = 4 [ 376.659832][ T8777] bio_check_eod: 183 callbacks suppressed [ 376.659849][ T8777] syz.7.605: attempt to access beyond end of device [ 376.659849][ T8777] loop7: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 376.701978][ T8784] loop6: detected capacity change from 0 to 256 [ 376.713197][ T8777] buffer_io_error: 137 callbacks suppressed [ 376.713214][ T8777] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 376.730542][ T8784] exfat: Deprecated parameter 'namecase' [ 376.736277][ T8784] exfat: Deprecated parameter 'utf8' [ 376.771925][ T8784] exfat: Deprecated parameter 'namecase' [ 376.806763][ T8777] EXT4-fs (loop7): I/O error while writing superblock [ 376.853324][ T8784] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 377.594029][ T6604] syz-executor: attempt to access beyond end of device [ 377.594029][ T6604] loop7: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 377.613552][ T8789] Core dump to core aborted: cannot preserve file permissions [ 377.722913][ T6604] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 377.773499][ T6604] syz-executor: attempt to access beyond end of device [ 377.773499][ T6604] loop7: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 377.813443][ T6604] syz-executor: attempt to access beyond end of device [ 377.813443][ T6604] loop7: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 377.873681][ T6604] syz-executor: attempt to access beyond end of device [ 377.873681][ T6604] loop7: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 377.914309][ T6604] syz-executor: attempt to access beyond end of device [ 377.914309][ T6604] loop7: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 377.971309][ T6604] syz-executor: attempt to access beyond end of device [ 377.971309][ T6604] loop7: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 378.001242][ T6604] syz-executor: attempt to access beyond end of device [ 378.001242][ T6604] loop7: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 378.037852][ T6604] syz-executor: attempt to access beyond end of device [ 378.037852][ T6604] loop7: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 378.076774][ T8793] loop9: detected capacity change from 0 to 16 [ 378.077260][ T6604] syz-executor: attempt to access beyond end of device [ 378.077260][ T6604] loop7: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 378.109254][ T8793] erofs: (device loop9): mounted with root inode @ nid 36. [ 378.140254][ T6604] EXT4-fs error (device loop7): ext4_get_inode_loc:4627: inode #2: block 5: comm syz-executor: unable to read itable block [ 378.182579][ T6604] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 378.209134][ T6604] EXT4-fs (loop7): I/O error while writing superblock [ 378.225649][ T6604] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5916: IO failure [ 378.254321][ T6604] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 378.263235][ T6604] EXT4-fs (loop7): I/O error while writing superblock [ 378.270564][ T6604] EXT4-fs error (device loop7): ext4_dirty_inode:6120: inode #2: comm syz-executor: mark_inode_dirty error [ 378.291179][ T6604] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 378.304071][ T6604] EXT4-fs (loop7): I/O error while writing superblock [ 378.419527][ T1072] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4612: inode #2: block 5: comm kworker/u4:5: unable to read itable block [ 378.435586][ T8797] loop9: detected capacity change from 0 to 1024 [ 378.458397][ T1072] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 378.470418][ T1072] EXT4-fs (loop7): I/O error while writing superblock [ 378.498259][ T8797] EXT4-fs (loop9): orphan cleanup on readonly fs [ 378.526479][ T6604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.547241][ T8797] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 378.563015][ T6604] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 378.574358][ T6604] EXT4-fs (loop7): I/O error while writing superblock [ 378.583932][ T8797] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 378.611245][ T8797] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.610: Failed to acquire dquot type 0 [ 378.630736][ T8797] EXT4-fs (loop9): 1 truncate cleaned up [ 378.685762][ T8797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.837846][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.941079][ T6572] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.293607][ T6572] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.549282][ T5080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.560473][ T5080] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.573347][ T5080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.593610][ T5080] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.606994][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 379.623966][ T5080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.679463][ T6572] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.818246][ T6572] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.031383][ T8665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 380.070930][ T8665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 380.120138][ T8665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.142868][ T8665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.633977][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 380.703285][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.765112][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.843541][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.863223][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.873038][ T8808] bridge_slave_0: entered allmulticast mode [ 380.886166][ T8808] bridge_slave_0: entered promiscuous mode [ 380.903686][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.911025][ T5869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.946815][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.954385][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.961921][ T8808] bridge_slave_1: entered allmulticast mode [ 380.983027][ T8808] bridge_slave_1: entered promiscuous mode [ 380.997128][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.004293][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.136948][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.158379][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.363462][ T8808] team0: Port device team_slave_0 added [ 381.394830][ T8808] team0: Port device team_slave_1 added [ 381.416567][ T6572] hsr_slave_0: left promiscuous mode [ 381.424632][ T6572] hsr_slave_1: left promiscuous mode [ 381.430938][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.439168][ T6572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.455683][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.463137][ T6572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.474439][ T6572] bridge_slave_1: left allmulticast mode [ 381.485452][ T6572] bridge_slave_1: left promiscuous mode [ 381.495164][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.512115][ T6572] bridge_slave_0: left allmulticast mode [ 381.517839][ T6572] bridge_slave_0: left promiscuous mode [ 381.524531][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.551995][ T6572] veth1_macvtap: left promiscuous mode [ 381.557606][ T6572] veth0_macvtap: left promiscuous mode [ 381.563334][ T6572] veth1_vlan: left promiscuous mode [ 381.569836][ T6572] veth0_vlan: left promiscuous mode [ 381.832950][ T5775] Bluetooth: hci2: command tx timeout [ 382.164792][ T6572] team0 (unregistering): Port device team_slave_1 removed [ 382.216397][ T6572] team0 (unregistering): Port device team_slave_0 removed [ 382.264112][ T6572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.318929][ T6572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.862322][ T6572] bond0 (unregistering): Released all slaves [ 383.060522][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.067523][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.111161][ T8808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.167948][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.174966][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.245650][ T8808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.351009][ T8808] hsr_slave_0: entered promiscuous mode [ 383.370646][ T8808] hsr_slave_1: entered promiscuous mode [ 383.413334][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.576567][ T8665] veth0_vlan: entered promiscuous mode [ 383.630062][ T8665] veth1_vlan: entered promiscuous mode [ 383.837444][ T8665] veth0_macvtap: entered promiscuous mode [ 383.887627][ T6572] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.979077][ T8665] veth1_macvtap: entered promiscuous mode [ 384.003575][ T6572] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.034965][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.050164][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.052786][ T5775] Bluetooth: hci2: command tx timeout [ 384.063798][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.080638][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.093595][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.254773][ T6572] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.279650][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.290917][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.303213][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.315333][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.328938][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.489753][ T6572] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.516661][ T8665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.526093][ T8665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.535797][ T8665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.545236][ T8665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.849559][ T8808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.881179][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.891479][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.895898][ T8808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.915082][ T8808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.965988][ T8808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.060768][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.071825][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.573919][ T5775] Bluetooth: hci2: command tx timeout [ 388.661783][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.756120][ T5775] Bluetooth: hci2: command tx timeout [ 388.814555][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.969143][ T5080] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.980004][ T5080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.989668][ T5080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.998364][ T5080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.011498][ T5080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 389.030022][ T5080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.074826][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.082090][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.271815][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.279120][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.734757][ T6572] hsr_slave_0: left promiscuous mode [ 389.744278][ T8932] loop2: detected capacity change from 0 to 128 [ 389.754561][ T6572] hsr_slave_1: left promiscuous mode [ 389.776685][ T8932] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 389.802337][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.836984][ T6572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.859736][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.867240][ T6572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.912077][ T8936] loop9: detected capacity change from 0 to 8 [ 389.950109][ T6572] bridge_slave_1: left allmulticast mode [ 389.964093][ T6572] bridge_slave_1: left promiscuous mode [ 389.970072][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.997360][ T8936] SQUASHFS error: Failed to read block 0x4de: -5 [ 390.004363][ T8936] SQUASHFS error: Failed to read block 0x4de: -5 [ 390.015244][ T6572] bridge_slave_0: left allmulticast mode [ 390.025209][ T8936] SQUASHFS error: Failed to read block 0x4de: -5 [ 390.028640][ T28] audit: type=1800 audit(1765574559.128:77): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.615" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 390.061006][ T8936] SQUASHFS error: Failed to read block 0x4de: -5 [ 390.064872][ T6572] bridge_slave_0: left promiscuous mode [ 390.068107][ T8936] SQUASHFS error: Failed to read block 0x4de: -5 [ 390.074884][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.120028][ T8936] SQUASHFS error: Failed to read block 0x4de: -5 [ 390.184981][ T6572] veth1_macvtap: left promiscuous mode [ 390.190694][ T6572] veth0_macvtap: left promiscuous mode [ 390.201320][ T6572] veth1_vlan: left promiscuous mode [ 390.238125][ T6572] veth0_vlan: left promiscuous mode [ 391.254880][ T5080] Bluetooth: hci3: command tx timeout [ 391.448324][ T8957] loop9: detected capacity change from 0 to 512 [ 391.582211][ T8957] EXT4-fs (loop9): 1 truncate cleaned up [ 391.593000][ T8957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.378126][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.382843][ T8957] loop9: detected capacity change from 512 to 0 [ 392.384627][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.430063][ C0] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 392.440029][ T8962] EXT4-fs error (device loop9): ext4_read_inode_bitmap:204: comm syz.9.623: Cannot read inode bitmap - block_group = 0, inode_bitmap = 4 [ 392.457160][ T8962] bio_check_eod: 15 callbacks suppressed [ 392.457178][ T8962] syz.9.623: attempt to access beyond end of device [ 392.457178][ T8962] loop9: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 392.476754][ T8962] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 392.486680][ T8962] EXT4-fs (loop9): I/O error while writing superblock [ 392.567452][ T7694] syz-executor: attempt to access beyond end of device [ 392.567452][ T7694] loop9: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 392.584137][ T7694] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 392.601705][ T7694] syz-executor: attempt to access beyond end of device [ 392.601705][ T7694] loop9: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 392.615468][ T7694] syz-executor: attempt to access beyond end of device [ 392.615468][ T7694] loop9: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 392.629499][ T7694] syz-executor: attempt to access beyond end of device [ 392.629499][ T7694] loop9: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 392.643412][ T7694] syz-executor: attempt to access beyond end of device [ 392.643412][ T7694] loop9: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 392.657858][ T7694] syz-executor: attempt to access beyond end of device [ 392.657858][ T7694] loop9: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 392.672086][ T7694] syz-executor: attempt to access beyond end of device [ 392.672086][ T7694] loop9: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 392.685793][ T7694] syz-executor: attempt to access beyond end of device [ 392.685793][ T7694] loop9: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 392.699397][ T7694] syz-executor: attempt to access beyond end of device [ 392.699397][ T7694] loop9: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 392.713106][ T7694] EXT4-fs error (device loop9): ext4_get_inode_loc:4627: inode #2: block 5: comm syz-executor: unable to read itable block [ 392.726045][ T7694] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 392.734493][ T7694] EXT4-fs (loop9): I/O error while writing superblock [ 392.741307][ T7694] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5916: IO failure [ 392.750363][ T7694] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 392.759460][ T7694] EXT4-fs (loop9): I/O error while writing superblock [ 392.766412][ T7694] EXT4-fs error (device loop9): ext4_dirty_inode:6120: inode #2: comm syz-executor: mark_inode_dirty error [ 392.779593][ T7694] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 392.789237][ T7694] EXT4-fs (loop9): I/O error while writing superblock [ 392.817556][ T8497] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4612: inode #2: block 5: comm kworker/u4:15: unable to read itable block [ 392.831648][ T8497] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 392.851283][ T8497] EXT4-fs (loop9): I/O error while writing superblock [ 392.860774][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.886880][ T7694] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 392.905716][ T7694] EXT4-fs (loop9): I/O error while writing superblock [ 392.927801][ T6572] team0 (unregistering): Port device team_slave_1 removed [ 392.995552][ T6572] team0 (unregistering): Port device team_slave_0 removed [ 393.050502][ T6572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.099120][ T6572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.461216][ T5080] Bluetooth: hci3: command tx timeout [ 393.627528][ T6572] bond0 (unregistering): Released all slaves [ 394.089619][ T8920] chnl_net:caif_netlink_parms(): no params data found [ 394.424086][ T8920] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.436728][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.446253][ T8920] bridge_slave_0: entered allmulticast mode [ 394.453696][ T8920] bridge_slave_0: entered promiscuous mode [ 394.473448][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.485930][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.512469][ T8920] bridge_slave_1: entered allmulticast mode [ 394.523523][ T8920] bridge_slave_1: entered promiscuous mode [ 394.577483][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.601918][ T8920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.627454][ T8920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.694449][ T6572] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.757888][ T8920] team0: Port device team_slave_0 added [ 394.775748][ T8920] team0: Port device team_slave_1 added [ 394.833470][ T6572] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.863636][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.870643][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.896854][ T8920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.914887][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.921867][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.949322][ T8920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.985192][ T6572] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.093508][ T6572] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.122287][ T8920] hsr_slave_0: entered promiscuous mode [ 395.133842][ T8920] hsr_slave_1: entered promiscuous mode [ 395.140412][ T8920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.148008][ T8920] Cannot create hsr debugfs directory [ 395.179700][ T8808] veth0_vlan: entered promiscuous mode [ 395.317921][ T8808] veth1_vlan: entered promiscuous mode [ 395.683746][ T5080] Bluetooth: hci3: command tx timeout [ 395.749629][ T8808] veth0_macvtap: entered promiscuous mode [ 395.776060][ T8808] veth1_macvtap: entered promiscuous mode [ 395.819535][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.832850][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.843235][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.854967][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.868814][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.898740][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.909424][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.921366][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.932507][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.948562][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.979248][ T8808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.988412][ T8808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.997877][ T8808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.006902][ T8808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.198507][ T8920] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 396.226211][ T8497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.236667][ T8497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.249882][ T8920] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 396.269803][ T8920] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 396.308306][ T8920] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 396.334145][ T8497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.346243][ T8497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.515420][ T9018] loop0: detected capacity change from 0 to 256 [ 398.202424][ T5080] Bluetooth: hci3: command tx timeout [ 398.295383][ T9018] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 398.405588][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.600605][ T8920] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.687013][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.694256][ T8510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.412099][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.425692][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.440190][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.477845][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 400.489753][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 400.497476][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.551295][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.558539][ T5869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.687737][ T6572] hsr_slave_0: left promiscuous mode [ 400.697886][ T6572] hsr_slave_1: left promiscuous mode [ 400.710975][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.718523][ T6572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.741145][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.749093][ T6572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.773059][ T6572] bridge_slave_1: left allmulticast mode [ 400.778765][ T6572] bridge_slave_1: left promiscuous mode [ 400.793904][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.828653][ T6572] bridge_slave_0: left allmulticast mode [ 400.834371][ T6572] bridge_slave_0: left promiscuous mode [ 400.847399][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.890702][ T6572] veth1_macvtap: left promiscuous mode [ 400.896327][ T6572] veth0_macvtap: left promiscuous mode [ 400.909109][ T6572] veth1_vlan: left promiscuous mode [ 400.914650][ T6572] veth0_vlan: left promiscuous mode [ 401.225855][ T9029] loop2: detected capacity change from 0 to 256 [ 401.273975][ T9029] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 401.693994][ T9033] loop2: detected capacity change from 0 to 128 [ 401.739253][ T9033] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 402.701508][ T5080] Bluetooth: hci1: command tx timeout [ 403.512850][ T6572] team0 (unregistering): Port device team_slave_1 removed [ 404.327462][ T9056] loop0: detected capacity change from 0 to 256 [ 404.338823][ T6572] team0 (unregistering): Port device team_slave_0 removed [ 404.379154][ T9056] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 404.510500][ T28] audit: type=1800 audit(1765574572.672:78): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.636" name="file1" dev="loop0" ino=1048662 res=0 errno=0 [ 404.556740][ T28] audit: type=1800 audit(1765574572.672:79): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.636" name="file1" dev="loop0" ino=1048662 res=0 errno=0 [ 404.582148][ T6572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.701776][ T6572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.920224][ T5080] Bluetooth: hci1: command tx timeout [ 405.576720][ T6572] bond0 (unregistering): Released all slaves [ 406.003137][ T9062] loop0: detected capacity change from 0 to 128 [ 406.068969][ T9062] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 406.478726][ T8920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.552202][ T9072] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 406.567944][ T9072] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 406.621969][ T9026] chnl_net:caif_netlink_parms(): no params data found [ 407.143913][ T5080] Bluetooth: hci1: command tx timeout [ 408.675485][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.745257][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.754373][ T9026] bridge_slave_0: entered allmulticast mode [ 408.761789][ T9026] bridge_slave_0: entered promiscuous mode [ 408.831133][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.869147][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.905151][ T9026] bridge_slave_1: entered allmulticast mode [ 408.971517][ T9026] bridge_slave_1: entered promiscuous mode [ 409.367557][ T5080] Bluetooth: hci1: command tx timeout [ 409.977744][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.016239][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.320434][ T9026] team0: Port device team_slave_0 added [ 410.357019][ T9026] team0: Port device team_slave_1 added [ 411.314960][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.377240][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.473480][ T9026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.497304][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.504318][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.634028][ T9026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.657845][ T8920] veth0_vlan: entered promiscuous mode [ 411.969930][ T8920] veth1_vlan: entered promiscuous mode [ 412.206948][ T9109] loop0: detected capacity change from 0 to 256 [ 412.227431][ T9026] hsr_slave_0: entered promiscuous mode [ 412.236856][ T9026] hsr_slave_1: entered promiscuous mode [ 412.267776][ T9026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.297720][ T9109] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 412.314292][ T9026] Cannot create hsr debugfs directory [ 412.413869][ T8920] veth0_macvtap: entered promiscuous mode [ 412.429378][ T28] audit: type=1800 audit(1765574580.015:80): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.649" name="file1" dev="loop0" ino=1048663 res=0 errno=0 [ 412.493229][ T28] audit: type=1800 audit(1765574580.015:81): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.649" name="file1" dev="loop0" ino=1048663 res=0 errno=0 [ 412.572729][ T8920] veth1_macvtap: entered promiscuous mode [ 412.741766][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.761078][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.778579][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.799163][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.820717][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.847636][ T9116] loop2: detected capacity change from 0 to 1024 [ 412.866776][ T9116] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 412.869468][ T9114] loop0: detected capacity change from 0 to 128 [ 412.903419][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.941351][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.088213][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.101094][ T9114] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 413.126088][ T9116] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 2: comm syz.2.651: lblock 2 mapped to illegal pblock 2 (length 1) [ 413.137869][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.187570][ T9116] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 413.201213][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.209135][ T9116] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 48: comm syz.2.651: lblock 0 mapped to illegal pblock 48 (length 1) [ 413.268441][ T9116] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 413.290854][ T9116] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.651: Failed to acquire dquot type 0 [ 413.327154][ T8920] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.346481][ T9116] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 413.369711][ T8920] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.371448][ T9116] EXT4-fs error (device loop2): ext4_evict_inode:252: inode #11: comm syz.2.651: mark_inode_dirty error [ 413.385931][ T8920] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.399193][ T8920] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.440951][ T9116] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 413.453385][ T9116] EXT4-fs (loop2): 1 orphan inode deleted [ 413.460611][ T9116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.505174][ T1072] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 413.519923][ T9116] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.651: Invalid inode table block 1 in block_group 0 [ 413.547829][ T9116] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 413.561735][ T9116] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #2: comm syz.2.651: mark_inode_dirty error [ 413.585424][ T1072] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 413.595607][ T9119] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 413.622904][ T1072] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u4:5: Failed to release dquot type 0 [ 413.644309][ T9119] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 413.702207][ T1072] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm kworker/u4:5: Invalid inode table block 1 in block_group 0 [ 413.725593][ T8665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.775007][ T8665] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 413.858136][ T8665] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 413.958669][ T8665] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 414.188453][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.206923][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.706988][ T6572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.780774][ T6572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.176446][ T9026] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 415.289068][ T9026] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 416.639424][ T9026] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 416.672975][ T9026] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 419.156620][ T9148] loop0: detected capacity change from 0 to 128 [ 419.262246][ T9148] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 419.349759][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.465874][ T9026] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.514496][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.521687][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.581647][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.588911][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.169723][ T9026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.210694][ T9026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.378169][ T9158] loop2: detected capacity change from 0 to 512 [ 420.412549][ T9158] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 420.646795][ T9158] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 420.685797][ T9163] loop7: detected capacity change from 0 to 256 [ 420.782825][ T9163] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 420.913746][ T28] audit: type=1800 audit(1765574588.013:82): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.657" name="file1" dev="loop7" ino=1048668 res=0 errno=0 [ 421.027107][ T28] audit: type=1800 audit(1765574588.013:83): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.657" name="file1" dev="loop7" ino=1048668 res=0 errno=0 [ 421.104632][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.138018][ T9177] loop7: detected capacity change from 0 to 16 [ 422.216260][ T9177] erofs: (device loop7): mounted with root inode @ nid 36. [ 422.396148][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 423.438257][ T5080] Bluetooth: hci0: Malformed LE Event: 0x1b [ 423.493539][ T9194] loop0: detected capacity change from 0 to 4096 [ 423.557667][ T9194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.404194][ T9194] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 425.500219][ T9194] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 425.509700][ T9194] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.667: Failed to acquire dquot type 1 [ 425.524070][ T9026] veth0_vlan: entered promiscuous mode [ 425.866447][ T9026] veth1_vlan: entered promiscuous mode [ 426.087953][ T9194] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 426.245823][ T9026] veth0_macvtap: entered promiscuous mode [ 426.382767][ T9026] veth1_macvtap: entered promiscuous mode [ 426.487747][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.536489][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.558417][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.571839][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.600681][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.611165][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.688268][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.738550][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.816027][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.846559][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.869776][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.457309][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.486022][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.606782][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.640655][ T9026] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.664321][ T9026] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.673089][ T9026] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.734238][ T9026] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.175914][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.196232][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.279034][ T5869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.288772][ T5869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.664208][ T1072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.999037][ T1072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.268899][ T9246] loop9: detected capacity change from 0 to 256 [ 430.270787][ T1072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.276335][ T9246] exfat: Unknown parameter '2' [ 430.748627][ T9251] loop2: detected capacity change from 0 to 136 [ 430.813922][ T9246] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.878155][ T9246] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 430.916966][ T9251] Attempt to read inode for relocated directory [ 430.956201][ T9246] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 431.389610][ T1072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.171495][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.183222][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.195430][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.206161][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.229309][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 432.239109][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.491494][ T5775] Bluetooth: hci2: command tx timeout [ 435.516673][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 435.890046][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 436.243715][ T787] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.318467][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.325737][ T787] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 436.343232][ T9262] chnl_net:caif_netlink_parms(): no params data found [ 436.364555][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.397288][ T787] usb 3-1: config 0 descriptor?? [ 436.650220][ T5775] Bluetooth: hci2: command tx timeout [ 436.922545][ T787] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 436.938678][ T9262] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.945879][ T9262] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.993779][ T9262] bridge_slave_0: entered allmulticast mode [ 437.023861][ T9262] bridge_slave_0: entered promiscuous mode [ 437.215820][ T9314] loop7: detected capacity change from 0 to 256 [ 437.245831][ T9262] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.288705][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.307602][ T9314] FAT-fs (loop7): Directory bread(block 64) failed [ 437.322016][ T9314] FAT-fs (loop7): Directory bread(block 65) failed [ 437.329817][ T9314] FAT-fs (loop7): Directory bread(block 66) failed [ 437.350697][ T9314] FAT-fs (loop7): Directory bread(block 67) failed [ 437.366293][ T9314] FAT-fs (loop7): Directory bread(block 68) failed [ 437.373333][ T9314] FAT-fs (loop7): Directory bread(block 69) failed [ 437.390502][ T9314] FAT-fs (loop7): Directory bread(block 70) failed [ 437.423787][ T7416] usb 3-1: USB disconnect, device number 4 [ 437.441645][ T9314] FAT-fs (loop7): Directory bread(block 71) failed [ 437.471727][ T9262] bridge_slave_1: entered allmulticast mode [ 437.489200][ T9314] FAT-fs (loop7): Directory bread(block 72) failed [ 437.517372][ T9262] bridge_slave_1: entered promiscuous mode [ 437.539498][ T9314] FAT-fs (loop7): Directory bread(block 73) failed [ 438.163206][ T9314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.378365][ T9325] loop9: detected capacity change from 0 to 128 [ 438.398779][ T9325] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 438.505378][ T9262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.568290][ T9329] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 438.613633][ T9329] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 438.623263][ T9262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.733272][ T9262] team0: Port device team_slave_0 added [ 438.763838][ T1072] hsr_slave_0: left promiscuous mode [ 438.770999][ T1072] hsr_slave_1: left promiscuous mode [ 438.818691][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.826281][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.850315][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.864156][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.875028][ T5775] Bluetooth: hci2: command tx timeout [ 438.895994][ T1072] bridge_slave_1: left allmulticast mode [ 438.901718][ T1072] bridge_slave_1: left promiscuous mode [ 438.921436][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.953078][ T1072] bridge_slave_0: left allmulticast mode [ 438.958837][ T1072] bridge_slave_0: left promiscuous mode [ 438.980975][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.057521][ T1072] veth1_macvtap: left promiscuous mode [ 439.063531][ T1072] veth0_macvtap: left promiscuous mode [ 439.076909][ T1072] veth1_vlan: left promiscuous mode [ 439.082295][ T1072] veth0_vlan: left promiscuous mode [ 440.293864][ T9357] loop9: detected capacity change from 0 to 256 [ 440.355383][ T9357] exFAT-fs (loop9): Invalid boot checksum (boot checksum : 0x0019abd0, checksum : 0x1119abd0) [ 440.392770][ T9357] exFAT-fs (loop9): invalid boot region [ 440.398385][ T9357] exFAT-fs (loop9): failed to recognize exfat type [ 442.327201][ T5775] Bluetooth: hci2: command tx timeout [ 443.885445][ T1072] team0 (unregistering): Port device team_slave_1 removed [ 443.984366][ T1072] team0 (unregistering): Port device team_slave_0 removed [ 444.076071][ T1072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.162880][ T1072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.068122][ T9378] loop9: detected capacity change from 0 to 128 [ 445.121923][ T9378] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 445.261516][ T9379] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 445.287261][ T9379] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 445.652748][ T1072] bond0 (unregistering): Released all slaves [ 445.689545][ T9381] loop9: detected capacity change from 0 to 256 [ 445.709953][ T9381] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 445.748342][ T28] audit: type=1800 audit(1765574611.258:84): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.703" name="file1" dev="loop9" ino=1048672 res=0 errno=0 [ 445.776852][ T28] audit: type=1800 audit(1765574611.276:85): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.703" name="file1" dev="loop9" ino=1048672 res=0 errno=0 [ 445.826500][ T9262] team0: Port device team_slave_1 added [ 446.078316][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.110613][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.204968][ T9262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.232672][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.268233][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.314180][ T9262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.511426][ T9262] hsr_slave_0: entered promiscuous mode [ 446.626717][ T9262] hsr_slave_1: entered promiscuous mode [ 448.529321][ T9429] loop9: detected capacity change from 0 to 128 [ 448.557950][ T9429] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 448.776277][ T9433] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 448.819529][ T9433] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 448.860324][ T9437] loop2: detected capacity change from 0 to 512 [ 448.871270][ T9437] EXT4-fs: Ignoring removed nobh option [ 448.934463][ T9437] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 448.952470][ T9437] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 448.978684][ T9437] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.711: Corrupt directory, running e2fsck is recommended [ 449.050193][ T9437] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 449.106003][ T9437] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.711: corrupted in-inode xattr: invalid ea_ino [ 449.165073][ T9437] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.711: couldn't read orphan inode 15 (err -117) [ 449.219646][ T9437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.276990][ T9437] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 449.319252][ T9437] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 449.353615][ T9437] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.711: Corrupt directory, running e2fsck is recommended [ 449.397745][ T9437] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.711: path /42/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 449.418707][ T9262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.445609][ T9262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.471931][ T9437] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 8: comm syz.2.711: path /42/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 449.502012][ T9262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.529179][ T9449] loop7: detected capacity change from 0 to 256 [ 449.539321][ T9262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 449.578662][ T8665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.630799][ T9449] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 449.747981][ T28] audit: type=1800 audit(1765574614.971:86): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.712" name="file1" dev="loop7" ino=1048673 res=0 errno=0 [ 451.006261][ T28] audit: type=1800 audit(1765574614.999:87): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.712" name="file1" dev="loop7" ino=1048673 res=0 errno=0 [ 451.118842][ T9262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.188644][ T9262] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.209413][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.216703][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.252661][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.259936][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.296879][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 451.533297][ T27] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 451.544478][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.575355][ T27] usb 3-1: config 0 descriptor?? [ 451.599648][ T27] cp210x 3-1:0.0: cp210x converter detected [ 452.037264][ T9262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.050855][ T27] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 452.074235][ T9461] loop2: detected capacity change from 0 to 1024 [ 452.129478][ T9461] hfsplus: catalog name length corrupted [ 452.183674][ T9461] hfsplus: failed to load root directory [ 452.239798][ T27] usb 3-1: cp210x converter now attached to ttyUSB0 [ 452.308329][ T9262] veth0_vlan: entered promiscuous mode [ 452.370198][ T9262] veth1_vlan: entered promiscuous mode [ 452.458103][ T27] usb 3-1: USB disconnect, device number 5 [ 452.511450][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 452.560723][ T27] cp210x 3-1:0.0: device disconnected [ 452.572872][ T9262] veth0_macvtap: entered promiscuous mode [ 452.634296][ T9262] veth1_macvtap: entered promiscuous mode [ 452.706374][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.738876][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.777474][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.803485][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.826336][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.863875][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.875604][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.887210][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.897857][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.908124][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.919510][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.929561][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.942375][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.960269][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.983169][ T9262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.006646][ T9262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.015769][ T9262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.033264][ T9262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.361770][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.547616][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.075997][ T175] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 454.101155][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.124071][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.293153][ T175] usb 10-1: config 0 has an invalid interface number: 23 but max is 0 [ 454.309355][ T175] usb 10-1: config 0 has no interface number 0 [ 454.334811][ T175] usb 10-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 454.359902][ T175] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.381479][ T175] usb 10-1: Product: syz [ 454.391730][ T175] usb 10-1: Manufacturer: syz [ 454.413485][ T175] usb 10-1: SerialNumber: syz [ 454.434740][ T175] usb 10-1: config 0 descriptor?? [ 454.455304][ T175] ftdi_sio 10-1:0.23: FTDI USB Serial Device converter detected [ 454.474429][ T175] usb 10-1: Detected SIO [ 454.491693][ T175] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 456.398066][ T175] usb 10-1: USB disconnect, device number 2 [ 456.498783][ T175] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 456.540284][ T175] ftdi_sio 10-1:0.23: device disconnected [ 458.057311][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.067380][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.384108][ T9584] loop1: detected capacity change from 0 to 512 [ 459.450553][ T8926] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 463.356354][ T9644] loop1: detected capacity change from 0 to 128 [ 463.448303][ T8926] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 469.852842][ T9725] loop1: detected capacity change from 0 to 1024 [ 469.934407][ T9725] hfsplus: failed to load extents file [ 471.137856][ T5855] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 471.887961][ T9718] ------------[ cut here ]------------ [ 471.893547][ T9718] WARNING: CPU: 0 PID: 9718 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 471.903570][ T9718] Modules linked in: [ 471.907892][ T9718] CPU: 0 PID: 9718 Comm: syz.2.767 Not tainted syzkaller #0 [ 471.915275][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.925545][ T9718] RIP: 0010:__alloc_pages+0x2de/0x460 [ 471.931043][ T9718] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 fe a1 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 471.950812][ T9718] RSP: 0018:ffffc90004cd7a00 EFLAGS: 00010246 [ 471.956987][ T9718] RAX: ffffc90004cd7a00 RBX: 1ffff9200099af44 RCX: 0000000000000000 [ 471.965113][ T9718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004cd7a68 [ 471.973392][ T9718] RBP: ffffc90004cd7b00 R08: ffffc90004cd7a67 R09: 0000000000000000 [ 471.981453][ T9718] R10: ffffc90004cd7a40 R11: fffff5200099af4d R12: 0000000000000012 [ 471.989585][ T9718] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 471.997700][ T9718] FS: 00007f4e52f766c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 472.006756][ T9718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.013992][ T9718] CR2: 00007f4e52511000 CR3: 0000000068ed2000 CR4: 00000000003506f0 [ 472.022354][ T9718] Call Trace: [ 472.025756][ T9718] [ 472.028762][ T9718] ? zone_statistics+0x170/0x170 [ 472.033794][ T9718] ? __might_fault+0xaa/0x120 [ 472.038630][ T9718] ? __lock_acquire+0x7c80/0x7c80 [ 472.043728][ T9718] __kmalloc_large_node+0x8c/0x1e0 [ 472.048997][ T9718] ? raw_ioctl+0x19b0/0x3b70 [ 472.053657][ T9718] __kmalloc+0x111/0x240 [ 472.058032][ T9718] raw_ioctl+0x19b0/0x3b70 [ 472.062545][ T9718] ? tomoyo_path_number_perm+0x477/0x590 [ 472.068342][ T9718] ? __kmem_cache_free+0xba/0x1f0 [ 472.073476][ T9718] ? tomoyo_path_number_perm+0x4dc/0x590 [ 472.079237][ T9718] ? tomoyo_path_number_perm+0x1ba/0x590 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 472.084964][ T9718] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 472.090737][ T9718] ? make_qualifier+0x250/0x250 [ 472.095706][ T9718] ? __fget_files+0x28/0x4d0 [ 472.100555][ T9718] ? bpf_lsm_file_ioctl+0x9/0x10 [ 472.105856][ T9718] ? security_file_ioctl+0x80/0xa0 [ 472.111155][ T9718] ? make_qualifier+0x250/0x250 [ 472.116090][ T9718] __se_sys_ioctl+0xfd/0x170 [ 472.120783][ T9718] do_syscall_64+0x55/0xb0 [ 472.125956][ T9718] ? clear_bhb_loop+0x40/0x90 [ 472.130748][ T9718] ? clear_bhb_loop+0x40/0x90 [ 472.135782][ T9718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.141768][ T9718] RIP: 0033:0x7f4e5218f749 [ 472.146509][ T9718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.166253][ T9718] RSP: 002b:00007f4e52f76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.174856][ T9718] RAX: ffffffffffffffda RBX: 00007f4e523e5fa0 RCX: 00007f4e5218f749 [ 472.182932][ T9718] RDX: 0000200000000080 RSI: 00000000c0085504 RDI: 0000000000000004 [ 472.191078][ T9718] RBP: 00007f4e52213f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.199202][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.208222][ T9718] R13: 00007f4e523e6038 R14: 00007f4e523e5fa0 R15: 00007ffc04208c68 [ 472.216312][ T9718] [ 472.219462][ T9718] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 472.226781][ T9718] CPU: 0 PID: 9718 Comm: syz.2.767 Not tainted syzkaller #0 [ 472.234144][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.244246][ T9718] Call Trace: [ 472.247583][ T9718] [ 472.250566][ T9718] dump_stack_lvl+0x16c/0x230 [ 472.255315][ T9718] ? show_regs_print_info+0x20/0x20 [ 472.260752][ T9718] ? load_image+0x3b0/0x3b0 [ 472.265321][ T9718] panic+0x2c0/0x710 [ 472.269272][ T9718] ? bpf_jit_dump+0xd0/0xd0 [ 472.273855][ T9718] __warn+0x2e0/0x470 [ 472.277873][ T9718] ? __alloc_pages+0x2de/0x460 [ 472.282683][ T9718] ? __alloc_pages+0x2de/0x460 [ 472.287495][ T9718] report_bug+0x2be/0x4f0 [ 472.291882][ T9718] ? __alloc_pages+0x2de/0x460 [ 472.296707][ T9718] ? __alloc_pages+0x2de/0x460 [ 472.301531][ T9718] ? __alloc_pages+0x2e0/0x460 [ 472.306348][ T9718] handle_bug+0xcf/0x120 [ 472.310637][ T9718] exc_invalid_op+0x1a/0x50 [ 472.315183][ T9718] asm_exc_invalid_op+0x1a/0x20 [ 472.320070][ T9718] RIP: 0010:__alloc_pages+0x2de/0x460 [ 472.325491][ T9718] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 fe a1 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 472.345145][ T9718] RSP: 0018:ffffc90004cd7a00 EFLAGS: 00010246 [ 472.351259][ T9718] RAX: ffffc90004cd7a00 RBX: 1ffff9200099af44 RCX: 0000000000000000 [ 472.359274][ T9718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004cd7a68 [ 472.367333][ T9718] RBP: ffffc90004cd7b00 R08: ffffc90004cd7a67 R09: 0000000000000000 [ 472.375356][ T9718] R10: ffffc90004cd7a40 R11: fffff5200099af4d R12: 0000000000000012 [ 472.383373][ T9718] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 472.391570][ T9718] ? zone_statistics+0x170/0x170 [ 472.396585][ T9718] ? __might_fault+0xaa/0x120 [ 472.401308][ T9718] ? __lock_acquire+0x7c80/0x7c80 [ 472.406387][ T9718] __kmalloc_large_node+0x8c/0x1e0 [ 472.411572][ T9718] ? raw_ioctl+0x19b0/0x3b70 [ 472.416212][ T9718] __kmalloc+0x111/0x240 [ 472.420526][ T9718] raw_ioctl+0x19b0/0x3b70 [ 472.424988][ T9718] ? tomoyo_path_number_perm+0x477/0x590 [ 472.430673][ T9718] ? __kmem_cache_free+0xba/0x1f0 [ 472.435753][ T9718] ? tomoyo_path_number_perm+0x4dc/0x590 [ 472.441440][ T9718] ? tomoyo_path_number_perm+0x1ba/0x590 [ 472.447121][ T9718] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 472.452634][ T9718] ? make_qualifier+0x250/0x250 [ 472.457568][ T9718] ? __fget_files+0x28/0x4d0 [ 472.462218][ T9718] ? bpf_lsm_file_ioctl+0x9/0x10 [ 472.467209][ T9718] ? security_file_ioctl+0x80/0xa0 [ 472.472368][ T9718] ? make_qualifier+0x250/0x250 [ 472.477260][ T9718] __se_sys_ioctl+0xfd/0x170 [ 472.481893][ T9718] do_syscall_64+0x55/0xb0 [ 472.486354][ T9718] ? clear_bhb_loop+0x40/0x90 [ 472.491100][ T9718] ? clear_bhb_loop+0x40/0x90 [ 472.495830][ T9718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.501780][ T9718] RIP: 0033:0x7f4e5218f749 [ 472.506241][ T9718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.525907][ T9718] RSP: 002b:00007f4e52f76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.534412][ T9718] RAX: ffffffffffffffda RBX: 00007f4e523e5fa0 RCX: 00007f4e5218f749 [ 472.542419][ T9718] RDX: 0000200000000080 RSI: 00000000c0085504 RDI: 0000000000000004 [ 472.550430][ T9718] RBP: 00007f4e52213f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.558446][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.566465][ T9718] R13: 00007f4e523e6038 R14: 00007f4e523e5fa0 R15: 00007ffc04208c68 [ 472.574504][ T9718] [ 472.577898][ T9718] Kernel Offset: disabled [ 472.582228][ T9718] Rebooting in 86400 seconds..