last executing test programs: 15m47.984524455s ago: executing program 32 (id=124): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000101, 0x0) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)}], 0x1}, 0x8000) 14m8.97091468s ago: executing program 33 (id=263): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x1, 0x1, 0x0, &(0x7f00000004c0)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000006c0)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000700)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 14m6.234309708s ago: executing program 34 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f000000bc00)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)=[0x6, 0x7fff]) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002580)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) stat(&(0x7f000000b6c0)='./file0\x00', &(0x7f000000b700)) 13m30.052404931s ago: executing program 35 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ca8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m28.48936998s ago: executing program 2 (id=337): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 13m25.201572641s ago: executing program 36 (id=342): r0 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x1d00, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000940)="306663353a313232373a620afaf66463", 0x10) 13m25.193520581s ago: executing program 2 (id=345): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 13m24.990746716s ago: executing program 2 (id=346): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001880)=@abs={0x1, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0xe0) 13m24.678253514s ago: executing program 2 (id=347): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f00000001c0)={[], [{@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '\\*&}{@'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@uid_eq}]}, 0x1, 0x539, &(0x7f0000002d40)="$eJzs3V9rY2kZAPDnnDTdzEzXZlVkXHB3cVZmFp1kunV3q8juCKJXC+p6P5Y2LaVpU5p0nZZFu3jhpSCigh/AG8EPIMjiJxBhQe9FRRGd1UvdI0lOsH+SJrTpZkx/Pzjkfc9J3ud5T5uT8+flnACurOci4n5EFCLihYiYz+en+RSH3an9vvcevbXSnpLIsjf+nkSSz+u11a7PRMSN/GOliPj6VyJupafjNvcPNpfr9dpuXq+2tnaqzf2Duxtby+u19dr24uLCy0uvLL20dC/LXaif5Yh49Ut//tH3f/blV3/1mW/94cFf73y7ne8XPtbNOyJWLhRggG7bxc666Gmvo93LCDYh7f4UC5POAgCAUbR3zT8cEZ/s7P/PR6GzNwcAAABMk+y1ufh3EpEBAAAAUyuNiLlI0ko+FmAu0rRS6Y7h/WhcT+uNZuvTa4297dX2sohyFNO1jXrtXj5WuBzFpF1fyMfY9uovnqgvRsRTEfHD+WudemWlUV+d9MkPAAAAuCJuPHv8+P9f82mnDAAAAEyZ8sAKAAAAMC0c8gMAAMD0c/wPAAAAU+2rr7/enrLec7xX39zf22y8eXe11tysbO2tVFYauzuV9UZjvXPPvq1h7dUbjZ3Pxvbew2qr1mxVm/sHD7Yae9utBxvHHoENAAAAfICeevad3ycRcfj5a50p8vsADjN76ZkBj5U/TToBYJwKk04AmJiZSScATExx6DtsIWDaJUOWnx680z1XGL+5nHwAAIDxu/3x09f/e9f2h58bAP6fjTLWBwCYLq7uwdVVPO8IwJvjzgSYlA91X54YtHzgzTtGuP7fPceQZedKDAAAGJu5zpSklXw/fS7StFKJeLLzWIBisrZRr93Ljw9+N198ol1f6HwyGTpmGAAAAAAAAAAAAAAAAAAAAAAAAADoyrIkMgAAAGCqRaR/STp384+4Pf/83PGzA6WI4pHqT9/48cPlVmt3IWI2+cd8e9ZsRLR+ks9/MfNIAAAAAHgMdI/T89eFSWcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLR579FbK73p+JLkUuP+7YsRUe4XfyZKnddSFCPi+j+TmDmRVWEM8Q/fjoib/eIn8X6WZeU8i37xr11y/HJn1ZSy3l/gaPw0Im6MIT5cZe/MRsT9ft+/NJ7rvPb//s+c+D6eV2/7N5vXj8bvbf8KA7Y/Tx6tp4NjPP3uL6oD478d8fRMN+79OL796cVPuvGP/RC0K7dG7OM3v3Fw0HfBkSb7bf+Oxqq2tnaqzf2Duxtby+u19dr24uLCy0uvLL3U63d1baNeu9c3zA8+8cv3z+r/9QHxy8f7f2r9Pz9S77P4z7sPH32kWyn2i3/nVv/f35sD4qf5b9+n8nJ7+e1e+bBbPuqZn//2mbP6vzqg/6Uh/b8zUv/jcy987bt/7Lvk1NoAAD4Izf2DzeV6vbZ7RqE0wntGLhTG0s5rY8tnHIVfj6GdmHgvJlrIvtP9f7xYOxf8+KlCVvve+T8+E2NIY/bU97QQ520wiThstzXiPyQAADBl/rfTf7nX+QEAAAAAAAAAAAAAAAAAAIDBznlbslJEdOcUh99O7GTMw8l0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgTP8NAAD//xhfxqA=") mount$bind(&(0x7f0000000a40)='.\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000b00)='./file0/../file0\x00', &(0x7f0000000b40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000b80)='./file0/../file0\x00', &(0x7f0000000bc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000c40)='.\x00', 0xffffffffffffff9c, &(0x7f0000000c80)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000d00)={0x2020}, 0x2020) 13m24.318000683s ago: executing program 2 (id=348): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f0000000840), 0xfe, 0x250, &(0x7f0000000880)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000e00)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000e40)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d80)={0x1, &(0x7f0000000dc0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13m23.925526322s ago: executing program 2 (id=349): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8000, 0x4) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001bc0)={0x1, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/mcfilter6\x00') preadv(r2, &(0x7f0000002100)=[{&(0x7f0000002140)=""/128, 0x80}], 0x1, 0x113, 0x2) 13m23.434538444s ago: executing program 37 (id=349): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8000, 0x4) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001bc0)={0x1, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/mcfilter6\x00') preadv(r2, &(0x7f0000002100)=[{&(0x7f0000002140)=""/128, 0x80}], 0x1, 0x113, 0x2) 13m6.581004141s ago: executing program 6 (id=369): r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/failslab/space\x00', 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)='9', 0x1}, {&(0x7f00000000c0)="4822542e1313", 0x6}], 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$uac1(0x5, 0x8d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0xfa, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x2c, 0x1, "2d93ee"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfffc, 0x6, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x9, 0x9, {0x7, 0x25, 0x1, 0xc, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0xd, 0x8, {0x7, 0x25, 0x1, 0x8, 0x7, 0xd4}}}}}}}}]}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bind$netlink(r1, &(0x7f0000000bc0)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000ec0)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240000d4, &(0x7f0000001e40)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000001e80)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 13m5.060481278s ago: executing program 6 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f000001a240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f00000332c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) recvmsg$unix(r5, &(0x7f0000033300)={0x0, 0x0, 0x0}, 0x40) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) r6 = syz_open_procfs(0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80042, 0x0) pread64(r6, 0x0, 0x0, 0xffffffff8) 13m3.650195723s ago: executing program 6 (id=371): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) ioprio_get$uid(0x3, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 13m0.974345389s ago: executing program 6 (id=372): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f00000001c0)={[], [{@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '\\*&}{@'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@uid_eq}]}, 0x1, 0x539, &(0x7f0000002d40)="$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") mount$bind(&(0x7f0000000a40)='.\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000b00)='./file0/../file0\x00', &(0x7f0000000b40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000b80)='./file0/../file0\x00', &(0x7f0000000bc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000c00)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000c80)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000d00)={0x2020}, 0x2020) 12m58.549791399s ago: executing program 6 (id=375): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f0000000840), 0xfe, 0x250, &(0x7f0000000880)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000c80)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000e40)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d80)={0x1, &(0x7f0000000dc0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 12m58.042163231s ago: executing program 6 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_getscheduler(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x5f8b, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x40000101, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) 12m57.590112873s ago: executing program 38 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_getscheduler(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x5f8b, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x40000101, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) 12m18.404759925s ago: executing program 9 (id=442): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xfffe, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102392, 0x18ff8) lstat(0x0, &(0x7f00000194c0)) sched_setaffinity(r4, 0x8, &(0x7f0000019540)=0x40003) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000019580)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f00000195c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000019600), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000019640)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 12m16.802333434s ago: executing program 9 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000900)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) ioprio_get$uid(0x3, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000019900), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000800)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x3, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdffff7ffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000008c0)=0x3) 12m15.537256795s ago: executing program 8 (id=447): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f0000000840), 0xfe, 0x250, &(0x7f0000000880)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000c80)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000e00)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000e40)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d80)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 12m15.122215035s ago: executing program 8 (id=449): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./config\x00', &(0x7f0000002cc0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002e00), 0x0) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000002e40)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r3, &(0x7f0000002e80)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000002ec0)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r4, &(0x7f0000002f00)='8', 0x1) close(r4) close(0xffffffffffffffff) symlinkat(&(0x7f0000002f40)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002f80)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 12m14.715583295s ago: executing program 8 (id=451): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xfffe, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102392, 0x18ff8) lstat(0x0, &(0x7f00000194c0)) sched_setaffinity(r4, 0x8, &(0x7f0000019540)=0x40003) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000019580)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f00000195c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000019600), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000019640)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 12m11.684314779s ago: executing program 8 (id=454): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f00000001c0)={[], [{@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '\\*&}{@'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@uid_eq}]}, 0x1, 0x539, &(0x7f0000002d40)="$eJzs3V9rY2kZAPDnnDTdzEzXZlVkXHB3cVZmFp1kunV3q8juCKJXC+p6P5Y2LaVpU5p0nZZFu3jhpSCigh/AG8EPIMjiJxBhQe9FRRGd1UvdI0lOsH+SJrTpZkx/Pzjkfc9J3ud5T5uT8+flnACurOci4n5EFCLihYiYz+en+RSH3an9vvcevbXSnpLIsjf+nkSSz+u11a7PRMSN/GOliPj6VyJupafjNvcPNpfr9dpuXq+2tnaqzf2Duxtby+u19dr24uLCy0uvLL20dC/LXaif5Yh49Ut//tH3f/blV3/1mW/94cFf73y7ne8XPtbNOyJWLhRggG7bxc666Gmvo93LCDYh7f4UC5POAgCAUbR3zT8cEZ/s7P/PR6GzNwcAAABMk+y1ufh3EpEBAAAAUyuNiLlI0ko+FmAu0rRS6Y7h/WhcT+uNZuvTa4297dX2sohyFNO1jXrtXj5WuBzFpF1fyMfY9uovnqgvRsRTEfHD+WudemWlUV+d9MkPAAAAuCJuPHv8+P9f82mnDAAAAEyZ8sAKAAAAMC0c8gMAAMD0c/wPAAAAU+2rr7/enrLec7xX39zf22y8eXe11tysbO2tVFYauzuV9UZjvXPPvq1h7dUbjZ3Pxvbew2qr1mxVm/sHD7Yae9utBxvHHoENAAAAfICeevad3ycRcfj5a50p8vsADjN76ZkBj5U/TToBYJwKk04AmJiZSScATExx6DtsIWDaJUOWnx680z1XGL+5nHwAAIDxu/3x09f/e9f2h58bAP6fjTLWBwCYLq7uwdVVPO8IwJvjzgSYlA91X54YtHzgzTtGuP7fPceQZedKDAAAGJu5zpSklXw/fS7StFKJeLLzWIBisrZRr93Ljw9+N198ol1f6HwyGTpmGAAAAAAAAAAAAAAAAAAAAAAAAADoyrIkMgAAAGCqRaR/STp384+4Pf/83PGzA6WI4pHqT9/48cPlVmt3IWI2+cd8e9ZsRLR+ks9/MfNIAAAAAHgMdI/T89eFSWcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLR579FbK73p+JLkUuP+7YsRUe4XfyZKnddSFCPi+j+TmDmRVWEM8Q/fjoib/eIn8X6WZeU8i37xr11y/HJn1ZSy3l/gaPw0Im6MIT5cZe/MRsT9ft+/NJ7rvPb//s+c+D6eV2/7N5vXj8bvbf8KA7Y/Tx6tp4NjPP3uL6oD478d8fRMN+79OL796cVPuvGP/RC0K7dG7OM3v3Fw0HfBkSb7bf+Oxqq2tnaqzf2Duxtby+u19dr24uLCy0uvLL3U63d1baNeu9c3zA8+8cv3z+r/9QHxy8f7f2r9Pz9S77P4z7sPH32kWyn2i3/nVv/f35sD4qf5b9+n8nJ7+e1e+bBbPuqZn//2mbP6vzqg/6Uh/b8zUv/jcy987bt/7Lvk1NoAAD4Izf2DzeV6vbZ7RqE0wntGLhTG0s5rY8tnHIVfj6GdmHgvJlrIvtP9f7xYOxf8+KlCVvve+T8+E2NIY/bU97QQ520wiThstzXiPyQAADBl/rfTf7nX+QEAAAAAAAAAAAAAAAAAAIDBznlbslJEdOcUh99O7GTMw8l0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgTP8NAAD//xhfxqA=") mount$bind(&(0x7f0000000a40)='.\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000b00)='./file0/../file0\x00', &(0x7f0000000b40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000b80)='./file0/../file0\x00', &(0x7f0000000bc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000c00)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000c40)='.\x00', 0xffffffffffffff9c, &(0x7f0000000c80)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='mountinfo\x00') read$FUSE(r1, 0x0, 0x0) 12m10.581468057s ago: executing program 9 (id=456): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) 12m10.259751965s ago: executing program 8 (id=457): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f0000000840), 0xfe, 0x250, &(0x7f0000000880)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000c80)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000e00)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000e40)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d80)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 12m7.670233868s ago: executing program 8 (id=462): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000048008000", @ANYRES32=0x0, @ANYBLOB="f9ffffff08000200020000001400010000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) socket(0x10, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_netfilter(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c8000000110201012abd7000ffdbdf2501000005255ebf9f97750551a76a5a661a0ff1d25f804f96951bc9279adf91b3bd4571b7e2a4222c81c10a186534a143fcc173b7cf8c1000348004005680040075800400f1800800c500", @ANYRES32=0x0, @ANYBLOB="08005e0000000000f220e36f6db39dbdb88b504f51fb025c0e34039aeb865e81a2493d137ab277034978dee965f3bd0131cdd8f02c0ae57a6a3637cdc1fd2fb5fe09cfa419a40dc145d026c3d7d457dbd69ef9140076800c00ab0000000000000000000400af80000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x10) write$binfmt_elf64(r4, &(0x7f00000007c0)=ANY=[], 0x540) shutdown(r3, 0x1) 12m7.260648878s ago: executing program 39 (id=462): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000048008000", @ANYRES32=0x0, @ANYBLOB="f9ffffff08000200020000001400010000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) socket(0x10, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_netfilter(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c8000000110201012abd7000ffdbdf2501000005255ebf9f97750551a76a5a661a0ff1d25f804f96951bc9279adf91b3bd4571b7e2a4222c81c10a186534a143fcc173b7cf8c1000348004005680040075800400f1800800c500", @ANYRES32=0x0, @ANYBLOB="08005e0000000000f220e36f6db39dbdb88b504f51fb025c0e34039aeb865e81a2493d137ab277034978dee965f3bd0131cdd8f02c0ae57a6a3637cdc1fd2fb5fe09cfa419a40dc145d026c3d7d457dbd69ef9140076800c00ab0000000000000000000400af80000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x10) write$binfmt_elf64(r4, &(0x7f00000007c0)=ANY=[], 0x540) shutdown(r3, 0x1) 12m7.248639548s ago: executing program 9 (id=465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f00000001c0)={[], [{@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '\\*&}{@'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@uid_eq}]}, 0x1, 0x539, &(0x7f0000002d40)="$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") mount$bind(&(0x7f0000000a40)='.\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000b00)='./file0/../file0\x00', &(0x7f0000000b40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000b80)='./file0/../file0\x00', &(0x7f0000000bc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000c00)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000c40)='.\x00', 0xffffffffffffff9c, &(0x7f0000000c80)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='mountinfo\x00') read$FUSE(r1, 0x0, 0x0) 12m5.914293711s ago: executing program 9 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) epoll_create(0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002b80)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002bc0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002c00)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000002c40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002c80), 0x0, 0x0) read$msr(r3, &(0x7f0000002cc0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001bcc0)=0x7) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x1ee) execve(0x0, 0x0, &(0x7f000001bd80)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) setgroups(0x400000000000026f, &(0x7f0000002740)=[0x0, 0xee00]) 12m4.949471335s ago: executing program 9 (id=470): ioperm(0x100, 0x2, 0x20) keyctl$chown(0x4, 0x0, 0x0, 0xee01) 12m4.410611328s ago: executing program 40 (id=470): ioperm(0x100, 0x2, 0x20) keyctl$chown(0x4, 0x0, 0x0, 0xee01) 7m0.711593378s ago: executing program 4 (id=885): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x200}, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{}, {}, {}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x2eaa4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000340)='vxfs\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x68800, 0x1c) lseek(r4, 0x102, 0x1) getdents64(r4, 0x0, 0x4f) 6m59.39683159s ago: executing program 4 (id=887): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1000040, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r0], 0x1, 0x3a2, &(0x7f0000000400)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000007c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53f11ef}, 0x4000010) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000900)=0x7, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000dc, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r4, 0x2000009) sendfile(r1, r4, 0x0, 0x7ffff004) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1c1000, 0x0) syz_emit_ethernet(0xe, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @multicast, @void, {@generic={0x22f0}}}, 0x0) 6m57.615021704s ago: executing program 4 (id=892): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) ioprio_get$uid(0x3, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000019900), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000800)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x3, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdffff7ffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000008c0)=0x3) 6m56.378161985s ago: executing program 4 (id=893): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./mnt\x00', 0x0, &(0x7f0000002000)=ANY=[], 0x1, 0xc5f, &(0x7f0000003200)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r1) mkdirat(0xffffffffffffff9c, &(0x7f00000031c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000003e80)='./config\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000003f40)='1', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000030c0)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000003f80)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000003fc0)='./trace\x00', &(0x7f0000004000)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004040)='./trace/error_log\x00', 0x20000, 0x4) pread64(r3, &(0x7f0000004080)=""/144, 0x90, 0x7d) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 6m49.862386724s ago: executing program 4 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f000000d000)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 6m48.82627049s ago: executing program 4 (id=902): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000002d40)=""/102392, 0x18ff8) ptrace$ARCH_GET_FS(0x1e, r2, 0x0, 0x1003) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) unshare(0x20000400) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f000001be00)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x84}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 6m47.007251024s ago: executing program 41 (id=902): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000002d40)=""/102392, 0x18ff8) ptrace$ARCH_GET_FS(0x1e, r2, 0x0, 0x1003) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) unshare(0x20000400) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f000001be00)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x84}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 1m53.394175291s ago: executing program 1 (id=1338): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1000040, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r0], 0x1, 0x3a2, &(0x7f0000000400)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000007c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000840)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53f11ef}, 0x4000010) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000900)=0x7, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000dc, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r4, 0x2000009) sendfile(r1, r4, 0x0, 0x7ffff004) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1c1000, 0x0) syz_emit_ethernet(0xe, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @multicast, @void, {@generic={0x22f0}}}, 0x0) 1m51.479283277s ago: executing program 1 (id=1340): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='net/anycast6\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/40, 0x28}], 0x1, 0x3c, 0x9) 1m50.750135395s ago: executing program 1 (id=1342): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x545c, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000540)={0x0, 0x3, 0x2}, 0x30, 0x0) dup2(r1, r0) landlock_restrict_self(r3, 0x1c) ftruncate(0xffffffffffffffff, 0x2007ffb) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a3100000000300004802c0001800900001c0002800800044000000000080002400000001508000740000000010900020073797a320000000014000000110001000000"], 0x84}, 0x1, 0x0, 0x0, 0x8011}, 0x24000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) 1m49.7201843s ago: executing program 1 (id=1347): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10005, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6(0xa, 0x1, 0x0) listen(r1, 0x8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1) 1m47.162345443s ago: executing program 1 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0) memfd_create(&(0x7f0000000000)='($\x00', 0x4) chdir(&(0x7f0000000440)='./mnt\x00') openat(0xffffffffffffffff, &(0x7f0000000180)='./mnt\x00', 0x80000, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, 0x0, 0x0, 0xfb2200) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1\n', 0x2) 1m45.052883645s ago: executing program 1 (id=1353): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x5, &(0x7f0000000940)=ANY=[], &(0x7f0000001e00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x6c7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640)=r2, 0x12) openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) 1m29.633451843s ago: executing program 42 (id=1353): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x5, &(0x7f0000000940)=ANY=[], &(0x7f0000001e00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x6c7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640)=r2, 0x12) openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) 27.778494259s ago: executing program 5 (id=1382): r0 = memfd_create(&(0x7f0000019ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3808}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40084) 10.310125527s ago: executing program 0 (id=1516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x120a) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "51910d7f4d9f10167183b21db562be8c"}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4044811}, 0xc080) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004841}, 0x20044000) socket$nl_route(0x10, 0x3, 0x0) 10.230169909s ago: executing program 7 (id=1517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_getscheduler(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x5f8b, &(0x7f00000000c0)={0x0, 0x4178, 0x10, 0x8009002, 0x34b}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x8000) close_range(r5, 0xffffffffffffffff, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x401d032, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) 9.016033339s ago: executing program 0 (id=1518): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x2, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 7.712227061s ago: executing program 7 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x80}, 0x10) sendmsg$nl_route(r4, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 7.569368064s ago: executing program 3 (id=1521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r0) 7.418409958s ago: executing program 3 (id=1522): bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000001080)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095"], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000ec0)='./dev\x00', &(0x7f0000000f00)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd05, &(0x7f0000000f80)="0400000002000000000000007e0100003801") 7.199595483s ago: executing program 3 (id=1523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000004c0)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000600)=0xc0) 7.134805085s ago: executing program 5 (id=1382): r0 = memfd_create(&(0x7f0000019ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) sched_getscheduler(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x5f8b, &(0x7f00000000c0)={0x0, 0x4178, 0x10, 0x8009002, 0x34b}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x8000) close_range(r5, 0xffffffffffffffff, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x401d032, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) 2.639511665s ago: executing program 0 (id=1529): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x11, 0x20000, 0x5}]}) 1.323650977s ago: executing program 3 (id=1530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r0) 456.699469ms ago: executing program 7 (id=1531): bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000001080)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095"], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000f80)="0400000002000000000000007e0100003801") 315.616752ms ago: executing program 7 (id=1532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000b40)={0x6, [[0x1, 0x1797, 0x15e, 0x9fc, 0x0, 0x1], [0x1ffffffe, 0x3, 0x2, 0x10, 0x0, 0xfffbffff, 0xfffffffd], [0x3, 0x3, 0x40000000, 0x4, 0x0, 0x3bc9, 0x2, 0x1]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x1fb, 0x0, 0x0, 0x1}, {0x4000000, 0x4000b}, {0x5, 0x6}, {0x2000000, 0x6}, {}, {}, {}, {0x8, 0x7}, {0x0, 0x400}, {0xfffffffc}], '\x00', 0x1}) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r2, @ANYBLOB="7ba9"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) mount(0x0, &(0x7f0000000580)='./sys_mnt\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x1a0) capset(&(0x7f0000000dc0)={0x20071026}, &(0x7f0000000e00)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x15, 0xf, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000001000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) write(r3, &(0x7f0000000640)='T', 0x1) r5 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r6 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000a80), 0x2, 0x0) syz_usb_connect$midi(0x4, 0xc6, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x1, 0x1, 0x5, 0x10, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x0, [@midi_out_jack={0x15, 0x24, 0x3, 0x2, 0xe0, 0x7, [{0x40, 0xc}, {0x47, 0xc2}, {0x5, 0x5b}, {}, {0xff, 0xe9}, {0x9, 0xd}, {0x5, 0xe0}], 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x2e, 0x3, [{0x3, 0x9}, {0x3, 0x8e}, {0x4, 0x2}], 0x3}], [{{0x9, 0x5, 0x6, 0x4, 0x10, 0xa, 0x81, 0xd5, {0xf, 0x25, 0x1, 0xb, "1d756cf41ea9640520c581"}}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x5, 0x9, {0xe, 0x25, 0x1, 0xa, "d77834688f365de2a7c1"}}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x5, 0x59, {0x6, 0x25, 0x1, 0x2, "28d4"}}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x1, 0x87, 0xb0, {0x14, 0x25, 0x1, 0x10, "989c9b566ebfa85b6b52e0ea6fbad904"}}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x1, 0xd, 0x1, {0x8, 0x25, 0x1, 0x4, "5d97c064"}}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x2, 0x83, 0x4, {0xb, 0x25, 0x1, 0x7, "d28de986fc6ade"}}}]}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x0, 0x5, 0xb, 0x8, 0x3}, 0x98, &(0x7f0000000840)={0x5, 0xf, 0x98, 0x4, [@generic={0x58, 0x10, 0x3, "710e754d29f710b8902834364299067af7d3e85c62705c108fdedc4881b6e542803286a2c4c08bf30362d1f79d2bad1391f507bf91d231ad9ea890203c51d3ab12fb8308f89e05feeb665cb3c2a25ff01eec21ed36"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x6, 0xf, 0xc7f4, [0xff0000]}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x4, 0xf00, 0x400, [0xffc0c0, 0xc00f, 0x3f, 0x8, 0x3f00, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xa, 0x9, 0x5}]}, 0x1, [{0xdc, &(0x7f0000000900)=@string={0xdc, 0x3, "f9884783a33a58329f545f287b06361770564f22121c4c4845b1505b0717c01c6683adc57eb6df32d43c85ba7a0896c804026ea86b84089432d88612e242a70b76b5c100192c06f20200812e1443d3852488087da6d1fe5db71f447a196756b6d8872ed509978f911aadfc498ef16cc0d45c120aca523ce568876ab2b2c4affb090cc4fd2b06a7f422fcbd65c861fcb6e2043f82dde022cdfb0aa66c20484a54225207699c7a42df0f573f76fdb534c820813ae111be5279089b2eb42a8eb7600a2d17ae674d968cecdf87072c2113fbd982fdf941b2f6471aa3"}}]}) write$P9_RVERSION(r5, &(0x7f0000002200)=ANY=[], 0xfffffcd9) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000ac0)={r6, 0x0, 0x2, 0x4, 0x6}, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4104aec6, &(0x7f00000003c0)={0x1, [{0x3, 0x18, 0x7f, &(0x7f0000000500)="e8bfff"}, {0x2, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0xc9a, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8000, 0x0}, {0x1, 0x0, 0xa09, 0x0}, {0x1, 0x0, 0xc0, 0x0}]}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000a40)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x8000, 0x16d) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000680), &(0x7f00000006c0)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1382): r0 = memfd_create(&(0x7f0000019ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 3 [ 661.793515][ T5786] Bluetooth: hci0: unexpected event for opcode 0x204b [ 663.210355][T10917] loop3: detected capacity change from 0 to 512 [ 665.003977][T10936] binder: 10934:10936 ioctl 4018620d 0 returned -22 [ 665.040074][T10939] loop4: detected capacity change from 0 to 512 [ 665.071404][T10939] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 665.094685][ T5878] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 665.116386][T10939] EXT4-fs (loop4): 1 truncate cleaned up [ 665.166089][T10939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.304678][ T5878] usb 8-1: Using ep0 maxpacket: 32 [ 665.321078][ T5878] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 665.354769][ T5878] usb 8-1: config 0 has no interface number 0 [ 665.360952][ T5878] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.405127][ T5878] usb 8-1: config 0 interface 85 has no altsetting 0 [ 665.422325][ T5878] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 666.238871][ T5786] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 666.251973][ T5786] Bluetooth: hci0: Injecting HCI hardware error event [ 666.262402][ T5787] Bluetooth: hci0: hardware error 0x00 [ 666.284011][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.292312][ T5878] usb 8-1: Product: syz [ 666.296851][ T5878] usb 8-1: Manufacturer: syz [ 666.301476][ T5878] usb 8-1: SerialNumber: syz [ 666.310389][ T5878] usb 8-1: config 0 descriptor?? [ 666.784200][ T28] audit: type=1800 audit(1792060724.762:41): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.879" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 667.209322][ T5878] appletouch 8-1:0.85: Geyser mode initialized. [ 667.251115][ T8319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.251474][ T5878] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input17 [ 667.336870][ C1] appletouch 8-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 667.390163][ T5878] usb 8-1: USB disconnect, device number 6 [ 667.469919][ T5878] appletouch 8-1:0.85: input: appletouch disconnected [ 668.504236][ T5787] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 669.290664][T10980] loop4: detected capacity change from 0 to 512 [ 671.856959][T10999] loop1: detected capacity change from 0 to 512 [ 672.110249][T10999] EXT4-fs (loop1): 1 truncate cleaned up [ 672.122201][T10999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.230855][ T28] audit: type=1800 audit(1792060730.172:42): pid=10999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.884" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 672.262314][T11002] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.884: bg 0: block 465: padding at end of block bitmap is not set [ 672.281863][T11002] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 117 [ 672.294203][T11002] EXT4-fs (loop1): This should not happen!! Data will be lost [ 672.294203][T11002] [ 672.555617][ T42] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 3140 with max blocks 12 with error 28 [ 672.605095][ T42] EXT4-fs (loop1): This should not happen!! Data will be lost [ 672.605095][ T42] [ 672.654641][ T42] EXT4-fs (loop1): Total free blocks count 0 [ 672.660684][ T42] EXT4-fs (loop1): Free/Dirty block details [ 672.694644][ T42] EXT4-fs (loop1): free_blocks=0 [ 672.699651][ T42] EXT4-fs (loop1): dirty_blocks=14 [ 672.729076][ T42] EXT4-fs (loop1): Block reservation details [ 677.656750][T11035] loop4: detected capacity change from 0 to 2048 [ 677.773400][T11035] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 678.067590][ T8319] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 678.097942][ T8319] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 680.622734][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.876568][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.267820][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.558793][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.597833][T11084] loop7: detected capacity change from 0 to 1024 [ 683.026147][ T5787] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 683.495768][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 683.520636][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.532186][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.540909][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.550139][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 683.558199][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.813971][T11099] rxe_eth0 speed is unknown, defaulting to 1000 [ 685.676312][ T5786] Bluetooth: hci0: command tx timeout [ 685.994002][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.000939][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.073017][ T5786] Bluetooth: hci0: command tx timeout [ 688.098210][T11099] chnl_net:caif_netlink_parms(): no params data found [ 688.969466][T11145] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.910' resets device [ 689.604179][T11099] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.604291][T11099] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.604432][T11099] bridge_slave_0: entered allmulticast mode [ 689.667343][T11099] bridge_slave_0: entered promiscuous mode [ 689.670256][T11099] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.670362][T11099] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.670498][T11099] bridge_slave_1: entered allmulticast mode [ 689.672016][T11099] bridge_slave_1: entered promiscuous mode [ 689.806264][T11099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.809250][T11099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.907995][ T78] hsr_slave_0: left promiscuous mode [ 689.911817][ T78] hsr_slave_1: left promiscuous mode [ 689.912616][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.912649][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.913680][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.913703][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.914349][ T78] bridge_slave_1: left allmulticast mode [ 689.914368][ T78] bridge_slave_1: left promiscuous mode [ 689.914538][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.918250][ T78] bridge_slave_0: left allmulticast mode [ 689.918272][ T78] bridge_slave_0: left promiscuous mode [ 689.918451][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.970579][ T78] veth1_macvtap: left promiscuous mode [ 689.970696][ T78] veth0_macvtap: left promiscuous mode [ 689.970871][ T78] veth1_vlan: left promiscuous mode [ 689.971002][ T78] veth0_vlan: left promiscuous mode [ 690.154634][ T5786] Bluetooth: hci0: command tx timeout [ 692.224902][ T5786] Bluetooth: hci0: command tx timeout [ 694.357661][T11182] loop3: detected capacity change from 0 to 1024 [ 694.760945][ T5787] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 695.139849][ T78] team0 (unregistering): Port device team_slave_1 removed [ 695.179793][ T28] audit: type=1800 audit(1792060753.172:43): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.920" name=08 dev="sda1" ino=2062 res=0 errno=0 [ 695.305844][ T78] team0 (unregistering): Port device team_slave_0 removed [ 695.344779][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 695.490478][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.634031][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.138503][ T78] bond0 (unregistering): Released all slaves [ 699.253899][T11208] loop3: detected capacity change from 0 to 512 [ 699.399443][T11208] EXT4-fs (loop3): 1 truncate cleaned up [ 699.411578][T11208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.584250][ T28] audit: type=1800 audit(1792060757.512:44): pid=11208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.926" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 699.604940][T11212] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.926: bg 0: block 465: padding at end of block bitmap is not set [ 699.624899][T11212] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 117 [ 699.637337][T11212] EXT4-fs (loop3): This should not happen!! Data will be lost [ 699.637337][T11212] [ 699.913109][ T60] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2728 with max blocks 12 with error 28 [ 701.133214][ T60] EXT4-fs (loop3): This should not happen!! Data will be lost [ 701.133214][ T60] [ 701.215698][ T60] EXT4-fs (loop3): Total free blocks count 0 [ 701.222609][ T60] EXT4-fs (loop3): Free/Dirty block details [ 701.231248][ T60] EXT4-fs (loop3): free_blocks=0 [ 701.238080][ T60] EXT4-fs (loop3): dirty_blocks=14 [ 701.243226][ T60] EXT4-fs (loop3): Block reservation details [ 701.407308][T11099] team0: Port device team_slave_0 added [ 701.443480][T11099] team0: Port device team_slave_1 added [ 702.802388][T11099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.830448][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.914779][T11099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.947355][T11099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.954346][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.231738][T11099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.619224][T11099] hsr_slave_0: entered promiscuous mode [ 704.670493][T11099] hsr_slave_1: entered promiscuous mode [ 704.699905][T11099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.720781][T11099] Cannot create hsr debugfs directory [ 707.989392][T11279] loop3: detected capacity change from 0 to 512 [ 708.126216][T11279] EXT4-fs (loop3): 1 truncate cleaned up [ 708.138425][T11279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.249452][T11282] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.934: bg 0: block 465: padding at end of block bitmap is not set [ 708.273452][ T28] audit: type=1800 audit(1792060766.172:45): pid=11279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.934" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 708.294293][T11282] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 117 [ 708.307209][T11282] EXT4-fs (loop3): This should not happen!! Data will be lost [ 708.307209][T11282] [ 708.557611][ T2926] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2256 with max blocks 48 with error 28 [ 708.594654][ T2926] EXT4-fs (loop3): This should not happen!! Data will be lost [ 708.594654][ T2926] [ 708.604527][ T2926] EXT4-fs (loop3): Total free blocks count 0 [ 708.612302][ T2926] EXT4-fs (loop3): Free/Dirty block details [ 708.642759][ T2926] EXT4-fs (loop3): free_blocks=0 [ 708.651563][ T2926] EXT4-fs (loop3): dirty_blocks=50 [ 708.685465][T11286] loop7: detected capacity change from 0 to 1024 [ 708.692647][ T2926] EXT4-fs (loop3): Block reservation details [ 710.065454][ T5786] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 710.111931][T11099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 710.132706][T11099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 710.176491][T11099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 710.217288][T11099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.523182][T11099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.599710][T11099] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.653635][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.660870][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.748421][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.755765][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.412983][T11301] loop1: detected capacity change from 0 to 40427 [ 711.441789][T11099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.501831][T11301] F2FS-fs (loop1): invalid crc value [ 711.546755][T11301] F2FS-fs (loop1): Found nat_bits in checkpoint [ 712.973923][T11099] veth0_vlan: entered promiscuous mode [ 713.023539][T11301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 713.052074][T11099] veth1_vlan: entered promiscuous mode [ 713.160592][T11099] veth0_macvtap: entered promiscuous mode [ 713.198929][T11099] veth1_macvtap: entered promiscuous mode [ 713.439883][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.465072][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.591471][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.672414][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.764505][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.984749][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.996224][T11099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.040374][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.074335][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.095015][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.114617][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.134639][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.154634][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.188927][T11099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.217149][T11099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.235319][T11099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.254636][T11099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.273862][T11099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.460633][T11340] loop1: detected capacity change from 0 to 512 [ 714.586734][ T9933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.641527][ T9933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.830125][T11340] EXT4-fs (loop1): 1 truncate cleaned up [ 714.843735][T11340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.171026][T11340] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.939: bg 0: block 465: padding at end of block bitmap is not set [ 716.225931][ T9933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.269654][ T9933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.312776][T11340] EXT4-fs (loop1): Remounting filesystem read-only [ 716.397136][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.812413][T11363] loop7: detected capacity change from 0 to 1024 [ 717.965853][T11370] loop0: detected capacity change from 0 to 512 [ 718.225017][ T5787] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 718.869034][T11370] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 718.879536][T11370] FAT-fs (loop0): Filesystem has been set read-only [ 726.221720][T11434] loop1: detected capacity change from 0 to 512 [ 726.289329][T11434] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.957: corrupted in-inode xattr: invalid ea_ino [ 726.291035][T11435] loop3: detected capacity change from 0 to 1024 [ 726.388529][T11434] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.957: couldn't read orphan inode 15 (err -117) [ 726.495766][T11434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.881256][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.463988][T11501] loop7: detected capacity change from 0 to 512 [ 733.519179][T11501] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 734.445075][T11501] EXT4-fs (loop7): 1 truncate cleaned up [ 734.453023][T11501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.524192][T11512] loop0: detected capacity change from 0 to 1024 [ 734.949449][ T28] audit: type=1800 audit(1792060792.932:46): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.962" name="file3" dev="loop7" ino=16 res=0 errno=0 [ 735.099810][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 735.111354][ T5787] CPU: 1 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 735.118943][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 735.129027][ T5787] Workqueue: hci0 hci_rx_work [ 735.133749][ T5787] Call Trace: [ 735.137056][ T5787] [ 735.140010][ T5787] dump_stack_lvl+0x18c/0x250 [ 735.144715][ T5787] ? show_regs_print_info+0x20/0x20 [ 735.149933][ T5787] ? load_image+0x420/0x420 [ 735.154461][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 735.159609][ T5787] ? __lock_acquire+0x7eb0/0x7eb0 [ 735.164643][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 735.169323][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 735.174539][ T5787] kobject_add_internal+0x617/0xc90 [ 735.179757][ T5787] kobject_add+0x164/0x240 [ 735.184182][ T5787] ? kobject_init+0x1d0/0x1d0 [ 735.188863][ T5787] ? get_device_parent+0x366/0x390 [ 735.193980][ T5787] device_add+0x3fa/0xc40 [ 735.198321][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 735.203261][ T5787] le_conn_complete_evt+0xe9a/0x1480 [ 735.208565][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 735.214821][ T5787] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 735.220456][ T5787] ? mutex_unlock+0x10/0x10 [ 735.224957][ T5787] ? skb_pull_data+0xf0/0x1f0 [ 735.229640][ T5787] hci_le_enh_conn_complete_evt+0x189/0x460 [ 735.235543][ T5787] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 735.242057][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 735.248150][ T5787] hci_event_packet+0x7b4/0x1280 [ 735.253097][ T5787] ? __lock_acquire+0x7eb0/0x7eb0 [ 735.258125][ T5787] ? lock_chain_count+0x20/0x20 [ 735.262973][ T5787] ? bis_list+0x290/0x290 [ 735.267308][ T5787] ? kcov_remote_start+0x513/0x810 [ 735.272430][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 735.277631][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 735.282852][ T5787] hci_rx_work+0x43a/0xd60 [ 735.287282][ T5787] ? process_scheduled_works+0x975/0x1600 [ 735.293007][ T5787] process_scheduled_works+0xa60/0x1600 [ 735.298577][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 735.304042][ T5787] ? assign_work+0x3cc/0x5d0 [ 735.308642][ T5787] worker_thread+0xa5e/0xfe0 [ 735.313259][ T5787] kthread+0x2fa/0x390 [ 735.317323][ T5787] ? pr_cont_work+0x550/0x550 [ 735.322011][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 735.326621][ T5787] ret_from_fork+0x48/0x80 [ 735.331039][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 735.335634][ T5787] ret_from_fork_asm+0x11/0x20 [ 735.340417][ T5787] [ 735.344954][ T5787] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 735.359055][ T5787] Bluetooth: hci0: failed to register connection device [ 737.289943][T11520] loop1: detected capacity change from 0 to 40427 [ 737.318485][T11520] F2FS-fs (loop1): invalid crc value [ 737.346260][T11520] F2FS-fs (loop1): Found nat_bits in checkpoint [ 737.515542][T11520] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 737.948279][ T7582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.390988][T11554] loop0: detected capacity change from 0 to 512 [ 739.460593][T11554] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 739.546263][T11554] EXT4-fs (loop0): 1 truncate cleaned up [ 739.553747][T11554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.888090][ T28] audit: type=1800 audit(1792060797.882:47): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.972" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 739.957363][T11561] loop1: detected capacity change from 0 to 2048 [ 740.051396][T11099] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.072022][T11561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.315180][T11559] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 745.073655][T11608] loop0: detected capacity change from 0 to 512 [ 746.089897][T11608] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 746.216060][T11608] EXT4-fs (loop0): 1 truncate cleaned up [ 746.223014][T11608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.335551][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.670878][ T28] audit: type=1800 audit(1792060804.662:48): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.980" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 746.789934][ T5786] Bluetooth: hci0: link tx timeout [ 746.795696][ T5786] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 747.456577][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.463194][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.880864][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 749.064469][T11617] loop3: detected capacity change from 0 to 40427 [ 751.593862][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.7.981'. [ 754.400630][T11099] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.521467][T11716] syz.3.999 (11716): drop_caches: 2 [ 761.553277][T11721] loop3: detected capacity change from 0 to 16 [ 761.576064][T11721] erofs: Unknown parameter './file0' [ 762.300329][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 763.084512][T11716] syz.3.999 (11716): drop_caches: 2 [ 764.203533][T11741] loop7: detected capacity change from 0 to 1024 [ 764.329990][T11722] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 765.164838][ T5786] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 768.984980][T11792] loop7: detected capacity change from 0 to 256 [ 769.300804][T11792] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 769.338351][T11792] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 770.809761][T11808] loop3: detected capacity change from 0 to 16 [ 770.928844][T11808] erofs: Unknown parameter './file0' [ 770.966964][T11806] syz.3.1010 (11806): drop_caches: 2 [ 771.024734][T11794] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 771.052129][T11806] syz.3.1010 (11806): drop_caches: 2 [ 775.337594][T11850] loop7: detected capacity change from 0 to 1024 [ 776.868043][T11864] loop0: detected capacity change from 0 to 512 [ 777.062665][T11864] EXT4-fs (loop0): 1 truncate cleaned up [ 777.073165][T11864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.118268][ T28] audit: type=1800 audit(1792060835.102:49): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1020" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 777.166117][T11868] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1020: bg 0: block 465: padding at end of block bitmap is not set [ 777.185199][T11868] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 777.197484][T11868] EXT4-fs (loop0): This should not happen!! Data will be lost [ 777.197484][T11868] [ 777.207175][T11868] EXT4-fs (loop0): Total free blocks count 0 [ 777.213177][T11868] EXT4-fs (loop0): Free/Dirty block details [ 777.220048][T11868] EXT4-fs (loop0): free_blocks=0 [ 777.225220][T11868] EXT4-fs (loop0): dirty_blocks=38 [ 777.230353][T11868] EXT4-fs (loop0): Block reservation details [ 777.236620][T11868] EXT4-fs (loop0): i_reserved_data_blocks=38 [ 777.485219][ T78] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2164 with max blocks 36 with error 28 [ 777.674084][T11873] syz.0.1022 (11873): drop_caches: 2 [ 777.734892][ T5787] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 777.848244][T11873] loop0: detected capacity change from 0 to 16 [ 777.892519][T11873] erofs: Unknown parameter './file0' [ 777.985439][T11873] syz.0.1022 (11873): drop_caches: 2 [ 781.170447][T11895] loop3: detected capacity change from 0 to 512 [ 781.256122][T11895] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 781.287373][T11895] EXT4-fs (loop3): 1 truncate cleaned up [ 781.294321][T11895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.615231][ T28] audit: type=1800 audit(1792060839.612:50): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1021" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 782.116332][ T7889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.284393][T11915] loop1: detected capacity change from 0 to 1024 [ 783.471866][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 783.478012][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 783.897807][T11909] loop0: detected capacity change from 0 to 40427 [ 783.958463][T11909] F2FS-fs (loop0): invalid crc value [ 784.054053][T11909] F2FS-fs (loop0): Found nat_bits in checkpoint [ 784.259083][T11909] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 791.625200][T11981] loop1: detected capacity change from 0 to 8 [ 791.674887][T11981] squashfs image failed sanity check [ 791.871208][T11985] loop0: detected capacity change from 0 to 512 [ 791.918477][T11985] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 791.968136][T11985] EXT4-fs (loop0): 1 truncate cleaned up [ 791.996025][T11985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.147951][T11988] loop1: detected capacity change from 0 to 2048 [ 792.283787][T11988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.338973][ T28] audit: type=1800 audit(1792060850.312:51): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1037" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 794.581038][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 794.716547][T11099] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.006127][T12014] loop0: detected capacity change from 0 to 512 [ 795.588122][T11990] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 795.839867][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.893044][T12014] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 795.903059][T12014] FAT-fs (loop0): Filesystem has been set read-only [ 797.424407][T12031] loop1: detected capacity change from 0 to 1024 [ 798.275167][ T5786] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 800.410481][T12049] loop0: detected capacity change from 0 to 512 [ 800.458560][T12049] FAT-fs (loop0): Unrecognized mount option "˙ň֛”6GJRšňţ餂 „Ő.ŚzQ\wFMxť7D7U çd~őô˙zGcxŕEóÓb4đ'űˆňIGŕ(äć;Őeî7+ʞ:‰!Y/Qš‘žĹ:|ÖżŒ'ĘW—řMfşˇ_ł€ZÝ¤8{•­Vƒ@ AyŠ”v7ŽŰžý†Ń?3ą/Rëç 5?ţ: !lŔő\zú{0ťoóéŮ-ôţ†a18446744073709551615" or missing value [ 801.835640][ T5787] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 803.526124][T12054] loop7: detected capacity change from 0 to 40427 [ 803.582539][T12054] F2FS-fs (loop7): invalid crc value [ 803.598407][T12054] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-4) [ 805.833118][T12093] binder: 12092:12093 ioctl c0306201 0 returned -14 [ 808.217481][T12117] loop3: detected capacity change from 0 to 512 [ 808.297459][T12117] FAT-fs (loop3): Unrecognized mount option "˙ň֛”6GJRšňţ餂 „Ő.ŚzQ\wFMxť7D7U çd~őô˙zGcxŕEóÓb4đ'űˆňIGŕ(äć;Őeî7+ʞ:‰!Y/Qš‘žĹ:|ÖżŒ'ĘW—řMfşˇ_ł€ZÝ¤8{•­Vƒ@ AyŠ”v7ŽŰžý†Ń?3ą/Rëç 5?ţ: !lŔő\zú{0ťoóéŮ-ôţ†a18446744073709551615" or missing value [ 808.465237][T12121] loop7: detected capacity change from 0 to 1024 [ 808.513296][T11982] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 808.872221][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.878665][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.901488][T12141] binder: 12139:12141 ioctl c0306201 0 returned -14 [ 812.721002][T12156] loop1: detected capacity change from 0 to 512 [ 812.722560][T12147] loop7: detected capacity change from 0 to 2048 [ 812.778480][T12156] FAT-fs (loop1): Unrecognized mount option "˙ň֛”6GJRšňţ餂 „Ő.ŚzQ\wFMxť7D7U çd~őô˙zGcxŕEóÓb4đ'űˆňIGŕ(äć;Őeî7+ʞ:‰!Y/Qš‘žĹ:|ÖżŒ'ĘW—řMfşˇ_ł€ZÝ¤8{•­Vƒ@ AyŠ”v7ŽŰžý†Ń?3ą/Rëç 5?ţ: !lŔő\zú{0ťoóéŮ-ôţ†a18446744073709551615" or missing value [ 813.028636][T12147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.114674][T12137] loop0: detected capacity change from 0 to 40427 [ 813.136431][T12137] F2FS-fs (loop0): invalid crc value [ 814.473897][T12162] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 814.550231][T12137] F2FS-fs (loop0): Found nat_bits in checkpoint [ 814.742200][T12180] loop3: detected capacity change from 0 to 512 [ 814.759879][T12180] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 815.808282][T12180] EXT4-fs (loop3): 1 truncate cleaned up [ 815.817069][T12180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.976427][ T7582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.745476][ T28] audit: type=1800 audit(1792060874.652:52): pid=12198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1063" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 819.481060][ T7889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.560263][T12226] loop0: detected capacity change from 0 to 512 [ 819.627407][T12226] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 819.649525][T12228] loop3: detected capacity change from 0 to 512 [ 819.690884][T12226] EXT4-fs (loop0): 1 truncate cleaned up [ 819.706127][T12226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.290127][ T28] audit: type=1800 audit(1792060878.182:53): pid=12235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1079" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 820.667661][T11099] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.280612][T12268] loop1: detected capacity change from 0 to 512 [ 823.334925][T12268] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 823.468460][T12268] EXT4-fs (loop1): 1 truncate cleaned up [ 823.519499][T12268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.548150][T12275] loop7: detected capacity change from 0 to 512 [ 823.617132][T12243] loop3: detected capacity change from 0 to 40427 [ 823.645509][T12243] F2FS-fs (loop3): invalid crc value [ 823.697881][T12243] F2FS-fs (loop3): Found nat_bits in checkpoint [ 825.398393][T12299] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1090' resets device [ 825.535231][T12304] loop7: detected capacity change from 0 to 128 [ 826.288936][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 826.386367][T12304] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 826.504997][T12304] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 826.746805][ T7582] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 826.884823][T12319] loop7: detected capacity change from 0 to 512 [ 827.096058][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.680881][T12341] loop7: detected capacity change from 0 to 1024 [ 833.048243][T12372] loop3: detected capacity change from 0 to 512 [ 833.134707][T12372] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 833.404764][T12372] EXT4-fs (loop3): 1 truncate cleaned up [ 833.436958][T12372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.524429][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1103'. [ 835.815945][ T28] audit: type=1800 audit(1792060893.802:54): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1106" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 836.474263][T12402] loop0: detected capacity change from 0 to 1024 [ 837.385779][ T5786] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 837.665602][ T7889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.994757][ T56] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 839.357859][ T56] usb 4-1: unable to get BOS descriptor or descriptor too short [ 839.494853][ T56] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 839.700273][ T56] usb 4-1: can't read configurations, error -71 [ 839.825998][T12430] loop7: detected capacity change from 0 to 1024 [ 839.924311][T12430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 840.286575][T12436] syz.3.1115 (12436): drop_caches: 2 [ 840.327890][T12436] loop3: detected capacity change from 0 to 16 [ 840.355812][T12436] erofs: Unknown parameter './file0' [ 840.534710][T12418] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 841.215636][T12436] syz.3.1115 (12436): drop_caches: 2 [ 842.222102][T12448] loop3: detected capacity change from 0 to 512 [ 843.884520][T12460] loop3: detected capacity change from 0 to 1024 [ 844.752119][ T5787] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 844.754085][T12473] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1117' resets device [ 845.384459][T12489] loop0: detected capacity change from 0 to 512 [ 848.016731][T12489] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 848.027890][T12489] FAT-fs (loop0): Filesystem has been set read-only [ 848.287179][T12506] "syz.7.1125" (12506) uses obsolete ecb(arc4) skcipher [ 851.392079][T12525] loop3: detected capacity change from 0 to 256 [ 851.415826][T12525] exfat: Deprecated parameter 'utf8' [ 851.421240][T12525] exfat: Deprecated parameter 'namecase' [ 851.465101][T12525] exfat: Deprecated parameter 'namecase' [ 851.496528][T12525] exfat: Deprecated parameter 'namecase' [ 851.543514][T12525] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 851.795300][T12525] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 852.175002][T12538] syz.1.1126 (12538): drop_caches: 2 [ 852.209174][T12538] loop1: detected capacity change from 0 to 16 [ 852.263952][T12538] erofs: Unknown parameter './file0' [ 852.307590][T12538] syz.1.1126 (12538): drop_caches: 2 [ 852.532612][T12544] loop1: detected capacity change from 0 to 512 [ 853.378408][T12544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.405853][T12544] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.462689][T12544] EXT4-fs error (device loop1): ext4_lookup:1860: inode #12: comm syz.1.1132: iget: bad i_size value: 2533274857506816 [ 853.487795][T12544] EXT4-fs warning (device loop1): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 853.772658][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.435125][T12525] netlink: 'syz.3.1130': attribute type 9 has an invalid length. [ 854.726080][T12563] 9pnet_fd: Insufficient options for proto=fd [ 854.930160][T12564] "syz.0.1135" (12564) uses obsolete ecb(arc4) skcipher [ 856.500103][T12574] loop1: detected capacity change from 0 to 512 [ 856.516781][T12574] FAT-fs (loop1): Unrecognized mount option "˙0xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 857.812357][T12592] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1133' resets device [ 858.128395][T12596] loop1: detected capacity change from 0 to 512 [ 858.196397][T12596] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 858.308087][T12596] EXT4-fs (loop1): 1 truncate cleaned up [ 858.318829][T12601] loop0: detected capacity change from 0 to 512 [ 858.387240][T12596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.992227][T12606] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 859.002366][T12606] FAT-fs (loop0): Filesystem has been set read-only [ 859.204463][T12612] loop7: detected capacity change from 0 to 512 [ 861.774532][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.577015][T12634] "syz.1.1145" (12634) uses obsolete ecb(arc4) skcipher [ 863.588749][T12641] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1151' resets device [ 863.745052][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 864.466120][T12644] loop7: detected capacity change from 0 to 2048 [ 864.626021][T12644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 864.852927][T12651] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 865.070881][T12658] loop3: detected capacity change from 0 to 512 [ 865.147081][T12658] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 865.194109][T12658] EXT4-fs (loop3): 1 truncate cleaned up [ 865.226362][T12658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.496895][T12667] loop1: detected capacity change from 0 to 164 [ 865.660119][ T28] audit: type=1800 audit(1792060923.652:55): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1153" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 865.819159][T12667] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 866.439599][ T7889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.460457][T12678] loop0: detected capacity change from 0 to 512 [ 866.503255][T12678] EXT4-fs: Ignoring removed i_version option [ 866.532206][T12678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 866.556681][ T7582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.620719][T12678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.694807][T12678] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.743398][T12686] loop3: detected capacity change from 0 to 512 [ 867.428241][T12691] "syz.7.1157" (12691) uses obsolete ecb(arc4) skcipher [ 868.098047][ T28] audit: type=1800 audit(1792060926.092:56): pid=12693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1154" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 868.331944][T11099] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.355295][T12222] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 868.399691][T12702] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1161' resets device [ 868.498649][T12705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 868.584947][T12222] usb 2-1: Using ep0 maxpacket: 32 [ 868.603294][T12222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.644908][T12222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.688637][T12222] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 868.727241][T12222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.764773][T12222] usb 2-1: config 0 descriptor?? [ 868.781789][T12222] hub 2-1:0.0: USB hub found [ 869.002585][T12222] hub 2-1:0.0: 26 ports detected [ 869.027085][T12222] hub 2-1:0.0: insufficient power available to use all downstream ports [ 869.222430][T12222] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 869.240888][T12222] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 869.304122][T12725] loop3: detected capacity change from 0 to 512 [ 869.338866][T12222] usbhid 2-1:0.0: can't add hid device: -71 [ 869.351071][T12725] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 869.395902][T12222] usbhid: probe of 2-1:0.0 failed with error -71 [ 869.550006][T12725] EXT4-fs (loop3): 1 truncate cleaned up [ 869.613804][T12725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.636614][T12222] usb 2-1: USB disconnect, device number 7 [ 869.982939][ T28] audit: type=1800 audit(1792060927.972:57): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1164" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 870.311967][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.318378][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.533591][T12751] loop1: detected capacity change from 0 to 2048 [ 870.667924][T12751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.285982][ T7889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.187550][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.317154][T12783] loop3: detected capacity change from 0 to 512 [ 875.055481][T12795] loop1: detected capacity change from 0 to 512 [ 875.417030][T11288] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 875.535505][T12799] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 875.545674][T12799] FAT-fs (loop1): Filesystem has been set read-only [ 876.369565][T12801] loop3: detected capacity change from 0 to 1024 [ 876.474805][T11288] usb 1-1: Using ep0 maxpacket: 32 [ 876.488515][T11288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.583703][T11288] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 876.618420][T11288] usb 1-1: config 0 interface 0 has no altsetting 0 [ 876.640957][T11288] usb 1-1: New USB device found, idVendor=146d, idProduct=c29c, bcdDevice= 0.00 [ 876.665526][T11288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.693871][T11288] usb 1-1: config 0 descriptor?? [ 878.193359][T11288] usb 1-1: string descriptor 0 read error: -71 [ 878.244904][T11288] usb 1-1: USB disconnect, device number 2 [ 879.015027][T12857] loop7: detected capacity change from 0 to 512 [ 879.071255][T12857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 879.267572][T12857] System zones: 1-12 [ 879.590138][T12857] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.1175: corrupted in-inode xattr: e_value size too large [ 879.631005][T12857] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1175: couldn't read orphan inode 15 (err -117) [ 879.731809][T12857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.771455][ T7582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.338704][T12888] loop7: detected capacity change from 0 to 1024 [ 884.785231][ T5787] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 887.317648][T12946] loop3: detected capacity change from 0 to 512 [ 888.621912][T12946] EXT4-fs (loop3): 1 truncate cleaned up [ 888.628624][T12946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.856955][ T28] audit: type=1800 audit(1792060946.772:58): pid=12945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1195" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 889.009884][ T7889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.233225][T12955] loop1: detected capacity change from 0 to 512 [ 889.468945][T12955] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 889.679796][T12955] EXT4-fs (loop1): 1 truncate cleaned up [ 889.779514][T12955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.361105][ T28] audit: type=1800 audit(1792060948.342:59): pid=12972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1198" name="file3" dev="loop1" ino=16 res=0 errno=0 [ 892.153435][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.686387][T13001] loop7: detected capacity change from 0 to 512 [ 899.118664][T13034] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1212' resets device [ 905.810384][T13081] loop3: detected capacity change from 0 to 512 [ 905.945854][T13081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.010823][T13081] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.151376][T13091] loop7: detected capacity change from 0 to 512 [ 906.323892][ T7889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.715123][T13114] netlink: 'syz.3.1225': attribute type 9 has an invalid length. [ 913.116672][T13166] loop7: detected capacity change from 0 to 512 [ 913.484232][T13170] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 913.494429][T13170] FAT-fs (loop7): Filesystem has been set read-only [ 913.817965][T13176] loop1: detected capacity change from 0 to 512 [ 913.886667][T13176] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 913.917316][T13176] EXT4-fs (loop1): 1 truncate cleaned up [ 913.945534][T13176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.348528][ T28] audit: type=1800 audit(1792060972.332:60): pid=13186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1236" name="file3" dev="loop1" ino=16 res=0 errno=0 [ 915.526645][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.730480][T13195] loop1: detected capacity change from 0 to 512 [ 916.700838][T13223] loop1: detected capacity change from 0 to 512 [ 916.747572][T13223] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 916.816607][T13223] EXT4-fs (loop1): 1 truncate cleaned up [ 916.943082][T13223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.301487][ T28] audit: type=1800 audit(1792060975.982:61): pid=13238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1247" name="file3" dev="loop1" ino=16 res=0 errno=0 [ 919.397212][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.659723][T13246] loop1: detected capacity change from 0 to 40427 [ 921.738245][T13246] F2FS-fs (loop1): invalid crc value [ 921.814743][T13246] F2FS-fs (loop1): Found nat_bits in checkpoint [ 922.004690][T13246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 922.307462][T13268] loop0: detected capacity change from 0 to 512 [ 922.804345][T13277] syz.0.1255 (13277): drop_caches: 2 [ 922.859709][T13277] loop0: detected capacity change from 0 to 16 [ 922.886093][T13277] erofs: Unknown parameter './file0' [ 922.980121][T13178] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 923.010623][T13277] syz.0.1255 (13277): drop_caches: 2 [ 923.642093][T13294] loop0: detected capacity change from 0 to 512 [ 924.016517][T13294] EXT4-fs (loop0): 1 truncate cleaned up [ 924.029053][T13294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.129007][ T28] audit: type=1800 audit(1792060982.122:62): pid=13294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1258" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 924.406241][T11099] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.139795][T13319] loop7: detected capacity change from 0 to 512 [ 925.335039][T13319] EXT4-fs (loop7): 1 truncate cleaned up [ 925.341440][T13319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.374617][ T28] audit: type=1800 audit(1792060983.362:63): pid=13318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1256" name="file1" dev="loop7" ino=13 res=0 errno=0 [ 925.422124][T13319] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1256: bg 0: block 465: padding at end of block bitmap is not set [ 925.489015][T13319] EXT4-fs (loop7): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 925.502078][T13319] EXT4-fs (loop7): This should not happen!! Data will be lost [ 925.502078][T13319] [ 925.512035][T13319] EXT4-fs (loop7): Total free blocks count 0 [ 925.518141][T13319] EXT4-fs (loop7): Free/Dirty block details [ 925.524111][T13319] EXT4-fs (loop7): free_blocks=0 [ 925.529146][T13319] EXT4-fs (loop7): dirty_blocks=2 [ 925.534240][T13319] EXT4-fs (loop7): Block reservation details [ 925.540359][T13319] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 925.726267][ T7582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.763217][T13359] loop3: detected capacity change from 0 to 512 [ 931.785389][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.795225][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.189309][T13388] loop3: detected capacity change from 0 to 512 [ 932.414959][T13388] EXT4-fs (loop3): 1 truncate cleaned up [ 932.421950][T13388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 932.497613][ T28] audit: type=1800 audit(1792060990.492:64): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1270" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 932.655196][T13397] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1270: bg 0: block 465: padding at end of block bitmap is not set [ 932.707693][T13397] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 932.870057][T13397] EXT4-fs (loop3): This should not happen!! Data will be lost [ 932.870057][T13397] [ 932.884363][T13397] EXT4-fs (loop3): Total free blocks count 0 [ 932.890531][T13397] EXT4-fs (loop3): Free/Dirty block details [ 932.896501][T13397] EXT4-fs (loop3): free_blocks=0 [ 932.901461][T13397] EXT4-fs (loop3): dirty_blocks=58 [ 932.906709][T13397] EXT4-fs (loop3): Block reservation details [ 932.914689][T13397] EXT4-fs (loop3): i_reserved_data_blocks=58 [ 933.541735][T13405] loop0: detected capacity change from 0 to 1024 [ 933.746854][ T5786] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 934.301222][T11180] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 612 with max blocks 56 with error 28 [ 934.521791][T13418] loop3: detected capacity change from 0 to 512 [ 937.113548][T13439] "syz.1.1273" (13439) uses obsolete ecb(arc4) skcipher [ 938.064796][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 938.122983][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 940.406030][T13466] loop3: detected capacity change from 0 to 1024 [ 940.460763][T13468] loop0: detected capacity change from 0 to 512 [ 940.611619][ T5786] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 941.499942][T13471] "syz.1.1284" (13471) uses obsolete ecb(arc4) skcipher [ 943.606219][ T5087] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 953.421593][T13540] loop3: detected capacity change from 0 to 512 [ 953.576999][T13540] EXT4-fs (loop3): 1 truncate cleaned up [ 953.610376][T13540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.005960][ T28] audit: type=1800 audit(1792061012.002:65): pid=13540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1300" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 955.330607][T13576] loop0: detected capacity change from 0 to 1024 [ 955.672129][ T5786] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 955.918634][T13581] loop1: detected capacity change from 0 to 512 [ 956.395533][T13583] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 956.408161][T13583] FAT-fs (loop1): Filesystem has been set read-only [ 958.763706][T13565] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 958.821557][ T1131] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm kworker/u4:6: bg 0: block 465: padding at end of block bitmap is not set [ 958.889222][ T1131] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 117 [ 958.914710][ T1131] EXT4-fs (loop3): This should not happen!! Data will be lost [ 958.914710][ T1131] [ 959.245685][T13611] loop1: detected capacity change from 0 to 512 [ 959.325434][ T5087] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 959.544961][ T2954] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 776 with max blocks 2048 with error 28 [ 959.634848][ T2954] EXT4-fs (loop3): This should not happen!! Data will be lost [ 959.634848][ T2954] [ 959.645351][ T2954] EXT4-fs (loop3): Total free blocks count 0 [ 959.651373][ T2954] EXT4-fs (loop3): Free/Dirty block details [ 959.657976][T13611] EXT4-fs (loop1): 1 truncate cleaned up [ 959.664955][T13611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.700752][ T28] audit: type=1800 audit(1792061017.692:66): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1310" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 959.732685][ T2954] EXT4-fs (loop3): free_blocks=0 [ 959.748427][ T2954] EXT4-fs (loop3): dirty_blocks=2610 [ 959.754408][T13611] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1310: bg 0: block 465: padding at end of block bitmap is not set [ 959.773120][T13611] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 959.786322][T13611] EXT4-fs (loop1): This should not happen!! Data will be lost [ 959.786322][T13611] [ 959.796047][T13611] EXT4-fs (loop1): Total free blocks count 0 [ 959.802913][T13611] EXT4-fs (loop1): Free/Dirty block details [ 959.809023][T13611] EXT4-fs (loop1): free_blocks=0 [ 959.820575][T13611] EXT4-fs (loop1): dirty_blocks=2 [ 959.826540][T13611] EXT4-fs (loop1): Block reservation details [ 959.833788][T13611] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 959.994291][ T8353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.002079][ T2954] EXT4-fs (loop3): Block reservation details [ 960.045224][ T2954] EXT4-fs (loop3): i_reserved_data_blocks=2610 [ 961.020659][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1312'. [ 961.093400][T13623] loop1: detected capacity change from 0 to 1024 [ 961.316964][T13626] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 961.669834][ T5087] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 965.683403][ T5786] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 966.911732][T13691] loop0: detected capacity change from 0 to 512 [ 966.990007][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'. [ 967.137452][T13691] EXT4-fs (loop0): 1 truncate cleaned up [ 967.165390][T13691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.344819][ T28] audit: type=1800 audit(1792061025.322:67): pid=13691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1320" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 967.636821][T13709] loop3: detected capacity change from 0 to 1024 [ 967.960722][ T5087] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 968.531842][T13719] loop7: detected capacity change from 0 to 2048 [ 968.613022][T13719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.984739][T13698] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 970.242231][T13698] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 971.588654][T11099] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.609478][ T7582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.134697][ T5786] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 973.185815][T13759] netem: incorrect gi model size [ 973.191746][T13759] netem: change failed [ 973.771001][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1333'. [ 975.309476][T13784] loop1: detected capacity change from 0 to 512 [ 975.776341][T13793] loop7: detected capacity change from 0 to 512 [ 976.014893][T13793] EXT4-fs (loop7): 1 truncate cleaned up [ 976.078206][T13793] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 976.285477][ T28] audit: type=1800 audit(1792061034.282:68): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1336" name="file1" dev="loop7" ino=13 res=0 errno=0 [ 976.463105][T13802] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1336: bg 0: block 465: padding at end of block bitmap is not set [ 976.557145][T13802] EXT4-fs (loop7): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 976.634632][T13802] EXT4-fs (loop7): This should not happen!! Data will be lost [ 976.634632][T13802] [ 976.694743][T13802] EXT4-fs (loop7): Total free blocks count 0 [ 976.754657][T13802] EXT4-fs (loop7): Free/Dirty block details [ 976.790127][T13802] EXT4-fs (loop7): free_blocks=0 [ 976.884183][T13802] EXT4-fs (loop7): dirty_blocks=27 [ 976.966885][T13802] EXT4-fs (loop7): Block reservation details [ 977.039264][T13802] EXT4-fs (loop7): i_reserved_data_blocks=27 [ 977.395376][ T1131] EXT4-fs (loop7): Delayed block allocation failed for inode 13 at logical offset 1096 with max blocks 25 with error 28 [ 977.515658][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'. [ 979.053531][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 981.004790][ T28] audit: type=1800 audit(1792061038.992:69): pid=13857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1351" name="file2" dev="sda1" ino=2064 res=0 errno=0 [ 982.109376][T13864] loop7: detected capacity change from 0 to 512 [ 982.216667][T13864] EXT4-fs (loop7): 1 truncate cleaned up [ 982.403500][T13864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.496433][ T28] audit: type=1800 audit(1792061040.492:70): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1352" name="file1" dev="loop7" ino=13 res=0 errno=0 [ 982.763549][T13872] loop3: detected capacity change from 0 to 512 [ 982.785903][T13873] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1352: bg 0: block 465: padding at end of block bitmap is not set [ 982.894698][T13873] EXT4-fs (loop7): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 982.974272][T13873] EXT4-fs (loop7): This should not happen!! Data will be lost [ 982.974272][T13873] [ 983.028332][T13873] EXT4-fs (loop7): Total free blocks count 0 [ 983.034374][T13873] EXT4-fs (loop7): Free/Dirty block details [ 983.152460][T13873] EXT4-fs (loop7): free_blocks=0 [ 983.171111][T13880] ALSA: mixer_oss: invalid OSS volume '' [ 983.191039][T13882] loop3: detected capacity change from 0 to 512 [ 983.220641][T13880] ALSA: mixer_oss: invalid OSS volume '' [ 983.249471][T13873] EXT4-fs (loop7): dirty_blocks=58 [ 983.267961][T13882] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 983.305203][T13882] EXT4-fs (loop3): 1 truncate cleaned up [ 983.312179][T13882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.327506][T13873] EXT4-fs (loop7): Block reservation details [ 983.436146][T13873] EXT4-fs (loop7): i_reserved_data_blocks=58 [ 983.858400][ T2954] EXT4-fs (loop7): Delayed block allocation failed for inode 13 at logical offset 580 with max blocks 56 with error 28 [ 984.570644][ T28] audit: type=1800 audit(1792061042.562:71): pid=13902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1355" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 985.476121][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1358'. [ 986.799312][T13937] loop0: detected capacity change from 0 to 256 [ 986.836227][T13937] exfat: Deprecated parameter 'utf8' [ 986.841636][T13937] exfat: Deprecated parameter 'namecase' [ 986.874667][T13937] exfat: Deprecated parameter 'namecase' [ 986.880427][T13937] exfat: Deprecated parameter 'namecase' [ 986.932467][T13937] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 987.078583][ T7889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.119004][T13937] netlink: 'syz.0.1360': attribute type 1 has an invalid length. [ 988.600805][T13964] syz.3.1363 uses obsolete (PF_INET,SOCK_PACKET) [ 988.744520][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 988.756868][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 988.768360][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 988.780824][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 988.798922][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 988.810589][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 988.822263][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 988.833946][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 988.845648][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 988.858574][T13966] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 989.411676][T13972] loop7: detected capacity change from 0 to 512 [ 989.554661][T13937] netlink: 'syz.0.1360': attribute type 9 has an invalid length. [ 989.646692][ T28] audit: type=1400 audit(1792061047.632:72): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=13974 comm="syz.3.1365" [ 989.776744][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 989.833778][ T28] audit: type=1804 audit(1792061047.822:73): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/197/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 990.117194][T13991] loop7: detected capacity change from 0 to 512 [ 991.504889][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 991.995145][T13991] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 992.005165][T13991] FAT-fs (loop7): Filesystem has been set read-only [ 993.373504][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.385541][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.480745][T14005] orangefs_mount: mount request failed with -4 [ 993.584904][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1001.300241][T14067] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 1001.308755][T14067] netlink: 'syz.0.1376': attribute type 2 has an invalid length. [ 1002.066622][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1002.124192][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1002.137539][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1002.156506][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1002.163995][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1002.171432][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1002.384453][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.780133][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.998940][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.136724][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.326942][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1006.343327][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1006.351374][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1006.359945][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1006.367723][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1006.375058][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1008.236077][T14165] FAULT_INJECTION: forcing a failure. [ 1008.236077][T14165] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1008.263076][T14165] CPU: 1 PID: 14165 Comm: syz.7.1392 Not tainted syzkaller #0 [ 1008.270597][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1008.280678][T14165] Call Trace: [ 1008.283970][T14165] [ 1008.286929][T14165] dump_stack_lvl+0x18c/0x250 [ 1008.291644][T14165] ? show_regs_print_info+0x20/0x20 [ 1008.296955][T14165] ? load_image+0x420/0x420 [ 1008.301457][T14165] ? __might_fault+0xaa/0x120 [ 1008.306124][T14165] ? __lock_acquire+0x7eb0/0x7eb0 [ 1008.311142][T14165] ? __virt_addr_valid+0x10c/0x380 [ 1008.316248][T14165] should_fail_ex+0x394/0x4c0 [ 1008.320924][T14165] _copy_from_user+0x2f/0xe0 [ 1008.325525][T14165] strndup_user+0xb7/0x150 [ 1008.329939][T14165] __se_sys_fsopen+0x3d/0x2c0 [ 1008.334613][T14165] do_syscall_64+0x55/0xb0 [ 1008.339022][T14165] ? clear_bhb_loop+0x40/0x90 [ 1008.343697][T14165] ? clear_bhb_loop+0x40/0x90 [ 1008.348360][T14165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1008.354247][T14165] RIP: 0033:0x7f23ecf9e559 [ 1008.358650][T14165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.378252][T14165] RSP: 002b:00007f23eddc5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1008.386656][T14165] RAX: ffffffffffffffda RBX: 00007f23ed225fa0 RCX: 00007f23ecf9e559 [ 1008.394618][T14165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000740 [ 1008.402590][T14165] RBP: 00007f23ed0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1008.410547][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.418516][T14165] R13: 00007f23ed226038 R14: 00007f23ed225fa0 R15: 00007ffcb9a51048 [ 1008.426515][T14165] [ 1008.615715][T14170] loop7: detected capacity change from 0 to 1024 [ 1009.718022][ T5087] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1010.214837][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1010.240619][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1010.289379][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1010.318278][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1010.328008][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1010.335586][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1012.974760][ T12] hsr_slave_0: left promiscuous mode [ 1013.014786][ T12] hsr_slave_1: left promiscuous mode [ 1013.054743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.062200][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.090117][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.104625][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.125344][ T12] bridge_slave_1: left allmulticast mode [ 1013.131022][ T12] bridge_slave_1: left promiscuous mode [ 1013.165229][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.226534][ T12] bridge_slave_0: left allmulticast mode [ 1013.232228][ T12] bridge_slave_0: left promiscuous mode [ 1013.245950][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.524958][ T12] veth1_macvtap: left promiscuous mode [ 1013.530559][ T12] veth0_macvtap: left promiscuous mode [ 1013.558198][ T12] veth1_vlan: left promiscuous mode [ 1013.563626][ T12] veth0_vlan: left promiscuous mode [ 1013.868671][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1013.882409][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1013.892062][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1013.903000][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1013.912177][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1013.919531][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1014.304926][ T5087] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1017.828202][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1017.859808][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1017.910252][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1017.918693][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1017.929873][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1017.937413][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1017.995881][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1018.273424][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1018.473685][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.715736][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.928614][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1019.938302][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1019.962731][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1019.981448][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1020.005434][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1020.013699][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1020.631459][ T12] bond0 (unregistering): Released all slaves [ 1020.688715][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 1020.714630][T14237] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1407'. [ 1021.323011][T14273] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1409' resets device [ 1021.880071][T14286] loop0: detected capacity change from 0 to 1024 [ 1022.118758][ T5786] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1022.347987][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1022.367459][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1022.377208][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1022.387510][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1022.395304][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1022.405352][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1024.097537][T14304] bridge_slaveB: renamed from lo (while UP) [ 1025.204484][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1025.220662][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1025.228893][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1025.238364][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1025.246252][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1025.253641][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1025.352544][T14314] bond1: entered promiscuous mode [ 1025.357726][T14314] bond1: entered allmulticast mode [ 1025.375761][T14315] dummy0 speed is unknown, defaulting to 1000 [ 1025.406971][T14323] smc: removing ib device rxe0 [ 1025.440445][T14317] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1025.531920][T14317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1025.732574][T14315] dummy0 speed is unknown, defaulting to 1000 [ 1025.807504][T14315] dummy0 speed is unknown, defaulting to 1000 [ 1025.936179][T14315] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1026.121248][T14315] dummy0 speed is unknown, defaulting to 1000 [ 1026.139004][T14315] dummy0 speed is unknown, defaulting to 1000 [ 1026.171174][T14315] dummy0 speed is unknown, defaulting to 1000 [ 1026.916831][T14338] device-mapper: ioctl: Unable to rename non-existent device, to • [ 1026.967218][T14341] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1424' resets device [ 1030.355999][T14368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1030.366663][T14368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1030.374658][T14368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1030.377758][T14367] sctp: [Deprecated]: syz.7.1428 (pid 14367) Use of int in maxseg socket option. [ 1030.377758][T14367] Use struct sctp_assoc_value instead [ 1030.403896][T14368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1030.420121][T14368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1030.430759][T14368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1031.504989][T14368] Bluetooth: hci3: command 0x0406 tx timeout [ 1032.018462][ T5087] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 1032.183423][T14390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1436' resets device [ 1034.412941][T14368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1034.423273][T14368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1034.446980][T14368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1034.464699][T14368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1034.479995][T14368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1034.487717][T14368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1035.004705][ T7917] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1035.848450][ T7917] usb 1-1: Using ep0 maxpacket: 8 [ 1035.855804][ T7917] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1035.863679][ T7917] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1035.874975][ T7917] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1035.889341][ T7917] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1035.913523][ T7917] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1035.932942][ T7917] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1035.942137][ T7917] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1035.955617][ T7917] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1035.970432][ T7917] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1035.988291][ T7917] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1036.005779][ T7917] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1036.025203][ T7917] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1036.034672][ T7917] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1036.042121][ T7917] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1036.057196][ T7917] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1036.070359][ T7917] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1036.089032][ T7917] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1036.112265][ T7917] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1036.128460][ T7917] usb 1-1: string descriptor 0 read error: -22 [ 1036.135101][ T7917] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1036.151029][ T7917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.179048][ T7917] adutux 1-1:168.0: interrupt endpoints not found [ 1036.405478][ T7917] usb 1-1: USB disconnect, device number 3 [ 1036.680108][T14368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1036.696732][T14368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1036.710618][T14368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1036.719613][T14368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1036.727398][T14368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1036.735409][T14368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1039.753300][T14368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1039.763827][T14368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1039.775120][T14368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1039.798690][T14368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1039.806351][T14368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1039.822994][T14368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1040.864425][T14442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.872523][T14442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.819355][T14442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1042.930100][T14442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.932440][T14368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1043.947335][T14368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1043.956314][T14368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1043.981500][T14368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1043.989643][T14368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1044.013217][T14368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1044.616841][T14442] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.626021][T14442] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.635425][T14442] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.644325][T14442] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.781288][T14474] loop3: detected capacity change from 0 to 1024 [ 1044.801158][T11289] dummy0 speed is unknown, defaulting to 1000 [ 1044.847525][T14465] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1045.972017][T11288] IPVS: starting estimator thread 0... [ 1047.374830][T14482] IPVS: using max 20 ests per chain, 48000 per kthread [ 1048.665994][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1048.684398][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1048.693534][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1048.715981][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1048.735133][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1048.743486][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1052.104477][T14524] loop0: detected capacity change from 0 to 1024 [ 1053.227771][ T5087] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1053.787635][T14537] 9pnet_virtio: no channels available for device syz [ 1053.928573][T14537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1468'. [ 1054.092373][T14368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1054.104008][T14368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1054.115549][T14368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1054.123228][T14368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1054.131971][T14368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1054.142345][T14368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1054.451213][T14553] FAULT_INJECTION: forcing a failure. [ 1054.451213][T14553] name failslab, interval 1, probability 0, space 9, times 0 [ 1054.472053][T14553] CPU: 0 PID: 14553 Comm: syz.7.1472 Not tainted syzkaller #0 [ 1054.479557][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1054.489633][T14553] Call Trace: [ 1054.492925][T14553] [ 1054.495876][T14553] dump_stack_lvl+0x18c/0x250 [ 1054.500581][T14553] ? show_regs_print_info+0x20/0x20 [ 1054.505802][T14553] ? load_image+0x420/0x420 [ 1054.510336][T14553] ? __might_sleep+0xe0/0xe0 [ 1054.514957][T14553] ? __lock_acquire+0x7eb0/0x7eb0 [ 1054.520007][T14553] ? __mutex_lock+0x30d/0xc80 [ 1054.524713][T14553] should_fail_ex+0x394/0x4c0 [ 1054.529427][T14553] should_failslab+0x9/0x20 [ 1054.533963][T14553] slab_pre_alloc_hook+0x59/0x300 [ 1054.539011][T14553] ? nsim_nexthop_event_nb+0xa3/0x1380 [ 1054.544497][T14553] __kmem_cache_alloc_node+0x53/0x250 [ 1054.549907][T14553] ? nsim_nexthop_event_nb+0xa3/0x1380 [ 1054.555403][T14553] kmalloc_trace+0x2a/0xe0 [ 1054.559850][T14553] nsim_nexthop_event_nb+0xa3/0x1380 [ 1054.565165][T14553] ? read_lock_is_recursive+0x20/0x20 [ 1054.570568][T14553] ? vxlan_nexthop_event+0x31/0x780 [ 1054.575805][T14553] notifier_call_chain+0x18f/0x380 [ 1054.580951][T14553] blocking_notifier_call_chain+0x6a/0x90 [ 1054.586699][T14553] call_nexthop_notifiers+0x18f/0x250 [ 1054.592104][T14553] ? remove_nexthop+0x170/0x170 [ 1054.596989][T14553] ? inet_select_addr+0x2e/0xa90 [ 1054.601954][T14553] rtm_new_nexthop+0x39f5/0x6a30 [ 1054.606934][T14553] ? mark_lock+0x94/0x320 [ 1054.611285][T14553] ? verify_lock_unused+0x140/0x140 [ 1054.616510][T14553] ? nh_notifier_mpath_info_init+0x630/0x630 [ 1054.622516][T14553] ? __lock_acquire+0x135d/0x7eb0 [ 1054.627558][T14553] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.633643][T14553] ? arch_stack_walk+0x160/0x190 [ 1054.638636][T14553] ? mark_lock+0x94/0x320 [ 1054.642995][T14553] ? rtnetlink_rcv_msg+0x831/0xf90 [ 1054.648117][T14553] ? nh_notifier_mpath_info_init+0x630/0x630 [ 1054.654099][T14553] rtnetlink_rcv_msg+0x843/0xf90 [ 1054.659045][T14553] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1054.664177][T14553] ? rtnetlink_bind+0x80/0x80 [ 1054.668873][T14553] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1054.674874][T14553] ? lock_chain_count+0x20/0x20 [ 1054.679728][T14553] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1054.685097][T14553] ? lockdep_hardirqs_on+0x98/0x150 [ 1054.690299][T14553] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1054.695677][T14553] ? _local_bh_enable+0xa0/0xa0 [ 1054.700533][T14553] ? __dev_queue_xmit+0x272/0x37e0 [ 1054.705647][T14553] ? __dev_queue_xmit+0x1329/0x37e0 [ 1054.710843][T14553] ? __dev_queue_xmit+0x272/0x37e0 [ 1054.715966][T14553] ? lockdep_hardirqs_on+0x98/0x150 [ 1054.721169][T14553] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1054.727326][T14553] ? ref_tracker_free+0x686/0x830 [ 1054.732371][T14553] netlink_rcv_skb+0x235/0x4c0 [ 1054.737139][T14553] ? rtnetlink_bind+0x80/0x80 [ 1054.741823][T14553] ? netlink_ack+0x1160/0x1160 [ 1054.746598][T14553] ? __lock_acquire+0x7eb0/0x7eb0 [ 1054.751629][T14553] ? netlink_deliver_tap+0x2e/0x1b0 [ 1054.756833][T14553] netlink_unicast+0x7b1/0x930 [ 1054.761609][T14553] netlink_sendmsg+0x8d0/0xbf0 [ 1054.766383][T14553] ? netlink_getsockopt+0x590/0x590 [ 1054.771582][T14553] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1054.777128][T14553] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1054.782424][T14553] ? security_socket_sendmsg+0x80/0xa0 [ 1054.787883][T14553] ? netlink_getsockopt+0x590/0x590 [ 1054.793085][T14553] ____sys_sendmsg+0x61b/0x980 [ 1054.797862][T14553] ? __asan_memset+0x22/0x40 [ 1054.802456][T14553] ? __sys_sendmsg_sock+0x30/0x30 [ 1054.807479][T14553] ? __import_iovec+0x5f2/0x850 [ 1054.812347][T14553] ? import_iovec+0x73/0xa0 [ 1054.816863][T14553] ___sys_sendmsg+0x2a6/0x360 [ 1054.821577][T14553] ? verify_lock_unused+0x140/0x140 [ 1054.826808][T14553] ? __sys_sendmsg+0x2b0/0x2b0 [ 1054.831598][T14553] ? try_to_wake_up+0x680/0x10e0 [ 1054.836555][T14553] __se_sys_sendmsg+0x1d0/0x2c0 [ 1054.841413][T14553] ? do_raw_spin_unlock+0x121/0x230 [ 1054.846616][T14553] ? __x64_sys_sendmsg+0x80/0x80 [ 1054.851569][T14553] ? lockdep_hardirqs_on+0x98/0x150 [ 1054.856773][T14553] do_syscall_64+0x55/0xb0 [ 1054.861186][T14553] ? clear_bhb_loop+0x40/0x90 [ 1054.865860][T14553] ? clear_bhb_loop+0x40/0x90 [ 1054.870536][T14553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.876434][T14553] RIP: 0033:0x7f23ecf9e559 [ 1054.880849][T14553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.900458][T14553] RSP: 002b:00007f23eddc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.908875][T14553] RAX: ffffffffffffffda RBX: 00007f23ed225fa0 RCX: 00007f23ecf9e559 [ 1054.916850][T14553] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000004 [ 1054.924821][T14553] RBP: 00007f23ed0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.932796][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.940770][T14553] R13: 00007f23ed226038 R14: 00007f23ed225fa0 R15: 00007ffcb9a51048 [ 1054.948781][T14553] [ 1055.007874][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.015147][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.903963][T14562] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1475' resets device [ 1059.872454][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1059.886149][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1059.899168][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1059.907206][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1059.919917][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1059.934724][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1062.241035][T14599] loop3: detected capacity change from 0 to 512 [ 1064.870651][T14599] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1064.880674][T14599] FAT-fs (loop3): Filesystem has been set read-only [ 1065.278839][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1065.295174][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1065.305372][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1065.314366][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1065.322933][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1065.330419][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1069.035197][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1069.049256][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1070.253117][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1070.266149][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1070.273835][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1070.281255][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1074.910234][T14368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1074.920275][T14368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1074.935416][T14368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1074.948288][T14368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1074.956755][T14368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1074.964194][T14368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1079.575833][T14699] "syz.7.1517" (14699) uses obsolete ecb(arc4) skcipher [ 1080.495947][T14368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1080.507303][T14368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1080.517089][T14368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1080.536289][T14368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1080.547402][T14368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1080.565145][T14368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1083.961418][T14730] 9pnet_virtio: no channels available for device syz [ 1085.921950][T14740] "syz.3.1528" (14740) uses obsolete ecb(arc4) skcipher [ 1086.651434][T14746] 9pnet_virtio: no channels available for device syz [ 1087.685981][T14368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1087.701915][T14368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1087.710648][T14368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1087.725574][T14368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1087.733199][T14368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1087.744195][T14368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1087.834809][ T27] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1088.026879][ T27] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1088.048368][ T27] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 169, setting to 64 [ 1088.069723][ T27] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1088.090517][ T27] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1088.110509][ T27] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1088.124604][ T27] usb 8-1: Product: syz [ 1088.128810][ T27] usb 8-1: Manufacturer: syz [ 1088.144107][ T27] usb 8-1: SerialNumber: syz [ 1088.165184][ T27] usb 8-1: config 0 descriptor?? [ 1088.170941][T14752] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1088.211329][ T27] usb 8-1: selecting invalid altsetting 0 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=1382 state=3 status=67 (errno 9: Bad file descriptor) [ 1089.290777][ T27] usb 8-1: USB disconnect, device number 7 [ 1089.363534][ T2954] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.517299][ T2954] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.590240][ T2954] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.651536][ T2954] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.505571][ T2954] hsr_slave_0: left promiscuous mode [ 1090.511399][ T2954] hsr_slave_1: left promiscuous mode [ 1090.517607][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.527560][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.536008][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.543399][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.551642][ T2954] bridge_slave_1: left allmulticast mode [ 1090.557539][ T2954] bridge_slave_1: left promiscuous mode [ 1090.563603][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.572154][ T2954] bridge_slave_0: left allmulticast mode [ 1090.577859][ T2954] bridge_slave_0: left promiscuous mode [ 1090.583520][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.607706][ T2954] veth1_macvtap: left promiscuous mode [ 1090.613238][ T2954] veth0_macvtap: left promiscuous mode [ 1090.618951][ T2954] veth1_vlan: left promiscuous mode [ 1090.624232][ T2954] veth0_vlan: left promiscuous mode [ 1091.244404][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 1091.304489][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 1091.353172][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.405918][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.788164][ T2954] bond0 (unregistering): Released all slaves [ 1092.086202][ T2954] IPVS: stop unused estimator thread 0...