last executing test programs: 6m49.886168427s ago: executing program 0 (id=1): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r3, r3, 0x0, 0x4800000009) 6m34.751773569s ago: executing program 32 (id=1): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r3, r3, 0x0, 0x4800000009) 6m20.785197292s ago: executing program 2 (id=47): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 6m20.003749315s ago: executing program 2 (id=48): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe8000000000080000008f735118d81cc0399493af4b480000000000000000aafc010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff03000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005b50000020001000000000000000000480003006465666c61746500"/210], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 6m19.893435832s ago: executing program 2 (id=49): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000041) unshare(0x6a040000) 6m16.430526489s ago: executing program 2 (id=55): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 6m15.460052445s ago: executing program 2 (id=65): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 6m14.603795854s ago: executing program 2 (id=61): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r3, r3, 0x0, 0x4800000009) 5m58.851294579s ago: executing program 33 (id=61): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r3, r3, 0x0, 0x4800000009) 5m36.030142015s ago: executing program 4 (id=149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9c"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 5m35.259042988s ago: executing program 4 (id=151): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe8000000000080000008f735118d81cc0399493af4b480000000000000000aafc010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff03000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005b50000020001000000000000000000480003006465666c61746500"/210], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 5m35.000745016s ago: executing program 4 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x6, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f05805000000", 0x6}], 0x2}, 0x5) 5m32.041588127s ago: executing program 4 (id=159): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 5m31.024727967s ago: executing program 4 (id=162): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e01272a22fc54078fd5e64475993668980a9f95aff96492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef4201dbc11d36a0a0db52e84461c6fbb4aad62cf3c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec080000002b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270b36ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9aee540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b231f7ffc441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 5m28.692210676s ago: executing program 4 (id=167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4800000009) 5m12.523235889s ago: executing program 34 (id=167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4800000009) 13.063467439s ago: executing program 3 (id=707): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) write(0xffffffffffffffff, &(0x7f0000000100)=')', 0x1) timer_create(0x2, 0x0, &(0x7f0000044000)) 11.929213507s ago: executing program 3 (id=711): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 10.651721244s ago: executing program 1 (id=713): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB='umask=00000000000000000000011,namecase=1,errors=continue,allow_utime=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,umask=00000000000000000005676,keep_last_dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp865,dmask=00000000000000000000001,discard,uid=', @ANYRESHEX=0xee00, @ANYBLOB="969043c7ff1774ebb8582e00"], 0x80, 0x1500, &(0x7f0000000580)="$eJzs3AuYzlXXMPC99t5/xjTpbpLDsNdef+402CZJckjIIUmSJMkpITFJkpAYckoakpBzksMQksM0Jo3z+ZBz0uSRJklCcgr7u/T0vp736Xnevvd7+j7f9cz6Xde+Zq/5z1r32rPmmvt/39c1832PkXWa1a3ZhIjEvwT++iFFCBEjhBgqhLhBCBEIISrEV4i/cj2fgpR/7UHYn+vRtGvdAbuWeP65G88/d+P55248/9yN55+78fxzN55/7sbzZyw32z6nyI28cu/i9/9zM37+/zeSU3bS1xvL3tzzf5DC88/deP65G88/d+P55248/9yN5//vr8Z/c43nn7vx/BnLza71+8+8ru261j9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyh3P+Ki2E+I/9te6LMcYYY4wxxhhjfx6f91p3wBhjjDHGGGOMsf/7QEihhBaByCPyihiRT8SK60ScuF7kFzeIiLhRxIubRAFxsygoConCoohIEEVFMWEECitIhKK4KCGi4hZRUtwqEkUpUVqUEU6UFUniNlFO3C7KiztEBXGnqCjuEpVEZVFFVBV3i2riHlFd1BA1xb2ilqgt6oi64j5RT9wv6osHRAPxoGgoHhKNxMOisXhENBGPiqbiMdFMPC6aiydEC9FStBKtRZv/o/yXRR/xiugr+okU0V8MEK+KgWKQGCyGiKHiNTFMvC6GizdEqhghRoo3xSjxlhgt3hZjxFgxTrwjxosJYqKYJCaLKWKqeFdME++J6eJ9MUPMFLPEbJEm5oi54gMxT8wXC8SHYqH4SCwSi8USsVSki49FhlgmMsUnYrn4VGSJFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2i8/EDrFT7BK7xR6xV+wTn4v94gtxQHwpssVX/8P8s3+X3xMECJAgQYOGPJAHYiAGYiEW4iAO8kN+iEAE4iEeCkABKAgFoTAUhgRIgGJQDBAQCAiKQ3GIQhRKQklIhEQoDaXBgYMkSIJycDuUh/JQASpARagIlaAyVIaqUBWqQTWoDtWhJtSEWlAL6kAduA/ug/uhPtSHBtAAGkJDaASNoDE0hibQBJpCU2gGzaA5NIcW0AJaQStoA22gLbSFdtAOOkAH6AgdoRN0gmRIhi7QBbpCV+gG3aA7dIce0AN6Qi/oBS/Dy/AKvAL9oJbsDwNgAAyEgTAYhsAQeA2GwevwOrwBqTACRsKb8Ca8BaPhDIyBsTAOxkE1OQEmwiQgOQWmwlSYBtNgOkyHGTATZsJsSIM5MBfmwjyYD/PhQ1gIH8FHsBgWw1JIh3TIgGWQCZmwHM5CFqyAlbAKVsMaWA3rYD2sg42wCTbCFtgC22AbfAafwU7YCbthN+yFvfA5fA5fwBeQCtmQDQfhIByCQ3AYDkMO5MAROAJH4Sgcg2NwHI7DCTgJp+AknIbTcAbOwjk4BxfgAlyEFxO+bbq31IZUIa/QUss8Mo+MkTEyVsbKOBkn88v8MiIjMl7GT1FCyIKyoCwsC8sEmSCLyWISJUqSoSwui8cIIWRJWVImykRZWpaWTjqZJJNkOVlOlpflZQV5p6wo75KVZGXZ3lWVVWU12cFVlzVkTVlT1pK1ZR1ZV9aV9WQ9WV/Wlw1kA9lQNpSN5MOysewPg+FReWUyzeQIaC5HQgvZUraSreVb8KRsK0dDO9ledpBPy7EwBjrJti5ZPiu7yInQVT4vJ8ELsrucAj3kS7Kn7CV7y5dlH9nO9ZX95AzoLwfI2TBQDpKD5RA5D2rLKxOrI9+QqXKEHCnflEvhLTlavi3HyLFynHxHjpcT5EQ5SU6WU+RU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5F3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6FaeuV/nVDSqiblTx6iZVQN2sCqpCqrAqohJUUVVMGYXKKlKhKq5KqKi6RZVUt6pEVUqVVmWUU2VVkrpNlVO3q/LqDlVB3akqqrtUJVVZVVFV1d2qmrpHVVc1VE11r6qlaqs6qq66T9VT96v66gHVQD2oGqqHVCP1sGqsHlFN1KOqqXpMNVOPq+bqCdVCtVStVGvVRj2p2qqnVDvVXnVQT6uO6hnVSXVWyepZ1UU9p7qq51U39YLqrl5UPdRLqqfqpXqrS+qy8qqv6qdSVH81QL2qBqpBarAaooaq19Qw9boart5QqWqEGqneVKPUW2q0eluNUWPVOPWOGq8mqIlqkpqspqip6l01Tb2npqv31Qw1U81Ss1WamqMG/1Zpwd/l9//tWfdv89/7B/nDf330bWq7+kztUDvVLrVb7VF71T61T+1X+9UBdUBlq2x1UB1Uh9QhdVgdVjkqRx1RR9RRdVQdU8fUcXVcnVAn1Xn1kzqtflZn1Fl1Vp1XF9QFdfG374HQoKVWWutA59F5dYzOp2P1dTpOX6/z6xt0RN+o4/VNuoC+WRfUhXRhXUQn6KK6mDYatdWkQ11cl9BRfYsuqW/VibqULq3LaKfL6iR927+c/0f9tdFtdFvdVrfT7XQH3UF31B11J91JJ+tk3UV30V11V91Nd9PddXfdQ/fQPXVP3Vv31n10H91X99UpOkUP0K/qgXqQHqyH6KH6NT1MD9PD9XCdqlP1SD1Sj9Kj9Gg9Wo/RY/Q4PU6P1+P1RD1RT9aTX/xtnHq6nq5n6Bl6lp6l03Sanqvn6nl6nl6gF+iFeqFepBfpJXqJTtfpOkNn6EydqZdrobP0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pv0Fr1FZ+nterveoXfoXXqX3qP36H16n96v9+sD+oDO1tn6oD6oD+lD+rA+rHN0jj6ij+ij+qg+po/1P66P6xP6hD6lT+nT+rQ+o8/oc/qcvqAv6Iv6or6sL1+57QtkIAMd6CBPkCeICWKC2CA2iAvigvxB/iASRIL4ID4oENwcFAwKBYWDIkFCUDQoFpgAAxtQEAbFgxJBNLglKBncGiQGpYLSQZnABWWDpOC2oFxwe1A+uCOoENwZVAzuCioFlYMqQdXg7qBacE9QPagR1AzuDWoFtYM6Qd3gvqBecH9QP3ggaBA8GDQMHgoaBQ8HjYNHgibBo0HT4LGgWfB40Dx4ImgRtAxaBa2DNn9qfe/PFHrK9TX9TIrpbwaYV81AM8gMNkPMUPOaGWZeN8PNGybVjDAjzZtmlHnLjDZvmzFmrBln3jHjzQQz0Uwyk80UM9W8a6aZ98x0876ZYWaaWWa2STNzzFzzgZln5psF5kOz0HxkFpnFZolZatLNxybDLDOZ5hOz3HxqsswKs9KsMqvNmvM3CmHWmw1mo9lkNpstZqvZZrabz8wOs9PsMrvNHrPX7DOfm/3mC3PAfGmyzVfmoPmLOWS+NofNNybHfGuOmO/MUfO9OWZ+MMfNj+aEOWlOmZ/MafOzOWPOmnPmvLlgfjEXzSVz2fgrN/dXnt5Ro8Y8mAdjMAZjMRbjMA7zY36MYATjMR4LYAEsiAWxMBbGBEzAYlgMryAkLI7FMYpRLIklMRETsTSWRocOkzAJy2E5LI/lsQJWwIpYESthJayCVfBuvBvvwXuwBtbAe/FerI21sS7WxXpYD+tjfWyADbAhNsRG2AgbY2Nsgk2wKTbFZtgMm2NzbIEtsBW2wjbYBttiW2yH7bADdsCO2BE7YSdMxmTsgl2wK3bFbtgNu2N37IE9sCf2xN7YG/tgH+yLfTEFU3AADsCBOBAH42AcikNxGA7D4TgcUzEVR+JIHIWjcDSOxjE4FsfhOzgeJ+BEnISTcQpOxak4DafhdJyOM3AGzsJZmIZpOBfn4jychwtwAS7EhbgIF+ESXILpmI4ZmIGZmInLcTlmYRauxJW4GlfjWlyL63E9bsSNuBk341bcittxO+7AHbgLd+Ee3IP7cB/ux/14AA9gNmbjQTyIh/AQHsbDmIM5eASP4FE8isfwGB7H43gCT+ApPIWn8TSewTN4Ds/hBfwFL+IlvIweY6wUsfY6G2evt/ntDTbG5rN/Gxe2RWyCLWqLWWML2kL/JUZrbaItZUvbMtbZsjbJ3va7uJKtbKvYqvZuW83eY6v/Lq5n77f17QO2gX3Q1rX3/Rbn/TVuaB+yjezjtrF9wjaxLW1T29o2s4/b5vYJ28K2tK1sa9vRPmM72c422T5ru9jnfhdn2GV2vd1gN9pNdr/9wp6z5+1R+729YH+xfW0/O9S+ZofZ1+1w+4ZNtSN+F4+z79jxdoKdaCfZyXbK7+JZdrZNs3PsXPuBnWfn/y5Otx/bhTbTLrKL7RK79Nf4Sk+Z9hO73H5qs+wKu9KusqvtGrvWrvvPXlfZLXar3Wb32c/tDrvT7rK77R6799f4yjkO2C9ttv3KHrHf2UP2a3vYHrM59ttf4yvnO2Z/sMftj/aEPWlP2Z/safuzPWPP/nr+K2f/yV6yl623goAkKdIUUB7KSzGUj2LpOoqj6yk/3UARupHi6SYqQDdTQSpEhakIJVBRKkaGkCwRhVScSlCUbqGSdCslUikqTWXIUVlKotuoHN1O5ekOqkB3UkW6iypRZapCVeluqkb3UHWqQTXpXqpFtakO1aX7qB7dT/XpAWpAD1JDeoga0cPUmB6hJvQoNaXHqBk9Ts3pCWpBLakVtaY29CS1paeoHbWnDvQ0daRnqBN1pmR6lrrQc9SVnqdu9AJ1pxepB71EPakX9aaXqQ+9Qn2pH6VQfxpAr9JAGkSDaQgNpddoGL1Ow+kNSqURNJLepFH0Fo2mt2kMjaVx9A6Npwk0kSbRZJpCU+ldOpveufCVm4MZNJNm0WxKozk0lz6geTSfFtCHtJA+okW0mJbQUkqnjymDllEmfULL6VPKohW0klbRalpDa2kdracNtJE20WbaQltpG22nz2gH7aRdtJv20F7aR5/TfvqCDtCXlE1f0UH6Cx2ir+kwfUM59C0doe/oKH1Px+gHOk4/0gk6SafoJzpNP9MZOkvn6DxdoF/oIl2iy+RJhBDKUIU6DMI8Yd4wJswXxobXhXHh9WH+8IYwEt4Yxoc3hQXCm8OCYaGwcFgkTAiLhsVCE2JoQwrDsHhYIoyGt4Qlw1vDxLBUWDosE7qwbJgU3haWC28Py4d3hBXCO8OK4V1hpbBy+PiDVcO7w2rhPWH1sEZYM7w3rBXWDuuEdcP7wnrh/WH98IGwQfhgWD58KGwUPhw2Dh8Jm4SPhk3Dx8Jm4eNh8/CJsEXYMmwVtg7bhE+GbcOnwnZh+7BD+HTYMXwm7BR2DpPDZ8Mu4XN/eD0l7B8OCF8NXw29f0AtiS6Npkc/jmZEl0Uzo59El0c/jWZFV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S3RrdFva+bVzhw0imnXeDyuLwuxuVzse46F+eud/ndDS7ibnTx7iZXwN3sCrpCrrAr4hJcUVfMGYfOOnKhK+5KuKi7xZV0t7pEV8qVdmWcc2Vdkmvt2rg2rq17yrVz7V0H97R72j3jnnGdXWf3rOvinnNd3fOum3vBdXcvuhfdS66n6+V6u5ddH/eK6+v6uRSX4ga4AW6gG+gGu8FuqBvqhrlhbrgb7lJdqhvpRrpRbpQb7Ua7MW6MG+fGufFuvJvoJrrJbrKb6qa6aW6am+6muxluhpvlZrk0l+bmurlunpvnFrgFbmHiQrfILXJL3BKX7tJdhstwmS7TLXfLXZbLcivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXDZLtsddAfdIXfIHXbfuBz3rTvivnNH3ffumPvBHXc/uhPupDvlfnKn3c/ujDvrzrnz7oL7xV10l9xl593UyLuRaZH3ItMj70dmRGZGZkVmR9IicyJzIx9E5kXmRxZEPowsjHwUWRRZHFkSWRpJj3wcyYgsi2RGPoksj3wayYqsiKyMrIqsjqyJeF90R+iL+xI+6m/xJf2tPtGX8qV9Ge98WZ/kb/Pl/O2+vL/DV/B3+or+Ll/JV/ZV/BO+hW/pW/nWvo1/0rf1T/l2vr3v4J/2Hf0zvpPv7JP9s76Lf8539c/7bv4F392/6Hv4l3xP38v39i/7Pv4V39f38ym+vx/gX/UD/SA/2A/xQ/1rfph/3Q/3b/hUP8KP9G/6Uf4tP9q/7cf4sX6cf8eP9xP8RD/JT/ZT/FT/rp/m3/PT/ft+hp/pZ/nZPs3P8XP9B36en+8X+A/9Qv+RX+QX+yV+qU/3H/sMv8xn+k/8cv+pz/Ir/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/kdfqff5Xf7PX6v3+c/9/v9F/6A/9Jn+6/8Qf8Xf8h/7Q/7b3yO/9Yf8d/5o/57f8z/4I/7H/0Jf9Kf8j/50/5nf8af9ef8eX/B/+Iv+kv+Mv/NGmOMMcbY/xb1B9f7/4PPyd/WFQOEENfvLJLz9zU3F/zrfpBM6BgRQjzbr8ej/7Fq1UpJSfnr5Rr/mRS5mp/nb+IVooN4RiSL9qLcP+xvkOx1gf55fZGlRBC9U4jYq5V/FSv+vv7t/6T+k0+Py6gYnov/b+ovFiKxxNWcfOJqfLV++X9Sv1DbP+g/39dThWj3Nzlx4mp8tX6SeEo8J5L/y1cyxhhjjDHGGGN/NUhW6fZHr59LLBYiQV/NySuuxn/0+pwxxhhjjDHGGGPX3gu9end+Mjm5fTfe/Aub6v9/tMEb3vxpm2v9m4kxxhhjjDH2Z7t603+tO2GMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKv/xf/Tuxan5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi71v5XAAAA//8V2TSa") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000030c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socket(0x23, 0x0, 0x8) lseek(r0, 0x1000000, 0x0) keyctl$session_to_parent(0x12) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.548429189s ago: executing program 5 (id=714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x17, 0x0, 0x0, 0x0, 0xf9, 0x0, 0xfc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0xff, 0xff, 0x47, [0xfffffffe, 0x89ff]}}) 9.510361012s ago: executing program 3 (id=715): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0xffffffff, 0x8000}, 0xc) 9.307677636s ago: executing program 5 (id=717): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r3, 0x0, 0x0, 0x80002) socket$nl_route(0x10, 0x3, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0xa) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.208370012s ago: executing program 3 (id=718): socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 7.860802994s ago: executing program 5 (id=720): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 7.390868916s ago: executing program 1 (id=721): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f0000000040)='\x00', 0x200000, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)}) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000180)=0x6) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 6.435484271s ago: executing program 5 (id=723): r0 = openat(0xffffffffffffff9c, 0x0, 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000880)={0x7, [], 0x96, "ff9bf32cf00fd8"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="0491ecb4c09fca703cb258a2784cfa36dc552f143af778ec92db1f08caf2f583d48f4a65ef8426d711407b6045744f510da01da3ebc37e221ec36d7f4e59000eb1e29296082cb02633f81c92a69909aeff710e681a34f8a020f510b995ff6c6993f1a4bd049b8dfc6470b69bd1415827e5c5f1d573c8527fde3b57382850e20627ea2e43703bfeb9eeb2416766c869d590178c917136a5e6324a7352911a41f6dfaf7c64af1f6b7ca1f55584141269817a8bcd76b74ce96a6236956487a6b6c0906795a9e73ab8fc9020372699e0e23416fbc84b1708e88fb06346f4a15b06b58950f751153fd1fad9cdbc0314cd869f2e8ee1c365045c2d17b59128455741f80d0931335cacfb65c4f3595bdc2af6bd773cf0b8203eab5bc39793c563fb22962efac77249885e23773d23e0952fb4e9054ab999d8727135d4596f2ad3c597a6432e4929b375dcf6ab66805db1c297000ca98928337960d32e973e7fb4051859d6ab0db215288ff8598838a918714282a24c3987bf7f4b5994bad399b6f8cc5f62b235c04c4723562d1e1a722e5c6e6d6cb66976c7fe93e950e72faa6dfd22699700d87e0fb0b7c96c7139fedb343439edfb23e724d278a8d51241f26953b493d7fd4383e3567ea9be9365b3eb09fd13d39bb6e0e9d07c76af90de1ba8b61dd0a96755d1b1987bc5027398eccbe107edf2b550f5283a681a0557bc998794746d444d3094e0e951487c095d81d7bdd44386a2f4f3f42fa81b9980a830a9c9427b861b15f7686c2c59fd8dff64c91903dc16d9744f0565630985124fbde11eb8c894b26578a1cb1360c57e884fec28a70ec42dfdb2f6633ca94f718129079f2b9c91f95e49c7feea9c868639b6ccae3bf5af06c048aa8e1521d37891029c0ef41712edb2290be5565d9a101a190e054adaff7f562183cb6942199a9e69cc2f6b1f50fe4d71a27725c6e26d79d54476ab21daa568f2b30750d7bf7c2acefd489ec72a91b92882b2cfdd188bad1234c17a9958c9d3b74b36d65ce416cb8e04cd0f24fd02df261ce78a6a28f1f744e3128bade735f8c707567ead0f76c62a060dd8e79d6e1a001594b70a105bdcd1abf115eff812c3e7e0c954b47e126de5288d7d65aa1c4cdb2dad2c393cd0a642108cfd58764f672c0051fbdcbc4482a1c0cfcf8c2d0e2b8a8fd6603dd64116648b68bde7577676cb7dfdf92b1656a6cda62d20b417f6605a5ef2c9019ca8cc5e54fe5ca3d882b17f88725aad34194c9cb2ef456af076780ad009b18c5ff758263151f7fa61cc878a9c7c1b2bb6093beedea6ac8d0949a90a9760c114a89af7502c642f78c9da2680eb034a535d20ed2ddb5dd082cde7587e1b4200a95ff72642403fcb4113641978a7ce0c6498ec25630a0121dc4c8e8a1ffe6f8c037bff89faeb723b7cda6778a625afd1db52579c6541057b22adc0b40777bf20ea1e4974a25f3a46c5e3c0553fd38e3c8d1c514d45246085eded3b96a73e5f731347e4c558ee25a1500060fc35aca923dcc91aeb4ff82e5ca6c0cb2118c47c16fd5054304d83c8bdc1427d0354c5f8f1659593db9ef800d60234870a56b5cf46753473d87e8b7a70a6560be9548a070d628144d875279679e3bfed791aebb5cb573b347e15b6b5cb5b4464c67d6f3412369fafb53a44ea198cadc7442856afdde1a93e58271686b471ba07fb9f6ed30911862ac4ffef5800c1712723ee7fd69fd0da96d7b9dc175280888d2f020c3063d321f0fac2503556de2ec68e245efe2ba674b305336955dc205ca2b00dea67b1a69e1969562956928b7b28d91b1e4a75b449cc2de0dced2756c816b3670fc896df67491872ebfd0170579ce9d8f1a26b5418c96382079efadeb7c0f2e2dd14bc572a1372c926fe499e53df87181d36144bcdc15ecf6284db44dcb892296f43292673177f375b5bb05a305c7e18e87d0201c07264878f0ef0ce15f86feb200a83c587a158000c08df1bc2a3e71602b7404a332787e80225efef33261a7a6be692889bbdd53ee48542f86a6fef5554cf71e978b51340a201d171022392c2264fdaf338500cff54373acc671b615a9138d5a5b9528818fd4bfcd94323a6ac60d983d4ea263389a8218143f70198000bbebdc3cb7a162b144830b8aab5502aa17929e1b0afa1e4d915e3e56a05ad476eac7c5a40956995ba59ce5b65a1a8c41e699dd3d436fa083dac6ff43d2095cfaa0f71f6d78d8c58b1b63e15d5701590a6fe0603413e2c6e83287b466d41e0f1516a183757b30d5d3c617a2406cb85acc8ef1267a36927a0d5dda6890491c00ae88f2d486fe8b9de72a121931b869b51a7240a1e530eb888e715fcdd0aaba0ad4a931dcba94dfa4725ad59e07bbfd893c025930a651e777f165eccafba543edff682e4e2dccc0b5807a24784766ec3b44d4634077c54540c41780406f80c7948926cc50f6710ce977ac5dd91d8506feb629f9b56ea91c8b0af762ebbc7bd3e91612c30be08683be93f747cc5a8bd7f07341df55c7280b45a162dd5dd7fefdda7da7f5bd32008d6b86a8e879eec66a51b1b78bd0284059458eebb1a40828990289abe39786aacf0d61f902df8826d22a2000ee393e6d150dd8d08956cdc6394738fd1a47bb6467195c35f49d7e91d4eca580310b651c00937b4ceedf54cdfe6a4f73ea35b33d04a038dfc336fa0b8f9cfd27e6f9591875aa4db7412782f045e8df4127923e7b690bf27e1f3b39efd8d7dc107eb47df1c1620456f4cacbf03d8f5cad57061ccc4eed903f2a3a9674d7dad2220a958f95b0366b4b7fd77e1f487ac324f47f579e0dbe41a31471afe67f89a5216314db0bf10da9f59e0a034bf6771a2a2eace7e717acad59f6561e1e138a978f3b4cc7cdda7206f816ce7359713d4d7a6066e1286c1565ce89ed80111b203f6b47293242c082befa45aeeb94ec13753f01d77550d1d91a3ea955e632936f1011e92249e9d3699f7a1d424fa1b6d2e60bdd1af0dfdfd6425bdc140222c8d36edb8b3542b582a4baba745b3dd9764bd77d45e514bba56c49182295397f5a4040d951178922ed988b0fdf1718f3587a3df447546231ee00c5b1a8ae8e94595058bfb16ba61132513e8a22860f47eeedfe8da3e43fbed7a5281c093527745b0a0e4dc3c14caf364c3b7aa7ca83a2857663d4f691940b33a7508d54a18fe7d462ed13c6e9a033169c3f9160f51c59e15422e6fe1db9aaa073688f93a5c5f0d53289736ad4fedf5f19129a14e20b520c12f2c5cd691988736aec2b606e255f94c611a0cad83c2679202cf61ee97e47a594470bbc3daa3f2c482f0cd36323e293a23d7ee4608081dbdcd08d2a55c1ca1bb971d32dd9a8dd987750d74677ce27923a24b561a4430c1581392fa9b402fffd367b5488cd45d021194d93245311a82b27f3535d7e356e0134480acc2acdd271d3ec2470d7b248204f919ddf574deb2d787b1c3d75c1873fb6d15f087664b7db924d73077cc01d2a9e973317a127d434946e3f8908f0305242e216fb6e0315ee9a7df883870e415f7f2c0eb191c6033f72ae5ace5fba19b5715ea1b4e7a1d5c0a3b404b5f555194f190a5edcaad4e531cd64919b7c1f7b1ca4da6d4a5f95f38021dfd08977a14dbcff584cc4ab66e33cee34fd5b5d0ed9bedea65bf2ee7d7dca57eb1620226639e4bad34167bedffdd15ac5aa108749ab4cd64dcd16e6bf2a69bdcc6c1bdc47a83e8936c6d33863e544b338bd2fe597734f9f6f7795c9c13f54efa4852c42dcaf118b5fc31d29c51e103ca1c28dbb000652d00393420fe7fdbb9066f53ac2cf07472b62e150a26d513181f5d556bab195a1bfc9aed01f08f4ce038448372e55a15d8202bd630a992d9b4a7dd8b85a2252b1e5590b8e557a9e200c11b414adc4a59c9b6b04ac34ed5d563f73cf000ca9ebd9da7efb15da952e7d7d76e5af3081981a7b230740337bfb36296375606c16977a8d933cd4dbe2c3c3305b0885cb3ae72044c0d3a261d3f10d9e7fa3a1c626e789e869f007485dec6990b33b9eff6832711f5c0b0d82c641e0a76bb1ffd0558cc6145c44368418c141f431b3c7ca31fa1eb565d162dce7845ce32137311aaba6c141135bb8ee9a7ff837890616496e0aee3bcadfe5cb19560566807f5d586945cf4e817eac8b717ab267386e0027fa3c5e81ece70665f27b9fe90f5b65cb44aae427a88d37126c890aa36513beff884a1d028710169e369b2ee2c8f5fc7a2a7b2296b1bc61660a9664169f0695fe3a436c0f887d6eaffda5b6135f6f325a0bc5d9d496273f7a076f314263e496c254ca3b6b684e5263c5b2a6e899a46b60b7c14efbda3b7da4eb578d839c7ae23079413601b0baedfcb01768316fd411860b8d3a025bcc41a587b29b7b86f32ab0177656a5e72b91dd4b8d6f07fb818b59091da3dfb110e2af5896f5a4bc21b754f9a495d06328ef1b795a8eb695cd3fd7454eaee912a02108d067b63cc3aaaee2585896198de7f72fd1d75e3d34d46315132ce99487bdbe6348d3adf07ca091c3924e00a28ff92d8c8942c5781158e559d337129c4ef3cdb5806c296c452b27ad6383241aee8bc5ab07a14c436094f94672d7e97c8a2cd9d7dd9b7ad367f538c9194c068259cee626842ad315d92cc1a6049d236f92ca8d469db9362d189a21f16152e14cb5f6c9accb38f12727ba9f5868068a051a386d5b6883c63b30c0d2c102154351a93d3606d27691fb5c44c514833b268f1d4f10588ad02379f58481d62b9828951707f12f02edf20f4a870fc49be140c5910cf636fbc90ae5fd9ac20ce11398d6d701445eaa9eb0691a1c8dcdfc6422391d3804c1ef4c8ad9cf1b986ace65837fccb5120509edf625d07570d5c9e24100199530551c3b781168c3d3cb47944c459f954074a5398b19a27c80f75068626ce6c67d464dcb46f73bd9231743e1fc786da1d0a549ed4f5aa38645d35434c44766a77a601b0fe8c54976de67515103a45c6fe7f33dd2f20b52c55da21ee89a87f1065a679146820b73e954bbd2531f005699308fc23d9245887e55769c457a99d9fd093635d5ec564ad6aa27a27509011520d693f687768f213d4b0d3c34bbf50e1aa330ad468d3101f242ff57ef3aaefc7bef1e0e40f372e927de8dabf57ccebc5672088e342055e3e159549ed75cb913f360bbf9a2b1949a590b89ce301f731254a62fa638125cd40c5cf70f2275d2f3fb34b4e9477deabdd09193f7f877df3c0e5a99b795597d28fb25884c1088283bbb628be27b4363a2f42cdce8fb640d568234990baade374b59c17a9bf638c595d5d1e690dc71ecc47bb07865e2db0f289eaab10cf01a13054268ae3bea4e522f6dc74c37793d1da9bc8be1944ae59b620ac330d6ebc37ebbe498eff01f9b2a812e82d3ba66ce9364593327f2f4ef5e04145ec0ebfba9e770a02bc8f9c06069159f9810e772194ceb442d2cff9bf1833dff08a42f716aee8459f6545932b715c3f441376b705c665dc3a8479c8b5ecd6989c28cc7347e0c1d0b293fe09d4232b586034d417f6b58008339b15b18dc76f1714ec94fbfddf2656d1a0d9f1181c8a0486b88a648337ea1a910d02225a183121453cf950cc1737f3fb6cd3c209d8ee73d3d6d87a9a4940428cfc1799cd6293521e26e44ed6130fe65010df071d24b0e9ad0ef37cc13f853c927bddebe2f460d9aa7b1331bb631086ce67eede962a7c43a93a49f0325ea88761822807cfa67e75fc2e377af9aa5e17d77d385d0808520a28f786a520565eb3cebe948527c71e0fe74c0af015e0a7c87708719ef6d5cffe4b998ae3b464d6dc6837ffdce07d700800fb310c04762c3c9ab8e7df3304df315e23677217cbda3d20c054ce3cab81c1e6bd27ded8bc05fb27f7a9aab9ba566aa0984ca6989f68a6271c5855b271c3fcebc39133dd5b62ebaaadc366419e1a7c8154550b64f0f2fa07a56425b169fd3538908cf33793560e4a878cf6cd4ae0f01225210888faaab4dcd62c2b8ef49e55935bba1a80f88856d8d5e98d655fa2c95eddc110671fb89f9eecf3e0fe4e4afb4ca87174a18e7f4a0c026d054912341325f8108b1066411a9f0de7755c89ea62ed45b49f8704ee5ae0e644318a5261359dba56ecb033d9a0e5a50cee9dde707554b9b23389940cfaca787df81181257b2e5059d10ee22763d0fd679f4fe85fbaa95c698b84e4b9fd664bf6a4c103744d7cc373c5ddde11f4fbb3fc9638ea258b646b9124aa038a23cb1fc24d80e4bd6aef216493c80e02982da626f89f99fc9c56af57064410aa6b63b7b85e5b44cbbd7ef93bb3c8ac0fa5bd79a6837f747d0a07c44b6cb94c3692604c398f960da84148ae4892ba9d6f9092c34f41e3a4e37c18de9968e949cb5c48dadf004eba4cfe896773b1cf0101bbf2ee867654d476b6b6f2d9beef8d758a4078de0cfc8953d0b4d60df5ab8ba910580f25c81e7b33794f1e49dda2475a3d8673cff04e4afcbd38c5bf4ee9c8477a56f77f12941da57f5c82082cffc01a29b1c4ad29134ec81e84473573720fd09e76a86360ec715acff7418214351e68f5cbbedcfdc9cb2c08f5f34c9bea2d6c1b808f52c64a4078707bb43e6c6f3cf6e9713311059e8bf54d82eb11b27b08b659e260a4ea159ef4a4b7f911797370d77aa19f451dce6f974836e0920c6a1bec12a3629399dccc4ccbb8af05402af4e8aa5da559da875ea6dc2e6e366338938a5653b41a753b18cf8eff708d204fbf9896883c6d08fc390e83156485320751f0f278a030927111b638c11b9a500c32ecab69b554c8156e51f70a0cfe3daee2887c2fa49d8f75fabf8b6141ca45880299f397e405f313fe6b459f7026d2d84cfc3713b29e5ee5eca09019f2e04047711e1f4f4084e47136e7045d1d926f4bb75fb816a4a5ac785d4a14c6f6bcd601f15adda1e3adad72218580c808cc927b77390803b2343987b42d194daa92d49fd8884c01c4c0dd19ab76162ad1a0eea049dcdb8e7e21afe30f004a06341f9a46870381d15f58b56b3a1a23f511cb205b9bd3a778083e94052d2941a49f6c17f02418525d9a07559c5019c98e2c74e31e3ce8e35e593b92c5ade90b47c093e066c2b7557515029b5af982beb06303552f5258c63daf350ca2f8d665326c6ac942b2bd53a931ff8bd63cce3431fdcf62fc1bd7aa251038d43d937958bb5678b78ae474e8c96834349c1e3b073aa9d384e2f8922cb6e725e897f67a842438d90f1ba3a94512f2b3ed1832eb2af88ca3b041482d100dd5b6d9b9e7ed9df736dc81fdc142a031f4b1a235cb2dfeebd3eb6762aa02b2ecc7accb28a59ad59e12e56fdad6b4bf7bd2a38283847165df0df97b9ce752de4381d655fbbf2bd39832fea0afba738ea03ba835fdab2d85923ba791aa1726792935bf4527c60a12657726003fc3909e665405075f31361f34f13a56455d3f98e1b060519615c0957ecc98e41f15265a166f5fda1dbbfa6cf658720ee91c1c99b619ff17394f9e39b7c2dc77c506cdf96582cc047c3a400c46c579d5e42ec460b63dcadb57230887e4373dfa56e4c5354f7febc032e36fa8c7f2b9b04b143bc79de4de6f4c6cad3a77c7ca23447b8e1b6924ef2222a67a8fe8a96be1610c9622e6428524ffcf6aad4692dcafe22df496c5629dcc480adff8a9f5738b64853e7145cf84269cf4578f40b5197369fc9e9997f1babfca94eb3a45c5e4bebcd70ec7721a31886f24148b58bf4d40ecbb06a21fc866478ce2c388f02aa249580e738a3245e7209248c0f37b4e12a98304f4c85dd7e23166ac46d31a320aa17778cb94519a8d8cbb8c4b83cac7c5da2fcda9415ca28e7afd0d2beb671ebb392dfcf0b4d9381e43e91e0501a115f3b996ec9dedf90ecf6b525473934b82e2381399ae4502a317d231a67ce5abb2dd6afafd8122fbbd92672c71ec97b3591a5c373fc8238e8b12b16d1cefb7685ad31f73036ab0dc9f7f3869cf2a5d9d7b1df9759c41ccca9f31921af80bacfc5373ad931f603f53e6ce5b61cd049baa16f5d9cbbad81aa7fe36db5fc2639b4e22adfe70d86e07d979032144d7fc9138143afb6bfc295580bdd952b5451810721fd50061651c21ba250749bb5b4e0c17fb708f8919cb1478d5a21f2f7980bbbfccaca00b9aafa47fe4e71decc047abc766b6755486b7e08f09a30bd70181e4e500a1e5782c384767f51d11102df22a91c34262c182acedc232f8893929e0c41e65bf6af3a18a91f0816d1cee16a3973d49a79dd0bd66c722b853f6315d66d80b718322fca437149a08ab760468c5b0d6e50922c7399563d35c0f297ced066a644c3e3a725d9adf93ee662f6c6889e60fdb69bc3c8f9d20c9dcb7b9880709e21f7af3e3004296a74f97a3adcc5b045172752957dc587f167d1ec2267f6955e8d3e8104cbe90ef279993bf69becf6a2a8d08d2f912aba00bebb7e9508df212745902377f77fa18937970dffbf82fd501bade00360cf78703633f4a07182508949ff3ab53bc7db0917715a2eb2a0e722ab032571026490bf473030a8412434f8761e1da1f71f3204ed24ac96d9fc33bc7aac9be5dbd87f3aa62987e8c3525b84aeadf042e1dc724cbb6287a846cfdb1d0efc1af1779662bbdd6d8a20065ae0a1fe64ff32ba1c485c39e05eabaa37730810a1613fb9ac83889af2894660350ec8f779cbf39ef707af20562d60c36a8d86d891f856b3763127417b131504e71692afc0294ffa9d97d962e9847090dfb9b546402b3067caf88984a666ad5534840b0044fe023545e7b7bd31086ee976b000942ed45488c86b47eb3ab442d86ae86d384602746fc7c5b7daa6af05220b74fb0f077fcad1cb9c7e232ab02faf404dcd1542d8b93556c37dbe9329babd51dc1b3aa94cc760d95985790adf102ad8da9c14c5e31c7e99450e56e77244f5b0fd5889b9cdc461c9b48a10bac9c7fb2b8d3aee67fca1fc3daa8add06ae139e88431cf455b6e8d48e8dc9ca15848a9feecb8709d9b61bab1290baaa1bef68ec1ac5ad2859cc547b158a515cd4110c1bc245c1581acfc8b27d3109f7ecc39a594f57a7d53bafe80bb9c5e3d25fdeb1035166cf7d3488a790dc2f402f585ce2066f209a674a49f64bc10a19f4e828f786673d3a6c5e725b0abb4c422a0f6dd6e3d19f916950e72a75deac14ed7e33902db9ed664558028b7a52665476c19dbb0950f9596afed1d63d6999d25596124785a2a996f2be35afcf0b260167ad658cf55f9564f477e8568ecd583b4faab591a152a05949bbbe18b07fdbd31ea4f17afd117b836c91f574372899f3c9d57c8b1416e832e8ad21b5441342ec211eaa795af87b98d8ce7b6d6174add0ced1a71fa5ef019d1c3f1ae2b0bf87a53b2434373b8701769a3f4ac8803bd1d7faeac4208d21033bbb360bc373bd1a7775f96afb084f7ec06df4009b9121a7d7237fd596fcb4c40655d57e91b48e06714659f82580de7e75bb8825f04e0387fcadb988633cf7111eff667cf412942d33fa5383d32f097f5debdd8e3bf78e33e734b355de0be2aa971b255476118d8dcc7b0aeef6faab40c5f84dbec5f1ab79a7df99e692922ff3a919943edc73d5330cbbea16b3174f57efe72deead7ab784bab7de4abab1795a95a9f27a2dac6675057c4809af18616334882e0036d11bc7b70dc2f7c9d5e58eb3d97f16653c0ce064aa78daae969911e73a68780370d0817606d14e59c998b590ebb187b0b434e26c63e89c646171fa3c4659067bbc0a3500a01a345f101613264c7d5bc951c54a28bf7d2fc9e18a799ce5890a6d8d28372b223fb16616958a6d385a960cc93bac84ddc193641f4fd1c86c0cbe53104257c086dae488045c65884f71a3c112debe32189d12747df2944978cbcaf819acf57a181b6faf9574cad768ab9640a938882bd4085dbf1d639a7fc2bb1d602fe761501c59cbe258617abdfa70f55f9210eba9003c8bed01b2ca5ae3539a8a9d7def37f4e4d1ad2a5479c44e6978e958c6f9beba15a53e9c411ac3f6811cfffc487b6283afe83768f5c7b89c8aa97a9947703e88ab7df12acf3ef9a2ab5553ced5df360accb06041303004a57018370ea6e1f9237c5e33a95efdba18c408067e1c603217298a3db711db33f7f471b6fb87dd53b5919531708b998fc831f192f1fbc903fe3bf843d0c9bd524a173e5e70d0046849dcb90c5e922e633ba3b80771770c6b6684d1395320dcedf776ef7f02a7f792f4cb12200f15c2ffc78a3a240ce4a6a91cecbdaf95813e5f8f748f3ea534146b63831667ff043538cb69472772510fababa99f4a63e169f045315cd1fe3658b7ba147f4cc0d6d72646107133532a1d8962989fb8d422d1c9c15057ad2ecab1e98b78b800a699a26591dc9570779cae3e621fe3b12136d825f95af73e7d7a14f67d62a6d2e2a9bbb0065b50ab2612ef4fd86f4e10211e78588dd187c92901e29b10117fd7afa9101722941d82fe935199c77e371fbd03e4a7ac82f1a47ce321dc8a10c892af2a465352083b42d2b34eeb26ad6b6b26ff3f630edea73dafd260738cd8da8eecf2b0f7cab21abf2f02461b39982682a514231a14b3547c3c63e37053f2e942bb5d6d13470de2ab8947b897ad391a2236223c0f7d13539bf9471d66164ca6af2a0f1e23d899d21c56ec6f46ab24e92cfd79716d83616600632ed5ed6d3f1dbe8a45a9c60d03846d1445f6df829eac73a9266f1697e9d18412016c3616750d1dbb687c4a858c48715a1434ca04eb284d7571711b01382d3ea8ffb88236bfcf0114cbb69ae106bb2715deca31403954ff445d67a630fbaae2cc01cbff8c544c5fd2eb795bac186c25371839d77ff1beaa2c296d6e70ab7d7659f8521bbf7cacc350d7c7eb28c972edfcf855b58c6258219866e2e2ee0b82c48a42e1c786a4ae863a55f8e21e542266037f186b303d392bcf1cf76667d2e9295610fb698797dbdfd1a2ce3bee1cc9c298ac95faa9de30a05486815517b8c4de33569b7e39326a8abdcfb1f4416ea64587c24b0b921e908768e761583b06e852ec6b44b923643137cf2becad014b68e7877f8a3c624e7860df6723a13cfc8297151bd8fbaa94bebb896c1626a0c20dde78c8ba7912d424a2aef9c80bcf04cafda56e8fa85d1b532751baaa3c74486f9f8fa8ab643bc60a32e27ecc0bdc3dd8a95d6e868445bf8615d61b73adc6b23efe1cd99b2e982c1d1082a4b54abc03c58aefe901c54038026543de8f0f4b161bf5030826b42ba32dde0a38fdc1362ff7f06801eec31823453adb4426e94e3ea6a8e77992ca26d4b4dfa4a2ae76c3961d5b67e61a388cb004d8c4ef2429fa8565d7bcb7aac2e7cea788d3c64a6acedfc146b5ca89200b6270dfca9ad9e36d42fb97917241b21b94ad9189fd22b0c2e89c4617e835d7e47cad7d7a29df2c0a55c6175532868e4159f6e64be235f16065c7a54b6aefee2f5b8123be3c7a7aaf2f980beedda38624b4c6e4ddb57b8349f46e0725962ed0c5c9734ea1bd1d90a5a11111da14b52add364850a0c3283dadea58c2be65961893498494788c34c91f60aafcff544e1912e2332f3c35220b97a8464", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, &(0x7f0000000200)={0x18, 0x0, 0x400, {0x1cb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x80000) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) 5.526146744s ago: executing program 1 (id=724): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 4.797728573s ago: executing program 5 (id=725): syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f0000000140)={&(0x7f0000000100)=[{0x100000001, 0x6, 0xe, 0x3}], 0x1, 0x20, 0x2, 0x80000000}) 4.586067648s ago: executing program 3 (id=726): syz_emit_ethernet(0x6e, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, 0x0, 0x0) sendmsg$sock(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4814) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000001080)=ANY=[@ANYRES64], 0x0) alarm(0x64) 3.514985421s ago: executing program 6 (id=727): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 2.810989589s ago: executing program 5 (id=728): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x7) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, 0x0, 0x0) 2.780000661s ago: executing program 6 (id=729): r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 2.745574503s ago: executing program 1 (id=730): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xe400000e) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) clock_gettime(0x0, &(0x7f0000000400)) ppoll(&(0x7f00000003c0)=[{r0}, {r1, 0xc009}], 0x2, 0x0, 0x0, 0x0) 2.543676697s ago: executing program 1 (id=731): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket$phonet(0x23, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x20000000) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45) 2.234805488s ago: executing program 6 (id=732): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 926.870437ms ago: executing program 6 (id=734): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x971, &(0x7f0000006680)) accept$alg(r0, 0x0, 0x0) 855.780322ms ago: executing program 3 (id=735): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 845.500853ms ago: executing program 1 (id=736): close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) listen(r0, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 831.652244ms ago: executing program 6 (id=737): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x11, 0x5109, &(0x7f000000f400)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x2000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 6 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): BSSID 50:50:50:50:50:50 [ 83.281809][ T5769] veth0_vlan: entered promiscuous mode [ 83.325985][ T5771] veth0_vlan: entered promiscuous mode [ 83.337125][ T5769] veth1_vlan: entered promiscuous mode [ 83.364562][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.372451][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.390855][ T5771] veth1_vlan: entered promiscuous mode [ 83.399514][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.417445][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.473112][ T5771] veth0_macvtap: entered promiscuous mode [ 83.485986][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.489379][ T5771] veth1_macvtap: entered promiscuous mode [ 83.511293][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.572067][ T5769] veth0_macvtap: entered promiscuous mode [ 83.610455][ T5769] veth1_macvtap: entered promiscuous mode [ 83.624883][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.644555][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.663834][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.692676][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.710438][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.751942][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.774334][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.804082][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.826565][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.855431][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.878703][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.893792][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.905829][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.924412][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.953835][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.973774][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.993294][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.027042][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.036018][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.036864][ T5837] syz.3.5[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.064291][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.081162][ T5837] loop3: detected capacity change from 0 to 2048 [ 84.088524][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.120784][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.135491][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.146772][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.159966][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.178429][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.189779][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.201604][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.218009][ T5837] loop3: p2 < > p4 [ 84.232295][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.244058][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.246461][ T5837] loop3: p4 size 262144 extends beyond EOD, truncated [ 84.263146][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.290662][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.878322][ T51] Bluetooth: hci1: command tx timeout [ 84.878409][ T5085] Bluetooth: hci0: command tx timeout [ 84.884576][ T51] Bluetooth: hci3: command tx timeout [ 84.890103][ T5784] Bluetooth: hci2: command tx timeout [ 85.135353][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.237075][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 85.241630][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 85.262385][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.439010][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.463790][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.484246][ T5848] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.532081][ T5848] Zero length message leads to an empty skb [ 85.545347][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.553250][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.570860][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.595950][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.874001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 87.613139][ T5784] Bluetooth: hci2: command tx timeout [ 87.619346][ T5784] Bluetooth: hci0: command tx timeout [ 87.623400][ T5780] Bluetooth: hci1: command tx timeout [ 87.624941][ T5784] Bluetooth: hci3: command tx timeout [ 87.732977][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 87.758581][ T5859] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8'. [ 89.433974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 89.553692][ C0] sched: RT throttling activated [ 90.434426][ T5872] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.602869][ T5873] loop1: detected capacity change from 0 to 2048 [ 90.680237][ T5873] loop1: p2 < > p4 [ 90.698042][ T5873] loop1: p4 size 262144 extends beyond EOD, truncated [ 91.435798][ T5878] loop3: detected capacity change from 0 to 32768 [ 91.456119][ T5878] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 91.464556][ T5878] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 91.519137][ T5878] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 91.542177][ T786] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 91.573818][ T786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 91.614883][ T786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 91.635006][ T786] gfs2: fsid=syz:syz.0: jid=0: Done [ 91.644208][ T5878] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 91.876011][ T5878] gfs2: fsid=syz:syz.0: found 1 quota changes [ 91.950103][ T5886] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 92.148612][ T8] cfg80211: failed to load regulatory.db [ 92.403805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.062451][ T5772] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 93.062451][ T5772] inode = 11 2339 [ 93.062451][ T5772] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 93.083023][ T5772] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 93.096161][ T5772] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5772 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 93.114063][ T5772] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 93.145413][ T5772] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 93.180071][ T5772] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 93.208518][ T5772] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 93.242878][ T5772] gfs2: fsid=syz:syz.0: File system withdrawn [ 93.267823][ T5772] CPU: 1 PID: 5772 Comm: syz-executor Not tainted syzkaller #0 [ 93.275528][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.285721][ T5772] Call Trace: [ 93.289020][ T5772] [ 93.291963][ T5772] dump_stack_lvl+0x18c/0x250 [ 93.296668][ T5772] ? kobject_uevent_env+0x363/0x8b0 [ 93.301890][ T5772] ? show_regs_print_info+0x20/0x20 [ 93.307121][ T5772] ? load_image+0x400/0x400 [ 93.311640][ T5772] ? kobject_uevent_env+0x363/0x8b0 [ 93.316857][ T5772] gfs2_withdraw+0xb24/0x13d0 [ 93.321574][ T5772] ? gfs2_lm+0x240/0x240 [ 93.325857][ T5772] ? preempt_schedule+0xc0/0xd0 [ 93.330839][ T5772] ? gfs2_consist_inode_i+0xf5/0x110 [ 93.336279][ T5772] gfs2_inode_refresh+0xb89/0x1000 [ 93.341593][ T5772] ? gfs2_inode_metasync+0xf0/0xf0 [ 93.346728][ T5772] ? gfs2_glock_nq+0xd4f/0x1420 [ 93.351612][ T5772] gfs2_instantiate+0x162/0x220 [ 93.356480][ T5772] gfs2_glock_wait+0x1d4/0x2a0 [ 93.361261][ T5772] do_sync+0x4c6/0xe50 [ 93.365346][ T5772] ? gfs2_quota_sync+0x411/0x5a0 [ 93.370302][ T5772] ? bh_get+0x760/0x760 [ 93.374484][ T5772] ? __lock_acquire+0x7d40/0x7d40 [ 93.379709][ T5772] ? do_raw_spin_lock+0x11f/0x2c0 [ 93.384770][ T5772] ? gfs2_quota_sync+0x411/0x5a0 [ 93.389743][ T5772] ? do_raw_spin_unlock+0x121/0x230 [ 93.395086][ T5772] gfs2_quota_sync+0x411/0x5a0 [ 93.399877][ T5772] gfs2_sync_fs+0x4c/0xb0 [ 93.404228][ T5772] sync_filesystem+0xea/0x220 [ 93.408942][ T5772] generic_shutdown_super+0x6f/0x2b0 [ 93.414279][ T5772] kill_block_super+0x44/0x90 [ 93.418986][ T5772] deactivate_locked_super+0x97/0x100 [ 93.424374][ T5772] cleanup_mnt+0x43b/0x4d0 [ 93.428815][ T5772] task_work_run+0x1d4/0x260 [ 93.433515][ T5772] ? task_work_cancel+0x220/0x220 [ 93.438568][ T5772] exit_to_user_mode_loop+0xe6/0x110 [ 93.443963][ T5772] exit_to_user_mode_prepare+0xee/0x180 [ 93.449540][ T5772] syscall_exit_to_user_mode+0x1a/0x50 [ 93.455017][ T5772] do_syscall_64+0x61/0xa0 [ 93.459459][ T5772] ? clear_bhb_loop+0x40/0x90 [ 93.464151][ T5772] ? clear_bhb_loop+0x40/0x90 [ 93.468841][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.474747][ T5772] RIP: 0033:0x7fb6e499da57 [ 93.479189][ T5772] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 93.498806][ T5772] RSP: 002b:00007ffc0fbd3ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.507234][ T5772] RAX: 0000000000000000 RBX: 00007fb6e4a32048 RCX: 00007fb6e499da57 [ 93.515214][ T5772] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0fbd40b0 [ 93.523302][ T5772] RBP: 00007ffc0fbd40b0 R08: 00007ffc0fbd50b0 R09: 00000000ffffffff [ 93.531442][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0fbd5140 [ 93.539424][ T5772] R13: 00007fb6e4a32048 R14: 000000000001685b R15: 00007ffc0fbd5180 [ 93.547505][ T5772] [ 94.554426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.963912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 96.524739][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 96.596981][ T5903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.20'. [ 101.094756][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.111892][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.129160][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.137815][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.164108][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 101.184501][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.781632][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 101.826135][ T5940] netlink: 64 bytes leftover after parsing attributes in process `syz.2.31'. [ 102.872486][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 103.284667][ T5784] Bluetooth: hci4: command tx timeout [ 105.203929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.401532][ T5784] Bluetooth: hci4: command tx timeout [ 106.059308][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.092178][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.107803][ T5930] bridge_slave_0: entered allmulticast mode [ 106.131798][ T5930] bridge_slave_0: entered promiscuous mode [ 106.160738][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.183850][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.200687][ T5930] bridge_slave_1: entered allmulticast mode [ 106.214769][ T5930] bridge_slave_1: entered promiscuous mode [ 106.354172][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.477318][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.746558][ T5930] team0: Port device team_slave_0 added [ 106.769481][ T5930] team0: Port device team_slave_1 added [ 106.810829][ T5770] syz-executor (5770) used greatest stack depth: 20712 bytes left [ 106.918533][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.455063][ T5784] Bluetooth: hci4: command tx timeout [ 107.619559][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.626779][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.674335][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.740062][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.802264][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.813731][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.874872][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.953241][ T5930] hsr_slave_0: entered promiscuous mode [ 107.979845][ T5930] hsr_slave_1: entered promiscuous mode [ 107.986379][ T5930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.012766][ T5930] Cannot create hsr debugfs directory [ 108.116712][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.366621][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.274685][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 109.525888][ T5784] Bluetooth: hci4: command tx timeout [ 110.319710][ T5930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.604599][ T5930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.764838][ T5930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.793087][ T5930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.310318][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.435324][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.451744][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.458983][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.515831][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.523136][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.425509][ T12] hsr_slave_0: left promiscuous mode [ 112.432004][ T12] hsr_slave_1: left promiscuous mode [ 112.445211][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.476134][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.499758][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.552088][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.567796][ T12] bridge_slave_1: left allmulticast mode [ 112.574224][ T12] bridge_slave_1: left promiscuous mode [ 112.593857][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.635044][ T12] bridge_slave_0: left allmulticast mode [ 112.644224][ T12] bridge_slave_0: left promiscuous mode [ 112.656766][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.750504][ T12] veth1_macvtap: left promiscuous mode [ 112.764296][ T12] veth0_macvtap: left promiscuous mode [ 112.770011][ T12] veth1_vlan: left promiscuous mode [ 112.794721][ T12] veth0_vlan: left promiscuous mode [ 113.544549][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 115.049891][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.117206][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.181104][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.247879][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.699476][ T12] bond0 (unregistering): Released all slaves [ 115.885332][ T5930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.684383][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.029213][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 118.106077][ T5930] veth0_vlan: entered promiscuous mode [ 118.225120][ T5930] veth1_vlan: entered promiscuous mode [ 118.826181][ T5930] veth0_macvtap: entered promiscuous mode [ 118.859616][ T5930] veth1_macvtap: entered promiscuous mode [ 118.976595][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.014079][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.028934][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.076243][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.105460][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.126525][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.152511][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.287008][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.333162][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.373772][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.409845][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.421868][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.439218][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.452679][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.551684][ T5930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.560776][ T5930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.583758][ T5930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.592610][ T5930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.116072][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.247884][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.497561][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.534959][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.582528][ T6118] loop4: detected capacity change from 0 to 32768 [ 121.608573][ T6118] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 121.616903][ T6118] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 121.638698][ T6118] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 121.649463][ T5811] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 121.664385][ T5811] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 121.954250][ T5811] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 289ms [ 122.087341][ T5811] gfs2: fsid=syz:syz.0: jid=0: Done [ 122.311440][ T6118] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 122.602641][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 122.692974][ T6118] gfs2: fsid=syz:syz.0: found 1 quota changes [ 123.623309][ T5930] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 123.623309][ T5930] inode = 11 2339 [ 123.623309][ T5930] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 123.658955][ T5930] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 123.671086][ T5930] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5930 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 123.682654][ T5930] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 123.699782][ T5930] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 123.721998][ T5930] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 123.741420][ T5930] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 123.749967][ T5930] gfs2: fsid=syz:syz.0: File system withdrawn [ 123.810200][ T5930] CPU: 1 PID: 5930 Comm: syz-executor Not tainted syzkaller #0 [ 123.817834][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.828025][ T5930] Call Trace: [ 123.831344][ T5930] [ 123.834324][ T5930] dump_stack_lvl+0x18c/0x250 [ 123.839077][ T5930] ? kobject_uevent_env+0x363/0x8b0 [ 123.844339][ T5930] ? show_regs_print_info+0x20/0x20 [ 123.849596][ T5930] ? load_image+0x400/0x400 [ 123.854148][ T5930] ? kobject_uevent_env+0x363/0x8b0 [ 123.859598][ T5930] gfs2_withdraw+0xb24/0x13d0 [ 123.864349][ T5930] ? gfs2_lm+0x240/0x240 [ 123.868639][ T5930] ? preempt_schedule+0xc0/0xd0 [ 123.873549][ T5930] ? gfs2_consist_inode_i+0xf5/0x110 [ 123.879013][ T5930] gfs2_inode_refresh+0xb89/0x1000 [ 123.884190][ T5930] ? gfs2_inode_metasync+0xf0/0xf0 [ 123.890120][ T5930] ? gfs2_glock_nq+0xd4f/0x1420 [ 123.895109][ T5930] gfs2_instantiate+0x162/0x220 [ 123.900119][ T5930] gfs2_glock_wait+0x1d4/0x2a0 [ 123.905024][ T5930] do_sync+0x4c6/0xe50 [ 123.909303][ T5930] ? gfs2_quota_sync+0x411/0x5a0 [ 123.914451][ T5930] ? bh_get+0x760/0x760 [ 123.918738][ T5930] ? __lock_acquire+0x7d40/0x7d40 [ 123.923928][ T5930] ? do_raw_spin_lock+0x11f/0x2c0 [ 123.929188][ T5930] ? gfs2_quota_sync+0x411/0x5a0 [ 123.934273][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 123.939626][ T5930] gfs2_quota_sync+0x411/0x5a0 [ 123.944452][ T5930] gfs2_sync_fs+0x4c/0xb0 [ 123.948830][ T5930] sync_filesystem+0xea/0x220 [ 123.953826][ T5930] generic_shutdown_super+0x6f/0x2b0 [ 123.959244][ T5930] kill_block_super+0x44/0x90 [ 123.963978][ T5930] deactivate_locked_super+0x97/0x100 [ 123.969491][ T5930] cleanup_mnt+0x43b/0x4d0 [ 123.973969][ T5930] task_work_run+0x1d4/0x260 [ 123.978615][ T5930] ? task_work_cancel+0x220/0x220 [ 123.983687][ T5930] ? exit_to_user_mode_loop+0x3b/0x110 [ 123.989204][ T5930] exit_to_user_mode_loop+0xe6/0x110 [ 123.994541][ T5930] exit_to_user_mode_prepare+0xee/0x180 [ 124.000129][ T5930] syscall_exit_to_user_mode+0x1a/0x50 [ 124.005656][ T5930] do_syscall_64+0x61/0xa0 [ 124.010128][ T5930] ? clear_bhb_loop+0x40/0x90 [ 124.014848][ T5930] ? clear_bhb_loop+0x40/0x90 [ 124.019571][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.025510][ T5930] RIP: 0033:0x7fad5c39da57 [ 124.030055][ T5930] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 124.050672][ T5930] RSP: 002b:00007ffedd498a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.059138][ T5930] RAX: 0000000000000000 RBX: 00007fad5c432048 RCX: 00007fad5c39da57 [ 124.067171][ T5930] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedd498b30 [ 124.075189][ T5930] RBP: 00007ffedd498b30 R08: 00007ffedd499b30 R09: 00000000ffffffff [ 124.083207][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedd499bc0 [ 124.091221][ T5930] R13: 00007fad5c432048 R14: 000000000001e0d2 R15: 00007ffedd499c00 [ 124.099245][ T5930] [ 128.358865][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 128.698989][ T6187] loop1: detected capacity change from 0 to 32768 [ 128.759762][ T6187] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.768466][ T6187] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 128.796967][ T6187] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 128.806798][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 128.859882][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 129.000329][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms [ 129.026433][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 129.051628][ T6187] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 129.268328][ T6187] gfs2: fsid=syz:syz.0: found 1 quota changes [ 130.120109][ T5769] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 130.120109][ T5769] inode = 11 2339 [ 130.120109][ T5769] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 130.240539][ T5769] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 130.451704][ T5769] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5769 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 130.564419][ T5769] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 130.573019][ T5769] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 130.771093][ T5769] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 130.832390][ T5769] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 130.861885][ T5769] gfs2: fsid=syz:syz.0: File system withdrawn [ 130.880360][ T5769] CPU: 0 PID: 5769 Comm: syz-executor Not tainted syzkaller #0 [ 130.887982][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.898176][ T5769] Call Trace: [ 130.901598][ T5769] [ 130.904594][ T5769] dump_stack_lvl+0x18c/0x250 [ 130.909343][ T5769] ? kobject_uevent_env+0x363/0x8b0 [ 130.914591][ T5769] ? show_regs_print_info+0x20/0x20 [ 130.919828][ T5769] ? load_image+0x400/0x400 [ 130.924450][ T5769] ? kobject_uevent_env+0x363/0x8b0 [ 130.929792][ T5769] gfs2_withdraw+0xb24/0x13d0 [ 130.934542][ T5769] ? gfs2_lm+0x240/0x240 [ 130.938843][ T5769] ? preempt_schedule+0xc0/0xd0 [ 130.943952][ T5769] ? gfs2_consist_inode_i+0xf5/0x110 [ 130.949422][ T5769] gfs2_inode_refresh+0xb89/0x1000 [ 130.954537][ T5769] ? gfs2_inode_metasync+0xf0/0xf0 [ 130.959649][ T5769] ? gfs2_glock_nq+0xd4f/0x1420 [ 130.964525][ T5769] gfs2_instantiate+0x162/0x220 [ 130.969554][ T5769] gfs2_glock_wait+0x1d4/0x2a0 [ 130.974325][ T5769] do_sync+0x4c6/0xe50 [ 130.978397][ T5769] ? gfs2_quota_sync+0x411/0x5a0 [ 130.983333][ T5769] ? bh_get+0x760/0x760 [ 130.987487][ T5769] ? __lock_acquire+0x7d40/0x7d40 [ 130.992518][ T5769] ? do_raw_spin_lock+0x11f/0x2c0 [ 130.997542][ T5769] ? gfs2_quota_sync+0x411/0x5a0 [ 131.002477][ T5769] ? do_raw_spin_unlock+0x121/0x230 [ 131.007682][ T5769] gfs2_quota_sync+0x411/0x5a0 [ 131.012463][ T5769] gfs2_sync_fs+0x4c/0xb0 [ 131.016815][ T5769] sync_filesystem+0xea/0x220 [ 131.021491][ T5769] generic_shutdown_super+0x6f/0x2b0 [ 131.026773][ T5769] kill_block_super+0x44/0x90 [ 131.031463][ T5769] deactivate_locked_super+0x97/0x100 [ 131.036860][ T5769] cleanup_mnt+0x43b/0x4d0 [ 131.041299][ T5769] task_work_run+0x1d4/0x260 [ 131.046017][ T5769] ? task_work_cancel+0x220/0x220 [ 131.051052][ T5769] ? exit_to_user_mode_loop+0x3b/0x110 [ 131.056532][ T5769] exit_to_user_mode_loop+0xe6/0x110 [ 131.061832][ T5769] exit_to_user_mode_prepare+0xee/0x180 [ 131.067379][ T5769] syscall_exit_to_user_mode+0x1a/0x50 [ 131.072837][ T5769] do_syscall_64+0x61/0xa0 [ 131.077254][ T5769] ? clear_bhb_loop+0x40/0x90 [ 131.081937][ T5769] ? clear_bhb_loop+0x40/0x90 [ 131.086616][ T5769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.092507][ T5769] RIP: 0033:0x7fa00919da57 [ 131.096918][ T5769] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 131.116547][ T5769] RSP: 002b:00007ffd4b0b3d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 131.125143][ T5769] RAX: 0000000000000000 RBX: 00007fa009232048 RCX: 00007fa00919da57 [ 131.133309][ T5769] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4b0b3e50 [ 131.141318][ T5769] RBP: 00007ffd4b0b3e50 R08: 00007ffd4b0b4e50 R09: 00000000ffffffff [ 131.149403][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4b0b4ee0 [ 131.157468][ T5769] R13: 00007fa009232048 R14: 000000000001fa96 R15: 00007ffd4b0b4f20 [ 131.165478][ T5769] [ 133.057080][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.064101][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.161975][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 137.305969][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.315589][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.326630][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.335368][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.441498][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.450883][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.631131][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 138.078286][ T6270] netlink: 64 bytes leftover after parsing attributes in process `syz.3.98'. [ 139.597870][ T51] Bluetooth: hci3: command tx timeout [ 141.684044][ T51] Bluetooth: hci3: command tx timeout [ 141.789301][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.931416][ T6263] chnl_net:caif_netlink_parms(): no params data found [ 142.027156][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.108955][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.122448][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.131325][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.139163][ T6263] bridge_slave_0: entered allmulticast mode [ 142.146847][ T6263] bridge_slave_0: entered promiscuous mode [ 142.184766][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.191986][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.199723][ T6263] bridge_slave_1: entered allmulticast mode [ 142.207431][ T6263] bridge_slave_1: entered promiscuous mode [ 142.249752][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.385723][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.402715][ T6316] 9pnet: Could not find request transport: fd0x0000000000000005 [ 142.412327][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.559750][ T6263] team0: Port device team_slave_0 added [ 142.589574][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 142.694413][ T6263] team0: Port device team_slave_1 added [ 142.707576][ T6320] netlink: 64 bytes leftover after parsing attributes in process `syz.4.108'. [ 142.888746][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.921027][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.273963][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.513153][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.543849][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.610715][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.765268][ T51] Bluetooth: hci3: command tx timeout [ 144.037582][ T6263] hsr_slave_0: entered promiscuous mode [ 144.068011][ T6343] fuse: Bad value for 'fd' [ 144.073022][ T6263] hsr_slave_1: entered promiscuous mode [ 145.120168][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 145.137884][ T6360] netlink: 64 bytes leftover after parsing attributes in process `syz.3.118'. [ 145.844823][ T51] Bluetooth: hci3: command tx timeout [ 147.285639][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 147.351523][ T6385] netlink: 64 bytes leftover after parsing attributes in process `syz.3.127'. [ 147.528102][ T6263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.734067][ T6263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.748423][ T6263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.780235][ T6263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.009650][ T59] hsr_slave_0: left promiscuous mode [ 148.032055][ T59] hsr_slave_1: left promiscuous mode [ 148.050384][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.071071][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.097153][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.106804][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.117597][ T59] bridge_slave_1: left allmulticast mode [ 148.123367][ T59] bridge_slave_1: left promiscuous mode [ 148.139607][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.160865][ T59] bridge_slave_0: left allmulticast mode [ 148.166826][ T59] bridge_slave_0: left promiscuous mode [ 148.172787][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.225698][ T59] veth1_macvtap: left promiscuous mode [ 148.238405][ T59] veth0_macvtap: left promiscuous mode [ 148.252350][ T59] veth1_vlan: left promiscuous mode [ 148.265252][ T59] veth0_vlan: left promiscuous mode [ 151.575709][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 151.618010][ T6427] netlink: 64 bytes leftover after parsing attributes in process `syz.4.135'. [ 151.752491][ T59] team0 (unregistering): Port device team_slave_1 removed [ 151.843441][ T59] team0 (unregistering): Port device team_slave_0 removed [ 151.920323][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.001702][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.633952][ T59] bond0 (unregistering): Released all slaves [ 152.831750][ T6395] syzkaller0: entered promiscuous mode [ 154.263009][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 154.306914][ T6445] netlink: 64 bytes leftover after parsing attributes in process `syz.1.143'. [ 154.819825][ T6443] loop4: detected capacity change from 0 to 32768 [ 154.852148][ T6443] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 154.864387][ T6443] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 154.916087][ T6443] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 154.932575][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 154.941216][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 155.017064][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 75ms [ 155.032579][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 155.058745][ T6443] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 155.369935][ T6443] gfs2: fsid=syz:syz.0: found 1 quota changes [ 155.620637][ T5930] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 155.620637][ T5930] inode = 11 2339 [ 155.620637][ T5930] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 155.646248][ T5930] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 155.675581][ T5930] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5930 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 155.687264][ T5930] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 155.696318][ T5930] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 155.735529][ T5930] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 155.745238][ T5930] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 155.753044][ T5930] gfs2: fsid=syz:syz.0: File system withdrawn [ 155.761982][ T5930] CPU: 0 PID: 5930 Comm: syz-executor Not tainted syzkaller #0 [ 155.769601][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.779790][ T5930] Call Trace: [ 155.783125][ T5930] [ 155.786132][ T5930] dump_stack_lvl+0x18c/0x250 [ 155.790876][ T5930] ? kobject_uevent_env+0x363/0x8b0 [ 155.796131][ T5930] ? show_regs_print_info+0x20/0x20 [ 155.801560][ T5930] ? load_image+0x400/0x400 [ 155.806114][ T5930] ? kobject_uevent_env+0x363/0x8b0 [ 155.811377][ T5930] gfs2_withdraw+0xb24/0x13d0 [ 155.816131][ T5930] ? gfs2_lm+0x240/0x240 [ 155.820423][ T5930] ? preempt_schedule+0xc0/0xd0 [ 155.825330][ T5930] ? gfs2_consist_inode_i+0xf5/0x110 [ 155.830681][ T5930] gfs2_inode_refresh+0xb89/0x1000 [ 155.835953][ T5930] ? gfs2_inode_metasync+0xf0/0xf0 [ 155.841193][ T5930] ? gfs2_glock_nq+0xd4f/0x1420 [ 155.846394][ T5930] gfs2_instantiate+0x162/0x220 [ 155.851440][ T5930] gfs2_glock_wait+0x1d4/0x2a0 [ 155.856311][ T5930] do_sync+0x4c6/0xe50 [ 155.860402][ T5930] ? gfs2_quota_sync+0x411/0x5a0 [ 155.865357][ T5930] ? bh_get+0x760/0x760 [ 155.869524][ T5930] ? __lock_acquire+0x7d40/0x7d40 [ 155.874557][ T5930] ? do_raw_spin_lock+0x11f/0x2c0 [ 155.879599][ T5930] ? gfs2_quota_sync+0x411/0x5a0 [ 155.884724][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 155.889940][ T5930] gfs2_quota_sync+0x411/0x5a0 [ 155.894731][ T5930] gfs2_sync_fs+0x4c/0xb0 [ 155.899399][ T5930] sync_filesystem+0xea/0x220 [ 155.904173][ T5930] generic_shutdown_super+0x6f/0x2b0 [ 155.909711][ T5930] kill_block_super+0x44/0x90 [ 155.914489][ T5930] deactivate_locked_super+0x97/0x100 [ 155.919989][ T5930] cleanup_mnt+0x43b/0x4d0 [ 155.924462][ T5930] task_work_run+0x1d4/0x260 [ 155.929279][ T5930] ? task_work_cancel+0x220/0x220 [ 155.934440][ T5930] ? exit_to_user_mode_loop+0x3b/0x110 [ 155.939947][ T5930] exit_to_user_mode_loop+0xe6/0x110 [ 155.945516][ T5930] exit_to_user_mode_prepare+0xee/0x180 [ 155.951089][ T5930] syscall_exit_to_user_mode+0x1a/0x50 [ 155.956563][ T5930] do_syscall_64+0x61/0xa0 [ 155.961001][ T5930] ? clear_bhb_loop+0x40/0x90 [ 155.965709][ T5930] ? clear_bhb_loop+0x40/0x90 [ 155.970401][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.976306][ T5930] RIP: 0033:0x7fad5c39da57 [ 155.980761][ T5930] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 156.000420][ T5930] RSP: 002b:00007ffedd498a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 156.008921][ T5930] RAX: 0000000000000000 RBX: 00007fad5c432048 RCX: 00007fad5c39da57 [ 156.017029][ T5930] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedd498b30 [ 156.025106][ T5930] RBP: 00007ffedd498b30 R08: 00007ffedd499b30 R09: 00000000ffffffff [ 156.033086][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedd499bc0 [ 156.041168][ T5930] R13: 00007fad5c432048 R14: 0000000000025f58 R15: 00007ffedd499c00 [ 156.049199][ T5930] [ 156.791460][ T6468] loop4: detected capacity change from 0 to 32768 [ 156.809922][ T6468] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 156.822110][ T6468] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 156.885112][ T6468] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 156.899614][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 156.908983][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 157.049980][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms [ 157.084839][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 157.093910][ T6468] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 157.290649][ T6459] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 157.317132][ T6459] syzkaller0: entered promiscuous mode [ 157.322925][ T6459] syzkaller0: entered allmulticast mode [ 157.380128][ T6468] gfs2: fsid=syz:syz.0: found 1 quota changes [ 157.534063][ T5930] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 157.534063][ T5930] inode = 11 2339 [ 157.534063][ T5930] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 157.565663][ T5930] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 157.580838][ T5930] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5930 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 157.596861][ T5930] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 157.606973][ T5930] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 157.621878][ T5930] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 157.631137][ T5930] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 157.638957][ T5930] gfs2: fsid=syz:syz.0: File system withdrawn [ 157.645311][ T5930] CPU: 0 PID: 5930 Comm: syz-executor Not tainted syzkaller #0 [ 157.652901][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.662980][ T5930] Call Trace: [ 157.666265][ T5930] [ 157.669205][ T5930] dump_stack_lvl+0x18c/0x250 [ 157.673902][ T5930] ? kobject_uevent_env+0x363/0x8b0 [ 157.679120][ T5930] ? show_regs_print_info+0x20/0x20 [ 157.684368][ T5930] ? load_image+0x400/0x400 [ 157.688908][ T5930] ? kobject_uevent_env+0x363/0x8b0 [ 157.694125][ T5930] gfs2_withdraw+0xb24/0x13d0 [ 157.698816][ T5930] ? gfs2_lm+0x240/0x240 [ 157.703085][ T5930] ? gfs2_consist_inode_i+0xf5/0x110 [ 157.708477][ T5930] gfs2_inode_refresh+0xb89/0x1000 [ 157.713610][ T5930] ? gfs2_inode_metasync+0xf0/0xf0 [ 157.718868][ T5930] ? gfs2_glock_nq+0xd4f/0x1420 [ 157.723737][ T5930] gfs2_instantiate+0x162/0x220 [ 157.728701][ T5930] gfs2_glock_wait+0x1d4/0x2a0 [ 157.733489][ T5930] do_sync+0x4c6/0xe50 [ 157.737661][ T5930] ? gfs2_quota_sync+0x411/0x5a0 [ 157.742614][ T5930] ? bh_get+0x760/0x760 [ 157.746788][ T5930] ? __lock_acquire+0x7d40/0x7d40 [ 157.751912][ T5930] ? do_raw_spin_lock+0x11f/0x2c0 [ 157.757043][ T5930] ? gfs2_quota_sync+0x411/0x5a0 [ 157.762001][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 157.767215][ T5930] gfs2_quota_sync+0x411/0x5a0 [ 157.772102][ T5930] gfs2_sync_fs+0x4c/0xb0 [ 157.776450][ T5930] sync_filesystem+0xea/0x220 [ 157.781147][ T5930] generic_shutdown_super+0x6f/0x2b0 [ 157.786455][ T5930] kill_block_super+0x44/0x90 [ 157.791146][ T5930] deactivate_locked_super+0x97/0x100 [ 157.796707][ T5930] cleanup_mnt+0x43b/0x4d0 [ 157.801257][ T5930] task_work_run+0x1d4/0x260 [ 157.805883][ T5930] ? task_work_cancel+0x220/0x220 [ 157.810941][ T5930] ? exit_to_user_mode_loop+0x3b/0x110 [ 157.816434][ T5930] exit_to_user_mode_loop+0xe6/0x110 [ 157.821749][ T5930] exit_to_user_mode_prepare+0xee/0x180 [ 157.827316][ T5930] syscall_exit_to_user_mode+0x1a/0x50 [ 157.832791][ T5930] do_syscall_64+0x61/0xa0 [ 157.837400][ T5930] ? clear_bhb_loop+0x40/0x90 [ 157.842155][ T5930] ? clear_bhb_loop+0x40/0x90 [ 157.846855][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.852761][ T5930] RIP: 0033:0x7fad5c39da57 [ 157.857186][ T5930] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 157.876983][ T5930] RSP: 002b:00007ffedd498a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 157.885411][ T5930] RAX: 0000000000000000 RBX: 00007fad5c432048 RCX: 00007fad5c39da57 [ 157.893389][ T5930] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedd498b30 [ 157.901456][ T5930] RBP: 00007ffedd498b30 R08: 00007ffedd499b30 R09: 00000000ffffffff [ 157.909525][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedd499bc0 [ 157.917523][ T5930] R13: 00007fad5c432048 R14: 00000000000266fb R15: 00007ffedd499c00 [ 157.925551][ T5930] [ 158.431404][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 158.479562][ T6484] netlink: 64 bytes leftover after parsing attributes in process `syz.4.151'. [ 159.170547][ T6503] xt_ipcomp: unknown flags 1D [ 160.102068][ T6509] xt_ipcomp: unknown flags 1D [ 161.484705][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.588499][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.064977][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.072272][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.275645][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.283156][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.323178][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 162.396087][ T6524] netlink: 64 bytes leftover after parsing attributes in process `syz.3.160'. [ 162.904439][ T6535] loop4: detected capacity change from 0 to 128 [ 162.949541][ T6535] ======================================================= [ 162.949541][ T6535] WARNING: The mand mount option has been deprecated and [ 162.949541][ T6535] and is ignored by this kernel. Remove the mand [ 162.949541][ T6535] option from the mount to silence this warning. [ 162.949541][ T6535] ======================================================= [ 163.123093][ T6535] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 163.221300][ T6535] hpfs: filesystem error: improperly stopped [ 163.255227][ T6535] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 163.263490][ T6535] hpfs: You really don't want any checks? You are crazy... [ 163.325079][ T6535] hpfs: Code page index out of array [ 163.330461][ T6535] hpfs: code page support is disabled [ 163.382150][ T6535] hpfs: hpfs_map_4sectors(): unaligned read [ 163.389524][ T6535] hpfs: hpfs_map_4sectors(): unaligned read [ 163.418641][ T6535] hpfs: filesystem error: unable to find root dir [ 164.360009][ T6535] hpfs: hpfs_map_4sectors(): unaligned read [ 164.806372][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.955138][ T6556] xt_ipcomp: unknown flags 1D [ 166.256944][ T6573] loop3: detected capacity change from 0 to 32768 [ 166.334273][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 166.368540][ T6573] JBD2: Ignoring recovery information on journal [ 166.420280][ T6576] netlink: 64 bytes leftover after parsing attributes in process `syz.1.170'. [ 166.465425][ T6573] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 166.616720][ T6263] veth0_vlan: entered promiscuous mode [ 166.701882][ T6263] veth1_vlan: entered promiscuous mode [ 167.005094][ T6263] veth0_macvtap: entered promiscuous mode [ 167.026927][ T6263] veth1_macvtap: entered promiscuous mode [ 167.378812][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 167.397203][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.652007][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.723135][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.799616][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.859736][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.896277][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.922219][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.961346][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.972156][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.990727][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.001673][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.020835][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.031798][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.075266][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.161878][ T6263] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.233784][ T6263] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.262307][ T6263] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.360282][ T6263] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.395469][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.402720][ T6605] loop1: detected capacity change from 0 to 256 [ 169.457836][ T6605] exfat: Deprecated parameter 'utf8' [ 169.469438][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.510823][ T6605] exfat: Unexpected value for 'utf8' [ 169.728523][ T6606] process 'syz.1.174' launched './file0' with NULL argv: empty string added [ 170.079807][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.254685][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.449996][ T6609] loop3: detected capacity change from 0 to 256 [ 170.507196][ T6609] exfat: Deprecated parameter 'utf8' [ 170.512561][ T6609] exfat: Unexpected value for 'utf8' [ 172.033514][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 172.265870][ T6630] netlink: 64 bytes leftover after parsing attributes in process `syz.3.178'. [ 172.364567][ T6635] loop5: detected capacity change from 0 to 256 [ 172.384918][ T6635] exfat: Deprecated parameter 'utf8' [ 172.390291][ T6635] exfat: Unexpected value for 'utf8' [ 174.979856][ T6663] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.056279][ T6664] loop1: detected capacity change from 0 to 64 [ 175.150116][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 175.222367][ T6668] netlink: 64 bytes leftover after parsing attributes in process `syz.3.188'. [ 175.405781][ T6664] syz.1.186: attempt to access beyond end of device [ 175.405781][ T6664] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 175.419952][ T6664] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 175.476524][ T6664] syz.1.186: attempt to access beyond end of device [ 175.476524][ T6664] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 175.490804][ T6664] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 176.260339][ T6676] loop3: detected capacity change from 0 to 32768 [ 176.295613][ T6676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.189 (6676) [ 176.326981][ T6676] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.338682][ T6676] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 176.347514][ T6676] BTRFS info (device loop3): using free space tree [ 176.467685][ T6676] BTRFS info (device loop3): enabling ssd optimizations [ 176.475660][ T6676] BTRFS info (device loop3): auto enabling async discard [ 176.792686][ T6700] loop5: detected capacity change from 0 to 32768 [ 176.866264][ T6700] JBD2: Ignoring recovery information on journal [ 177.161921][ T6700] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 178.410510][ T6263] ocfs2: Unmounting device (7,5) on (node local) [ 178.585059][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.935086][ T6720] tipc: Failed to remove unknown binding: 66,0,0/0:1949064848/1949064849 [ 179.864617][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.197'. [ 179.945479][ T6726] netlink: 64 bytes leftover after parsing attributes in process `syz.5.197'. [ 181.334428][ T6742] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.343755][ T6742] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.352479][ T6742] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.361567][ T6742] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.897312][ T6748] loop1: detected capacity change from 0 to 32768 [ 181.936427][ T6748] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.202 (6748) [ 181.970929][ T6748] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.982041][ T6748] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 181.990941][ T6748] BTRFS info (device loop1): using free space tree [ 182.228596][ T6748] BTRFS info (device loop1): enabling ssd optimizations [ 182.236407][ T6748] BTRFS info (device loop1): auto enabling async discard [ 182.646039][ T6769] loop5: detected capacity change from 0 to 32768 [ 183.321776][ T6769] JBD2: Ignoring recovery information on journal [ 183.385411][ T6769] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 183.982358][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.023250][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.037257][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.072910][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.182625][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.194769][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.203556][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.515675][ T6263] ocfs2: Unmounting device (7,5) on (node local) [ 185.132179][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.206'. [ 185.249558][ T6792] netlink: 64 bytes leftover after parsing attributes in process `syz.5.206'. [ 185.386957][ T6788] fuse: Unknown parameter 'grou00000000000000000000' [ 185.761116][ T6801] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.209'. [ 186.304501][ T5784] Bluetooth: hci1: command tx timeout [ 186.615006][ T3463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.479344][ T3463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.742112][ T3463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.394027][ T5784] Bluetooth: hci1: command tx timeout [ 188.467322][ T3463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.845015][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 189.230140][ T6833] netlink: 64 bytes leftover after parsing attributes in process `syz.3.215'. [ 189.368700][ T6778] chnl_net:caif_netlink_parms(): no params data found [ 190.414057][ T5784] Bluetooth: hci1: command tx timeout [ 190.543062][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.552201][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.560239][ T6778] bridge_slave_0: entered allmulticast mode [ 190.586670][ T6778] bridge_slave_0: entered promiscuous mode [ 191.694625][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.739938][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.781221][ T6778] bridge_slave_1: entered allmulticast mode [ 191.803059][ T6778] bridge_slave_1: entered promiscuous mode [ 192.173343][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.258673][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.396750][ T6872] loop5: detected capacity change from 0 to 64 [ 192.520229][ T6778] team0: Port device team_slave_0 added [ 192.537016][ T5784] Bluetooth: hci1: command tx timeout [ 192.570417][ T6869] loop1: detected capacity change from 0 to 32768 [ 192.579137][ T6869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.222 (6869) [ 192.596688][ T6869] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.607262][ T6869] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 192.616246][ T6869] BTRFS info (device loop1): using free space tree [ 192.683582][ T6778] team0: Port device team_slave_1 added [ 192.772919][ T6872] syz.5.223: attempt to access beyond end of device [ 192.772919][ T6872] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 192.787559][ T6872] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 192.876558][ T6872] syz.5.223: attempt to access beyond end of device [ 192.876558][ T6872] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 192.891733][ T6872] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 193.268176][ T6869] BTRFS info (device loop1): enabling ssd optimizations [ 193.275377][ T6869] BTRFS info (device loop1): auto enabling async discard [ 194.119592][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.151568][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.249570][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.427764][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.468076][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.225'. [ 194.477125][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.514276][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.521372][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.601308][ T6901] netlink: 64 bytes leftover after parsing attributes in process `syz.5.225'. [ 194.649185][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.732046][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.565441][ T5782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (5782) [ 195.790882][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 195.876753][ T6912] netlink: 64 bytes leftover after parsing attributes in process `syz.1.233'. [ 195.987804][ T6778] hsr_slave_0: entered promiscuous mode [ 196.035162][ T6778] hsr_slave_1: entered promiscuous mode [ 196.073871][ T6778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.081516][ T6778] Cannot create hsr debugfs directory [ 196.162251][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 196.241016][ T6917] netlink: 64 bytes leftover after parsing attributes in process `syz.3.235'. [ 196.392229][ T3463] hsr_slave_0: left promiscuous mode [ 196.406547][ T3463] hsr_slave_1: left promiscuous mode [ 196.449003][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.466987][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.496328][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.524344][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.546216][ T3463] bridge_slave_1: left allmulticast mode [ 196.563008][ T3463] bridge_slave_1: left promiscuous mode [ 196.618906][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.631724][ T3463] bridge_slave_0: left allmulticast mode [ 196.639866][ T3463] bridge_slave_0: left promiscuous mode [ 196.648170][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.693209][ T3463] veth1_macvtap: left promiscuous mode [ 196.700223][ T3463] veth0_macvtap: left promiscuous mode [ 196.708260][ T3463] veth1_vlan: left promiscuous mode [ 196.714179][ T3463] veth0_vlan: left promiscuous mode [ 198.463565][ T6934] loop1: detected capacity change from 0 to 32768 [ 198.491985][ T6934] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.503909][ T6934] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 198.512926][ T6934] BTRFS info (device loop1): using free space tree [ 198.521612][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 198.589776][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 198.688797][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.710855][ T6934] BTRFS info (device loop1): enabling ssd optimizations [ 198.718217][ T6934] BTRFS info (device loop1): auto enabling async discard [ 199.021710][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.738678][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.121417][ T3463] bond0 (unregistering): Released all slaves [ 201.375231][ T6778] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.388764][ T6778] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.404775][ T6778] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.471969][ T6778] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.686403][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 201.692541][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 202.353272][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.237'. [ 202.420898][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.428140][ T6971] netlink: 64 bytes leftover after parsing attributes in process `syz.5.237'. [ 202.731009][ T6976] loop1: detected capacity change from 0 to 256 [ 202.744287][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.969522][ T28] audit: type=1800 audit(1775318774.233:2): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.238" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=1048602 res=0 errno=0 [ 203.025397][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.033760][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.078018][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.085269][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.973816][ T7001] loop3: detected capacity change from 0 to 64 [ 205.194844][ T7006] syz.3.242: attempt to access beyond end of device [ 205.194844][ T7006] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 205.209321][ T7006] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 205.223752][ T7006] syz.3.242: attempt to access beyond end of device [ 205.223752][ T7006] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 205.237611][ T7006] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 205.833391][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.445136][ T7038] loop1: detected capacity change from 0 to 256 [ 209.253280][ T6778] veth0_vlan: entered promiscuous mode [ 209.275343][ T7038] futex_wake_op: syz.1.248 tries to shift op by -1; fix this program [ 210.241708][ T6778] veth1_vlan: entered promiscuous mode [ 211.255154][ T6778] veth0_macvtap: entered promiscuous mode [ 211.299516][ T6778] veth1_macvtap: entered promiscuous mode [ 211.411575][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.442143][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.499833][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.063837][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.075966][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.127590][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.160153][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.176513][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.193731][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.206326][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.217794][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.227780][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.240770][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.253029][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.344626][ T6778] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.413873][ T6778] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.444681][ T6778] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.473953][ T6778] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.070851][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.120379][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.319850][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.379786][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.916465][ T7103] loop6: detected capacity change from 0 to 32768 [ 213.963285][ T7103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.198 (7103) [ 214.147066][ T7103] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.158301][ T7103] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 214.167219][ T7103] BTRFS info (device loop6): using free space tree [ 215.178480][ T7103] BTRFS info (device loop6): enabling ssd optimizations [ 215.186100][ T7103] BTRFS info (device loop6): auto enabling async discard [ 215.291759][ T7125] loop5: detected capacity change from 0 to 512 [ 216.108602][ T7125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.144210][ T7125] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.244503][ T6778] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.481269][ T7139] fuse: Bad value for 'fd' [ 217.492242][ T6263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.929394][ T7151] loop6: detected capacity change from 0 to 512 [ 218.015961][ T7151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.084179][ T7151] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.143951][ T6778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.154369][ T7169] loop1: detected capacity change from 0 to 256 [ 219.660113][ T7169] exfat: Deprecated parameter 'utf8' [ 219.678502][ T7169] exfat: Unexpected value for 'utf8' [ 220.407867][ T7179] loop6: detected capacity change from 0 to 32768 [ 220.467658][ T7179] JBD2: Ignoring recovery information on journal [ 220.550163][ T7179] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 221.635068][ T6778] ocfs2: Unmounting device (7,6) on (node local) [ 221.721294][ T7190] loop1: detected capacity change from 0 to 512 [ 222.372992][ T7195] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.271'. [ 222.670521][ T7190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.542259][ T7190] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.155713][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.195952][ T7223] loop6: detected capacity change from 0 to 512 [ 225.247368][ T7223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.326314][ T7223] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.884281][ T6778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.423079][ T7248] loop1: detected capacity change from 0 to 32768 [ 227.617026][ T7248] JBD2: Ignoring recovery information on journal [ 228.068287][ T7248] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 228.519067][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 228.602127][ T7259] loop3: detected capacity change from 0 to 1024 [ 229.007787][ T7259] fuse: Bad value for 'fd' [ 229.225021][ T3463] hfsplus: b-tree write err: -5, ino 25 [ 229.231763][ T3463] hfsplus: b-tree write err: -5, ino 4 [ 229.260998][ T3463] hfsplus: b-tree write err: -5, ino 2 [ 230.470591][ T7273] loop3: detected capacity change from 0 to 1024 [ 230.622533][ T7273] fuse: Bad value for 'rootmode' [ 230.767147][ T3516] hfsplus: b-tree write err: -5, ino 25 [ 230.791683][ T3516] hfsplus: b-tree write err: -5, ino 4 [ 230.818997][ T3516] hfsplus: b-tree write err: -5, ino 2 [ 230.990209][ T7283] loop3: detected capacity change from 0 to 64 [ 231.109031][ T7284] syz.3.288: attempt to access beyond end of device [ 231.109031][ T7284] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 231.176841][ T7284] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 231.207046][ T7284] syz.3.288: attempt to access beyond end of device [ 231.207046][ T7284] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 231.224465][ T7284] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 231.602601][ T7276] loop5: detected capacity change from 0 to 32768 [ 231.653506][ T7289] loop3: detected capacity change from 0 to 512 [ 231.744290][ T7276] JBD2: Ignoring recovery information on journal [ 231.780901][ T7287] loop6: detected capacity change from 0 to 4096 [ 231.877568][ T7289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.929514][ T7289] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.951662][ T6037] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.983017][ T7276] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 232.634640][ T7298] loop1: detected capacity change from 0 to 4096 [ 233.166541][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.729793][ T6263] ocfs2: Unmounting device (7,5) on (node local) [ 234.478480][ T7316] loop6: detected capacity change from 0 to 256 [ 234.504640][ T7316] exfat: Deprecated parameter 'utf8' [ 234.697850][ T7319] loop3: detected capacity change from 0 to 32768 [ 234.705475][ T7316] exfat: Unexpected value for 'utf8' [ 234.939308][ T7319] JBD2: Ignoring recovery information on journal [ 235.022069][ T7320] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.296'. [ 235.217803][ T7319] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 235.830122][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 236.813524][ T7343] loop1: detected capacity change from 0 to 64 [ 236.934364][ T7345] loop3: detected capacity change from 0 to 64 [ 237.035744][ T7349] syz.1.299: attempt to access beyond end of device [ 237.035744][ T7349] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 237.050377][ T7349] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 237.070149][ T7349] syz.1.299: attempt to access beyond end of device [ 237.070149][ T7349] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 237.084279][ T7349] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 237.887219][ T7351] syz.3.300: attempt to access beyond end of device [ 237.887219][ T7351] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 237.918428][ T7351] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 238.028693][ T7351] syz.3.300: attempt to access beyond end of device [ 238.028693][ T7351] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 238.043478][ T7351] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 238.515898][ T7357] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.302'. [ 239.003201][ T7356] loop5: detected capacity change from 0 to 256 [ 239.023816][ T7356] exfat: Deprecated parameter 'utf8' [ 239.029184][ T7356] exfat: Unexpected value for 'utf8' [ 241.767286][ T7374] loop3: detected capacity change from 0 to 256 [ 241.803088][ T8] IPVS: starting estimator thread 0... [ 241.841565][ T7373] loop5: detected capacity change from 0 to 512 [ 241.959498][ T7375] IPVS: using max 17 ests per chain, 40800 per kthread [ 241.967938][ T7374] futex_wake_op: syz.3.305 tries to shift op by -1; fix this program [ 242.033269][ T7373] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 243.591424][ T7386] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 246.577957][ T7402] loop1: detected capacity change from 0 to 4096 [ 246.645495][ T5782] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.652334][ T7407] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.664544][ T7407] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.673553][ T7407] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.682592][ T7407] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.094523][ T7414] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.315'. [ 247.459395][ T7413] loop5: detected capacity change from 0 to 8 [ 247.651673][ T7413] SQUASHFS error: lzo decompression failed, data probably corrupt [ 247.670698][ T7413] SQUASHFS error: Failed to read block 0x62b: -5 [ 247.703969][ T7413] SQUASHFS error: Unable to read metadata cache entry [629] [ 247.711327][ T7413] SQUASHFS error: Unable to read inode 0x11f [ 249.421472][ T7437] loop1: detected capacity change from 0 to 32768 [ 249.656014][ T7437] JBD2: Ignoring recovery information on journal [ 249.826723][ T7437] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 250.034856][ T7438] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.320'. [ 250.238583][ T7445] loop5: detected capacity change from 0 to 256 [ 250.319460][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 250.434721][ T28] audit: type=1800 audit(1775318821.693:3): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.321" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=1048611 res=0 errno=0 [ 250.647192][ T7450] fuse: Unknown parameter '0x0000000000000003' [ 251.960809][ T7462] Illegal XDP return value 4294967262 on prog (id 8) dev syz_tun, expect packet loss! [ 252.345674][ T7459] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.311'. [ 253.921874][ T9] IPVS: starting estimator thread 0... [ 253.936455][ T7473] loop1: detected capacity change from 0 to 512 [ 253.957633][ T7473] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 254.455765][ T7474] IPVS: using max 33 ests per chain, 79200 per kthread [ 254.503877][ T7475] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 255.928206][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.935545][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.516666][ T7494] loop1: detected capacity change from 0 to 64 [ 256.742124][ T7496] syz.1.330: attempt to access beyond end of device [ 256.742124][ T7496] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 256.757487][ T7496] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 256.773227][ T7496] syz.1.330: attempt to access beyond end of device [ 256.773227][ T7496] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 256.786930][ T7496] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 257.694151][ T7500] loop6: detected capacity change from 0 to 32768 [ 257.704020][ T7500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.331 (7500) [ 257.718755][ T7500] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.729063][ T7500] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 257.737875][ T7500] BTRFS info (device loop6): using free space tree [ 257.894846][ T7500] BTRFS info (device loop6): enabling ssd optimizations [ 257.902012][ T7500] BTRFS info (device loop6): auto enabling async discard [ 258.650062][ T7525] loop3: detected capacity change from 0 to 4096 [ 259.228866][ T7529] loop5: detected capacity change from 0 to 512 [ 259.321591][ T7503] capability: warning: `syz.1.332' uses 32-bit capabilities (legacy support in use) [ 260.114694][ T7529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.203913][ T7529] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.231997][ T7541] loop1: detected capacity change from 0 to 512 [ 260.272112][ T6778] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.398993][ T7541] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 262.410213][ T7545] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 263.536882][ T6263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.350803][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 264.351308][ T7567] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.339'. [ 265.057993][ T7575] loop1: detected capacity change from 0 to 64 [ 267.091148][ T7592] loop1: detected capacity change from 0 to 512 [ 267.226892][ T7593] loop5: detected capacity change from 0 to 32768 [ 267.266526][ T7593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.345 (7593) [ 267.318036][ T7593] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.328546][ T7593] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 267.337591][ T7593] BTRFS info (device loop5): using free space tree [ 267.725373][ T7593] BTRFS info (device loop5): enabling ssd optimizations [ 267.732413][ T7593] BTRFS info (device loop5): auto enabling async discard [ 267.991680][ T7592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.024092][ T7592] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.467349][ T6263] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 272.680040][ T7641] loop5: detected capacity change from 0 to 4096 [ 272.700292][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.748609][ T7656] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.352'. [ 274.901543][ T7669] loop6: detected capacity change from 0 to 512 [ 275.041386][ T7669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.083852][ T7678] loop5: detected capacity change from 0 to 256 [ 275.084075][ T7669] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.091593][ T7678] exfat: Deprecated parameter 'utf8' [ 275.106860][ T7678] exfat: Unexpected value for 'utf8' [ 275.153813][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 275.183432][ T5782] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.509994][ T6778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.572294][ T7688] loop3: detected capacity change from 0 to 512 [ 276.592534][ T7688] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 276.752860][ T5814] IPVS: starting estimator thread 0... [ 277.675068][ T7689] IPVS: using max 16 ests per chain, 38400 per kthread [ 278.104567][ T7692] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 280.790774][ T7705] loop1: detected capacity change from 0 to 32768 [ 280.865056][ T7705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.359 (7705) [ 281.030837][ T7705] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.041267][ T7705] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 281.050309][ T7705] BTRFS info (device loop1): using free space tree [ 281.452781][ T7705] BTRFS info (device loop1): enabling ssd optimizations [ 281.460633][ T7705] BTRFS info (device loop1): auto enabling async discard [ 284.800363][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.637291][ T5782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (5782) [ 289.088418][ T7770] loop6: detected capacity change from 0 to 256 [ 289.301494][ T7770] futex_wake_op: syz.6.370 tries to shift op by -1; fix this program [ 291.158205][ T7778] loop1: detected capacity change from 0 to 2048 [ 292.698521][ T7778] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.233778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 297.030181][ T7795] loop1: detected capacity change from 0 to 32768 [ 297.161783][ T7795] JBD2: Ignoring recovery information on journal [ 297.366940][ T7795] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 297.736969][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 299.353706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 299.886609][ T7836] loop3: detected capacity change from 0 to 32768 [ 299.899957][ T7836] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 300.123023][ T5782] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.850653][ T7836] loop3: detected capacity change from 0 to 2048 [ 301.863140][ T7836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.099392][ T7862] loop1: detected capacity change from 0 to 256 [ 302.197351][ T7862] futex_wake_op: syz.1.384 tries to shift op by -1; fix this program [ 307.572239][ T7898] loop1: detected capacity change from 0 to 512 [ 307.668455][ T7898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.682252][ T7898] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.219416][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 309.920140][ T7934] loop5: detected capacity change from 0 to 32768 [ 309.961592][ T7934] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 310.659893][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.780202][ T5782] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 311.068936][ T7939] loop1: detected capacity change from 0 to 32768 [ 311.131729][ T7939] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 311.142091][ T7939] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 311.151226][ T7939] BTRFS info (device loop1): using free space tree [ 311.254422][ T7939] BTRFS info (device loop1): enabling ssd optimizations [ 311.261551][ T7939] BTRFS info (device loop1): auto enabling async discard [ 312.207879][ T7962] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.398'. [ 312.611817][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 312.985693][ T7971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.400'. [ 313.635225][ T7979] loop6: detected capacity change from 0 to 32768 [ 313.674453][ T7979] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.402 (7979) [ 313.742370][ T7979] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.752643][ T7979] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 313.761559][ T7979] BTRFS info (device loop6): using free space tree [ 313.897735][ T7979] BTRFS info (device loop6): enabling ssd optimizations [ 313.904837][ T7979] BTRFS info (device loop6): auto enabling async discard [ 313.965623][ T7977] loop3: detected capacity change from 0 to 4096 [ 316.858801][ T6778] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.957298][ T8020] loop5: detected capacity change from 0 to 512 [ 317.061208][ T5782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop6 scanned by udevd (5782) [ 317.090774][ T8020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.104487][ T8020] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.525001][ T8034] loop3: detected capacity change from 0 to 32768 [ 317.555378][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.570378][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.590063][ T8034] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 318.351033][ T8037] tipc: Failed to remove unknown binding: 66,0,0/0:978418233/978418234 [ 318.464529][ T5786] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 318.495385][ T8041] tipc: Failed to remove unknown binding: 66,0,0/0:978418233/978418234 [ 319.169124][ T8044] loop3: detected capacity change from 0 to 32768 [ 319.208387][ T8044] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 320.417275][ T8048] loop3: detected capacity change from 0 to 2048 [ 320.725834][ T8048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.175332][ T6263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.082049][ T8090] loop6: detected capacity change from 0 to 32768 [ 326.091909][ T8090] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 326.102395][ T8090] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 326.111107][ T8090] BTRFS info (device loop6): using free space tree [ 327.086206][ T8090] BTRFS info (device loop6): enabling ssd optimizations [ 327.093262][ T8090] BTRFS info (device loop6): auto enabling async discard [ 328.928729][ T8126] loop3: detected capacity change from 0 to 32768 [ 329.101044][ T8126] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.426 (8126) [ 330.254030][ T6778] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.561389][ T6037] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (6037) [ 331.212417][ T8153] loop3: detected capacity change from 0 to 256 [ 331.291200][ T8153] futex_wake_op: syz.3.429 tries to shift op by -1; fix this program [ 331.400659][ T8135] loop5: detected capacity change from 0 to 32768 [ 331.483391][ T8135] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.417 (8135) [ 333.191156][ T8169] loop3: detected capacity change from 0 to 512 [ 333.284796][ T8169] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 334.017683][ T8172] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 336.036003][ T8189] loop6: detected capacity change from 0 to 4096 [ 339.694927][ T8200] loop3: detected capacity change from 0 to 32768 [ 339.781895][ T8200] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 339.812519][ T8200] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 339.831841][ T8200] BTRFS info (device loop3): using free space tree [ 339.907274][ T8200] BTRFS info (device loop3): enabling ssd optimizations [ 339.914908][ T8200] BTRFS info (device loop3): auto enabling async discard [ 342.849417][ T8260] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.444'. [ 343.308640][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.098955][ T8290] loop5: detected capacity change from 0 to 32768 [ 346.140754][ T8290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.450 (8290) [ 346.175131][ T8290] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.185489][ T8290] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 346.194278][ T8290] BTRFS info (device loop5): using free space tree [ 346.312059][ T8290] BTRFS info (device loop5): enabling ssd optimizations [ 346.319157][ T8290] BTRFS info (device loop5): auto enabling async discard [ 347.694231][ T6263] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 350.279120][ T8343] loop6: detected capacity change from 0 to 2048 [ 350.368006][ T8343] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 350.423985][ T8343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.640972][ T8347] loop1: detected capacity change from 0 to 512 [ 350.708870][ T8347] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 350.809895][ T8349] tipc: Failed to remove unknown binding: 66,0,0/0:169568981/169568982 [ 351.330180][ T8349] tipc: Failed to remove unknown binding: 66,0,0/0:169568981/169568982 [ 351.423225][ T8351] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 359.191355][ T8411] loop5: detected capacity change from 0 to 512 [ 359.290585][ T8411] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 360.493937][ T8420] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 362.173295][ T8455] loop5: detected capacity change from 0 to 2048 [ 362.250118][ T8455] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 362.361426][ T8455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.284958][ T8466] loop3: detected capacity change from 0 to 32768 [ 363.311805][ T8466] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.480 (8466) [ 363.358503][ T8466] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 363.368853][ T8466] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 363.377649][ T8466] BTRFS info (device loop3): using free space tree [ 363.520294][ T8466] BTRFS info (device loop3): enabling ssd optimizations [ 363.527542][ T8466] BTRFS info (device loop3): auto enabling async discard [ 364.123845][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 364.191958][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.351529][ T8515] loop1: detected capacity change from 0 to 512 [ 366.401090][ T8515] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 366.612232][ T8518] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 369.956030][ T8542] loop3: detected capacity change from 0 to 2048 [ 370.041920][ T8542] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 370.123140][ T8542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.508973][ T8548] loop6: detected capacity change from 0 to 32768 [ 370.532979][ T8548] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.492 (8548) [ 370.592255][ T8548] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.603865][ T8548] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 370.613437][ T8548] BTRFS info (device loop6): using free space tree [ 370.754518][ T8548] BTRFS info (device loop6): enabling ssd optimizations [ 370.761571][ T8548] BTRFS info (device loop6): auto enabling async discard [ 373.593696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 374.335420][ T6778] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.513339][ T8595] loop5: detected capacity change from 0 to 512 [ 375.014803][ T8595] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 375.974628][ T8604] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 377.115162][ T8618] loop5: detected capacity change from 0 to 512 [ 377.315729][ T8618] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 377.735547][ T8618] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 378.382998][ T8633] loop6: detected capacity change from 0 to 512 [ 378.450204][ T8633] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 378.610065][ T8635] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 378.836877][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.869059][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.155008][ T8649] loop6: detected capacity change from 0 to 256 [ 381.234678][ T8651] tipc: Failed to remove unknown binding: 66,0,0/0:3825041372/3825041373 [ 381.355555][ T8649] futex_wake_op: syz.6.507 tries to shift op by -1; fix this program [ 387.453067][ T8691] loop1: detected capacity change from 0 to 256 [ 387.597325][ T8691] futex_wake_op: syz.1.521 tries to shift op by -1; fix this program [ 390.864627][ T8727] loop3: detected capacity change from 0 to 512 [ 391.513640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 392.428747][ T8727] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 392.933147][ T8737] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 397.391441][ T8774] loop3: detected capacity change from 0 to 2048 [ 397.537271][ T8774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.833225][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.540005][ T8802] loop3: detected capacity change from 0 to 32768 [ 400.633920][ T8802] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 400.893882][ T8802] XFS (loop3): Ending clean mount [ 400.938203][ T8802] XFS (loop3): Quotacheck needed: Please wait. [ 400.938858][ T8815] loop1: detected capacity change from 0 to 128 [ 401.142877][ T8818] loop5: detected capacity change from 0 to 32768 [ 401.196963][ T5784] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 401.235121][ T8818] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 401.434506][ T8802] XFS (loop3): Quotacheck: Done. [ 401.642620][ T8818] XFS (loop5): Ending clean mount [ 401.825351][ T8815] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 402.048454][ T8815] FAT-fs (loop1): Filesystem has been set read-only [ 402.288010][ T6263] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 404.749205][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.537'. [ 405.055060][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 405.110054][ T5784] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 405.341953][ T5784] Bluetooth: hci3: unexpected event for opcode 0x203b [ 406.162980][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 406.172319][ T5784] Bluetooth: hci0: command tx timeout [ 408.131612][ T8875] xt_policy: output policy not valid in PREROUTING and INPUT [ 408.574557][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 408.924346][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 409.001583][ T8] usb 4-1: config 0 has an invalid interface number: 162 but max is 0 [ 409.020939][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.032687][ T8] usb 4-1: config 0 has no interface number 0 [ 409.034308][ T8868] loop1: detected capacity change from 0 to 32768 [ 409.054550][ T8] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 409.073939][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.117252][ T8] usb 4-1: Product: syz [ 409.121530][ T8] usb 4-1: Manufacturer: syz [ 409.183987][ T8868] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 409.224127][ T8] usb 4-1: SerialNumber: syz [ 409.245613][ T8] usb 4-1: config 0 descriptor?? [ 409.266706][ T8] usb 4-1: bad CDC descriptors [ 409.278308][ T8] usb 4-1: unsupported MDLM descriptors [ 409.367869][ T8868] XFS (loop1): Ending clean mount [ 409.399188][ T8868] XFS (loop1): Quotacheck needed: Please wait. [ 409.499229][ T8868] XFS (loop1): Quotacheck: Done. [ 409.537373][ T28] audit: type=1800 audit(1775318980.803:4): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.546" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 409.655971][ T28] audit: type=1800 audit(1775318980.923:5): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.546" name="file1" dev="loop1" ino=4429 res=0 errno=0 [ 410.083884][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 410.158040][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 410.309603][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 410.348324][ T8] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 410.386569][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.404205][ T8] usb 7-1: Product: syz [ 410.428224][ T8] usb 7-1: Manufacturer: syz [ 410.433894][ T8] usb 7-1: SerialNumber: syz [ 410.462065][ T8] usb 7-1: config 0 descriptor?? [ 410.479361][ T8] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 411.052621][ T9] usb 4-1: USB disconnect, device number 2 [ 412.444105][ T8] ssu100: probe of 7-1:0.0 failed with error -71 [ 412.478498][ T8] usb 7-1: USB disconnect, device number 2 [ 414.232747][ T8933] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 415.260858][ T5814] IPVS: starting estimator thread 0... [ 415.783843][ T8935] IPVS: using max 33 ests per chain, 79200 per kthread [ 415.907389][ T5784] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 416.048742][ T8940] input: syz1 as /devices/virtual/input/input5 [ 416.473702][ T5870] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 416.740922][ T8945] loop6: detected capacity change from 0 to 32768 [ 416.758445][ T8945] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.564 (8945) [ 416.780456][ T8945] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 416.790689][ T8945] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 416.799408][ T8945] BTRFS info (device loop6): using free space tree [ 416.891461][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 416.910774][ T5870] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 416.952649][ T5870] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 416.964471][ T8945] BTRFS info (device loop6): enabling ssd optimizations [ 416.971604][ T8945] BTRFS info (device loop6): auto enabling async discard [ 416.994382][ T5870] usb 6-1: string descriptor 0 read error: -22 [ 417.001225][ T5870] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 417.011740][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.355397][ T5870] usb 6-1: USB disconnect, device number 2 [ 419.501931][ T6778] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 419.612003][ T5782] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop6 scanned by udevd (5782) [ 422.157719][ T8993] syz.6.573 (8993): drop_caches: 2 [ 424.547106][ T8975] syz.3.568 (8975) used greatest stack depth: 20200 bytes left [ 424.597004][ T9007] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 424.632167][ T8996] loop6: detected capacity change from 0 to 32768 [ 424.640585][ T9007] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 424.652232][ T8996] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.575 (8996) [ 424.685936][ T9007] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 424.722625][ T9007] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 424.733053][ T8996] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.746268][ T8996] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 424.756670][ T8996] BTRFS info (device loop6): setting nodatasum [ 424.777010][ T8996] BTRFS info (device loop6): force zlib compression, level 3 [ 424.797375][ T8996] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 424.847471][ T8996] BTRFS info (device loop6): use lzo compression, level 0 [ 424.863746][ T8996] BTRFS info (device loop6): turning on flush-on-commit [ 424.875549][ T8996] BTRFS info (device loop6): enabling auto defrag [ 424.882680][ T8996] BTRFS info (device loop6): max_inline at 4096 [ 424.906092][ T8996] BTRFS info (device loop6): using free space tree [ 424.981247][ T8996] BTRFS info (device loop6): enabling ssd optimizations [ 425.238234][ T6778] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 425.544722][ T28] audit: type=1800 audit(1775318996.783:6): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.578" name="/" dev="fuse" ino=1 res=0 errno=0 [ 428.041708][ T9059] loop1: detected capacity change from 0 to 32768 [ 428.111266][ T9059] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.591 (9059) [ 428.175601][ T9059] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 428.208581][ T9059] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 428.238094][ T9059] BTRFS info (device loop1): using free space tree [ 428.579758][ T9059] BTRFS info (device loop1): enabling ssd optimizations [ 428.642612][ T9059] BTRFS info (device loop1): auto enabling async discard [ 429.359932][ T5769] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 429.781499][ T9070] loop5: detected capacity change from 0 to 32768 [ 429.973065][ T9070] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 430.262820][ T5870] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 430.291365][ T9070] XFS (loop5): Ending clean mount [ 430.402308][ T9070] XFS (loop5): Quotacheck needed: Please wait. [ 430.469075][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.511271][ T9070] XFS (loop5): Quotacheck: Done. [ 430.517981][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.532060][ T5870] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 430.541536][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.555688][ T5870] usb 7-1: config 0 descriptor?? [ 430.641471][ T28] audit: type=1800 audit(1775319001.903:7): pid=9070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.594" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 430.726459][ T28] audit: type=1800 audit(1775319001.993:8): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.594" name="file1" dev="loop5" ino=4429 res=0 errno=0 [ 431.167623][ T5870] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 431.175049][ T5870] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 431.182202][ T5870] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 431.194707][ T5870] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 431.228029][ T5870] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 431.259016][ T5870] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 431.274321][ T5870] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 431.479327][ T5870] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 431.569141][ T5870] isku 0003:1E7D:319C.0001: couldn't init struct isku_device [ 431.633885][ T5870] isku 0003:1E7D:319C.0001: couldn't install keyboard [ 431.686001][ T5870] isku: probe of 0003:1E7D:319C.0001 failed with error -71 [ 431.783671][ T5870] usb 7-1: USB disconnect, device number 3 [ 431.849984][ T9116] fido_id[9116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 431.882401][ T6263] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 433.124497][ T9124] fuse: Bad value for 'fd' [ 434.092683][ T9135] bridge_slave_0: left allmulticast mode [ 434.112232][ T9135] bridge_slave_0: left promiscuous mode [ 434.132826][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.727882][ T9135] bridge_slave_1: left allmulticast mode [ 434.745757][ T9135] bridge_slave_1: left promiscuous mode [ 434.785285][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.802839][ T9135] bond0: (slave bond_slave_0): Releasing backup interface [ 434.860065][ T9135] bond0: (slave bond_slave_1): Releasing backup interface [ 434.894680][ T9135] team0: Port device team_slave_0 removed [ 435.008778][ T9135] team0: Port device team_slave_1 removed [ 435.038770][ T9135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.082935][ T9135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.371616][ T9135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.643820][ T9135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.807356][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 436.072040][ T9152] netlink: 292 bytes leftover after parsing attributes in process `syz.6.612'. [ 438.071291][ T9169] syzkaller0: entered promiscuous mode [ 439.309422][ T9176] xt_ipcomp: unknown flags 1D [ 439.808432][ T9178] syzkaller0: entered promiscuous mode [ 439.976848][ T9164] loop1: detected capacity change from 0 to 32768 [ 439.985299][ T9178] syzkaller0: entered allmulticast mode [ 440.004941][ T9164] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 440.023600][ T9164] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 440.049495][ T9164] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 440.091950][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 440.113822][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 440.164915][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 51ms [ 440.177014][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 440.182324][ T9164] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 440.258265][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.268149][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.458608][ T9164] gfs2: fsid=syz:syz.0: found 1 quota changes [ 440.606411][ T5769] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 440.606411][ T5769] inode = 11 2339 [ 440.606411][ T5769] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 440.690755][ T5769] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 440.712212][ T5769] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5769 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 440.730684][ T5769] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 440.743792][ T5769] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 440.768323][ T5769] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 440.777985][ T5769] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 440.786156][ T5769] gfs2: fsid=syz:syz.0: File system withdrawn [ 440.826152][ T5769] CPU: 1 PID: 5769 Comm: syz-executor Not tainted syzkaller #0 [ 440.833897][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.844090][ T5769] Call Trace: [ 440.847404][ T5769] [ 440.850548][ T5769] dump_stack_lvl+0x18c/0x250 [ 440.855379][ T5769] ? kobject_uevent_env+0x363/0x8b0 [ 440.860624][ T5769] ? show_regs_print_info+0x20/0x20 [ 440.865870][ T5769] ? load_image+0x400/0x400 [ 440.870417][ T5769] ? kobject_uevent_env+0x363/0x8b0 [ 440.875667][ T5769] gfs2_withdraw+0xb24/0x13d0 [ 440.880501][ T5769] ? gfs2_lm+0x240/0x240 [ 440.884889][ T5769] ? gfs2_consist_inode_i+0xf5/0x110 [ 440.890397][ T5769] gfs2_inode_refresh+0xb89/0x1000 [ 440.895559][ T5769] ? gfs2_inode_metasync+0xf0/0xf0 [ 440.900714][ T5769] ? gfs2_glock_nq+0xd4f/0x1420 [ 440.905588][ T5769] gfs2_instantiate+0x162/0x220 [ 440.910470][ T5769] gfs2_glock_wait+0x1d4/0x2a0 [ 440.915355][ T5769] do_sync+0x4c6/0xe50 [ 440.919435][ T5769] ? gfs2_quota_sync+0x411/0x5a0 [ 440.924390][ T5769] ? bh_get+0x760/0x760 [ 440.928560][ T5769] ? __lock_acquire+0x7d40/0x7d40 [ 440.933599][ T5769] ? do_raw_spin_lock+0x11f/0x2c0 [ 440.938653][ T5769] ? gfs2_quota_sync+0x411/0x5a0 [ 440.943608][ T5769] ? do_raw_spin_unlock+0x121/0x230 [ 440.948909][ T5769] gfs2_quota_sync+0x411/0x5a0 [ 440.953720][ T5769] gfs2_sync_fs+0x4c/0xb0 [ 440.958087][ T5769] sync_filesystem+0xea/0x220 [ 440.962798][ T5769] generic_shutdown_super+0x6f/0x2b0 [ 440.968110][ T5769] kill_block_super+0x44/0x90 [ 440.972894][ T5769] deactivate_locked_super+0x97/0x100 [ 440.978285][ T5769] cleanup_mnt+0x43b/0x4d0 [ 440.982725][ T5769] task_work_run+0x1d4/0x260 [ 440.987549][ T5769] ? task_work_cancel+0x220/0x220 [ 440.992602][ T5769] ? exit_to_user_mode_loop+0x3b/0x110 [ 440.998458][ T5769] exit_to_user_mode_loop+0xe6/0x110 [ 441.003779][ T5769] exit_to_user_mode_prepare+0xee/0x180 [ 441.009352][ T5769] syscall_exit_to_user_mode+0x1a/0x50 [ 441.014831][ T5769] do_syscall_64+0x61/0xa0 [ 441.019272][ T5769] ? clear_bhb_loop+0x40/0x90 [ 441.023967][ T5769] ? clear_bhb_loop+0x40/0x90 [ 441.028665][ T5769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.034573][ T5769] RIP: 0033:0x7fa00919da57 [ 441.039001][ T5769] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 441.058706][ T5769] RSP: 002b:00007ffd4b0b3d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 441.067401][ T5769] RAX: 0000000000000000 RBX: 00007fa009232048 RCX: 00007fa00919da57 [ 441.075557][ T5769] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4b0b3e50 [ 441.083549][ T5769] RBP: 00007ffd4b0b3e50 R08: 00007ffd4b0b4e50 R09: 00000000ffffffff [ 441.091626][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4b0b4ee0 [ 441.099609][ T5769] R13: 00007fa009232048 R14: 000000000006ac84 R15: 00007ffd4b0b4f20 [ 441.107606][ T5769] [ 441.247067][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.265085][ T9193] netlink: 'syz.6.627': attribute type 4 has an invalid length. [ 444.390427][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.634'. [ 444.535253][ T9206] loop3: detected capacity change from 0 to 32768 [ 444.585897][ T9206] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.631 (9206) [ 444.677436][ T9206] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 444.706333][ T9206] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 444.734052][ T9206] BTRFS info (device loop3): setting nodatasum [ 444.740317][ T9206] BTRFS info (device loop3): force zlib compression, level 3 [ 444.776520][ T9206] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 444.813589][ T9206] BTRFS info (device loop3): use lzo compression, level 0 [ 444.820870][ T9206] BTRFS info (device loop3): turning on flush-on-commit [ 444.837455][ T9206] BTRFS info (device loop3): enabling auto defrag [ 444.854265][ T9206] BTRFS info (device loop3): max_inline at 4096 [ 444.893730][ T9206] BTRFS info (device loop3): using free space tree [ 445.109579][ T9206] BTRFS info (device loop3): enabling ssd optimizations [ 445.774254][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 447.204878][ T9250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 449.357242][ T9262] loop1: detected capacity change from 0 to 64 [ 449.498108][ T9263] syz.1.642: attempt to access beyond end of device [ 449.498108][ T9263] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 449.513046][ T9263] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 449.550823][ T9263] syz.1.642: attempt to access beyond end of device [ 449.550823][ T9263] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 449.567718][ T9263] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 452.462543][ T9280] loop5: detected capacity change from 0 to 1024 [ 452.474603][ T9283] input: syz0 as /devices/virtual/input/input6 [ 454.354106][ T9292] loop1: detected capacity change from 0 to 256 [ 454.372549][ T9292] exfat: Deprecated parameter 'utf8' [ 454.387570][ T9292] exfat: Unexpected value for 'utf8' [ 454.422559][ T12] hfsplus: b-tree write err: -5, ino 3 [ 454.432368][ T5782] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 456.182335][ T9305] loop6: detected capacity change from 0 to 32768 [ 456.349228][ T9305] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.656 (9305) [ 456.412105][ T9305] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 456.423841][ T9305] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 456.433006][ T9305] BTRFS info (device loop6): using free space tree [ 456.577688][ T9305] BTRFS info (device loop6): enabling ssd optimizations [ 456.584907][ T9305] BTRFS info (device loop6): auto enabling async discard [ 457.958240][ T6778] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 458.601457][ T9334] loop1: detected capacity change from 0 to 512 [ 458.635926][ T9334] EXT4-fs: Ignoring removed nobh option [ 458.674093][ T9334] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 458.749561][ T9334] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 458.886799][ T9334] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 458.977572][ T9334] EXT4-fs (loop1): 1 truncate cleaned up [ 458.985817][ T9334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.387427][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.826613][ T9333] loop5: detected capacity change from 0 to 32768 [ 459.857171][ T9333] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.658 (9333) [ 459.898399][ T9333] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 459.924169][ T9333] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 459.944010][ T9333] BTRFS info (device loop5): using free space tree [ 460.069887][ T9333] BTRFS info (device loop5): enabling ssd optimizations [ 460.128200][ T9333] BTRFS info (device loop5): auto enabling async discard [ 460.585765][ T9343] loop1: detected capacity change from 0 to 32768 [ 460.612839][ T9343] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.661 (9343) [ 460.666046][ T9343] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 460.707341][ T9343] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 460.748407][ T9343] BTRFS info (device loop1): using free space tree [ 460.855101][ T9343] BTRFS info (device loop1): enabling ssd optimizations [ 460.863760][ T9343] BTRFS info (device loop1): auto enabling async discard [ 461.090176][ T6263] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 461.102063][ T5769] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 461.583723][ T5782] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop1 scanned by udevd (5782) [ 463.506440][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 465.443752][ T5784] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 465.592600][ T6601] libceph: connect (1)[c::]:6789 error -101 [ 465.629115][ T6601] libceph: mon0 (1)[c::]:6789 connect error [ 465.721675][ T9403] ceph: No mds server is up or the cluster is laggy [ 467.399587][ T5814] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 467.678812][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 467.715176][ T5814] usb 4-1: config 0 has no interfaces? [ 467.726830][ T5814] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 467.758540][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 467.780171][ T5814] usb 4-1: Product: syz [ 467.793585][ T5814] usb 4-1: Manufacturer: syz [ 467.812675][ T5814] usb 4-1: SerialNumber: syz [ 467.867455][ T5814] usb 4-1: config 0 descriptor?? [ 468.726383][ T9] usb 4-1: USB disconnect, device number 3 [ 471.095412][ T9461] loop5: detected capacity change from 0 to 32768 [ 471.118519][ T9461] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 471.353983][ T9464] loop5: detected capacity change from 0 to 64 [ 471.372816][ T9464] hfs: unable to parse mount options [ 472.100131][ T9467] loop1: detected capacity change from 0 to 512 [ 472.146754][ T9467] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 472.180332][ T9467] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 472.309363][ T9467] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 472.461256][ T9467] System zones: 0-2, 18-18, 34-35 [ 472.761745][ T9471] loop5: detected capacity change from 0 to 512 [ 472.778330][ T9471] EXT4-fs: Ignoring removed nobh option [ 472.789581][ T9471] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 473.704323][ T9467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.754078][ T9471] EXT4-fs (loop5): 1 truncate cleaned up [ 473.768859][ T9471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.835503][ T9467] netlink: 'syz.1.694': attribute type 12 has an invalid length. [ 474.323754][ T9474] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 474.970973][ T6263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.219326][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.222547][ T9493] sock: sock_set_timeout: `syz.5.691' (pid 9493) tries to set negative timeout [ 475.242664][ T9493] capability: warning: `syz.5.691' uses deprecated v2 capabilities in a way that may be insecure [ 475.338937][ T9496] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20005 [ 478.606139][ T9518] loop3: detected capacity change from 0 to 512 [ 478.619069][ T9518] EXT4-fs: Ignoring removed nobh option [ 479.046636][ T9518] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 479.113093][ T9518] EXT4-fs (loop3): 1 truncate cleaned up [ 479.122373][ T9518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.379666][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.606599][ T9536] loop3: detected capacity change from 0 to 2048 [ 480.621695][ T9521] loop1: detected capacity change from 0 to 32768 [ 480.662367][ T9521] (syz.1.702,9521,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 480.721666][ T9521] (syz.1.702,9521,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 480.740685][ T9536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.788512][ T9521] JBD2: Ignoring recovery information on journal [ 481.477508][ T9521] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 481.645641][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.794371][ T9546] binder_alloc: 9545: pid 9545 spamming oneway? 2 buffers allocated for a total size of 5120 [ 481.851031][ T9546] binder_alloc: 9545: pid 9545 spamming oneway? 3 buffers allocated for a total size of 5128 [ 481.921257][ T9546] netlink: 'syz.6.709': attribute type 10 has an invalid length. [ 482.221718][ T9548] binder: 9545:9548 ioctl c0186e86 200000000140 returned -22 [ 483.814492][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 484.417800][ T9576] loop1: detected capacity change from 0 to 256 [ 484.444443][ T9576] exfat: Deprecated parameter 'namecase' [ 484.512347][ T9576] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 488.839128][ T9606] binder_alloc: 9605: pid 9605 spamming oneway? 2 buffers allocated for a total size of 5120 [ 488.850927][ T9606] binder_alloc: 9605: pid 9605 spamming oneway? 3 buffers allocated for a total size of 5128 [ 488.872670][ T9606] netlink: 'syz.5.725': attribute type 10 has an invalid length. [ 488.924533][ T9609] binder: 9605:9609 ioctl c0186e86 200000000140 returned -22 [ 491.048821][ T9624] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 493.347867][ T9649] loop6: detected capacity change from 0 to 32768 [ 493.364055][ T9628] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 493.388385][ T9649] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 493.604379][ T9655] ------------[ cut here ]------------ [ 493.610814][ T9655] WARNING: CPU: 1 PID: 9655 at security/landlock/fs.c:748 collect_domain_accesses+0x7b6/0x820 [ 493.621322][ T9655] Modules linked in: [ 493.625281][ T9655] CPU: 1 PID: 9655 Comm: syz.6.738 Not tainted syzkaller #0 [ 493.632582][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.642735][ T9655] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 493.649086][ T9655] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 02 98 fd 31 ed eb dd e8 46 02 98 fd 0f 0b 40 b5 01 eb da e8 3a 02 98 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 493.668924][ T9655] RSP: 0018:ffffc9000454fab0 EFLAGS: 00010287 [ 493.675060][ T9655] RAX: ffffffff83ef1de6 RBX: ffff88802dcfba70 RCX: 0000000000080000 [ 493.683245][ T9655] RDX: ffffc9000d43b000 RSI: 0000000000000517 RDI: 0000000000000518 [ 493.691643][ T9655] RBP: 1ffff110047f53f5 R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 493.699676][ T9655] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: 0000000000000001 [ 493.707947][ T9655] R13: 0000000000000000 R14: ffff88802dcfba70 R15: 0000000000002004 [ 493.716226][ T9655] FS: 00007fe5cad136c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 493.725251][ T9655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.731936][ T9655] CR2: 000000110c3aa509 CR3: 0000000075350000 CR4: 00000000003506e0 [ 493.739993][ T9655] Call Trace: [ 493.743277][ T9655] [ 493.746251][ T9655] current_check_refer_path+0x566/0xc50 [ 493.751839][ T9655] ? hook_file_truncate+0xc0/0xc0 [ 493.757007][ T9655] ? _raw_spin_unlock+0x28/0x40 [ 493.761901][ T9655] ? d_set_d_op+0x25f/0x370 [ 493.766830][ T9655] security_path_rename+0x16c/0x200 [ 493.772057][ T9655] do_renameat2+0x6be/0xce0 [ 493.776707][ T9655] ? __lock_acquire+0x7d40/0x7d40 [ 493.781878][ T9655] ? fsnotify_move+0x4e0/0x4e0 [ 493.786825][ T9655] ? __check_object_size+0x506/0xa20 [ 493.792137][ T9655] ? getname_flags+0x20a/0x500 [ 493.796961][ T9655] __x64_sys_renameat2+0xd2/0xe0 [ 493.801961][ T9655] do_syscall_64+0x55/0xa0 [ 493.806450][ T9655] ? clear_bhb_loop+0x40/0x90 [ 493.811530][ T9655] ? clear_bhb_loop+0x40/0x90 [ 493.816318][ T9655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.822227][ T9655] RIP: 0033:0x7fe5c9d9c819 [ 493.826840][ T9655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.846553][ T9655] RSP: 002b:00007fe5cad13028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 493.855005][ T9655] RAX: ffffffffffffffda RBX: 00007fe5ca015fa0 RCX: 00007fe5c9d9c819 [ 493.862981][ T9655] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 493.871009][ T9655] RBP: 00007fe5c9e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 493.879014][ T9655] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 493.887060][ T9655] R13: 00007fe5ca016038 R14: 00007fe5ca015fa0 R15: 00007ffc8cbb51b8 [ 493.895067][ T9655] [ 493.898087][ T9655] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 493.905356][ T9655] CPU: 1 PID: 9655 Comm: syz.6.738 Not tainted syzkaller #0 [ 493.913156][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.923393][ T9655] Call Trace: [ 493.926672][ T9655] [ 493.929606][ T9655] dump_stack_lvl+0x18c/0x250 [ 493.934387][ T9655] ? show_regs_print_info+0x20/0x20 [ 493.939594][ T9655] ? load_image+0x400/0x400 [ 493.944106][ T9655] panic+0x2dc/0x730 [ 493.948000][ T9655] ? bpf_jit_dump+0xd0/0xd0 [ 493.952594][ T9655] __warn+0x2e0/0x470 [ 493.956661][ T9655] ? collect_domain_accesses+0x7b6/0x820 [ 493.962297][ T9655] ? collect_domain_accesses+0x7b6/0x820 [ 493.967926][ T9655] report_bug+0x2be/0x4f0 [ 493.972258][ T9655] ? collect_domain_accesses+0x7b6/0x820 [ 493.977914][ T9655] ? collect_domain_accesses+0x7b6/0x820 [ 493.983656][ T9655] ? collect_domain_accesses+0x7b8/0x820 [ 493.989399][ T9655] handle_bug+0xcf/0x120 [ 493.993671][ T9655] exc_invalid_op+0x1a/0x50 [ 493.998175][ T9655] asm_exc_invalid_op+0x1a/0x20 [ 494.003024][ T9655] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 494.009288][ T9655] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 02 98 fd 31 ed eb dd e8 46 02 98 fd 0f 0b 40 b5 01 eb da e8 3a 02 98 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 494.029345][ T9655] RSP: 0018:ffffc9000454fab0 EFLAGS: 00010287 [ 494.035408][ T9655] RAX: ffffffff83ef1de6 RBX: ffff88802dcfba70 RCX: 0000000000080000 [ 494.043561][ T9655] RDX: ffffc9000d43b000 RSI: 0000000000000517 RDI: 0000000000000518 [ 494.051791][ T9655] RBP: 1ffff110047f53f5 R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 494.059844][ T9655] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: 0000000000000001 [ 494.068034][ T9655] R13: 0000000000000000 R14: ffff88802dcfba70 R15: 0000000000002004 [ 494.076182][ T9655] ? collect_domain_accesses+0x7b6/0x820 [ 494.081864][ T9655] current_check_refer_path+0x566/0xc50 [ 494.087413][ T9655] ? hook_file_truncate+0xc0/0xc0 [ 494.092437][ T9655] ? _raw_spin_unlock+0x28/0x40 [ 494.097388][ T9655] ? d_set_d_op+0x25f/0x370 [ 494.101895][ T9655] security_path_rename+0x16c/0x200 [ 494.107106][ T9655] do_renameat2+0x6be/0xce0 [ 494.111604][ T9655] ? __lock_acquire+0x7d40/0x7d40 [ 494.116630][ T9655] ? fsnotify_move+0x4e0/0x4e0 [ 494.121391][ T9655] ? __check_object_size+0x506/0xa20 [ 494.126780][ T9655] ? getname_flags+0x20a/0x500 [ 494.131636][ T9655] __x64_sys_renameat2+0xd2/0xe0 [ 494.136599][ T9655] do_syscall_64+0x55/0xa0 [ 494.141014][ T9655] ? clear_bhb_loop+0x40/0x90 [ 494.145694][ T9655] ? clear_bhb_loop+0x40/0x90 [ 494.150368][ T9655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.156266][ T9655] RIP: 0033:0x7fe5c9d9c819 [ 494.160690][ T9655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.180393][ T9655] RSP: 002b:00007fe5cad13028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 494.188804][ T9655] RAX: ffffffffffffffda RBX: 00007fe5ca015fa0 RCX: 00007fe5c9d9c819 [ 494.196780][ T9655] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 494.204848][ T9655] RBP: 00007fe5c9e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 494.212835][ T9655] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 494.220822][ T9655] R13: 00007fe5ca016038 R14: 00007fe5ca015fa0 R15: 00007ffc8cbb51b8 [ 494.228811][ T9655] [ 494.231963][ T9655] Kernel Offset: disabled [ 494.236354][ T9655] Rebooting in 86400 seconds..