last executing test programs: 3m46.661788779s ago: executing program 0 (id=1): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0xffffffffffffff7a, 0x2ca6}}, 0x28) signalfd4(r0, &(0x7f00000000c0)={[0x1]}, 0x8, 0x800) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) r6 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x1) r7 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 3m45.231781774s ago: executing program 0 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') timer_create(0xfffffffc, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) timerfd_create(0x7, 0x80800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8016, &(0x7f0000000500)={[{@nodelalloc}]}, 0xfc, 0x515, &(0x7f0000000c40)="$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") 3m29.774082213s ago: executing program 32 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') timer_create(0xfffffffc, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) timerfd_create(0x7, 0x80800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8016, &(0x7f0000000500)={[{@nodelalloc}]}, 0xfc, 0x515, &(0x7f0000000c40)="$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") 3m23.822240259s ago: executing program 3 (id=64): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x80}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x40820) 3m20.650389337s ago: executing program 3 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x40000, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @mcast1, 0xb9}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) 3m20.203572588s ago: executing program 3 (id=69): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000001140)={[{@bsdgroups}]}, 0x0, 0x4ca, &(0x7f00000016c0)="$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") 3m19.583131093s ago: executing program 3 (id=71): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='+1', 0x2) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) 3m19.000440618s ago: executing program 3 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x26, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x63, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x1c, r5, 0x421, 0x70bd2b, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4) 3m14.616258966s ago: executing program 3 (id=86): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f0000000000000004"]) 3m14.276180844s ago: executing program 33 (id=86): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f0000000000000004"]) 2m57.30447171s ago: executing program 2 (id=115): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x266) close(r0) socket$pptp(0x18, 0x1, 0x2) read$FUSE(r0, &(0x7f00000083c0)={0x2020}, 0x2020) 2m56.975167238s ago: executing program 2 (id=119): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 2m56.859029381s ago: executing program 2 (id=122): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x408003, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@noblock_validity}, {@noquota}, {@nolazytime}, {@nogrpid}, {@errors_continue}, {@jqfmt_vfsold}, {@i_version}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000340)="$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") 2m55.043271766s ago: executing program 2 (id=126): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) 2m54.763543823s ago: executing program 2 (id=131): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000e80)={[{@dioread_nolock}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@init_itable}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x340}}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@noauto_da_alloc}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user}, {@euid_lt={'euid<', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x580, &(0x7f0000000900)="$eJzs3d9rW1UcAPDvTdv96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgd2De/FFhiDiQPwDfPdx+A/4B/g80MGQUfRBhMpNb7qsSfpr6ZItnw/c7Zzcm5x7cu735Jx7k94A+tbx9J9cxKsR8U0SMdKwbjCylcfXtlt5dHMqXZJYXf30ryTObXitJPt/OMu8EhG/fhVxKtdcbmVxabZQKhXns/xYde7aWGVx6fSVucJMcaZ4dWJy8uzbkxPvvftOx+r65sV/vv/k3odnvz6x8t3PD47cSeJ8HM7WpfXqQBHLjZnjhf+y1FCc37DheAcK6yVJt3eAXRnI4nwo0j5gJAayqAdefF9GxCrQpxLxD32qPg6oz+07NA9+bjz8YG0C1Fz/wbVzI3GgNjc6tJI8MTNK57ujHSg/LeOXP+/eSZfY/DzEwS3yADuyfCsizgwONvd/Sdb/7d6Z2snjzW0so98+f6Cb7qXjn2Q5oin+c+vjn2gx/hluEbu7sXX85x50oJi20vHf+y3Hv+td1+hAlnupNuYbSi5fKRXPRMTLEXEyhvan+c2u55xdub/abl3j+C9d0vLrY8FsPx4M7n/yOdOFauFp6tzo4a2I11qOf5P19k9atH/6flzcZhnHindfb7du6/rvrdWfIt5o2f6Pr2glm1+fHKsdD2P1o6LZ37eP/dau/G7XP23/Q5vXfzRpvF5b2dnrL0fEjwf+LbZbv9vjf1/yWS29L3vsRqFanR+P2Jd8PDi88fGJx8+t5+vbp/U/eaJ1/G92/KeTr8+3+R7cPnq77aa90P7TO2r/nSfuf/TFD+3K3177v1Vrj5PZI9vp/7a7g0/37gEAAAAAAEBvyUXE4Uhy+fV0LpfPr32/42gcypXKleqpy+WFq9NR+63saAzl6le6Rxq+DzGefR+2np/YkJ+MiCMR8e3AwVo+P1UuTXe78gAAAAAAAAAAAAAAAAAAANAjhtv8/j/1x0Dz9r8/8z0E9lTtxgb7u70XQDdsecv/TtzpCehJW8Y/8MLaefy3ODMAPJd8/kP/Ev/Qv8Q/9K/txv/QyB7vCPDM+fyH/iX+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKMuXriQLqsrj25Opfnp64sLs+Xrp6eLldn83MJUfqo8fy0/Uy7PlIr5qfLcVq9XKpevjU/Ewo2xarFSHassLl2aKy9crV66MleYKV4qDvljwwAAAAAAAAAAAAAAAAAAANCksrg0WyiVivPPR+JANwo9Fz1R972s4JpdPX2wV2oh0dFElzsmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjwfwAAAP//1nE0VA==") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x4827e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = memfd_create(0x0, 0x1) dup(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00) r5 = fsmount(r0, 0x1, 0x0) fchdir(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)) close_range(r6, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x144010, 0x0) 2m53.147530223s ago: executing program 2 (id=135): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x2, 0x0, 0x30}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 2m37.888429358s ago: executing program 34 (id=135): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x2, 0x0, 0x30}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 2m25.415061814s ago: executing program 1 (id=194): setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) syz_fuse_handle_req(r0, &(0x7f0000001740)="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", 0x2000, &(0x7f000000b040)={0x0, 0x0, 0x0, &(0x7f0000003840)={0x18, 0x0, 0x5, {0x7}}, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x18, 0x0, 0x5}, 0x0, 0x0, 0x0, &(0x7f0000003cc0)={0x90, 0xfffffffffffffff5, 0x7, {0x2, 0x3, 0x100000001, 0x1, 0x7, 0xa23, {0x2, 0x9, 0x2, 0x10, 0x5, 0x3ff, 0x348b623f, 0x4, 0x2, 0xc000, 0x3, 0x0, 0x0, 0x8, 0x3}}}, 0x0, 0x0, &(0x7f000000ac80)={0xa0, 0x0, 0xb3, {{0x4, 0x0, 0x3, 0xfffffffffffffff5, 0x1, 0x9eda, {0x5, 0x81, 0x0, 0xf8, 0x8000000000000001, 0xb147, 0xc232, 0x0, 0x3ff, 0x2000, 0x7, 0x0, 0x0, 0x3, 0x6}}, {0x0, 0x8}}}, &(0x7f000000ad40)={0x20, 0x0, 0x1, {0x800, 0x4, 0x6, 0xffffffff}}, 0x0}) 2m25.15624465s ago: executing program 1 (id=195): userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) accept(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000300)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x7, 0x37fffd, 0x4, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x4, 0x1, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0xce7, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x8001, 0xfffffffffffffffc, 0x34, 0x800}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010327bd7009008000000200000004000003030000001400030076657468315f746f5f62726964676500"], 0x30}}, 0xc000) 2m24.587174114s ago: executing program 1 (id=197): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0xb, 0x300000b, 0x100012, r0, 0x8000000) syz_emit_ethernet(0x151, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x11b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{}, {0x3}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r1, &(0x7f00000002c0)=""/153, 0x99) r2 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r2, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000004c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) 2m22.112434334s ago: executing program 1 (id=202): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010600000000000000000000000000000000fffffffffffffffe0b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x20040091}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) ppoll(&(0x7f0000000100)=[{r4, 0x9190}, {r3, 0xc206}, {r2, 0x602}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x90c]}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000047, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000040)) 2m19.104560468s ago: executing program 1 (id=205): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000009c00000018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000055000000bca900000000000035090100000000009500500000000006bf9800000000000036080000020000008500000007000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m18.964939362s ago: executing program 1 (id=207): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 2m3.996196599s ago: executing program 4 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000100)) 2m3.759550465s ago: executing program 35 (id=207): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 2m3.53620163s ago: executing program 4 (id=243): stat(0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) r6 = fsmount(r3, 0x1, 0xa) syz_mount_image$fuse(0x0, 0x0, 0x1860, 0x0, 0x1, 0x0, 0x0) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) 2m0.772254898s ago: executing program 4 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket(0xa, 0x3, 0x87) sendto(r6, 0x0, 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) truncate(&(0x7f0000000200)='./file0\x00', 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(r0, r0, 0x41, &(0x7f0000000680)={0xf, 0x5, 0x2024}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001a00010028bd700000000000022020000000000700000000e27aa93b516172eaaa562e99657ceff4789af53aeabcb139105c85596de0e411af72517bbb31cdaf4aa6121ed2c7570f7401404fd9f0e295bcab667279e3c7d052fef365fb28d2ef93ea529b615bb11f6940aaac44b88c301f55fbce67ca930663635fa2d02facff38ee9fe259dd5054b2c621730cf7bea733f78bee072891261da2f432aa699ab19c4f03eb1e080c9a90e03722488c1ff1491e7fbfe0e81a068598035e72540efc04d841a487bf30868c626993ac96884c1a173fcef840333f3f497744"], 0x1c}}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFO40AUhv8ZZxPtaoutVogGJCIRkHBsBxANRQp6JAiIjoiYKOAkKHFBIlFQcQUaCk7ABSgoOAIHCFQ0oaM2sj1JhggIBSAh/q9487/x83jmWfotGYSQH8vd7WOn4188GAD+Io2Umr83BjVSq/9/XSulTlbGLm+OZs8Kp/nh9QSAIHj/8xMArvIGfJUHwfO702pch+zrAiRmlN6EgKn0NiQ2lHYhsKX0nqbrYb1p7lY819ype6VQWGGww+CEITe8v+6xQEnbn9CuN1vt/aLnuY1PFKP6181LLGv7099XrzeW1j8bErbSOQisKb2EVK83cUu0848nBusbX3x+CgqK7yYG/hScC0xr/pTQ/CPrVw+yzVZ7rlItlt2yW3Oc3KI1b1kLTjYyoji+4X+/I3/6o63/65XapEjisOj7DTuO/dyJ40uOm4z8TyIzFedCzelE34N/YjIcMobKCSGEEEIIIYQQQggh5MOZgIj+go7AWY2qnwIAAP//ntd3Nw==") r8 = socket$inet6_udp(0xa, 0x2, 0x0) chdir(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0xd9, 0x9, 0x3, 0xa, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x1, 0x4000040, 0xe}}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) 1m55.542117126s ago: executing program 4 (id=255): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2160, 0x0) 1m55.337165971s ago: executing program 4 (id=256): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000980)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noblock_validity}, {@noquota}, {@nouser_xattr}, {@norecovery}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") bpf$ITER_CREATE(0x1d, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200) 1m53.891474297s ago: executing program 4 (id=261): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 1m38.563678363s ago: executing program 36 (id=261): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 25.136325133s ago: executing program 5 (id=463): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000001240)=[{&(0x7f0000001740)="9b5937bb3a", 0x5}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 'id0\x00'}) 24.999677997s ago: executing program 5 (id=464): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x3}, @enter_looper], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) connect$tipc(r3, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000004c9002000200000003000100000000000000000000000000218b23f9000000000000000000000000000000000000000000000000000000000000000000000000050000000100000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a000000000000000000000000000000d48e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006776158adae0bc9900"/320]) 20.090384127s ago: executing program 5 (id=468): userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) accept(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000300)=0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x7, 0x37fffd, 0x4, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x4, 0x1, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0xce7, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x8001, 0xfffffffffffffffc, 0x34, 0x800}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010327bd7009008000000200000004000003030000001400030076657468315f746f5f62726964676500"], 0x30}}, 0xc000) 11.627545754s ago: executing program 8 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000001540)={0x3, 0x0, &(0x7f000014e000/0x3000)=nil}) 11.280269113s ago: executing program 8 (id=488): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="341d0754", 0x4) 11.079585428s ago: executing program 8 (id=490): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@private0, @in=@loopback, 0x4e23, 0x0, 0x4e20, 0x71e, 0xa, 0x0, 0x0, 0x89}, {0x1, 0x1, 0x7, 0x2, 0x0, 0x7, 0x2}, {0x80000000006, 0x0, 0xc, 0x10000}, 0x5, 0x6e6bb8, 0x0, 0x1, 0x3, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0x1, 0x4, 0x8001, 0x4, 0x4}}, 0xe8) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000fa0000000000000000000004000000000a0060803b", @ANYBLOB="00000000000000000400000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2}, 0x38) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 10.895863653s ago: executing program 8 (id=492): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0xfbc, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0xd0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xba12663a254f322, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0xb4, 0x2, [@m_ct={0xb0, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x85, 0x6, "dd3250e9d8432596ffa806169243b5dfe25427cbdbe18508f2ad470a5b6c0b71c137f772aa8423a557742b206087e8514a63a0f700200b52b82056e8c1b5057dc3d5994713b2516988d23ecad8a7d74a9b1436f2ea1596f239e7e6f9d16c5a2e0f99e7b1bd8daf2e388dac30320c5af530516c72effd0be9804ac555ea94a7af91"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe88, 0x2, [@TCA_CGROUP_ACT={0xe84, 0x1, [@m_pedit={0xe80, 0xb, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x2, 0x97c, 0x1, 0x6, 0x200}, 0x8a, 0x80, [{0x8, 0x5875f981, 0x6, 0x4, 0xa, 0x8}, {0x6, 0xec4a, 0xff, 0xfffffffe, 0x7}]}, [{0x8, 0xac1f, 0x100, 0xfffffff0, 0x2, 0x7}, {0xfffff000, 0x7, 0x80000000, 0x7, 0x200, 0x8}, {0x1800, 0x9, 0x6, 0xfffffff7, 0xffff, 0x7}, {0x4, 0xd5, 0x8, 0x0, 0x4447, 0x5}, {0x4, 0xc63f, 0x1, 0x1, 0xed1, 0x2}, {0xffffffff, 0xe8, 0x800, 0x83b, 0x8, 0x6}, {0xc, 0xffff7fff, 0x3, 0x5, 0x7f, 0xfffffffb}, {0xb, 0x9, 0x408, 0x80, 0x6, 0x768}, {0xffff8bff, 0x8, 0x3c27, 0x3, 0xc, 0x75ef2317}, {0x5, 0x8, 0x1, 0x4, 0x5, 0x3}, {0x8, 0x8, 0x80000000, 0x7, 0x0, 0x10}, {0xfff, 0x8, 0x80000000, 0x80, 0x6, 0x5}, {0xa0, 0x101, 0x6, 0x3, 0x0, 0xdf}, {0x4, 0x5, 0x2, 0x3, 0xfffff000, 0xaa6}, {0x7, 0x80000000, 0x8, 0xfffffff4, 0xfe6, 0x75}, {0x3, 0xa6, 0x0, 0x2, 0x40, 0x8}, {0x4, 0x9d3, 0x6, 0x5, 0xd, 0x4}, {0xfd3afc0, 0x3, 0x5, 0x2, 0xff, 0xfffffabf}, {0x5, 0x2, 0xfff, 0x2, 0x2, 0x81}, {0xcb09, 0xb, 0x3ff, 0x6, 0xa, 0x3}, {0x1000, 0x1, 0x200, 0x2, 0x5, 0xff}, {0x4a6, 0xd3, 0x0, 0x8, 0x4, 0x9}, {0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0xe921}, {0x6, 0x4, 0x7fff, 0xc16, 0x9, 0x8}, {0xffff, 0x7, 0x7, 0x10000, 0xffffffff, 0xffff8001}, {0x6, 0xb, 0x28dc, 0x6, 0x7fff, 0x9}, {0x4, 0x8001, 0x1000, 0x60d1, 0x1, 0x1}, {0x5, 0x1, 0x4, 0xffff7fff, 0xe4c, 0x7cc28a0b}, {0x9, 0x8, 0x200020, 0xdb78, 0x4, 0x7}, {0x80, 0xffffffff, 0x4, 0x400, 0xffff5956, 0x8}, {0x1, 0x1000, 0x4, 0x4, 0xffffffff}, {0x6, 0x7fff, 0x3, 0x27a8, 0x9a3, 0x7}, {0x4, 0x80, 0x1ff, 0xffffffff, 0x5, 0x5}, {0x2, 0x62, 0x6e, 0x1000, 0x3, 0xff}, {0x7, 0x8, 0x2, 0xffffffff, 0x400, 0x10001}, {0x0, 0x7ff, 0x8, 0x7, 0xff, 0x69c}, {0x7, 0x7, 0x3, 0x2, 0x1, 0x2}, {0xd1b4, 0x2, 0x0, 0x2, 0x3ff, 0x6}, {0x636cf16a, 0x7fffffff, 0x80000000, 0x3, 0x7f, 0x660b}, {0x4, 0xb3, 0xc2c, 0x2, 0x5, 0x4}, {0xffff3de5, 0x5, 0x3, 0x6, 0x4b7, 0x7fffffff}, {0x10c3, 0x4, 0x4, 0xfffff1ce, 0x800, 0x4}, {0x750, 0x0, 0x7, 0x7, 0x6, 0x3}, {0x7, 0xff, 0x1bdf, 0x5, 0x7ff, 0x5}, {0xff, 0x1206f6e2, 0x0, 0x800, 0x2, 0x200}, {0x5, 0x1a, 0x400, 0x3, 0x608b, 0x9}, {0x4, 0x2, 0x2, 0x4, 0x9, 0x2}, {0x200, 0x8, 0x1, 0x6, 0x11f7, 0x7}, {0xffff, 0x2, 0x200, 0x9, 0xffff, 0x100}, {0x0, 0xffff8000, 0x6, 0xfff, 0xb1e, 0xc33}, {0x8, 0x76f, 0x5, 0x7, 0xffffffff, 0x9}, {0x80000001, 0x9, 0x3, 0x7, 0x80, 0xd}, {0x5, 0x80000001, 0x9, 0x3, 0xb5f, 0x3}, {0x4, 0xcfb, 0x7, 0x1, 0x2, 0x80000000}, {0x7fff, 0x8, 0x165, 0xb59c, 0x7, 0x2}, {0x14, 0x4, 0x527, 0x8, 0x10000}, {0xac1, 0x5, 0x2, 0x7, 0x4, 0xd3}, {0x1, 0xc7, 0x15, 0xb, 0x9, 0x4}, {0x9, 0x0, 0x8, 0x7, 0x5, 0x7fffffff}, {0x2, 0x5, 0x2, 0x1, 0x1a3f9ae0, 0xc}, {0x9, 0x8, 0x6, 0xd1, 0x9, 0x7}, {0x6, 0x334, 0xe7cf, 0x8000, 0x3a0, 0x9}, {0x67, 0x0, 0xc, 0x4, 0x400, 0x86c}, {0x3, 0x0, 0xfffffff6, 0x80000000, 0x3}, {0x0, 0xb6, 0x2, 0x6e52, 0x2, 0x3}, {0x4, 0x4, 0x81, 0x8, 0x8, 0x7}, {0xfffffffc, 0x9, 0x2, 0x0, 0x1, 0x7fff}, {0x1, 0x7fffffff, 0xffffffff, 0xe5d, 0x5, 0x7de7}, {0x1, 0x5a, 0x0, 0xfffffff9, 0x3, 0x7b}, {0x369f, 0x0, 0x1c18, 0x401, 0x3, 0x931}, {0xfff, 0x12fc, 0x7, 0x67d, 0x8001, 0x10}, {0x4, 0x7f, 0x9, 0x81, 0x101, 0x5}, {0x2, 0x8001, 0x925, 0x8, 0x7, 0xfffffff8}, {0xf2d, 0x7ee, 0x80000000, 0x988, 0x9, 0x6}, {0x0, 0x2, 0x5, 0x120000, 0x0, 0x9a}, {0x100, 0xfffffffe, 0x1ff, 0x5, 0x8, 0xfffffffb}, {0xfffffff8, 0x9, 0x7ff, 0x70, 0x9, 0x1}, {0x5, 0x3, 0x0, 0x8, 0x1, 0x80}, {0x81, 0x8, 0x5, 0x5, 0x1000, 0x800}, {0xd, 0x3, 0x3, 0x3, 0x21, 0x728e357b}, {0x0, 0x1, 0x9, 0x4, 0x2, 0xb}, {0xfffffffa, 0x80, 0x7, 0x10001, 0x6, 0x4}, {0x5afba23, 0xfffff43e, 0x9, 0xfffffff9, 0x3, 0x4}, {0x5, 0x40, 0x81, 0x6, 0x400, 0x2c000000}, {0x0, 0x1, 0x9, 0x200, 0x4, 0x100000}, {0x1, 0x400, 0xf, 0x9, 0x0, 0x40}, {0x5, 0x4361, 0x7, 0x5f, 0x3, 0x8}, {0x1, 0xcb46, 0x7f, 0x4, 0x7f, 0x2}, {0x401, 0x10000, 0x2, 0x2, 0x2, 0xfffff74e}, {0x8000, 0x1, 0x0, 0xfffffffd, 0x2, 0x6}, {0x9, 0x10, 0x2, 0x1, 0x3, 0xfc}, {0x7, 0x7, 0x5, 0x1, 0x8ca4, 0x6}, {0x5, 0x9a9, 0xffffffff, 0x8, 0xffffffbd, 0xfffffff9}, {0x1, 0x2, 0x452111f6, 0xfffffffb, 0x6, 0x9}, {0x5, 0x4, 0x7, 0x2, 0x9, 0x9}, {0x4, 0x8000, 0x9, 0xf, 0xd3be, 0xffffffff}, {0x5, 0x6, 0x8, 0x2, 0x3, 0x2}, {0x5, 0x8, 0x10000, 0x10001, 0xfffffffe, 0x6}, {0x7, 0x90, 0x1, 0x2, 0x6, 0x9}, {0x0, 0x6, 0xfff, 0x2, 0x1, 0x80000001}, {0x5, 0x9, 0xc, 0x6, 0x964, 0xffffffff}, {0xb, 0x4, 0x8, 0x81, 0xf513, 0x343}, {0x0, 0x1, 0xfffff801, 0x319, 0x2800000, 0x40}, {0x6, 0x8, 0x40, 0x7, 0x0, 0x5}, {0x3, 0x3, 0xd, 0x8, 0x10001, 0x2}, {0x2, 0x4, 0x7, 0x8, 0x400, 0x2}, {0x100, 0x8, 0x7fffffff, 0x0, 0x6, 0x9}, {0x8, 0x10, 0x7afb, 0x6, 0x1923f85c, 0x5}, {0x3, 0x9, 0x2, 0x3, 0x6, 0x7}, {0x6, 0x3, 0x7fffffff, 0x1, 0x4, 0x1c000000}, {0x1, 0xfffffffe, 0x3ff, 0x7fffffff, 0x1ff, 0x6}, {0x8000, 0xffff73df, 0xb, 0x66f3, 0x8001, 0x2}, {0x80, 0x521b6b31, 0x7, 0x3, 0x3, 0x6}, {0x6, 0x3, 0x0, 0x7, 0xfffffff7, 0x8}, {0x401, 0xe, 0xc, 0x7, 0x5f51, 0xbee}, {0x6, 0xb, 0x6, 0x3800, 0x8, 0x9}, {0x3, 0x4, 0x8, 0x6, 0x3, 0x4}, {0x1a70, 0x2, 0x8, 0x400, 0xe05, 0x7}, {0xffff, 0xc4, 0x684e, 0x9, 0x81, 0x93c}, {0x2, 0x3, 0x2, 0xffff, 0x80000001, 0x101}, {0x4, 0x12ef, 0x8001, 0x1b, 0x2, 0xf1d00}, {0xfffffff2, 0xb82, 0x101, 0x6, 0x3, 0xff}, {0x4, 0x816f, 0xbee, 0x4, 0x0, 0x3}, {0xb, 0x10, 0x0, 0x3, 0x9, 0x2}, {0x5, 0x9, 0x3, 0x81, 0x9}, {0xfff, 0x1, 0x6, 0x7, 0x4, 0x4a}, {0xb8b, 0x1, 0xb, 0xc, 0x40}, {0x4, 0xf1e0, 0x6ba2, 0x8001, 0x7, 0x416d}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0xa46238420b1f4f47}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x42b87ee76b9da29f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xfbc}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) 10.874227323s ago: executing program 9 (id=493): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0xee00) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 10.023431164s ago: executing program 8 (id=494): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x3}, @enter_looper], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) connect$tipc(r3, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) msync(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000004c9002000200000003000100000000000000000000000000218b23f9000000000000000000000000000000000000000000000000000000000000000000000000050000000100000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a000000000000000000000000000000d48e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006776158adae0bc9900"/320]) 9.860302768s ago: executing program 9 (id=495): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8, 0x200, 0x0, 0x7}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) 9.500487137s ago: executing program 9 (id=497): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f00000000c0), 0x0}, 0x20) prlimit64(0x0, 0x8, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x16, 0x0, "7296f5357e2ab135e6640af9d014a120558291c2fd5831e1fbb24f21f17323e9123c48bc0aac538fc0b1a40a98bfd4b344634fd0bbadcde7575ac596380860838bf52e6727512c22f7cd79fda3ef7c74"}, 0xd8) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 6.385357643s ago: executing program 5 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', 0x0) 6.267519426s ago: executing program 5 (id=504): io_setup(0x197, &(0x7f0000000440)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x8402, 0x1f) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)="c9", 0x1, 0x36184d3a}]) 5.928239265s ago: executing program 7 (id=507): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_mixed}, {@utf8}, {@fat=@gid}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_winnt}, {@utf8no}, {@rodir}]}, 0x1, 0x28e, &(0x7f0000001500)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x0) 5.918842885s ago: executing program 5 (id=508): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@mcast2, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) write(r1, 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 5.845710867s ago: executing program 7 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x10, 0x0, 0x100, 0x0, 0x200400}}]}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.608251273s ago: executing program 7 (id=510): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@empty, @in=@private=0xa0100fe, 0x4e28, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x1000, 0x0, 0xfffffffffffffffa, 0x100000001, 0x6, 0x3, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x8}, 0x25fe9add, 0x2000001, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x32}, 0x2, @in6=@loopback, 0x1502, 0x4, 0x0, 0x9, 0x7fff, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000099, @loopback}, 0x1c) 5.455378216s ago: executing program 7 (id=511): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x42142, 0x190) io_setup(0x46, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)='T', 0x1, 0x600}]) 5.055298156s ago: executing program 7 (id=512): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2010000bbbbbbbbbbbb08001e0001ac1414aa"], 0x0) 4.848114191s ago: executing program 7 (id=513): r0 = socket(0x840000000002, 0x3, 0xff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r1, &(0x7f0000000300)={@void, @val={0x3, 0x3, 0x8, 0xd, 0x16, 0xc}, @ipv4=@icmp={{0x7, 0x4, 0x2, 0x0, 0x38, 0x66, 0x0, 0xbb, 0x1, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0x91, 0x3, 0xe}, @end]}}, @parameter_prob={0xc, 0x0, 0x0, 0x1, 0x9, 0x0, {0x5, 0x4, 0x1, 0xf, 0x7, 0x65, 0xe, 0x4, 0x67, 0xa, @empty, @remote}}}}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000)=0x9, 0x4) 4.525127309s ago: executing program 9 (id=514): userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) accept(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000300)=0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x7, 0x37fffd, 0x4, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x4, 0x1, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0xce7, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x8001, 0xfffffffffffffffc, 0x34, 0x800}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010327bd7009008000000200000004000003030000001400030076657468315f746f5f62726964676500"], 0x30}}, 0xc000) 1.792281256s ago: executing program 6 (id=520): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.60239348s ago: executing program 6 (id=521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x7}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59}) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x9}) close(r0) 1.404243605s ago: executing program 6 (id=522): open(&(0x7f0000000180)='.\x00', 0x301100, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.281135198s ago: executing program 6 (id=523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000300)) 1.117817972s ago: executing program 6 (id=524): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="64000000100001060000000000000000", 0x10}], 0x1}, 0x0) 1.040976325s ago: executing program 9 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000d00)=0x224d, 0x4) recvfrom$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x40000000, 0x0) tkill(r4, 0x3d) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 935.516907ms ago: executing program 8 (id=526): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) utimensat(r1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000340)="55f7ee03ccaa274c40812dbb2c45", 0xfffffdd4) 275.23Вµs ago: executing program 9 (id=527): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x27c, &(0x7f0000000ac0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 6 (id=528): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 106.614458][ T4622] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.85: corrupted in-inode xattr [ 106.679575][ T4622] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.85: couldn't read orphan inode 15 (err -117) [ 106.710237][ T4622] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 106.810208][ T4622] overlayfs: failed to resolve './cgroup': -2 [ 106.875949][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.884820][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.031195][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.086163][ T4632] loop4: detected capacity change from 0 to 512 [ 107.124370][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.132452][ T4632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.171077][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.291900][ T4632] EXT4-fs (loop4): 1 truncate cleaned up [ 107.298640][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.331539][ T4632] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,discard,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 107.384614][ T4452] device veth0_vlan entered promiscuous mode [ 107.444591][ T4452] device veth1_vlan entered promiscuous mode [ 107.459906][ T26] audit: type=1800 audit(1787232135.264:3): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.88" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 107.545553][ T4452] device veth0_macvtap entered promiscuous mode [ 107.555498][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.587808][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.629056][ T4645] loop2: detected capacity change from 0 to 128 [ 107.646003][ T4452] device veth1_macvtap entered promiscuous mode [ 107.654788][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.674519][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.792864][ T4452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.851040][ T4452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.872266][ T4647] loop4: detected capacity change from 0 to 2048 [ 107.886654][ T4452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.915445][ T4452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.945353][ T4452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.964368][ T4452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.981261][ T4452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.983540][ T4647] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 108.000429][ T4452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.024007][ T4452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.035599][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.043711][ T4647] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.070068][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.097538][ T4452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.136628][ T4452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.169371][ T4452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.185117][ T4452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.195648][ T4452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.206545][ T4452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.218884][ T4452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.231545][ T4452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.244807][ T4452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.314243][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.340889][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.384395][ T4452] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.434194][ T4452] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.474288][ T4660] loop2: detected capacity change from 0 to 1024 [ 108.565456][ T4660] EXT4-fs (loop2): Ignoring removed orlov option [ 108.603377][ T4452] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.656332][ T4660] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 108.695417][ T4452] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.059110][ T4669] 9pnet: p9_fd_create_tcp (4669): problem connecting socket to 127.0.0.1 [ 109.104340][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.137438][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.158286][ T4669] 9pnet: p9_fd_create_tcp (4669): problem connecting socket to 127.0.0.1 [ 109.176829][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.203753][ T4637] chnl_net:caif_netlink_parms(): no params data found [ 109.282620][ T4669] 9pnet: p9_fd_create_tcp (4669): problem connecting socket to 127.0.0.1 [ 109.347855][ T4647] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #16: comm syz.4.89: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 109.409138][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.417822][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 109.439762][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.543300][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.730815][ T4558] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 110.840921][ T4637] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.911114][ T4637] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.968978][ T4637] device bridge_slave_0 entered promiscuous mode [ 111.017034][ T4637] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.085201][ T4637] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.145244][ T4637] device bridge_slave_1 entered promiscuous mode [ 111.302230][ T4637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.378696][ T4637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.538038][ T4637] team0: Port device team_slave_0 added [ 111.593961][ T4637] team0: Port device team_slave_1 added [ 111.712034][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.753229][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.787290][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 111.794524][ T4637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.810701][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.818261][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.193635][ T4637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.967249][ T4705] loop2: detected capacity change from 0 to 512 [ 112.969406][ T4637] device hsr_slave_0 entered promiscuous mode [ 113.044709][ T4637] device hsr_slave_1 entered promiscuous mode [ 113.067636][ T4637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.097312][ T4705] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 113.111246][ T4637] Cannot create hsr debugfs directory [ 113.157204][ T4705] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 113.186409][ T4705] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 113.704839][ T4637] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.775732][ T4637] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.809158][ T4637] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.816267][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 113.883212][ T4637] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.146378][ T4637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.199566][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.225750][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.260221][ T4637] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.305726][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.337853][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.365247][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.372524][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.415272][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.442027][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.475544][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.482658][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.525296][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.565453][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.582254][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.634980][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.674401][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.753235][ T4637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.814704][ T4637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.864086][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.880729][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.937167][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.982126][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.031322][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.078791][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.111439][ T4741] loop4: detected capacity change from 0 to 512 [ 115.135545][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.205132][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.327989][ T4741] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 115.354063][ T4741] EXT4-fs (loop4): 1 truncate cleaned up [ 115.378072][ T4741] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,i_version,nodelalloc,,errors=continue. Quota mode: writeback. [ 115.905923][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 118.983720][ T4766] loop2: detected capacity change from 0 to 2048 [ 119.126915][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.152594][ T4766] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 119.194065][ T4766] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.242947][ T4637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.452825][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.468477][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.532803][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.678016][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.271821][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.381112][ T4792] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.104: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 121.400944][ T4746] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 121.698712][ T154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1667 with error 28 [ 121.798527][ T154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 121.798527][ T154] [ 121.808506][ T154] EXT4-fs (loop2): Total free blocks count 0 [ 121.815161][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.815717][ T154] EXT4-fs (loop2): Free/Dirty block details [ 121.834116][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.940998][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.949065][ T154] EXT4-fs (loop2): free_blocks=0 [ 121.967258][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.010763][ T154] EXT4-fs (loop2): dirty_blocks=1680 [ 122.034579][ T154] EXT4-fs (loop2): Block reservation details [ 122.049871][ T4637] device veth0_vlan entered promiscuous mode [ 122.084548][ T154] EXT4-fs (loop2): i_reserved_data_blocks=105 [ 122.141823][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.165269][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.230143][ T4637] device veth1_vlan entered promiscuous mode [ 122.469394][ T4637] device veth0_macvtap entered promiscuous mode [ 122.505432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.527383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.612557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.710247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.906248][ T4816] loop4: detected capacity change from 0 to 512 [ 122.939384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.999764][ T4637] device veth1_macvtap entered promiscuous mode [ 123.055382][ T4816] FAT-fs (loop4): error, corrupted file size (i_pos 51, 9216) [ 123.080119][ T4816] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 123.144325][ T4816] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 123.155794][ T4816] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 123.189358][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.250999][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.280623][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.346624][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.433775][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.493765][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.550430][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.612988][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.660457][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.700954][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.740603][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.766036][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.900421][ T4837] loop4: detected capacity change from 0 to 256 [ 123.906092][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.920785][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.970908][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.063691][ T4837] input: syz1 as /devices/virtual/input/input5 [ 124.071114][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.092220][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.111748][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.132752][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.144252][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.164808][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.175136][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.185965][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.198203][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.236792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.251561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.271143][ T4637] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.281295][ T4637] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.299703][ T4637] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.334988][ T4637] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.454065][ T4854] loop2: detected capacity change from 0 to 512 [ 124.522944][ T4854] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 124.574695][ T4854] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.663049][ T1214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.698140][ T4854] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.714773][ T1214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.735890][ T4854] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.122: Allocating blocks 41-42 which overlap fs metadata [ 124.761416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.829570][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.870608][ T4854] Quota error (device loop2): write_blk: dquota write failed [ 124.884600][ T4854] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 124.888972][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.921734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.942865][ T4854] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.122: Failed to acquire dquot type 0 [ 125.011182][ T4854] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 125.056487][ T4854] EXT4-fs (loop2): 1 truncate cleaned up [ 125.192337][ T4854] EXT4-fs (loop2): pa ffff88801d0ec620: logic 1, phys. 41, len 23 [ 125.201368][ T4854] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 125.844523][ T4854] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,noblock_validity,noquota,nolazytime,nogrpid,errors=continue,jqfmt=vfsold,i_version,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 125.919686][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 125.950043][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 126.052631][ T9] device hsr_slave_0 left promiscuous mode [ 126.229047][ T9] device hsr_slave_1 left promiscuous mode [ 126.273597][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.322058][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.422364][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.451110][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.631867][ T9] device bridge_slave_1 left promiscuous mode [ 126.678658][ T4894] loop2: detected capacity change from 0 to 1024 [ 126.705052][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.781204][ T9] device bridge_slave_0 left promiscuous mode [ 126.791188][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.838487][ T9] device veth1_macvtap left promiscuous mode [ 126.844798][ T9] device veth0_macvtap left promiscuous mode [ 126.851000][ T9] device veth1_vlan left promiscuous mode [ 126.857241][ T9] device veth0_vlan left promiscuous mode [ 126.867699][ T4894] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.024066][ T4894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002] [ 127.058388][ T4894] System zones: 0-1, 3-12 [ 127.178781][ T4894] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,dioread_nolock,min_batch_time=0x0000000000000002,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,init_itable,errors=remount-ro,acl,auto_da_alloc=0x0000000000000340,debug,barrier=0x0000000000000007. Quota mode: none. [ 127.225430][ T4895] futex_wake_op: syz.6.129 tries to shift op by 144; fix this program [ 127.502239][ T4895] loop6: detected capacity change from 0 to 256 [ 127.712627][ T4895] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 128.144573][ T26] audit: type=1800 audit(1787232155.956:4): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.129" name="file1" dev="loop6" ino=1048600 res=0 errno=0 [ 128.190415][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 128.210131][ T4916] loop4: detected capacity change from 0 to 2048 [ 128.235069][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 128.354612][ T4916] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 128.392738][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 128.410338][ T4916] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.421941][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 128.625841][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 128.715841][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 128.806421][ T4919] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #16: comm syz.4.134: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 128.839894][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 128.877835][ T9] team0 (unregistering): Port device team_slave_1 removed [ 128.896411][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 128.913730][ T9] team0 (unregistering): Port device team_slave_0 removed [ 128.943131][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.990429][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 129.008393][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.049479][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 129.142115][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 129.142699][ T4272] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 345: padding at end of block bitmap is not set [ 129.174715][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 129.233357][ T4272] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 117 [ 129.251422][ T9] bond0 (unregistering): Released all slaves [ 129.254154][ T4272] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.254154][ T4272] [ 129.269421][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 129.302403][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 129.342949][ T4887] netlink: 36 bytes leftover after parsing attributes in process `syz.5.128'. [ 129.558263][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 129.669473][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 129.722260][ T1214] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2049 with max blocks 272 with error 28 [ 129.738939][ T1214] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.738939][ T1214] [ 129.772395][ T1214] EXT4-fs (loop4): Total free blocks count 0 [ 129.792798][ T1214] EXT4-fs (loop4): Free/Dirty block details [ 129.803712][ T1214] EXT4-fs (loop4): free_blocks=0 [ 129.813340][ T1214] EXT4-fs (loop4): dirty_blocks=288 [ 129.822396][ T1214] EXT4-fs (loop4): Block reservation details [ 129.841218][ T1214] EXT4-fs (loop4): i_reserved_data_blocks=18 [ 129.866153][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 129.984194][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 130.230423][ T4938] loop6: detected capacity change from 0 to 512 [ 130.243696][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 130.373879][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 130.450892][ T4938] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 130.755226][ T4952] loop6: detected capacity change from 0 to 256 [ 130.819905][ T4952] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 132.156163][ T4966] loop6: detected capacity change from 0 to 512 [ 132.367781][ T4966] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.474043][ T4966] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.766681][ T4975] loop4: detected capacity change from 0 to 2048 [ 132.824797][ T4637] EXT4-fs warning (device loop6): ext4_rmdir:3243: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 132.857591][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.863983][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.904858][ T4637] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2925: inode #12: comm syz-executor: corrupted xattr block 6 [ 132.938939][ T4637] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 132.971308][ T4637] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor: corrupted xattr block 33 [ 133.028463][ T4637] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 133.190568][ T4975] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 133.291232][ T4198] EXT4-fs error: 14 callbacks suppressed [ 133.291254][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 133.330457][ T4975] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.517541][ T4198] EXT4-fs: 14 callbacks suppressed [ 133.517559][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 133.668152][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 133.892175][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 134.081945][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 134.111717][ T5007] loop6: detected capacity change from 0 to 256 [ 134.202376][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 134.351899][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 134.488166][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 134.523256][ T5012] loop6: detected capacity change from 0 to 1024 [ 134.648052][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 134.736669][ T5012] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.754179][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 134.768628][ T5012] EXT4-fs error (device loop6): ext4_read_inline_dir:1626: inode #12: block 7: comm syz.6.153: path /10/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 134.789469][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 134.809929][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 135.074108][ T4272] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 345: padding at end of block bitmap is not set [ 135.104701][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 135.184143][ T4272] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 643 with error 117 [ 135.216910][ T4272] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.216910][ T4272] [ 135.223754][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 135.428748][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 135.515030][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 135.619668][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 135.720886][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 135.812488][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 135.974319][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 138.452167][ T4198] EXT4-fs error: 7 callbacks suppressed [ 138.452189][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 138.735185][ T4198] EXT4-fs: 7 callbacks suppressed [ 138.735202][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 140.007429][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 140.043296][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 140.906687][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 140.936401][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 141.091141][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 141.134000][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 141.299868][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 141.324116][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 141.361355][ T5082] loop6: detected capacity change from 0 to 2048 [ 141.586448][ T5082] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 141.635510][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 141.661437][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 141.673732][ T5082] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.738928][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 141.864651][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 141.995461][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 142.064447][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 142.212110][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 142.362339][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 142.534181][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 142.596500][ T5090] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #16: comm syz.6.165: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 142.634716][ T4198] EXT4-fs (loop2): Remounting filesystem read-only [ 143.363038][ T4227] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 345: padding at end of block bitmap is not set [ 143.486235][ T4227] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1011 with error 117 [ 143.569821][ T4227] EXT4-fs (loop6): This should not happen!! Data will be lost [ 143.569821][ T4227] [ 145.585991][ T5137] netlink: 32 bytes leftover after parsing attributes in process `syz.6.167'. [ 146.032946][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 146.053265][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 146.067645][ T5153] loop5: detected capacity change from 0 to 16 [ 146.189047][ T5153] erofs: (device loop5): mounted with root inode @ nid 36. [ 146.251837][ T5153] attempt to access beyond end of device [ 146.251837][ T5153] loop5: rw=524288, want=24, limit=16 [ 146.330592][ T5153] attempt to access beyond end of device [ 146.330592][ T5153] loop5: rw=524288, want=4295524368, limit=16 [ 146.355387][ T5153] attempt to access beyond end of device [ 146.355387][ T5153] loop5: rw=524288, want=6480, limit=16 [ 146.423275][ T5153] attempt to access beyond end of device [ 146.423275][ T5153] loop5: rw=524288, want=34359738368, limit=16 [ 146.502252][ T5153] attempt to access beyond end of device [ 146.502252][ T5153] loop5: rw=0, want=24, limit=16 [ 146.552367][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.575297][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.594697][ T5116] device bridge_slave_0 entered promiscuous mode [ 146.603240][ T26] audit: type=1800 audit(1787232174.387:5): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.171" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 146.644256][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.661903][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.680288][ T5116] device bridge_slave_1 entered promiscuous mode [ 146.740827][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.753206][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.899610][ T5189] binder: 5171:5189 ioctl 54a3 0 returned -22 [ 146.954887][ T5189] loop6: detected capacity change from 0 to 512 [ 148.046472][ T5116] team0: Port device team_slave_0 added [ 148.133239][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 149.952468][ T5116] team0: Port device team_slave_1 added [ 150.028516][ T5189] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.040635][ T5189] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 150.056108][ T5189] EXT4-fs: failed to create workqueue [ 150.061539][ T5189] EXT4-fs (loop6): mount failed [ 150.254256][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 150.444336][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.507380][ T5235] loop4: detected capacity change from 0 to 256 [ 150.523172][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.382876][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.544242][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.551384][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.762828][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.306976][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 152.368734][ T5254] loop6: detected capacity change from 0 to 4096 [ 152.436098][ T5116] device hsr_slave_0 entered promiscuous mode [ 152.957893][ T5116] device hsr_slave_1 entered promiscuous mode [ 152.971996][ T5254] EXT4-fs (loop6): Test dummy encryption mode enabled [ 152.994358][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.047156][ T5254] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 153.067211][ T5116] Cannot create hsr debugfs directory [ 153.083559][ T5254] EXT4-fs (loop6): Ignoring removed orlov option [ 153.243018][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.586182][ T5254] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,nodioread_nolock,test_dummy_encryption,lazytime,nouid32,jqfmt=vfsv0,orlov,,errors=continue. Quota mode: writeback. [ 153.773039][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 153.842287][ T4230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.982103][ T4230] usb 5-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 154.062727][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.133513][ T4230] usb 5-1: config 0 descriptor?? [ 155.994202][ T5116] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 156.067310][ T5116] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 156.090817][ T4230] input: HID 044f:b300 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:044F:B300.0001/input/input7 [ 156.242102][ T4230] thrustmaster 0003:044F:B300.0001: input,hidraw0: USB HID v0.04 Joystick [HID 044f:b300] on usb-dummy_hcd.4-1/input0 [ 156.286504][ T4230] thrustmaster 0003:044F:B300.0001: can't find FF field in output reports [ 156.458698][ T4230] usb 5-1: USB disconnect, device number 3 [ 156.616027][ T5116] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 156.779649][ T5116] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 156.892783][ T5298] fido_id[5298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 157.073669][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.154350][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.306166][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.964973][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.976512][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.029320][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.093168][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.100287][ T5212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.152854][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.153772][ T5313] loop4: detected capacity change from 0 to 4096 [ 158.205584][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.215176][ T5313] EXT4-fs (loop4): Test dummy encryption mode enabled [ 158.241409][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.255485][ T5313] EXT4-fs (loop4): inline encryption not supported [ 158.262188][ T5313] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 158.286108][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.293539][ T5212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.342927][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.391116][ T5313] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a803c028, mo2=0002] [ 158.399769][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.419764][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.422640][ T5313] System zones: 0-5 [ 158.431202][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.440798][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.451470][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.460075][ T5313] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,journal_dev=0x0000000000000003,dioread_lock,auto_da_alloc=0x0000000000000000,nodioread_nolock,nodioread_nolock,errors=remount-ro,usrjquota=./file1,nolazytime,max_dir_size_kb=0x00000. Quota mode: writeback. [ 158.470516][ T5116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.504989][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.542639][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.551836][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.633893][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.673607][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.728106][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.774849][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.933976][ T5291] loop5: detected capacity change from 0 to 40427 [ 159.050699][ T5291] F2FS-fs (loop5): invalid crc value [ 159.083116][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.084418][ T5291] F2FS-fs (loop5): Found nat_bits in checkpoint [ 159.128825][ T5334] program syz.4.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.209597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.227833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.359641][ T5291] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 159.374134][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.466776][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.950217][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.995894][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 162.009802][ T5344] device dummy1 entered promiscuous mode [ 162.181402][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.812261][ T4174] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 164.112321][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.176876][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.276039][ T5116] device veth0_vlan entered promiscuous mode [ 164.329726][ T5116] device veth1_vlan entered promiscuous mode [ 164.468889][ T5116] device veth0_macvtap entered promiscuous mode [ 164.524469][ T5116] device veth1_macvtap entered promiscuous mode [ 165.142301][ T4174] usb 7-1: Using ep0 maxpacket: 16 [ 165.185337][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.242390][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.282547][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.294297][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.302574][ T4174] usb 7-1: unable to get BOS descriptor or descriptor too short [ 165.309161][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.324267][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.343458][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.392053][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.402539][ T4174] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.414737][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.424795][ T4174] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.440899][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.473030][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.502723][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.530268][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.598576][ T4174] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 165.607857][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.642131][ T4174] usb 7-1: string descriptor 0 read error: -71 [ 165.649729][ T4174] usb 7-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 165.664810][ T4174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.720544][ T4174] usb 7-1: can't set config #1, error -71 [ 165.757587][ T4174] usb 7-1: USB disconnect, device number 2 [ 166.031483][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.346973][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.399307][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.452881][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.509760][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.549100][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.654298][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.689422][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.736576][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.788759][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.821252][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.860609][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.891511][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.929426][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.961828][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.998581][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.039685][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.077385][ T5116] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.109485][ T5116] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.138751][ T5116] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.170159][ T5116] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.202143][ T5399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.215'. [ 167.211335][ T5399] netlink: 88 bytes leftover after parsing attributes in process `syz.6.215'. [ 167.315738][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.342694][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.392506][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.512910][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.521852][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.905564][ T5414] loop4: detected capacity change from 0 to 4096 [ 167.972480][ T5414] EXT4-fs (loop4): Test dummy encryption mode enabled [ 167.980447][ T5414] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 168.031999][ T5414] EXT4-fs (loop4): Ignoring removed orlov option [ 169.200198][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.188492][ T5414] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,nodioread_nolock,test_dummy_encryption,lazytime,nouid32,jqfmt=vfsv0,orlov,,errors=continue. Quota mode: writeback. [ 170.482096][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.584188][ T5431] loop6: detected capacity change from 0 to 128 [ 170.683186][ T5431] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.753583][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.848830][ T5431] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.859759][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.869825][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.978049][ T5437] loop7: detected capacity change from 0 to 7 [ 171.023207][ T5437] Dev loop7: unable to read RDB block 7 [ 171.029146][ T5437] loop7: unable to read partition table [ 171.035999][ T5437] loop7: partition table beyond EOD, truncated [ 171.043082][ T5437] loop_reread_partitions: partition scan of loop7 (ъщ) failed (rc=-5) [ 171.962135][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.210197][ T4317] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.345111][ T5454] loop7: detected capacity change from 0 to 128 [ 172.533925][ T5452] smpboot: CPU 1 is now offline [ 172.606650][ T9] device hsr_slave_0 left promiscuous mode [ 172.656398][ T9] device hsr_slave_1 left promiscuous mode [ 172.713458][ T5465] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.755261][ T5454] FAT-fs (loop7): Directory bread(block 32) failed [ 172.877658][ T5454] FAT-fs (loop7): Directory bread(block 33) failed [ 172.919156][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.959087][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.008360][ T5457] x86: Booting SMP configuration: [ 173.027299][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.049077][ T5454] FAT-fs (loop7): Directory bread(block 34) failed [ 173.068381][ T5457] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 173.098346][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.123743][ T0] kvm-clock: cpu 1, msr f104041, secondary cpu clock [ 173.135961][ T18] kvm-guest: stealtime: cpu 1, msr b9127440 [ 173.140041][ T5454] FAT-fs (loop7): Directory bread(block 35) failed [ 173.211977][ T5469] loop4: detected capacity change from 0 to 512 [ 173.235205][ T9] device bridge_slave_1 left promiscuous mode [ 173.262003][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.271088][ T5454] FAT-fs (loop7): Directory bread(block 36) failed [ 173.280593][ T9] device bridge_slave_0 left promiscuous mode [ 173.296418][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.308898][ T5454] FAT-fs (loop7): Directory bread(block 37) failed [ 173.333107][ T5469] EXT4-fs (loop4): Ignoring removed oldalloc option [ 173.340126][ T5454] FAT-fs (loop7): Directory bread(block 38) failed [ 173.349058][ T9] device veth1_macvtap left promiscuous mode [ 173.372811][ T5469] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53686!=18645) [ 173.377610][ T9] device veth0_macvtap left promiscuous mode [ 173.383739][ T5454] FAT-fs (loop7): Directory bread(block 39) failed [ 173.394204][ T9] device veth1_vlan left promiscuous mode [ 173.413183][ T5469] EXT4-fs (loop4): group descriptors corrupted! [ 173.440054][ T9] device veth0_vlan left promiscuous mode [ 173.440449][ T5454] FAT-fs (loop7): Directory bread(block 40) failed [ 173.481733][ T5454] FAT-fs (loop7): Directory bread(block 41) failed [ 173.950172][ T9] team0 (unregistering): Port device team_slave_1 removed [ 173.968259][ T9] team0 (unregistering): Port device team_slave_0 removed [ 174.000136][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.114716][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.349138][ T9] bond0 (unregistering): Released all slaves [ 174.615963][ T5488] loop4: detected capacity change from 0 to 256 [ 174.655616][ T5490] netlink: 43 bytes leftover after parsing attributes in process `syz.5.236'. [ 177.092870][ T5494] loop5: detected capacity change from 0 to 16 [ 177.206418][ T5494] erofs: (device loop5): mounted with root inode @ nid 36. [ 178.904230][ T5582] chnl_net:caif_netlink_parms(): no params data found [ 179.239227][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.301512][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.310046][ T5582] device bridge_slave_0 entered promiscuous mode [ 179.353785][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.381282][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.390269][ T5582] device bridge_slave_1 entered promiscuous mode [ 179.517519][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.592567][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.689972][ T5582] team0: Port device team_slave_0 added [ 180.291479][ T4234] Bluetooth: hci4: command 0x0409 tx timeout [ 180.495365][ T5582] team0: Port device team_slave_1 added [ 180.511985][ T5609] netlink: 60 bytes leftover after parsing attributes in process `syz.6.244'. [ 180.542469][ T5609] netlink: 60 bytes leftover after parsing attributes in process `syz.6.244'. [ 180.608002][ T5614] netlink: 7 bytes leftover after parsing attributes in process `syz.4.245'. [ 180.670364][ T5617] loop7: detected capacity change from 0 to 128 [ 180.684018][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.721389][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.754544][ T5618] loop4: detected capacity change from 0 to 16 [ 180.815617][ T5618] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.823299][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.922445][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.929531][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.004365][ T5617] attempt to access beyond end of device [ 181.004365][ T5617] loop7: rw=2049, want=250, limit=128 [ 181.007210][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.083699][ T5620] attempt to access beyond end of device [ 181.083699][ T5620] loop7: rw=2049, want=144, limit=128 [ 181.162725][ T5582] device hsr_slave_0 entered promiscuous mode [ 181.229157][ T5582] device hsr_slave_1 entered promiscuous mode [ 181.261487][ T5582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.269268][ T5582] Cannot create hsr debugfs directory [ 181.271960][ T5620] Buffer I/O error on dev loop7, logical block 71, lost async page write [ 181.394504][ T5620] attempt to access beyond end of device [ 181.394504][ T5620] loop7: rw=2049, want=146, limit=128 [ 181.481261][ T5620] Buffer I/O error on dev loop7, logical block 72, lost async page write [ 181.548161][ T5616] attempt to access beyond end of device [ 181.548161][ T5616] loop7: rw=2049, want=148, limit=128 [ 181.625813][ T5616] Buffer I/O error on dev loop7, logical block 73, lost async page write [ 181.782943][ T5582] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 181.812870][ T5582] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 181.851633][ T5582] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 181.871908][ T5582] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 182.169595][ T5647] netlink: 43 bytes leftover after parsing attributes in process `syz.7.251'. [ 182.215299][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.245847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.279339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.315082][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.340018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.352323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.381419][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 182.396863][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.404378][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.472936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.491838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.520493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.540192][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.547353][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.571889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.582483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.628912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.657464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.670097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.685090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.724497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.744026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.762940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.781378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.790133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.808552][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.223099][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.230799][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.265869][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.852408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.863097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.937027][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.954117][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.981503][ T5582] device veth0_vlan entered promiscuous mode [ 184.013621][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.057231][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.097166][ T5582] device veth1_vlan entered promiscuous mode [ 184.130371][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.217942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.229949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.263745][ T5582] device veth0_macvtap entered promiscuous mode [ 184.302012][ T5582] device veth1_macvtap entered promiscuous mode [ 184.379542][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.400164][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.418397][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.430260][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.448123][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.459496][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 184.475307][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.489067][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.505556][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.518587][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.534560][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.553991][ T5649] loop7: detected capacity change from 0 to 16 [ 184.560083][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.593372][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.629620][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.668262][ T5649] erofs: (device loop7): mounted with root inode @ nid 36. [ 184.700230][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.723829][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.748937][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.770086][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.781386][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.800473][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.818651][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.829488][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.847586][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.861754][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.880612][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.898899][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.911342][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.006029][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.063644][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.090423][ T5582] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.116367][ T5582] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.129322][ T5582] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.142542][ T5582] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.306051][ T5685] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 185.383089][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.404980][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.421486][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.534313][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.602966][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.603076][ T4187] syz-executor (4187) used greatest stack depth: 20672 bytes left [ 185.628916][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.668915][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.717368][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.803011][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.884528][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.013381][ T5701] loop4: detected capacity change from 0 to 512 [ 186.059207][ T5702] loop8: detected capacity change from 0 to 512 [ 186.176826][ T5702] EXT4-fs (loop8): Ignoring removed orlov option [ 186.176835][ T5701] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 186.176835][ T5701] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 186.176835][ T5701] [ 186.176905][ T5701] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.239632][ T5702] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 186.367194][ T5702] EXT4-fs error (device loop8): ext4_iget_extra_inode:4573: inode #15: comm syz.8.239: corrupted in-inode xattr [ 186.402608][ T5702] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.239: couldn't read orphan inode 15 (err -117) [ 186.421091][ T5702] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000400000,orlov,noload,data_err=abort,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 186.508895][ T5701] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 186.532105][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 186.635601][ T5701] Quota error (device loop4): write_blk: dquota write failed [ 186.680959][ T5701] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 186.690602][ T5701] Quota error (device loop4): write_blk: dquota write failed [ 186.752046][ T5701] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 186.812890][ T5718] loop8: detected capacity change from 0 to 256 [ 186.818992][ T5701] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.256: Failed to acquire dquot type 1 [ 186.872591][ T5701] EXT4-fs (loop4): 1 truncate cleaned up [ 186.889447][ T5701] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,noblock_validity,noquota,nouser_xattr,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 186.912049][ T5718] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 187.082969][ T5701] Quota error (device loop4): write_blk: dquota write failed [ 187.137815][ T5701] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 187.176765][ T5701] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.256: Failed to acquire dquot type 1 [ 187.244405][ T5729] loop6: detected capacity change from 0 to 128 [ 187.388475][ T5729] attempt to access beyond end of device [ 187.388475][ T5729] loop6: rw=2049, want=250, limit=128 [ 187.421541][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 187.481361][ T5734] attempt to access beyond end of device [ 187.481361][ T5734] loop6: rw=2049, want=144, limit=128 [ 187.574236][ T5734] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 187.648268][ T5734] attempt to access beyond end of device [ 187.648268][ T5734] loop6: rw=2049, want=146, limit=128 [ 187.705420][ T5734] Buffer I/O error on dev loop6, logical block 72, lost async page write [ 187.772468][ T5729] attempt to access beyond end of device [ 187.772468][ T5729] loop6: rw=2049, want=146, limit=128 [ 187.816219][ T5734] attempt to access beyond end of device [ 187.816219][ T5734] loop6: rw=2049, want=154, limit=128 [ 187.843973][ T9] device hsr_slave_0 left promiscuous mode [ 187.862538][ T5729] Buffer I/O error on dev loop6, logical block 72, lost async page write [ 187.871272][ T9] device hsr_slave_1 left promiscuous mode [ 187.902108][ T5729] attempt to access beyond end of device [ 187.902108][ T5729] loop6: rw=2049, want=250, limit=128 [ 187.929096][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.944085][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.981422][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.989342][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.071814][ T9] device bridge_slave_1 left promiscuous mode [ 188.078125][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.110484][ T9] device bridge_slave_0 left promiscuous mode [ 188.134258][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.200285][ T9] device veth1_macvtap left promiscuous mode [ 188.227444][ T9] device veth0_macvtap left promiscuous mode [ 188.235160][ T9] device veth1_vlan left promiscuous mode [ 188.288971][ T9] device veth0_vlan left promiscuous mode [ 188.657824][ T5757] loop8: detected capacity change from 0 to 16 [ 188.711090][ T5757] erofs: (device loop8): mounted with root inode @ nid 36. [ 188.764772][ T5757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.163563][ T5779] loop6: detected capacity change from 0 to 4096 [ 190.163941][ T9] team0 (unregistering): Port device team_slave_1 removed [ 190.267934][ T5779] EXT4-fs (loop6): Test dummy encryption mode enabled [ 190.277356][ T5779] EXT4-fs (loop6): inline encryption not supported [ 190.292278][ T5779] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 190.301419][ T9] team0 (unregistering): Port device team_slave_0 removed [ 190.346276][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.349346][ T5779] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 190.381194][ T5779] System zones: 0-5 [ 190.410181][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.429107][ T5779] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 190.525938][ T9] bond0 (unregistering): Released all slaves [ 190.600705][ T7] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 190.634303][ T5765] netlink: 7 bytes leftover after parsing attributes in process `syz.7.265'. [ 190.699945][ T5781] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 190.710118][ T5781] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 190.720073][ T5781] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 190.750665][ T26] audit: type=1800 audit(1787232218.509:6): pid=5781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.269" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 190.922369][ T5790] overlayfs: failed to resolve './bus': -2 [ 190.965935][ T5800] loop7: detected capacity change from 0 to 2048 [ 191.020993][ T7] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.058843][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.097512][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.109621][ T5800] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,max_dir_size_kb=0x0000000000000004,quota,. Quota mode: writeback. [ 191.150652][ T7] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 191.160021][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.174328][ T5800] EXT4-fs error (device loop7): ext4_find_extent:929: inode #2: comm syz.7.272: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 191.254471][ T7] usb 9-1: config 0 descriptor?? [ 191.280689][ T5800] EXT4-fs (loop7): Remounting filesystem read-only [ 191.774398][ T5820] loop7: detected capacity change from 0 to 512 [ 191.837820][ T5820] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 191.923636][ T5820] EXT4-fs (loop7): 1 truncate cleaned up [ 192.007286][ T5820] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 192.201444][ T26] audit: type=1800 audit(1787232220.019:7): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.274" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 192.938236][ T5844] loop5: detected capacity change from 0 to 4096 [ 193.080931][ T5844] EXT4-fs (loop5): Test dummy encryption mode enabled [ 193.093235][ T5844] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 193.140679][ T5844] EXT4-fs (loop5): inline encryption not supported [ 193.147449][ T5844] EXT4-fs (loop5): Ignoring removed orlov option [ 193.260130][ T5844] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000012,nodioread_nolock,test_dummy_encryption,mblk_io_submit,stripe=0x0000000000000000,inlinecrypt,orlov,,errors=continue. Quota mode: writeback. [ 193.600660][ T7] usbhid 9-1:0.0: can't add hid device: -71 [ 193.615433][ T5844] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 193.679609][ T7] usbhid: probe of 9-1:0.0 failed with error -71 [ 193.718607][ T5855] overlayfs: missing 'lowerdir' [ 193.761639][ T7] usb 9-1: USB disconnect, device number 2 [ 194.048917][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.8.276'. [ 194.084436][ T5870] device dummy1 entered promiscuous mode [ 194.321485][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.328322][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.661730][ T5899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.277'. [ 196.730548][ T5899] netlink: 88 bytes leftover after parsing attributes in process `syz.5.277'. [ 196.903203][ T5904] loop5: detected capacity change from 0 to 128 [ 196.990568][ T5904] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.054411][ T5904] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.592137][ T4317] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.282825][ T5949] loop8: detected capacity change from 0 to 128 [ 200.367565][ T5951] loop5: detected capacity change from 0 to 2048 [ 200.442551][ T5949] attempt to access beyond end of device [ 200.442551][ T5949] loop8: rw=2049, want=250, limit=128 [ 200.454997][ T5951] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 200.493313][ T5957] attempt to access beyond end of device [ 200.493313][ T5957] loop8: rw=2049, want=144, limit=128 [ 200.518148][ T5957] Buffer I/O error on dev loop8, logical block 71, lost async page write [ 200.561106][ T5957] attempt to access beyond end of device [ 200.561106][ T5957] loop8: rw=2049, want=146, limit=128 [ 200.592660][ T5957] Buffer I/O error on dev loop8, logical block 72, lost async page write [ 200.619956][ T5949] attempt to access beyond end of device [ 200.619956][ T5949] loop8: rw=2049, want=146, limit=128 [ 200.632452][ T5951] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.635344][ T5957] attempt to access beyond end of device [ 200.635344][ T5957] loop8: rw=2049, want=154, limit=128 [ 200.658494][ T5949] Buffer I/O error on dev loop8, logical block 72, lost async page write [ 200.710330][ T5949] attempt to access beyond end of device [ 200.710330][ T5949] loop8: rw=2049, want=250, limit=128 [ 202.946729][ T5956] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 203.565859][ T5973] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #16: comm syz.5.284: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 203.637811][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.907849][ T4317] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 297 with error 28 [ 203.923414][ T6049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.939978][ T4317] EXT4-fs (loop5): This should not happen!! Data will be lost [ 203.939978][ T4317] [ 203.940040][ T4317] EXT4-fs (loop5): Total free blocks count 0 [ 203.940057][ T4317] EXT4-fs (loop5): Free/Dirty block details [ 203.940728][ T4317] EXT4-fs (loop5): free_blocks=0 [ 204.041108][ T4317] EXT4-fs (loop5): dirty_blocks=304 [ 204.047518][ T4317] EXT4-fs (loop5): Block reservation details [ 204.060909][ T4317] EXT4-fs (loop5): i_reserved_data_blocks=19 [ 204.200107][ T4234] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 204.440017][ T4234] usb 9-1: Using ep0 maxpacket: 32 [ 204.570012][ T4234] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.587452][ T4234] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.710003][ T4234] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 204.726444][ T4234] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 204.736376][ T4234] usb 9-1: Product: syz [ 204.746042][ T4234] usb 9-1: Manufacturer: syz [ 204.801272][ T4234] hub 9-1:4.0: USB hub found [ 205.020244][ T4234] hub 9-1:4.0: 2 ports detected [ 205.249916][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 205.440003][ T4234] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 205.447226][ T4234] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 205.466736][ T6034] chnl_net:caif_netlink_parms(): no params data found [ 205.541789][ T4234] usb 9-1: USB disconnect, device number 3 [ 205.672424][ T6069] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 205.727380][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.734991][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.744161][ T6034] device bridge_slave_0 entered promiscuous mode [ 205.754686][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.769817][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.788455][ T6034] device bridge_slave_1 entered promiscuous mode [ 205.832383][ T6034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.853180][ T6034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.504076][ T6034] team0: Port device team_slave_0 added [ 206.656122][ T6077] loop5: detected capacity change from 0 to 512 [ 206.678967][ T6034] team0: Port device team_slave_1 added [ 206.784844][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.827244][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.946619][ T6034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.948832][ T6077] EXT4-fs (loop5): Ignoring removed oldalloc option [ 207.011125][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.074518][ T6077] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53686!=18645) [ 207.086051][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.161308][ T6034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.200978][ T6077] EXT4-fs (loop5): group descriptors corrupted! [ 207.304147][ T6034] device hsr_slave_0 entered promiscuous mode [ 207.329891][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 207.372539][ T6034] device hsr_slave_1 entered promiscuous mode [ 207.795052][ T6034] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 207.833032][ T6034] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 207.873432][ T6034] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 207.922322][ T6034] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 208.028409][ T6105] loop6: detected capacity change from 0 to 8192 [ 208.308323][ T6034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.398042][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.414504][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.451750][ T6034] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.505157][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.548235][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.580222][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.587364][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.661830][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.691975][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.757402][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.787509][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.794858][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.869952][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.927670][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.978403][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.038098][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.076331][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.095857][ T6131] loop6: detected capacity change from 0 to 512 [ 209.120262][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.155646][ T6131] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 209.179720][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.212289][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.237850][ T6131] EXT4-fs (loop6): 1 truncate cleaned up [ 209.238277][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.254044][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.265800][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.274910][ T6131] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,discard,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 209.277981][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.410315][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 209.472650][ T26] audit: type=1800 audit(1787232237.290:8): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.304" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 209.764089][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.775519][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.839106][ T6034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.097727][ T4227] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.236791][ T4227] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.448004][ T4227] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.542014][ T6129] loop5: detected capacity change from 0 to 40427 [ 210.598979][ T4227] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.625992][ T6129] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 210.639539][ T6129] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 210.679977][ T6129] F2FS-fs (loop5): invalid crc value [ 210.730934][ T6129] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 211.091643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.112237][ T6129] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 211.132408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.140375][ T6129] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 211.182333][ T6171] loop6: detected capacity change from 0 to 2048 [ 211.303024][ T26] audit: type=1800 audit(1787232239.060:9): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.303" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 211.331551][ T6181] 9pnet: Insufficient options for proto=fd [ 211.403136][ T6171] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.442844][ T6034] device veth0_vlan entered promiscuous mode [ 211.470172][ T4452] attempt to access beyond end of device [ 211.470172][ T4452] loop5: rw=2049, want=45104, limit=40427 [ 211.490026][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 211.512254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.563036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.632008][ T6034] device veth1_vlan entered promiscuous mode [ 211.693093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.713005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.761923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.931098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.966090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.024021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.073604][ T6034] device veth0_macvtap entered promiscuous mode [ 212.199731][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.230880][ T6034] device veth1_macvtap entered promiscuous mode [ 212.337359][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.354865][ T6206] loop7: detected capacity change from 0 to 2048 [ 212.382409][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.415553][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.456755][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.481832][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.515553][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.550190][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.586717][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.619558][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.657865][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.680977][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.728074][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.778050][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.810584][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.833540][ T6206] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 212.879848][ T6206] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.889432][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.025347][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.101505][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.197579][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.264120][ T6230] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #16: comm syz.7.314: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 213.280100][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.309967][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.342007][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.369461][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.400816][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.466333][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.508405][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.558134][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.614283][ T6034] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.637572][ T6034] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.674456][ T6034] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.732255][ T6034] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.876598][ T4317] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 345: padding at end of block bitmap is not set [ 213.970605][ T4317] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 528 with error 117 [ 214.008959][ T4317] EXT4-fs (loop7): This should not happen!! Data will be lost [ 214.008959][ T4317] [ 214.025151][ T5219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.044348][ T5219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.081328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.157392][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.199856][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.294854][ T6257] loop8: detected capacity change from 0 to 512 [ 214.346267][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.423627][ T26] audit: type=1326 audit(1787232242.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 214.485492][ T4227] device hsr_slave_0 left promiscuous mode [ 214.502237][ T4227] device hsr_slave_1 left promiscuous mode [ 214.509624][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.517519][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.525545][ T26] audit: type=1326 audit(1787232242.240:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 214.572125][ T6257] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 214.599159][ T26] audit: type=1326 audit(1787232242.240:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 214.601131][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.624663][ T26] audit: type=1326 audit(1787232242.240:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 214.660713][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.669394][ T4227] device bridge_slave_1 left promiscuous mode [ 214.675991][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.690650][ T26] audit: type=1326 audit(1787232242.240:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 214.700827][ T6257] EXT4-fs (loop8): 1 truncate cleaned up [ 214.719083][ T26] audit: type=1326 audit(1787232242.240:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 214.755095][ T26] audit: type=1326 audit(1787232242.240:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 214.925947][ T6257] EXT4-fs (loop8): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 214.959726][ T26] audit: type=1326 audit(1787232242.240:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 215.001080][ T4227] device bridge_slave_0 left promiscuous mode [ 215.007459][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.055767][ T26] audit: type=1326 audit(1787232242.240:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 215.231514][ T26] audit: type=1326 audit(1787232242.240:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 215.299209][ T4227] device veth1_macvtap left promiscuous mode [ 215.305540][ T4227] device veth0_macvtap left promiscuous mode [ 215.323369][ T26] audit: type=1326 audit(1787232242.240:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.7.322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c43bc0d9 code=0x7ffc0000 [ 215.350157][ T4227] device veth1_vlan left promiscuous mode [ 215.356025][ T4227] device veth0_vlan left promiscuous mode [ 215.639863][ T6239] loop5: detected capacity change from 0 to 40427 [ 215.714742][ T6239] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 215.731335][ T6239] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 215.753990][ T6239] F2FS-fs (loop5): invalid crc value [ 215.796318][ T6239] F2FS-fs (loop5): Found nat_bits in checkpoint [ 215.903014][ T6239] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 215.916792][ T6239] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 216.173867][ T4227] team0 (unregistering): Port device team_slave_1 removed [ 216.212560][ T4227] team0 (unregistering): Port device team_slave_0 removed [ 216.238313][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.278782][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.463356][ T4227] bond0 (unregistering): Released all slaves [ 216.722204][ T6294] loop5: detected capacity change from 0 to 2048 [ 217.009424][ T4229] Bluetooth: hci5: command 0x0406 tx timeout [ 217.031590][ T6299] loop7: detected capacity change from 0 to 7 [ 217.053586][ T6299] Dev loop7: unable to read RDB block 7 [ 217.059440][ T6299] loop7: unable to read partition table [ 217.065848][ T6299] loop7: partition table beyond EOD, truncated [ 217.072247][ T6299] loop_reread_partitions: partition scan of loop7 (ъщ) failed (rc=-5) [ 217.250780][ T6300] TCP: TCP_TX_DELAY enabled [ 217.563377][ T6300] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.717780][ T6294] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 217.984558][ T4232] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 217.993629][ T6294] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.359587][ T4232] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.406519][ T4232] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.580128][ T4232] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.719128][ T4232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 218.745322][ T4232] usb 10-1: SerialNumber: syz [ 219.730468][ T6268] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 219.893148][ T6319] loop_set_status: loop5 () has still dirty pages (nrpages=4) [ 220.193722][ T4232] usb 10-1: 0:2 : does not exist [ 220.235197][ T4232] usb 10-1: unit 5 not found! [ 220.278590][ T6338] loop9: detected capacity change from 0 to 256 [ 220.386950][ T4232] usb 10-1: USB disconnect, device number 2 [ 220.649287][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.722016][ T6358] loop5: detected capacity change from 0 to 512 [ 221.895793][ T6358] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.947589][ T6358] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.110510][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 222.559139][ T13] usb 7-1: unable to get BOS descriptor or descriptor too short [ 222.659124][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.690179][ T13] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.734239][ T13] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.902573][ T6391] xt_hashlimit: size too large, truncated to 1048576 [ 227.328627][ T13] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 227.337903][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 227.418779][ T13] usb 7-1: can't set config #1, error -71 [ 227.436760][ T13] usb 7-1: USB disconnect, device number 3 [ 227.520919][ T6416] loop6: detected capacity change from 0 to 4096 [ 227.541927][ T6420] loop5: detected capacity change from 0 to 16 [ 227.608325][ T6420] erofs: (device loop5): mounted with root inode @ nid 36. [ 227.699604][ T6416] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.761509][ T6448] binder: 6444:6448 ioctl 54a3 0 returned -22 [ 232.208412][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 233.586914][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.8.368'. [ 234.169225][ T6505] loop8: detected capacity change from 0 to 128 [ 234.619051][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.373'. [ 234.633128][ T6514] device dummy1 entered promiscuous mode [ 239.385235][ T6522] loop8: detected capacity change from 0 to 128 [ 240.236066][ T6545] loop8: detected capacity change from 0 to 512 [ 240.317199][ T6545] EXT4-fs (loop8): Ignoring removed oldalloc option [ 240.366537][ T6545] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.546547][ T6545] EXT4-fs (loop8): mounted filesystem without journal. Opts: oldalloc,dioread_nolock,noinit_itable,,errors=continue. Quota mode: writeback. [ 240.658348][ T6545] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.811407][ T6545] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.381: inode #327680: comm syz.8.381: iget: illegal inode # [ 240.913454][ T6545] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.381: error while reading EA inode 327680 err=-117 [ 241.078291][ T6559] loop9: detected capacity change from 0 to 128 [ 241.192798][ T6559] FAT-fs (loop9): invalid media value (0x00) [ 241.230801][ T6559] FAT-fs (loop9): Can't find a valid FAT filesystem [ 241.605566][ T6569] loop8: detected capacity change from 0 to 1024 [ 241.815585][ T6569] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 242.647799][ T4278] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 242.715180][ T6587] binder: 6578:6587 ioctl 54a3 0 returned -22 [ 242.754996][ T6587] loop8: detected capacity change from 0 to 512 [ 242.860743][ T6587] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.873063][ T6587] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 242.992894][ T6587] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.387: Invalid block bitmap block 0 in block_group 0 [ 243.008558][ T4278] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.034723][ T6587] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 243.045337][ T6587] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.387: attempt to clear invalid blocks 983261 len 1 [ 243.063344][ T6587] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.387: Invalid inode table block 0 in block_group 0 [ 243.079628][ T6587] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 243.090820][ T6587] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 243.103836][ T6587] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.387: Invalid inode table block 0 in block_group 0 [ 243.120453][ T6587] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 243.140045][ T6587] EXT4-fs error (device loop8): ext4_truncate:4286: inode #11: comm syz.8.387: mark_inode_dirty error [ 243.153077][ T6587] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 243.167989][ T6587] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.387: Invalid inode table block 0 in block_group 0 [ 243.184129][ T6587] EXT4-fs (loop8): 1 truncate cleaned up [ 243.190201][ T6587] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 243.466795][ T4278] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.526854][ T4278] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.788006][ T4278] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.808797][ T4278] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.816923][ T4278] usb 10-1: Product: syz [ 243.850502][ T4278] usb 10-1: Manufacturer: syz [ 243.882005][ T4278] usb 10-1: SerialNumber: syz [ 245.097769][ T4278] cdc_ncm 10-1:1.0: bind() failure [ 245.163615][ T4278] usbtest: probe of 10-1:1.1 failed with error -71 [ 245.193867][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 245.193883][ T26] audit: type=1326 audit(1787232273.012:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.8.389" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc51240d9 code=0x7ffc0000 [ 245.241267][ T4278] usb 10-1: USB disconnect, device number 3 [ 245.359199][ T26] audit: type=1326 audit(1787232273.072:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.8.389" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc51240d9 code=0x7ffc0000 [ 245.443777][ T26] audit: type=1326 audit(1787232273.072:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.8.389" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc51240d9 code=0x7ffc0000 [ 245.603030][ T26] audit: type=1326 audit(1787232273.072:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.8.389" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fdfc51240d9 code=0x7ffc0000 [ 245.747742][ T26] audit: type=1326 audit(1787232273.072:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.8.389" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc51240d9 code=0x7ffc0000 [ 246.097774][ T26] audit: type=1326 audit(1787232273.072:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.8.389" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc51240d9 code=0x7ffc0000 [ 246.267217][ T26] audit: type=1326 audit(1787232273.072:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.8.389" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdfc51240d9 code=0x7ffc0000 [ 246.425156][ T26] audit: type=1326 audit(1787232273.082:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.8.389" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdfc51240d9 code=0x7ffc0000 [ 247.177722][ T6670] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 247.187049][ T26] audit: type=1800 audit(1787232274.992:37): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.402" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 247.247702][ T6670] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 247.294862][ T6670] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 247.475280][ T6670] syz.8.402 (6670) used greatest stack depth: 18320 bytes left [ 250.358943][ T26] audit: type=1326 audit(1787232278.182:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.5.409" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6956cf0d9 code=0x7ffc0000 [ 250.505998][ T26] audit: type=1326 audit(1787232278.182:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.5.409" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6956cf0d9 code=0x7ffc0000 [ 250.637263][ T26] audit: type=1326 audit(1787232278.182:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.5.409" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6956cf0d9 code=0x7ffc0000 [ 250.721761][ T26] audit: type=1326 audit(1787232278.182:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.5.409" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6956cf0d9 code=0x7ffc0000 [ 250.809320][ T6751] loop5: detected capacity change from 0 to 8192 [ 250.926487][ T6759] loop6: detected capacity change from 0 to 512 [ 251.962774][ T6759] EXT4-fs (loop6): Test dummy encryption mode enabled [ 252.002716][ T6759] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.416: missing EA_INODE flag [ 252.054768][ T6759] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.416: error while reading EA inode 2 err=-117 [ 252.117856][ T6759] EXT4-fs (loop6): 1 orphan inode deleted [ 252.123181][ T6712] loop9: detected capacity change from 0 to 40427 [ 252.125957][ T6772] overlayfs: failed to clone upperpath [ 252.146538][ T6759] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: writeback. [ 252.217205][ T6712] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 252.226100][ T6712] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 252.346056][ T6712] F2FS-fs (loop9): invalid crc value [ 252.478162][ T6712] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-4) [ 252.632286][ T6774] loop8: detected capacity change from 0 to 8192 [ 255.148036][ T6804] loop7: detected capacity change from 0 to 7 [ 255.510753][ T6804] Dev loop7: unable to read RDB block 7 [ 255.517105][ T6804] loop7: unable to read partition table [ 255.522921][ T6804] loop7: partition table beyond EOD, truncated [ 255.529272][ T6804] loop_reread_partitions: partition scan of loop7 (ъщ) failed (rc=-5) [ 255.838870][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.845285][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.036099][ T6809] loop9: detected capacity change from 0 to 2048 [ 256.993103][ T6809] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,jqfmt=vfsv0,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback. [ 257.017253][ T6809] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.535236][ T6845] loop9: detected capacity change from 0 to 512 [ 257.658846][ T6845] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.428: inode #1: comm syz.9.428: iget: illegal inode # [ 257.690308][ T6845] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.428: error while reading EA inode 1 err=-117 [ 257.715965][ T6845] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.428: inode #1: comm syz.9.428: iget: illegal inode # [ 257.773532][ T6845] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.428: error while reading EA inode 1 err=-117 [ 257.793806][ T6845] EXT4-fs (loop9): 1 orphan inode deleted [ 257.800330][ T6845] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 258.218533][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.244515][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.282628][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.604965][ T6879] loop6: detected capacity change from 0 to 256 [ 260.553823][ T26] audit: type=1800 audit(1787232288.363:42): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.432" name="file1" dev="loop6" ino=1048615 res=0 errno=0 [ 261.143270][ T6916] binder: 6906:6916 ioctl 54a3 0 returned -22 [ 261.188610][ T6916] loop8: detected capacity change from 0 to 512 [ 261.894283][ T6917] loop9: detected capacity change from 0 to 512 [ 266.478828][ T13] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 269.863553][ T7005] loop5: detected capacity change from 0 to 512 [ 270.850355][ T7005] EXT4-fs (loop5): Ignoring removed oldalloc option [ 270.874012][ T7005] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 271.237249][ T7023] binder: 7019:7023 ioctl 54a3 0 returned -22 [ 271.250559][ T7023] loop9: detected capacity change from 0 to 512 [ 271.364599][ T7023] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 271.377130][ T7023] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 271.511734][ T7023] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:476: comm syz.9.452: Invalid block bitmap block 0 in block_group 0 [ 271.529829][ T7023] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 271.543319][ T7023] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.452: attempt to clear invalid blocks 983261 len 1 [ 271.558899][ T7023] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.452: Invalid inode table block 0 in block_group 0 [ 271.573448][ T7023] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 271.584940][ T7023] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 271.601547][ T7023] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.452: Invalid inode table block 0 in block_group 0 [ 271.617259][ T7023] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 271.628504][ T7023] EXT4-fs error (device loop9): ext4_truncate:4286: inode #11: comm syz.9.452: mark_inode_dirty error [ 271.642653][ T7023] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 271.654353][ T7023] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.452: Invalid inode table block 0 in block_group 0 [ 271.669260][ T7023] EXT4-fs (loop9): 1 truncate cleaned up [ 271.675287][ T7023] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 272.847862][ T7005] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 281.372075][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.471'. [ 281.714357][ T7181] dummy_hcd dummy_hcd.0: remove, state 1 [ 281.736030][ T7181] usb usb1: USB disconnect, device number 1 [ 281.853506][ T7181] dummy_hcd dummy_hcd.0: stopped [ 281.885558][ T7181] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 284.931752][ T7238] loop8: detected capacity change from 0 to 2048 [ 285.078683][ T7238] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 285.164545][ T7238] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.073646][ T4317] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 345: padding at end of block bitmap is not set [ 286.162092][ T4317] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 531 with error 117 [ 286.213602][ T4317] EXT4-fs (loop8): This should not happen!! Data will be lost [ 286.213602][ T4317] [ 287.329209][ T7287] binder: 7281:7287 ioctl 54a3 0 returned -22 [ 287.373830][ T7287] loop8: detected capacity change from 0 to 512 [ 287.451974][ T7287] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 287.464703][ T7287] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 287.597759][ T7287] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.478: Invalid block bitmap block 0 in block_group 0 [ 287.615156][ T7287] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 287.628827][ T7287] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.478: attempt to clear invalid blocks 983261 len 1 [ 287.647595][ T7287] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.478: Invalid inode table block 0 in block_group 0 [ 287.662686][ T7287] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 287.681271][ T7287] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 287.692951][ T7287] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.478: Invalid inode table block 0 in block_group 0 [ 287.709807][ T7287] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 287.723552][ T7287] EXT4-fs error (device loop8): ext4_truncate:4286: inode #11: comm syz.8.478: mark_inode_dirty error [ 287.739938][ T7287] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 287.753378][ T7287] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.478: Invalid inode table block 0 in block_group 0 [ 287.777305][ T7287] EXT4-fs (loop8): 1 truncate cleaned up [ 287.783535][ T7287] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 289.950402][ T7323] loop6: detected capacity change from 0 to 4096 [ 290.049324][ T7323] EXT4-fs (loop6): Test dummy encryption mode enabled [ 290.080827][ T7323] EXT4-fs (loop6): inline encryption not supported [ 290.135846][ T7323] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 290.190529][ T7323] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 290.288813][ T7323] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003] [ 290.372404][ T7323] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,max_dir_size_kb=0x0000000000000008,noblock_validity,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,noinit_itable,jqfmt=vfsv1,. Quota mode: writeback. [ 291.677670][ T7357] binder: 7351:7357 ioctl 54a3 0 returned -22 [ 291.690361][ T7357] loop8: detected capacity change from 0 to 512 [ 292.884949][ T7361] fscrypt (loop6): Error allocating 'cts(cbc(aes))' transform: -4 [ 292.911345][ T7357] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.923875][ T7357] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 292.993971][ T7357] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.494: Invalid block bitmap block 0 in block_group 0 [ 293.017922][ T7357] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 293.047297][ T7357] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.494: attempt to clear invalid blocks 983261 len 1 [ 293.070439][ T7357] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.494: Invalid inode table block 0 in block_group 0 [ 293.090886][ T7357] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 293.113257][ T7357] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 293.128410][ T7357] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.494: Invalid inode table block 0 in block_group 0 [ 293.165081][ T7357] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 293.184280][ T7357] EXT4-fs error (device loop8): ext4_truncate:4286: inode #11: comm syz.8.494: mark_inode_dirty error [ 293.209980][ T7357] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 293.230729][ T7357] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.494: Invalid inode table block 0 in block_group 0 [ 293.244128][ T7357] EXT4-fs (loop8): 1 truncate cleaned up [ 293.250042][ T7357] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 293.644921][ T1110] Bluetooth: hci3: command 0x0406 tx timeout [ 294.534337][ T7394] overlayfs: failed to clone lowerpath [ 295.393619][ T7414] loop5: detected capacity change from 0 to 512 [ 295.471626][ T7414] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.508: bg 0: block 5: invalid block bitmap [ 295.607865][ T7414] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 295.674348][ T7414] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.508: invalid indirect mapped block 3 (level 2) [ 295.735383][ T7414] EXT4-fs (loop5): 1 orphan inode deleted [ 295.741341][ T7414] EXT4-fs (loop5): 1 truncate cleaned up [ 295.784893][ T7414] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 296.013292][ T7425] Zero length message leads to an empty skb [ 296.143163][ T7423] ipt_CLUSTERIP: Please specify destination IP [ 296.417911][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.475569][ T7432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.251959][ T7509] loop9: detected capacity change from 0 to 256 [ 301.394938][ T7514] ------------[ cut here ]------------ [ 301.400988][ T7514] WARNING: CPU: 1 PID: 7514 at mm/page_alloc.c:5476 __alloc_pages+0x39f/0x480 [ 301.485990][ T7514] Modules linked in: [ 301.514974][ T7514] CPU: 1 PID: 7514 Comm: syz.8.526 Not tainted syzkaller #0 [ 301.548927][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.594088][ T7514] RIP: 0010:__alloc_pages+0x39f/0x480 [ 301.625769][ T7514] Code: 31 ff e9 b1 fe ff ff e8 6f 46 0c 08 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fd ff ff 4c 89 e7 e8 96 d3 09 00 e9 42 fd ff ff <0f> 0b 45 31 ff e9 ee fe ff ff 65 44 8b 2d 17 c7 4d 7e 41 83 fd 08 [ 301.792494][ T7514] RSP: 0018:ffffc90003b7fa00 EFLAGS: 00010246 [ 301.833029][ T7514] RAX: ffffc90003b7fa40 RBX: 1ffff9200076ff44 RCX: 0000000000000000 [ 301.865828][ T7514] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003b7fa68 [ 301.889826][ T7514] RBP: ffffc90003b7faf0 R08: ffffc90003b7fa67 R09: ffffc90003b7fa40 [ 301.920718][ T7514] R10: dffffc0000000000 R11: fffff5200076ff4d R12: dffffc0000000000 [ 301.957518][ T7514] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000013 [ 301.998182][ T7514] FS: 00007fdfc337c6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 302.038873][ T7514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.077142][ T7514] CR2: 00007f96976aa000 CR3: 0000000062bd2000 CR4: 00000000003506e0 [ 302.113722][ T7514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.148646][ T7514] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.187397][ T7514] Call Trace: [ 302.222341][ T7514] [ 302.236865][ T7514] ? zone_statistics+0x170/0x170 [ 302.265652][ T7514] ? alloc_pages+0x452/0x560 [ 302.286378][ T7514] kmalloc_order+0x40/0x150 [ 302.310326][ T7514] kmalloc_order_trace+0x14/0xf0 [ 302.330123][ T7514] memdup_user_nul+0x23/0xf0 [ 302.348540][ T7514] bitmap_parse_user+0x1f/0x60 [ 302.371846][ T7514] irq_affinity_proc_write+0x107/0x1d0 [ 302.396885][ T7514] ? irq_affinity_proc_open+0x30/0x30 [ 302.425558][ T7514] ? rcu_read_lock_any_held+0xb0/0x130 [ 302.449274][ T7514] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 302.475639][ T7514] ? end_current_label_crit_section+0x14b/0x170 [ 302.507901][ T7514] ? irq_affinity_proc_open+0x30/0x30 [ 302.540490][ T7514] proc_reg_write+0x1dd/0x2c0 [ 302.560264][ T7514] ? proc_reg_llseek+0x280/0x280 [ 302.582485][ T7514] vfs_write+0x304/0xd70 [ 302.601744][ T7514] ? file_end_write+0x250/0x250 [ 302.626777][ T7514] ? mutex_lock_nested+0x17/0x20 [ 302.651749][ T7514] ? __fdget_pos+0x2bf/0x370 [ 302.670168][ T7514] ? ksys_write+0x70/0x260 [ 302.705555][ T7514] ksys_write+0x153/0x260 [ 302.724911][ T7514] ? __ia32_sys_read+0x80/0x80 [ 302.747158][ T7514] ? lockdep_hardirqs_on+0x94/0x140 [ 302.772571][ T7514] do_syscall_64+0x4c/0xa0 [ 302.790941][ T7514] ? clear_bhb_loop+0x30/0x80 [ 302.813093][ T7514] ? clear_bhb_loop+0x30/0x80 [ 302.841489][ T7514] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.933734][ T7514] RIP: 0033:0x7fdfc51240d9 [ 302.963745][ T7514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.068937][ T7514] RSP: 002b:00007fdfc337c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.119034][ T7514] RAX: ffffffffffffffda RBX: 00007fdfc53abfa0 RCX: 00007fdfc51240d9 [ 303.158878][ T7514] RDX: 00000000fffffdd4 RSI: 0000200000000340 RDI: 0000000000000005 [ 303.192800][ T7514] RBP: 00007fdfc51bb024 R08: 0000000000000000 R09: 0000000000000000 [ 303.226939][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.264890][ T7514] R13: 00007fdfc53ac038 R14: 00007fdfc53abfa0 R15: 00007ffc29e122a8 [ 303.301546][ T7514] [ 303.315807][ T7514] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 303.323147][ T7514] CPU: 1 PID: 7514 Comm: syz.8.526 Not tainted syzkaller #0 [ 303.330462][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.340810][ T7514] Call Trace: [ 303.344250][ T7514] [ 303.347207][ T7514] dump_stack_lvl+0x188/0x250 [ 303.351920][ T7514] ? show_regs_print_info+0x20/0x20 [ 303.357518][ T7514] ? load_image+0x410/0x410 [ 303.362463][ T7514] panic+0x2f8/0x850 [ 303.366394][ T7514] ? bpf_jit_dump+0xd0/0xd0 [ 303.371076][ T7514] ? __alloc_pages+0x39f/0x480 [ 303.375955][ T7514] __warn+0x248/0x2b0 [ 303.379968][ T7514] ? __alloc_pages+0x39f/0x480 [ 303.384778][ T7514] report_bug+0x1b9/0x2e0 [ 303.389143][ T7514] handle_bug+0x3a/0x70 [ 303.393326][ T7514] exc_invalid_op+0x16/0x40 [ 303.397861][ T7514] asm_exc_invalid_op+0x16/0x20 [ 303.403481][ T7514] RIP: 0010:__alloc_pages+0x39f/0x480 [ 303.409415][ T7514] Code: 31 ff e9 b1 fe ff ff e8 6f 46 0c 08 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fd ff ff 4c 89 e7 e8 96 d3 09 00 e9 42 fd ff ff <0f> 0b 45 31 ff e9 ee fe ff ff 65 44 8b 2d 17 c7 4d 7e 41 83 fd 08 [ 303.430294][ T7514] RSP: 0018:ffffc90003b7fa00 EFLAGS: 00010246 [ 303.436491][ T7514] RAX: ffffc90003b7fa40 RBX: 1ffff9200076ff44 RCX: 0000000000000000 [ 303.444635][ T7514] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003b7fa68 [ 303.453170][ T7514] RBP: ffffc90003b7faf0 R08: ffffc90003b7fa67 R09: ffffc90003b7fa40 [ 303.461267][ T7514] R10: dffffc0000000000 R11: fffff5200076ff4d R12: dffffc0000000000 [ 303.470940][ T7514] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000013 [ 303.481043][ T7514] ? zone_statistics+0x170/0x170 [ 303.486414][ T7514] ? alloc_pages+0x452/0x560 [ 303.491148][ T7514] kmalloc_order+0x40/0x150 [ 303.495708][ T7514] kmalloc_order_trace+0x14/0xf0 [ 303.500860][ T7514] memdup_user_nul+0x23/0xf0 [ 303.505727][ T7514] bitmap_parse_user+0x1f/0x60 [ 303.510984][ T7514] irq_affinity_proc_write+0x107/0x1d0 [ 303.516604][ T7514] ? irq_affinity_proc_open+0x30/0x30 [ 303.522107][ T7514] ? rcu_read_lock_any_held+0xb0/0x130 [ 303.527886][ T7514] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 303.533211][ T7514] ? end_current_label_crit_section+0x14b/0x170 [ 303.539660][ T7514] ? irq_affinity_proc_open+0x30/0x30 [ 303.545348][ T7514] proc_reg_write+0x1dd/0x2c0 [ 303.550148][ T7514] ? proc_reg_llseek+0x280/0x280 [ 303.555380][ T7514] vfs_write+0x304/0xd70 [ 303.559666][ T7514] ? file_end_write+0x250/0x250 [ 303.564568][ T7514] ? mutex_lock_nested+0x17/0x20 [ 303.569585][ T7514] ? __fdget_pos+0x2bf/0x370 [ 303.574379][ T7514] ? ksys_write+0x70/0x260 [ 303.579031][ T7514] ksys_write+0x153/0x260 [ 303.583392][ T7514] ? __ia32_sys_read+0x80/0x80 [ 303.588472][ T7514] ? lockdep_hardirqs_on+0x94/0x140 [ 303.593713][ T7514] do_syscall_64+0x4c/0xa0 [ 303.598166][ T7514] ? clear_bhb_loop+0x30/0x80 [ 303.603213][ T7514] ? clear_bhb_loop+0x30/0x80 [ 303.608130][ T7514] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.614344][ T7514] RIP: 0033:0x7fdfc51240d9 [ 303.619156][ T7514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.639092][ T7514] RSP: 002b:00007fdfc337c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.647843][ T7514] RAX: ffffffffffffffda RBX: 00007fdfc53abfa0 RCX: 00007fdfc51240d9 [ 303.656631][ T7514] RDX: 00000000fffffdd4 RSI: 0000200000000340 RDI: 0000000000000005 [ 303.665521][ T7514] RBP: 00007fdfc51bb024 R08: 0000000000000000 R09: 0000000000000000 [ 303.674264][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.682443][ T7514] R13: 00007fdfc53ac038 R14: 00007fdfc53abfa0 R15: 00007ffc29e122a8 [ 303.691096][ T7514] [ 303.694457][ T7514] Kernel Offset: disabled [ 303.699656][ T7514] Rebooting in 86400 seconds..