last executing test programs: 2m34.27879398s ago: executing program 4 (id=88): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@dax_never}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x4088, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e54e9d911d4993a8cfaa9fc0f67742d726f2c6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646f74732c646f74732c6e6f646f74732c6e6f647f0000006e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646973636172642c646f74732c646f74732c747a3d5554432c6572726f72733d636f6e74696e75652c6e6f646f74732c7379735f696d6d757461626c652c71756965742c646f74732c00"], 0xfd, 0x1cb, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000440)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'gre0\x00', r4, 0x7800, 0x8060, 0x80, 0xfffffffb, {{0xc, 0x4, 0x0, 0x3d, 0x30, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xb, 0xcc, [@empty, @broadcast]}, @end, @timestamp={0x44, 0x4, 0x7c, 0x0, 0xd}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46100) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000) 2m33.136094907s ago: executing program 4 (id=92): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="6b5ea0cd187ede3e538bc3543948db9297109ca599cded039b156251280c7ab65af41be8ce62414fe0e3ec3ee9e934d857d01d2100604b4cb96352c190d2a873f0456fbfe4300bb80f3eb66e6ac9489e2c0a22124aa2564aa23304616ea710e465bb0aa8ba8801dc0b08424236366badebbb569dc0c8fbf88fb26bc9fef50f76", 0x80}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) ioctl(r1, 0x1, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4}) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m31.988665513s ago: executing program 4 (id=93): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 2m30.99843814s ago: executing program 4 (id=98): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) io_uring_setup(0x67f9, &(0x7f0000000000)={0x0, 0xa475, 0x8, 0xffffffff, 0x7a}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3f1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) fallocate(r1, 0x1, 0x0, 0x1001f0) 2m29.576016845s ago: executing program 4 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tee(r1, r1, 0x4, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2000402, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@dioread_nolock}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@oldalloc}, {@data_err_ignore}], [{@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'net/mcfilter6\x00'}}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xfff, 0x0, 0x8) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 2m28.738283463s ago: executing program 4 (id=102): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") rename(&(0x7f0000006840)='./file1\x00', &(0x7f0000006640)='./file0/file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@loopback, @dev, 0x0}, &(0x7f0000000240)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x40, 0x0, 0x0, 0x0, "620000a975ff236e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x26, 0x0, 0x6, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x4000810) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.222680781s ago: executing program 32 (id=102): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") rename(&(0x7f0000006840)='./file1\x00', &(0x7f0000006640)='./file0/file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@loopback, @dev, 0x0}, &(0x7f0000000240)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x40, 0x0, 0x0, 0x0, "620000a975ff236e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x26, 0x0, 0x6, 0x0, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x4000810) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 57.73670646s ago: executing program 2 (id=266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='jbd2_submit_inode_data\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="77ba00000000000000001f000000080001"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x5, 0x800000000004, @tid=r8}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 56.692770686s ago: executing program 2 (id=268): syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f900f500180600fe8000"/39, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 56.629843416s ago: executing program 2 (id=269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 56.258810425s ago: executing program 2 (id=270): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x4004840) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000b00)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x208) shutdown(r5, 0x1) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 54.70835247s ago: executing program 2 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',version=9p2000']) write$FUSE_BMAP(r2, &(0x7f00000003c0)={0x18, 0x0, 0x0, {0x8000000000}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b001"], 0x1b0) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaada1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000006a00110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x10}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e000000802c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',loose,\x00']) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 54.520112829s ago: executing program 2 (id=277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5af000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x6, 0x4, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x67, 0x0, 0x5, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000040)='#-.&\x00', 0x0) syz_socket_connect_nvme_tcp() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 54.198109949s ago: executing program 33 (id=277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5af000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x6, 0x4, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x67, 0x0, 0x5, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000040)='#-.&\x00', 0x0) syz_socket_connect_nvme_tcp() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 17.308117384s ago: executing program 3 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$eJzs3E1PXNUbAPDnXqDNn/YvVfENW0VbW7QKQhU1MU3YuSC60IXbCVBs5EULJrYhBhIXbk3sB9C4tR/BaBNfNroy3arRhZoQU1g0sYsxd94Y6AztKPQa5vdL7vScO2d6zr1Pnzt3Tk9uAG2rP3tJIg5GxA8R0VOubm7QX/5j/erSRLYlUSy++mdSard2dWmi2rT6uQPZSxoxkEak7yfxYIN+F85feLMwMzN1rlIfWpx9a2jh/IWnzs4Wpqemp+aGTw2Pjj737PMjw9sNv+9gC8f60vfrv37S+fLcpxfX5q6dHunOxlv9fP1x7JT+6N98Lusc3+nOcnZPXTnpzHEgtKQjIrJwdZXyvyc6YiN4PfHNT7kODthVxcz+pm8vF4E9LIm8RwDko/pFn/3+rW4N7gP+Ku7WDQi5Wh0r/wBcq8ztrNfi3xlpufD28a++3PT7fif1R8Tr468cybbYpXkYAAAAgHb2xVhEPNlo/i+Ne+vaZeX7IuL+iHggIvoiSut6DkfEkYh4KCIerq4nasHW9lvmf5r/zyQ7YnUs4sW6tV3rdfGvONRRqf0/q0RXcubszNTTEXFHRAxE1/6svt0qrdk3Ct81e29j/u9yd3nP0kR1LrAyjj86t/wrmCwsFv7xAbPJ6kpEX2ej+Ce1lUBJRDwSEY/eyl/4dWlF3XTvpeu1XS98cPeVZs3r53+zLet/c/zZTcWPI040zP+VWptk+/WZQ6XrwVD1qnCjby+Oftasf/HPV5b/3Q3jX1u5eiipX6+70Hofl3t//rHZe9eLxeL28W98/d+XvFYa4L7KvncLi4vnhiP2JeM37h9pfcx7VfV8VM9XFv+Boxvx32iZxl2VUnZCj0bEsYh4rLJ2+UTpuz/i8Yh4IiJObtPn8vQvTe/j5H++svhPtpT/rRd+X/nwWLP+bx7/LP+fKQ1moLLH/d/N3WqA8h4nAAAAAAAAADsjLT0DL0kHa+U0HRwsP8OvN7rTmfmFxZNn5t+Zmyw/K+9QdKXVlV49detBh0vljfrIlvqpiLgzIj7q+F+pPjgxPzOZ98FDmzvQJP8zv3XkPTpg13leK7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tS/5D+6rk/3Le4wBuv63f/+9dGT997fPDl3IaDnAbuf+HtvRvnuunoKCwVwt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hv+DgAA///vYdKh") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0x8, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0) 16.543210502s ago: executing program 3 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0x4}, 0x14) 16.18167227s ago: executing program 3 (id=522): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0xa, 0x4) 15.323671908s ago: executing program 3 (id=531): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) mount$9p_unix(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x21, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)='./file1\x00') 14.165583174s ago: executing program 3 (id=540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.655743123s ago: executing program 3 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 13.582050652s ago: executing program 34 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11.728555946s ago: executing program 1 (id=559): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x2, @void}, 0x10) close(0x3) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[], 0x0) 11.687493237s ago: executing program 1 (id=560): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xc032, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x20000}], 0x1, 0x12141, 0x0) 11.665187256s ago: executing program 1 (id=561): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x217, &(0x7f0000000700)="$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") ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000100)={{}, "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"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) 11.546091286s ago: executing program 1 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2805011, 0x0) 11.509636846s ago: executing program 1 (id=565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 11.373497215s ago: executing program 1 (id=567): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x8, 0xffffffff}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3ff800, 0x0) syz_read_part_table(0x1060, &(0x7f0000002100)="$eJzsz71twlAUBeDj2I7lLnUqV1GkzJApoqzAGvxISMxCwQqU7MISRg9sRgCK72uOru59R3rhqd6TDG/JmL4u88ehK9FP67ZazZffzf1RNeVPzt2wXbfJ73W5S06bZFw2WZRI/vr6c74uxWOd49dtLMX/+8f8EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe2yUAAP///q0OWw==") accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) timer_create(0x3, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='rlog_pages=00000000000000000007,n']) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010101010000000000000000000000030cf219800800020021000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5}]}, 0x3c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES16=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, &(0x7f0000000280)={0x2, 0x0, 0x80}, 0x0) 11.330750665s ago: executing program 35 (id=567): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x8, 0xffffffff}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3ff800, 0x0) syz_read_part_table(0x1060, &(0x7f0000002100)="$eJzsz71twlAUBeDj2I7lLnUqV1GkzJApoqzAGvxISMxCwQqU7MISRg9sRgCK72uOru59R3rhqd6TDG/JmL4u88ehK9FP67ZazZffzf1RNeVPzt2wXbfJ73W5S06bZFw2WZRI/vr6c74uxWOd49dtLMX/+8f8EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe2yUAAP///q0OWw==") accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) timer_create(0x3, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='rlog_pages=00000000000000000007,n']) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010101010000000000000000000000030cf219800800020021000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5}]}, 0x3c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES16=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, &(0x7f0000000280)={0x2, 0x0, 0x80}, 0x0) 6.016424159s ago: executing program 8 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_clone3(&(0x7f00000009c0)={0x105104000, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x1}, 0x58) 5.981244519s ago: executing program 8 (id=624): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x2400c806, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000000040), 0x0) sendmsg$sock(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)='@', 0x1}], 0x1}, 0x4000080) 5.960739469s ago: executing program 8 (id=625): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 5.951478728s ago: executing program 8 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$eJzs3E1PXNUbAPDnXqDNn/YvVfENW0VbW7QKQhU1MU3YuSC60IXbCVBs5EULJrYhBhIXbk3sB9C4tR/BaBNfNroy3arRhZoQU1g0sYsxd94Y6AztKPQa5vdL7vScO2d6zr1Pnzt3Tk9uAG2rP3tJIg5GxA8R0VOubm7QX/5j/erSRLYlUSy++mdSard2dWmi2rT6uQPZSxoxkEak7yfxYIN+F85feLMwMzN1rlIfWpx9a2jh/IWnzs4Wpqemp+aGTw2Pjj737PMjw9sNv+9gC8f60vfrv37S+fLcpxfX5q6dHunOxlv9fP1x7JT+6N98Lusc3+nOcnZPXTnpzHEgtKQjIrJwdZXyvyc6YiN4PfHNT7kODthVxcz+pm8vF4E9LIm8RwDko/pFn/3+rW4N7gP+Ku7WDQi5Wh0r/wBcq8ztrNfi3xlpufD28a++3PT7fif1R8Tr468cybbYpXkYAAAAgHb2xVhEPNlo/i+Ne+vaZeX7IuL+iHggIvoiSut6DkfEkYh4KCIerq4nasHW9lvmf5r/zyQ7YnUs4sW6tV3rdfGvONRRqf0/q0RXcubszNTTEXFHRAxE1/6svt0qrdk3Ct81e29j/u9yd3nP0kR1LrAyjj86t/wrmCwsFv7xAbPJ6kpEX2ej+Ce1lUBJRDwSEY/eyl/4dWlF3XTvpeu1XS98cPeVZs3r53+zLet/c/zZTcWPI040zP+VWptk+/WZQ6XrwVD1qnCjby+Oftasf/HPV5b/3Q3jX1u5eiipX6+70Hofl3t//rHZe9eLxeL28W98/d+XvFYa4L7KvncLi4vnhiP2JeM37h9pfcx7VfV8VM9XFv+Boxvx32iZxl2VUnZCj0bEsYh4rLJ2+UTpuz/i8Yh4IiJObtPn8vQvTe/j5H++svhPtpT/rRd+X/nwWLP+bx7/LP+fKQ1moLLH/d/N3WqA8h4nAAAAAAAAADsjLT0DL0kHa+U0HRwsP8OvN7rTmfmFxZNn5t+Zmyw/K+9QdKXVlV49detBh0vljfrIlvqpiLgzIj7q+F+pPjgxPzOZ98FDmzvQJP8zv3XkPTpg13leK7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tS/5D+6rk/3Le4wBuv63f/+9dGT997fPDl3IaDnAbuf+HtvRvnuunoKCwVwt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hv+DgAA///vYdKh") r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) r5 = gettid() rt_tgsigqueueinfo(0x0, r5, 0x8, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0) 4.784193675s ago: executing program 8 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) r5 = gettid() rt_tgsigqueueinfo(0x0, r5, 0x8, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0) 3.34406945s ago: executing program 5 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='netlink_extack\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x1, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.3436404s ago: executing program 7 (id=645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000500000000000000000f4a55c1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x30}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x5, 0x0, 0x401, 0x0, 0xe], 0x0, 0xc00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.332394701s ago: executing program 5 (id=646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x0, 0x0, 0x300}, @flat=@weak_binder, @fda={0x66646185, 0x7, 0x2, 0xc}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.27673542s ago: executing program 5 (id=647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff, 0xfffe}}}]}, 0x38}}, 0x0) 3.13286327s ago: executing program 5 (id=650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r1}, 0x10) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 3.1255443s ago: executing program 8 (id=651): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000090000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.479137678s ago: executing program 7 (id=652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x40, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb}, 0x0}, 0x0) 2.344735127s ago: executing program 5 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028100030100700009040000000101"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.598642615s ago: executing program 6 (id=658): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x11fd, 0x0, '\x00', 0x1, 0x0}) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 1.417927644s ago: executing program 6 (id=660): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.399886254s ago: executing program 6 (id=661): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.324519744s ago: executing program 6 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 681.141392ms ago: executing program 0 (id=670): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB="73febc6d11f5deda2762616c2c73746174733d676c6f62616c2c636f6e746578743d756e636f6e66696e65645f752c6d6173"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x1, 0x1, 0x9, '\x00', 0x200000000004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 586.706452ms ago: executing program 0 (id=671): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) 521.399192ms ago: executing program 0 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB="73febc6d11f5deda2762616c2c73746174733d676c6f62616c2c636f6e746578743d756e636f6e66696e65645f752c6d6173"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x1, 0x1, 0x9, '\x00', 0x200000000004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 504.985052ms ago: executing program 0 (id=673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB="73febc6d11f5deda2762616c2c73746174733d676c6f62616c2c636f6e746578743d756e636f6e66696e65645f752c6d6173"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@abort}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x6, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x9, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x9, '\x00', 0x3, 0x7ffffffffffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 440.482451ms ago: executing program 6 (id=674): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000500010007000000090002007b797a31000000000c00078005001500000000000500050002000000050004000000000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='!]\xe4}\x00', 0xfffffffffffffffb) socket$netlink(0x10, 0x3, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 386.485321ms ago: executing program 5 (id=675): syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 289.579031ms ago: executing program 0 (id=676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x21d4840, 0x0, 0x1, 0x0, &(0x7f0000000100)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) io_setup(0x22, &(0x7f00000003c0)) 279.568361ms ago: executing program 7 (id=677): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) 261.944411ms ago: executing program 6 (id=678): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000000c0)="0fc7780066b80500000066b9004000000f01c1ddc866b9c10800000f32b87d008ee80f00d6f30f2b23650f01c3f30f5a7a100f0f04a0", 0x36}], 0x1, 0x39, 0x0, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 224.776121ms ago: executing program 7 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 94.58637ms ago: executing program 7 (id=680): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x7) fcntl$setsig(r1, 0xa, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 3.73797ms ago: executing program 0 (id=681): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100), 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002780)=ANY=[@ANYBLOB="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"], 0x13e4}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000003c80)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000) add_key$user(0x0, 0x0, &(0x7f0000000340)='@', 0x1, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r3, @ANYBLOB="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"], 0x154}}, 0x0) 0s ago: executing program 7 (id=682): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) kernel console output (not intermixed with test programs): omm="syz.0.224" path="socket:[19048]" dev="sockfs" ino=19048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 146.571521][ T1494] netlink: 96 bytes leftover after parsing attributes in process `syz.3.225'. [ 146.600180][ T1494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 146.629208][ T1487] overlayfs: unrecognized mount option "uid>00000000000000000000" or missing value [ 146.638647][ T28] audit: type=1400 audit(1738377388.448:468): avc: denied { mounton } for pid=1486 comm="syz.2.226" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 146.762004][ T833] EXT4-fs (loop5): unmounting filesystem. [ 146.769795][ T28] audit: type=1400 audit(1738377388.568:469): avc: denied { listen } for pid=1491 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.916117][ T28] audit: type=1400 audit(1738377388.568:470): avc: denied { setopt } for pid=1491 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.941043][ T28] audit: type=1400 audit(1738377388.618:471): avc: denied { setopt } for pid=1497 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.660893][ T1506] overlayfs: unrecognized mount option "obj_type=)-" or missing value [ 147.676651][ T1506] loop0: detected capacity change from 0 to 256 [ 147.690368][ T1506] FAT-fs (loop0): Directory bread(block 64) failed [ 147.696752][ T1506] FAT-fs (loop0): Directory bread(block 65) failed [ 147.703119][ T1506] FAT-fs (loop0): Directory bread(block 66) failed [ 147.709478][ T1506] FAT-fs (loop0): Directory bread(block 67) failed [ 147.715771][ T1506] FAT-fs (loop0): Directory bread(block 68) failed [ 147.722334][ T1506] FAT-fs (loop0): Directory bread(block 69) failed [ 147.728697][ T1506] FAT-fs (loop0): Directory bread(block 70) failed [ 147.735229][ T1506] FAT-fs (loop0): Directory bread(block 71) failed [ 147.741606][ T1506] FAT-fs (loop0): Directory bread(block 72) failed [ 147.747867][ T1506] FAT-fs (loop0): Directory bread(block 73) failed [ 147.813053][ T1509] Driver unsupported XDP return value 0 on prog (id 167) dev N/A, expect packet loss! [ 148.387967][ T28] audit: type=1400 audit(1738377390.198:472): avc: denied { read } for pid=1513 comm="syz.0.232" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.412609][ T291] EXT4-fs (loop3): unmounting filesystem. [ 148.600580][ T1520] syz.1.231[1520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.601878][ T1520] syz.1.231[1520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.737682][ T1520] input: syz0 as /devices/virtual/input/input7 [ 152.488918][ T1544] fuse: Bad value for 'fd' [ 152.763672][ T1546] loop5: detected capacity change from 0 to 16 [ 153.323209][ T1536] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.348411][ T28] audit: type=1326 audit(1738377395.158:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1535 comm="syz.2.237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f665cb8cda9 code=0x0 [ 153.641608][ T1546] erofs: (device loop5): mounted with root inode @ nid 36. [ 153.657816][ T1545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 153.668148][ T1545] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 153.678924][ T1545] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 154.207332][ T1556] loop5: detected capacity change from 0 to 1024 [ 154.328057][ T1561] loop1: detected capacity change from 0 to 512 [ 154.339367][ T1556] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 154.394451][ T1561] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 154.408352][ T1551] loop3: detected capacity change from 0 to 40427 [ 154.415059][ T1556] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 154.429814][ T1551] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 154.429850][ T1551] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 154.430740][ T1551] F2FS-fs (loop3): invalid crc value [ 154.437454][ T1556] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28 [ 154.462535][ T1556] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.462535][ T1556] [ 154.465939][ T1561] EXT4-fs (loop1): 1 truncate cleaned up [ 154.472032][ T1556] EXT4-fs (loop5): Total free blocks count 0 [ 154.484998][ T1556] EXT4-fs (loop5): Free/Dirty block details [ 154.490551][ T1561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 154.490893][ T1556] EXT4-fs (loop5): free_blocks=68451041280 [ 154.508845][ T1556] EXT4-fs (loop5): dirty_blocks=16 [ 154.513780][ T1556] EXT4-fs (loop5): Block reservation details [ 154.528835][ T1556] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 154.529219][ T1551] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.620242][ T1572] netlink: 'syz.1.243': attribute type 5 has an invalid length. [ 154.628189][ T1572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 154.686614][ T1571] loop2: detected capacity change from 0 to 512 [ 154.743660][ T1571] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 154.754050][ T1571] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 154.763343][ T1571] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.240: Failed to acquire dquot type 0 [ 154.775569][ T1571] EXT4-fs (loop2): Remounting filesystem read-only [ 154.782048][ T1571] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 154.792290][ T1571] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 154.801501][ T1571] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.240: Failed to acquire dquot type 0 [ 154.813571][ T1571] EXT4-fs (loop2): Remounting filesystem read-only [ 154.820436][ T1571] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 154.830760][ T1571] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 154.840039][ T1571] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.240: Failed to acquire dquot type 0 [ 154.852043][ T1571] EXT4-fs (loop2): Remounting filesystem read-only [ 154.858432][ T1571] EXT4-fs (loop2): 1 orphan inode deleted [ 154.863988][ T1571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.872838][ T1571] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.968343][ T1551] F2FS-fs (loop3): Start checkpoint disabled! [ 154.992395][ T1551] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 155.003169][ T1551] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 155.174984][ T293] EXT4-fs (loop1): unmounting filesystem. [ 155.545950][ T1582] overlayfs: failed to resolve './file1': -2 [ 156.449450][ T1562] syz.0.241 (1562) used greatest stack depth: 19288 bytes left [ 156.478637][ T28] audit: type=1400 audit(1738377398.288:474): avc: denied { read write } for pid=1555 comm="syz.5.242" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 156.536637][ T28] audit: type=1400 audit(1738377398.328:475): avc: denied { open } for pid=1555 comm="syz.5.242" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 156.666257][ T8] kworker/u4:0: attempt to access beyond end of device [ 156.666257][ T8] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 156.683763][ T1569] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 36 with error 28 [ 156.696832][ T292] EXT4-fs (loop2): unmounting filesystem. [ 156.702444][ T28] audit: type=1400 audit(1738377398.328:476): avc: denied { read write } for pid=1587 comm="syz.1.246" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 157.788352][ T1604] loop1: detected capacity change from 0 to 512 [ 157.796430][ T1604] EXT4-fs: Ignoring removed i_version option [ 157.803035][ T1604] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.805007][ T1603] loop0: detected capacity change from 0 to 512 [ 157.917264][ T1604] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.922398][ T1603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.939929][ T1609] device wireguard0 entered promiscuous mode [ 157.952901][ T1604] EXT4-fs (loop1): 1 truncate cleaned up [ 157.958507][ T1604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 158.958583][ T1603] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.967679][ T1603] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.067882][ T1621] loop2: detected capacity change from 0 to 128 [ 160.559403][ T1609] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 160.610935][ T293] EXT4-fs (loop1): unmounting filesystem. [ 160.709553][ T1634] loop5: detected capacity change from 0 to 512 [ 160.716185][ T1634] EXT4-fs: Ignoring removed orlov option [ 162.364203][ T1639] loop2: detected capacity change from 0 to 16 [ 162.439198][ T1639] erofs: (device loop2): mounted with root inode @ nid 36. [ 162.519227][ T1639] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 162.792938][ T1639] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 162.803897][ T1639] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 165.611393][ T1634] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 165.626620][ T289] EXT4-fs (loop0): unmounting filesystem. [ 166.164271][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 166.164392][ T28] audit: type=1400 audit(1738377407.958:479): avc: denied { map } for pid=1642 comm="syz.2.257" path="socket:[19638]" dev="sockfs" ino=19638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 166.190170][ T1661] 9pnet: p9_errstr2errno: server reported unknown error [ 167.284358][ T28] audit: type=1400 audit(1738377409.098:480): avc: denied { load_policy } for pid=1675 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.284421][ T1677] SELinux: failed to load policy [ 167.414695][ T1677] netlink: 'syz.3.261': attribute type 4 has an invalid length. [ 167.422251][ T1677] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.261'. [ 167.448933][ T28] audit: type=1400 audit(1738377409.248:481): avc: denied { name_bind } for pid=1675 comm="syz.3.261" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 167.576362][ T1692] netlink: 200 bytes leftover after parsing attributes in process `syz.1.263'. [ 167.648679][ T1693] loop5: detected capacity change from 0 to 512 [ 167.693994][ T1693] EXT4-fs (loop5): Test dummy encryption mode enabled [ 167.739791][ T1693] EXT4-fs error (device loop5): __ext4_fill_super:5375: inode #2: comm syz.5.259: casefold flag without casefold feature [ 167.753216][ T1693] EXT4-fs (loop5): get root inode failed [ 167.759226][ T1693] EXT4-fs (loop5): mount failed [ 168.294183][ T1703] xt_connbytes: Forcing CT accounting to be enabled [ 168.300780][ T1703] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.948490][ T1707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.266'. [ 169.979198][ T28] audit: type=1400 audit(1738377411.548:482): avc: denied { getopt } for pid=1709 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.485216][ T1725] loop2: detected capacity change from 0 to 1024 [ 170.640240][ T1725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.795004][ T28] audit: type=1400 audit(1738377412.538:483): avc: denied { unlink } for pid=1717 comm="syz.2.270" name="#11" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.544821][ T292] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 171.575558][ T292] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 171.702888][ T292] EXT4-fs (loop2): unmounting filesystem. [ 171.799737][ T1745] loop0: detected capacity change from 0 to 512 [ 171.816443][ T1745] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.834655][ T1745] EXT4-fs error (device loop0): __ext4_fill_super:5375: inode #2: comm syz.0.276: casefold flag without casefold feature [ 171.847868][ T1745] EXT4-fs (loop0): get root inode failed [ 171.853362][ T1745] EXT4-fs (loop0): mount failed [ 172.132854][ T28] audit: type=1400 audit(1738377413.948:484): avc: denied { getopt } for pid=1749 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.303787][ T1753] loop3: detected capacity change from 0 to 512 [ 172.323089][ T327] device bridge_slave_1 left promiscuous mode [ 172.331097][ T1753] EXT4-fs: Ignoring removed i_version option [ 172.340763][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.353719][ T1753] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.360829][ T327] device bridge_slave_0 left promiscuous mode [ 172.361014][ T1753] EXT4-fs: dax option not supported [ 172.384964][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.415574][ T327] device veth1_macvtap left promiscuous mode [ 172.472923][ T327] device veth0_vlan left promiscuous mode [ 172.484671][ T28] audit: type=1400 audit(1738377414.298:485): avc: denied { ioctl } for pid=1756 comm="syz.5.283" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20532 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.621550][ T1753] loop3: detected capacity change from 0 to 256 [ 172.630325][ T1755] loop1: detected capacity change from 0 to 8192 [ 173.002268][ T1753] exfat: Unknown parameter 'Sh_&a^@RY cayrFzQ>P߁*ٹV8d|CpI77"TUTCH{W.H K;^ j_]75qYbYF' [ 173.030287][ T1755] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.208614][ T28] audit: type=1400 audit(1738377414.838:486): avc: denied { mounton } for pid=1764 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 174.069586][ T1753] loop3: detected capacity change from 0 to 512 [ 174.348245][ T1773] syz.0.284[1773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.348331][ T1773] syz.0.284[1773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.370890][ T1773] 9pnet_fd: Insufficient options for proto=fd [ 175.338000][ T1764] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.383698][ T1764] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.391534][ T1764] device bridge_slave_0 entered promiscuous mode [ 175.399137][ T1764] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.406012][ T1764] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.413848][ T1764] device bridge_slave_1 entered promiscuous mode [ 175.454537][ T1796] loop0: detected capacity change from 0 to 256 [ 175.462176][ T1796] exfat: Deprecated parameter 'namecase' [ 175.478111][ T1796] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 175.534234][ T1797] loop5: detected capacity change from 0 to 512 [ 175.541539][ T409] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 175.541974][ T1797] EXT4-fs (loop5): Test dummy encryption mode enabled [ 175.564711][ T1797] EXT4-fs error (device loop5): __ext4_fill_super:5375: inode #2: comm syz.5.290: casefold flag without casefold feature [ 175.577935][ T1797] EXT4-fs (loop5): get root inode failed [ 175.583432][ T1797] EXT4-fs (loop5): mount failed [ 175.634631][ T315] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.830807][ T409] usb 4-1: unable to get BOS descriptor or descriptor too short [ 175.842587][ T409] usb 4-1: not running at top speed; connect to a high speed hub [ 177.670424][ T28] audit: type=1400 audit(1738377419.428:487): avc: denied { bind } for pid=1795 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.686637][ T409] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 177.748834][ T409] usb 4-1: config 1 interface 0 has no altsetting 0 [ 177.756574][ T28] audit: type=1400 audit(1738377419.518:488): avc: denied { mount } for pid=1803 comm="syz.5.294" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 177.829321][ T409] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.40 [ 177.838479][ T409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.846357][ T409] usb 4-1: Product: syz [ 177.850475][ T409] usb 4-1: Manufacturer: syz [ 177.854918][ T409] usb 4-1: SerialNumber: syz [ 177.866147][ T1775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 178.307542][ T1811] loop1: detected capacity change from 0 to 512 [ 178.318152][ T1811] EXT4-fs (loop1): Test dummy encryption mode enabled [ 178.432344][ T1811] EXT4-fs error (device loop1): __ext4_fill_super:5375: inode #2: comm syz.1.292: casefold flag without casefold feature [ 178.451518][ T1814] loop0: detected capacity change from 0 to 512 [ 178.471724][ T1811] EXT4-fs (loop1): get root inode failed [ 178.477220][ T1811] EXT4-fs (loop1): mount failed [ 178.485557][ T1814] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.513642][ T409] usbhid 4-1:1.0: can't add hid device: -71 [ 178.557989][ T409] usbhid: probe of 4-1:1.0 failed with error -71 [ 178.578513][ T1814] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 178.602240][ T409] usb 4-1: USB disconnect, device number 2 [ 178.613498][ T28] audit: type=1400 audit(1738377420.428:489): avc: denied { unmount } for pid=833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 178.679272][ T1814] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 178.701518][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.709652][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.717049][ T1814] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 178.745012][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.753922][ T1814] System zones: 0-2, 18-18, 34-34 [ 178.776676][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.794209][ T1814] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 178.819060][ T1807] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.825938][ T1807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.836024][ T1825] loop5: detected capacity change from 0 to 128 [ 178.849375][ T1814] EXT4-fs (loop0): 1 truncate cleaned up [ 178.865113][ T1814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.877824][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.892660][ T1825] EXT4-fs (loop5): Test dummy encryption mode enabled [ 178.914374][ T1827] loop3: detected capacity change from 0 to 8192 [ 178.914446][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.929336][ T1814] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.0.295: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 178.939534][ T1825] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 178.956752][ T1807] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.963629][ T1807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.972657][ T1814] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 178.981537][ T1825] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.997293][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.010543][ T1827] loop3: p1 < > p2 p3 p4 [ 179.014755][ T1827] loop3: partition table partially beyond EOD, truncated [ 179.016342][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.031460][ T1827] loop3: p1 start 277760 is beyond EOD, truncated [ 179.037712][ T1827] loop3: p2 start 6684676 is beyond EOD, truncated [ 179.060392][ T289] EXT4-fs (loop0): unmounting filesystem. [ 179.073203][ T1829] incfs: Options parsing error. -22 [ 179.078672][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.122703][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.134223][ T1832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 179.134681][ T1829] incfs: mount failed -22 [ 179.152262][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.189447][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.204987][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.217436][ T1836] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 179.232441][ T1764] device veth0_vlan entered promiscuous mode [ 179.240755][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.254069][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.285271][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.299539][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.319608][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.332153][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.340649][ T1840] loop0: detected capacity change from 0 to 256 [ 179.345758][ T1764] device veth1_macvtap entered promiscuous mode [ 179.372219][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.382908][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.395324][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.427493][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.453815][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.471414][ T1842] loop0: detected capacity change from 0 to 512 [ 179.523572][ T1842] EXT4-fs (loop0): bad s_want_extra_isize: 192 [ 179.577271][ T28] audit: type=1400 audit(1738377421.388:490): avc: denied { append } for pid=1841 comm="syz.0.305" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.658962][ T28] audit: type=1400 audit(1738377421.388:491): avc: denied { ioctl } for pid=1841 comm="syz.0.305" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.736628][ T1849] loop0: detected capacity change from 0 to 256 [ 182.030775][ T315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.048359][ T1860] loop3: detected capacity change from 0 to 512 [ 182.063966][ T1860] EXT4-fs: Ignoring removed bh option [ 182.074910][ T1849] device wg2 left promiscuous mode [ 182.363946][ T1862] 9pnet_fd: Insufficient options for proto=fd [ 182.384865][ T1860] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 182.416160][ T1860] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.595961][ T1869] loop0: detected capacity change from 0 to 256 [ 182.609237][ T1869] exfat: Deprecated parameter 'utf8' [ 182.614961][ T1869] exfat: Deprecated parameter 'utf8' [ 182.729225][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 182.806183][ T1869] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 182.972217][ T28] audit: type=1400 audit(1738377424.788:492): avc: denied { remove_name } for pid=1868 comm="syz.0.310" name="file1" dev="loop0" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.031401][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 183.033488][ T28] audit: type=1400 audit(1738377424.818:493): avc: denied { rename } for pid=1868 comm="syz.0.310" name="file1" dev="loop0" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.040853][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 183.067962][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.076425][ T291] EXT4-fs (loop3): unmounting filesystem. [ 183.088860][ T24] usb 7-1: Product: syz [ 183.092862][ T24] usb 7-1: Manufacturer: syz [ 183.104950][ T24] usb 7-1: SerialNumber: syz [ 183.160225][ T1879] tipc: Started in network mode [ 183.169801][ T1879] tipc: Node identity , cluster identity 4711 [ 183.188955][ T1879] tipc: Failed to set node id, please configure manually [ 183.195972][ T1879] tipc: Enabling of bearer rejected, failed to enable media [ 183.320062][ T24] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 183.468829][ T1086] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 183.550749][ T28] audit: type=1400 audit(1738377425.368:494): avc: denied { read write } for pid=1861 comm="syz.6.309" name="lp0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 183.575030][ T28] audit: type=1400 audit(1738377425.398:495): avc: denied { open } for pid=1861 comm="syz.6.309" path="/dev/usb/lp0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 183.576701][ T833] EXT4-fs (loop5): unmounting filesystem. [ 183.600914][ T1887] loop0: detected capacity change from 0 to 256 [ 183.616714][ T1887] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.627357][ T1887] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 183.638003][ T1887] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 183.700796][ T28] audit: type=1400 audit(1738377425.488:496): avc: denied { rename } for pid=1886 comm="syz.0.327" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.744354][ T28] audit: type=1400 audit(1738377425.488:497): avc: denied { rmdir } for pid=1886 comm="syz.0.327" name="file0" dev="loop0" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.809619][ T1086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.820503][ T1086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.830177][ T1086] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 183.839362][ T1086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.847682][ T1086] usb 4-1: config 0 descriptor?? [ 184.141304][ T1896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.309'. [ 184.156816][ T1895] loop0: detected capacity change from 0 to 512 [ 184.179594][ T1895] EXT4-fs (loop0): Test dummy encryption mode enabled [ 184.187069][ T1895] EXT4-fs error (device loop0): __ext4_fill_super:5375: inode #2: comm syz.0.317: casefold flag without casefold feature [ 184.199881][ T1895] EXT4-fs (loop0): get root inode failed [ 184.205471][ T1895] EXT4-fs (loop0): mount failed [ 184.391596][ T6] usb 7-1: USB disconnect, device number 2 [ 184.405015][ T6] usblp0: removed [ 184.408688][ T1086] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 184.415911][ T1086] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 184.423282][ T1086] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 184.430627][ T1086] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 184.437626][ T1086] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 184.445471][ T1086] greenasia 0003:0E8F:0012.0001: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 184.485618][ T1086] greenasia 0003:0E8F:0012.0001: no inputs found [ 184.609067][ T1902] loop1: detected capacity change from 0 to 16 [ 184.650893][ T1086] usb 4-1: USB disconnect, device number 3 [ 184.670353][ T1902] erofs: (device loop1): mounted with root inode @ nid 36. [ 184.830131][ T1904] vcan0: MTU too low for tipc bearer [ 184.835279][ T1904] tipc: Enabling of bearer rejected, failed to enable media [ 184.881818][ T1906] loop5: detected capacity change from 0 to 256 [ 184.898279][ T28] audit: type=1400 audit(1738377426.708:498): avc: denied { mounton } for pid=1905 comm="syz.5.321" path="/34/file1/file0" dev="loop5" ino=1048644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 184.932528][ T1906] incfs: Can't find or create .incomplete dir in ./file0 [ 184.947645][ T1906] incfs: mount failed -28 [ 184.990573][ T28] audit: type=1400 audit(1738377426.808:499): avc: denied { append } for pid=1911 comm="syz.5.324" name="001" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.042457][ T1910] loop6: detected capacity change from 0 to 8192 [ 185.089684][ T1910] loop6: p1 < > p2 p3 p4 [ 185.098803][ T1910] loop6: partition table partially beyond EOD, truncated [ 185.177856][ T1910] loop6: p1 start 277760 is beyond EOD, truncated [ 185.208682][ T1910] loop6: p2 start 6684676 is beyond EOD, truncated [ 185.247566][ T1921] incfs: Options parsing error. -22 [ 185.265742][ T102] loop6: p1 < > p2 p3 p4 [ 185.269021][ T1921] incfs: mount failed -22 [ 185.269973][ T102] loop6: partition table partially beyond EOD, truncated [ 185.286118][ T1910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.323'. [ 185.299517][ T102] loop6: p1 start 277760 is beyond EOD, truncated [ 185.394229][ T1925] loop3: detected capacity change from 0 to 128 [ 185.401285][ T1925] EXT4-fs (loop3): Test dummy encryption mode enabled [ 185.445411][ T102] loop6: p2 start 6684676 is beyond EOD, truncated [ 185.684065][ T1925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.009631][ T1925] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.363256][ T291] EXT4-fs (loop3): unmounting filesystem. [ 186.372453][ T1938] loop6: detected capacity change from 0 to 256 [ 186.394046][ T1938] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 186.408926][ T1938] FAT-fs (loop6): Filesystem has been set read-only [ 186.446344][ T1915] syz.5.325 (1915) used greatest stack depth: 19256 bytes left [ 186.481696][ T1945] 9pnet_fd: Insufficient options for proto=fd [ 186.551879][ T28] audit: type=1400 audit(1738377428.368:500): avc: denied { remount } for pid=1946 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 186.598814][ T28] audit: type=1400 audit(1738377428.398:501): avc: denied { mount } for pid=1948 comm="syz.0.337" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 186.638837][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 186.654636][ T1959] loop0: detected capacity change from 0 to 1024 [ 186.678277][ T1957] loop6: detected capacity change from 0 to 8192 [ 186.679929][ T1959] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 186.693185][ T1959] System zones: 0-1, 3-12 [ 186.698148][ T1959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 186.702240][ T1957] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.738021][ T289] EXT4-fs (loop0): unmounting filesystem. [ 186.788852][ T981] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 186.823907][ T1967] loop0: detected capacity change from 0 to 256 [ 186.880876][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.896544][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 186.907107][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.101621][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 187.140853][ T981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.155607][ T24] usb 2-1: config 0 descriptor?? [ 187.210558][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.294078][ T981] usb 4-1: Product: syz [ 187.315449][ T981] usb 4-1: Manufacturer: syz [ 187.339208][ T981] usb 4-1: SerialNumber: syz [ 187.992344][ T409] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 188.039483][ T24] wacom 0003:056A:00ED.0002: hidraw0: USB HID vff.ff Device [HID 056a:00ed] on usb-dummy_hcd.1-1/input0 [ 188.050973][ T981] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.072672][ T1981] loop6: detected capacity change from 0 to 1024 [ 188.079176][ T1981] EXT4-fs: Ignoring removed nobh option [ 188.085695][ T1981] EXT4-fs: Ignoring removed bh option [ 188.093533][ T1981] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.110557][ T1981] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 188.134867][ T1981] EXT4-fs warning (device loop6): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 188.153831][ T1764] EXT4-fs (loop6): unmounting filesystem. [ 188.229178][ T534] usb 2-1: USB disconnect, device number 3 [ 188.235403][ T409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.246604][ T409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.256755][ T409] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 188.454059][ T1990] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 188.566570][ T409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.580524][ T409] usb 6-1: config 0 descriptor?? [ 188.593596][ T1992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 188.808048][ T534] usb 4-1: USB disconnect, device number 4 [ 188.817303][ T534] usblp0: removed [ 189.188584][ T409] hid-led: probe of 0003:1D34:000A.0003 failed with error -71 [ 189.207361][ T409] usb 6-1: USB disconnect, device number 2 [ 189.436708][ T1999] loop1: detected capacity change from 0 to 131072 [ 189.446634][ T1999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 189.518990][ T2009] loop3: detected capacity change from 0 to 512 [ 189.525889][ T2009] EXT4-fs (loop3): Test dummy encryption mode enabled [ 189.532862][ T981] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 189.543367][ T2009] EXT4-fs error (device loop3): __ext4_fill_super:5375: inode #2: comm syz.3.355: casefold flag without casefold feature [ 189.557335][ T2009] EXT4-fs (loop3): get root inode failed [ 189.562929][ T2009] EXT4-fs (loop3): mount failed [ 189.574512][ T1999] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 189.718891][ T981] usb 7-1: Using ep0 maxpacket: 16 [ 189.725633][ T981] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 189.761164][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.792531][ T981] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 189.827769][ T2015] loop5: detected capacity change from 0 to 512 [ 189.834158][ T981] usb 7-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 189.852187][ T2015] EXT4-fs: Ignoring removed bh option [ 189.853809][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.881848][ T981] usb 7-1: config 0 descriptor?? [ 189.888073][ T2015] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.900012][ T2015] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.531373][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.542458][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.550549][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.557578][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.564918][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.573373][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.580607][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.587532][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.594797][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.601898][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.609069][ T981] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 190.619649][ T981] samsung 0003:0419:0001.0004: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.6-1/input0 [ 190.728560][ T2023] syz.1.356[2023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.728642][ T2023] syz.1.356[2023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.854884][ T833] EXT4-fs (loop5): unmounting filesystem. [ 190.856214][ T409] usb 7-1: USB disconnect, device number 3 [ 191.028881][ T2025] device macsec1 entered promiscuous mode [ 191.034509][ T2025] device vlan0 entered promiscuous mode [ 191.995116][ T2038] usb usb1: usbfs: process 2038 (syz.1.363) did not claim interface 0 before use [ 192.488379][ T2056] device syz_tun entered promiscuous mode [ 192.501657][ T2055] device syz_tun left promiscuous mode [ 192.517784][ T2060] syz.3.372[2060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.517866][ T2060] syz.3.372[2060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.568855][ T534] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.160395][ T2083] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 193.978811][ T534] usb 2-1: Using ep0 maxpacket: 16 [ 193.995827][ T534] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 194.007623][ T2090] loop3: detected capacity change from 0 to 512 [ 194.014662][ T534] usb 2-1: config 0 has no interface number 0 [ 194.020689][ T534] usb 2-1: config 0 interface 41 altsetting 2 endpoint 0x4 has invalid maxpacket 65526, setting to 1024 [ 194.032350][ T2090] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.038425][ T534] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 1024 [ 194.054054][ T534] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 194.064384][ T534] usb 2-1: config 0 interface 41 has no altsetting 0 [ 194.071847][ T2090] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 194.080208][ T2090] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.384: invalid indirect mapped block 2683928664 (level 1) [ 194.091316][ T534] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 194.103913][ T2090] EXT4-fs (loop3): Remounting filesystem read-only [ 194.110573][ T2090] EXT4-fs (loop3): 1 truncate cleaned up [ 194.116036][ T2090] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.126305][ T534] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.149639][ T534] usb 2-1: Product: syz [ 194.155299][ T291] EXT4-fs (loop3): unmounting filesystem. [ 194.161155][ T534] usb 2-1: Manufacturer: syz [ 194.165571][ T534] usb 2-1: SerialNumber: syz [ 194.183611][ T534] usb 2-1: config 0 descriptor?? [ 194.189086][ T2042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.196071][ T2042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.282740][ T2086] loop5: detected capacity change from 0 to 40427 [ 194.306440][ T2086] F2FS-fs (loop5): fault_injection options not supported [ 194.314215][ T2086] F2FS-fs (loop5): invalid crc value [ 194.322744][ T2086] F2FS-fs (loop5): Found nat_bits in checkpoint [ 194.373141][ T2086] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 194.405964][ T833] syz-executor: attempt to access beyond end of device [ 194.405964][ T833] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.428877][ T2042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.435884][ T2042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.557851][ T2107] loop5: detected capacity change from 0 to 512 [ 194.579414][ T1977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 194.580350][ T2107] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #15: comm syz.5.390: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 194.604864][ T2107] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.390: couldn't read orphan inode 15 (err -117) [ 194.617136][ T2107] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 194.625718][ T2107] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.652122][ T833] EXT4-fs (loop5): unmounting filesystem. [ 194.727766][ T2092] loop0: detected capacity change from 0 to 131072 [ 194.734982][ T2092] F2FS-fs (loop0): Test dummy encryption mode enabled [ 194.743221][ T2092] F2FS-fs (loop0): invalid crc value [ 194.750661][ T2092] F2FS-fs (loop0): Found nat_bits in checkpoint [ 194.779950][ T1977] usb 4-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 194.789155][ T1977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.793304][ T2092] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 194.802296][ T1977] usb 4-1: config 0 descriptor?? [ 194.815567][ T2092] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 194.859204][ T534] CoreChips: probe of 2-1:0.41 failed with error -71 [ 194.867438][ T534] usb 2-1: USB disconnect, device number 4 [ 194.948825][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 195.068417][ T2125] loop0: detected capacity change from 0 to 256 [ 195.081002][ T2125] exfat: Deprecated parameter 'namecase' [ 195.090134][ T2125] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 195.128835][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 195.135083][ T6] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 195.143422][ T6] usb 6-1: config 0 has no interface number 0 [ 195.149552][ T6] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 195.159832][ T6] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 195.178619][ T2131] loop0: detected capacity change from 0 to 512 [ 195.185217][ T6] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 195.194638][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.196374][ T2131] [EXT4 FS bs=1024, gc=1, bpg=255, ipg=32, mo=a802c018, mo2=0000] [ 195.202675][ T6] usb 6-1: Product: syz [ 195.211062][ T2131] System zones: 1-12 [ 195.214426][ T6] usb 6-1: Manufacturer: syz [ 195.221994][ T1977] wacom 0003:056A:005B.0005: hidraw0: USB HID v1.01 Device [HID 056a:005b] on usb-dummy_hcd.3-1/input0 [ 195.222645][ T6] usb 6-1: SerialNumber: syz [ 195.239123][ T6] usb 6-1: config 0 descriptor?? [ 195.244242][ T2110] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 195.249988][ T2131] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.398: invalid indirect mapped block 10 (level 1) [ 195.253464][ T2110] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 195.264699][ T2131] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.398: invalid indirect mapped block 8 (level 1) [ 195.284841][ T2131] EXT4-fs (loop0): 1 truncate cleaned up [ 195.290442][ T2131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.317979][ T289] EXT4-fs (loop0): unmounting filesystem. [ 195.389909][ T2137] loop1: detected capacity change from 0 to 128 [ 195.404703][ T2137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 195.413277][ T2137] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.446995][ T419] usb 4-1: USB disconnect, device number 5 [ 195.464328][ T293] EXT4-fs (loop1): unmounting filesystem. [ 195.486452][ T2110] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 195.494130][ T2110] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 195.511792][ T2143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'. [ 195.520873][ T2143] tipc: Started in network mode [ 195.525762][ T2143] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 195.539017][ T2143] tipc: Enabling of bearer rejected, failed to enable media [ 195.860102][ T6] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.870289][ T6] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 195.879876][ T6] asix: probe of 6-1:0.251 failed with error -5 [ 195.880895][ T2151] loop6: detected capacity change from 0 to 512 [ 195.887580][ T6] usb 6-1: USB disconnect, device number 3 [ 195.901201][ T2151] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 33619980: comm syz.6.404: invalid block [ 195.913261][ T2151] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.404: Invalid block bitmap block 0 in block_group 0 [ 195.927137][ T2151] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 195.935935][ T2151] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.404: attempt to clear invalid blocks 983261 len 1 [ 195.949315][ T2151] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.404: invalid indirect mapped block 2683928664 (level 0) [ 195.963571][ T2151] EXT4-fs error (device loop6): __ext4_get_inode_loc:4508: comm syz.6.404: Invalid inode table block 0 in block_group 0 [ 195.976248][ T2151] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 195.985823][ T2151] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 195.994514][ T2151] EXT4-fs error (device loop6): __ext4_get_inode_loc:4508: comm syz.6.404: Invalid inode table block 0 in block_group 0 [ 196.007127][ T2151] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 196.016856][ T2151] EXT4-fs error (device loop6): ext4_truncate:4313: inode #13: comm syz.6.404: mark_inode_dirty error [ 196.033118][ T2151] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 196.046696][ T2157] loop3: detected capacity change from 0 to 1024 [ 196.047592][ T2151] EXT4-fs error (device loop6): __ext4_get_inode_loc:4508: comm syz.6.404: Invalid inode table block 0 in block_group 0 [ 196.053547][ T2157] EXT4-fs: Ignoring removed nobh option [ 196.072682][ T2157] EXT4-fs: Ignoring removed bh option [ 196.078217][ T2157] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.079145][ T2151] EXT4-fs (loop6): 1 truncate cleaned up [ 196.094814][ T2151] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 196.100799][ T2157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 196.103152][ T1977] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.127839][ T2151] EXT4-fs (loop6): shut down requested (2) [ 196.141652][ T1764] EXT4-fs (loop6): unmounting filesystem. [ 196.148615][ T291] EXT4-fs (loop3): unmounting filesystem. [ 196.237805][ T6] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 196.245686][ T6] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 196.254293][ T6] hid-generic 0000:0003:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 196.309893][ T1977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.320918][ T1977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.411987][ T2173] loop0: detected capacity change from 0 to 512 [ 196.421366][ T2173] EXT4-fs: Ignoring removed orlov option [ 196.479845][ T2173] __quota_error: 2 callbacks suppressed [ 196.479875][ T2173] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 196.495683][ T2173] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 196.505024][ T2173] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.411: Failed to acquire dquot type 0 [ 196.518166][ T2173] EXT4-fs (loop0): Remounting filesystem read-only [ 196.524726][ T2173] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 196.535001][ T2173] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 196.544259][ T2173] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.411: Failed to acquire dquot type 0 [ 196.556915][ T2173] EXT4-fs (loop0): Remounting filesystem read-only [ 196.564809][ T2173] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 196.575087][ T2173] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 196.584350][ T2173] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.411: Failed to acquire dquot type 0 [ 196.596721][ T2173] EXT4-fs (loop0): Remounting filesystem read-only [ 196.603319][ T2173] EXT4-fs (loop0): 1 orphan inode deleted [ 196.608953][ T2173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 196.618468][ T2173] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.688893][ T28] audit: type=1400 audit(1738377438.498:504): avc: denied { setattr } for pid=2170 comm="syz.0.411" path="/96/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.038896][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.408887][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 197.417209][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.429708][ T6] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 197.439150][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 197.447184][ T6] usb 4-1: SerialNumber: syz [ 197.477971][ T6] usb 4-1: config 0 descriptor?? [ 197.687632][ T6] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 197.694582][ T6] usb 4-1: No valid video chain found. [ 197.887324][ T1977] usb 2-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.00 [ 197.896242][ T1977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.913878][ T1977] usb 2-1: config 0 descriptor?? [ 197.930000][ T409] usb 4-1: USB disconnect, device number 6 [ 197.959369][ T289] EXT4-fs (loop0): unmounting filesystem. [ 197.976763][ T28] audit: type=1400 audit(1738377439.788:505): avc: denied { setopt } for pid=2185 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.023004][ T2190] loop0: detected capacity change from 0 to 16 [ 198.035063][ T2190] erofs: (device loop0): mounted with root inode @ nid 36. [ 198.136938][ T2206] xt_hashlimit: size too large, truncated to 1048576 [ 198.221541][ T2210] loop5: detected capacity change from 0 to 128 [ 198.228662][ T2210] EXT4-fs (loop5): Test dummy encryption mode enabled [ 198.257149][ T2210] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 198.265861][ T2210] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.333562][ T1977] wacom 0003:056A:0037.0007: unknown main item tag 0xd [ 198.346946][ T1977] wacom 0003:056A:0037.0007: unknown main item tag 0x0 [ 198.354121][ T1977] wacom 0003:056A:0037.0007: unknown main item tag 0x0 [ 198.362116][ T1977] wacom 0003:056A:0037.0007: unknown main item tag 0x0 [ 198.373706][ T1977] wacom 0003:056A:0037.0007: hidraw0: USB HID v0.02 Device [HID 056a:0037] on usb-dummy_hcd.1-1/input0 [ 198.619262][ T2215] tun0: tun_chr_ioctl cmd 1074025692 [ 199.500698][ T2223] 9pnet: p9_errstr2errno: server reported unknown error [ 199.647529][ T2228] loop6: detected capacity change from 0 to 256 [ 199.685291][ T2228] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 199.730049][ T2232] loop1: detected capacity change from 0 to 1024 [ 199.770595][ T2232] EXT4-fs: Ignoring removed orlov option [ 199.798026][ T2232] EXT4-fs (loop1): Test dummy encryption mode enabled [ 199.928009][ T2232] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 199.962803][ T293] EXT4-fs (loop1): unmounting filesystem. [ 200.316359][ T6] usb 2-1: USB disconnect, device number 5 [ 200.350367][ T833] EXT4-fs (loop5): unmounting filesystem. [ 200.386181][ T2244] loop1: detected capacity change from 0 to 8192 [ 200.419074][ T2244] loop1: p1 < > p2 p3 p4 [ 200.424789][ T2244] loop1: partition table partially beyond EOD, truncated [ 200.436969][ T2244] loop1: p1 start 277760 is beyond EOD, truncated [ 200.446454][ T2244] loop1: p2 start 6684676 is beyond EOD, truncated [ 200.467772][ T2244] incfs: Options parsing error. -22 [ 200.476119][ T2244] incfs: mount failed -22 [ 200.486978][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 200.618914][ T409] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 200.625935][ T2256] loop5: detected capacity change from 0 to 2048 [ 200.735351][ T2256] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 200.748091][ T2256] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.756310][ T2265] loop6: detected capacity change from 0 to 2048 [ 200.768270][ T28] audit: type=1400 audit(1738377442.588:506): avc: denied { ioctl } for pid=2255 comm="syz.5.441" path="/54/file0/file0/file0" dev="loop5" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.800200][ T833] EXT4-fs (loop5): unmounting filesystem. [ 200.821602][ T409] usb 4-1: config 0 has no interfaces? [ 200.831284][ T409] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.844685][ T409] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 200.861547][ T409] usb 4-1: Product: syz [ 200.874902][ T409] usb 4-1: config 0 descriptor?? [ 200.930412][ T2265] loop6: unable to read partition table [ 200.939320][ T2265] loop6: partition table beyond EOD, truncated [ 200.945349][ T2265] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 200.994681][ T102] loop6: unable to read partition table [ 201.000288][ T102] loop6: partition table beyond EOD, truncated [ 201.510607][ T1977] usb 4-1: USB disconnect, device number 7 [ 201.646328][ T2277] 9pnet: p9_errstr2errno: server reported unknown error [ 201.782919][ T2287] loop0: detected capacity change from 0 to 512 [ 201.808232][ T2287] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 201.816659][ T2291] loop6: detected capacity change from 0 to 256 [ 201.827150][ T2287] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.870491][ T289] EXT4-fs (loop0): unmounting filesystem. [ 201.920260][ T2297] loop5: detected capacity change from 0 to 128 [ 201.926952][ T2297] EXT4-fs (loop5): Test dummy encryption mode enabled [ 201.938358][ T2297] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 201.946892][ T2297] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.013320][ T2306] tun0: tun_chr_ioctl cmd 2147767507 [ 202.056957][ T2311] capability: warning: `syz.3.460' uses deprecated v2 capabilities in a way that may be insecure [ 202.696844][ T833] EXT4-fs (loop5): unmounting filesystem. [ 203.098254][ T2326] loop1: detected capacity change from 0 to 1024 [ 203.125322][ T2326] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 203.158001][ T293] EXT4-fs (loop1): unmounting filesystem. [ 203.288831][ T1977] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 203.323715][ T2348] loop0: detected capacity change from 0 to 512 [ 203.335441][ T2348] EXT4-fs (loop0): Test dummy encryption mode enabled [ 203.349207][ T2348] EXT4-fs error (device loop0): __ext4_fill_super:5375: inode #2: comm syz.0.469: casefold flag without casefold feature [ 203.362054][ T2348] EXT4-fs (loop0): get root inode failed [ 203.367524][ T2348] EXT4-fs (loop0): mount failed [ 203.388895][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 203.397777][ T2345] loop1: detected capacity change from 0 to 8192 [ 203.459315][ T2345] loop1: p1 < > p2 p3 p4 [ 203.463486][ T2345] loop1: partition table partially beyond EOD, truncated [ 203.471454][ T2345] loop1: p1 start 277760 is beyond EOD, truncated [ 203.477714][ T2345] loop1: p2 start 6684676 is beyond EOD, truncated [ 203.488822][ T1977] usb 4-1: Using ep0 maxpacket: 16 [ 203.503960][ T1977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.526620][ T2345] incfs: Options parsing error. -22 [ 203.543083][ T2345] incfs: mount failed -22 [ 203.552086][ T1977] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.565427][ T2345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 203.635953][ T981] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 203.644077][ T1977] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 203.653665][ T1977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.661628][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.673715][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.687643][ T1977] usb 4-1: config 0 descriptor?? [ 203.692702][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 203.703438][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.716107][ T24] usb 6-1: config 0 descriptor?? [ 203.860023][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 203.871354][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.882214][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.892022][ T981] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 203.900833][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.912186][ T981] usb 7-1: config 0 descriptor?? [ 204.111755][ T1977] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 204.118480][ T1977] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 204.125353][ T1977] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 204.132247][ T1977] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 204.140834][ T24] hid-generic 0003:05AC:4262.0009: hidraw0: USB HID v0.00 Device [HID 05ac:4262] on usb-dummy_hcd.5-1/input0 [ 204.152411][ T1977] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 204.159678][ T1977] wacom 0003:056A:00BB.0008: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 204.177040][ T1977] wacom 0003:056A:00BB.0008: hidraw1: USB HID v0.05 Device [HID 056a:00bb] on usb-dummy_hcd.3-1/input0 [ 204.188629][ T1977] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BB.0008/input/input20 [ 204.218836][ T314] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.316748][ T1977] usb 4-1: USB disconnect, device number 8 [ 204.329021][ T981] input: HID 054c:03d5 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:03D5.000A/input/input23 [ 204.344488][ T981] sony 0003:054C:03D5.000A: input,hidraw1: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.6-1/input0 [ 204.356521][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.359130][ T6] usb 6-1: USB disconnect, device number 4 [ 204.410034][ T314] usb 2-1: config index 0 descriptor too short (expected 44, got 36) [ 204.418019][ T314] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 204.425883][ T314] usb 2-1: config 0 has no interface number 0 [ 204.431808][ T314] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.442734][ T314] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.452398][ T314] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 204.461430][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.470002][ T314] usb 2-1: config 0 descriptor?? [ 204.531021][ T981] usb 7-1: USB disconnect, device number 4 [ 204.548881][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 204.555023][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.565984][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.577456][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 204.586469][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.599147][ T24] usb 1-1: config 0 descriptor?? [ 204.853953][ T2365] loop3: detected capacity change from 0 to 512 [ 204.860980][ T2365] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.872495][ T2365] EXT4-fs (loop3): 1 truncate cleaned up [ 204.878021][ T2365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.894253][ T314] uclogic 0003:5543:0781.000B: unknown main item tag 0x0 [ 204.901367][ T314] uclogic 0003:5543:0781.000B: unknown main item tag 0x0 [ 204.902445][ T291] EXT4-fs (loop3): unmounting filesystem. [ 204.908869][ T314] uclogic 0003:5543:0781.000B: item fetching failed at offset 2/5 [ 204.921798][ T314] uclogic 0003:5543:0781.000B: parse failed [ 204.927563][ T314] uclogic: probe of 0003:5543:0781.000B failed with error -22 [ 205.028263][ T2373] loop5: detected capacity change from 0 to 1024 [ 205.039878][ T2373] EXT4-fs: Ignoring removed nobh option [ 205.050193][ T24] savu 0003:1E7D:2D5A.000C: item fetching failed at offset 2/5 [ 205.061353][ T24] savu 0003:1E7D:2D5A.000C: parse failed [ 205.067106][ T2373] EXT4-fs: Ignoring removed bh option [ 205.075429][ T24] savu: probe of 0003:1E7D:2D5A.000C failed with error -22 [ 205.083042][ T2373] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.103719][ T24] usb 2-1: USB disconnect, device number 6 [ 206.643612][ T981] usb 1-1: USB disconnect, device number 3 [ 206.762125][ T2373] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 206.763840][ T2388] loop3: detected capacity change from 0 to 512 [ 206.777338][ T2388] EXT4-fs: Ignoring removed i_version option [ 206.783227][ T2388] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.791218][ T2388] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.801623][ T833] EXT4-fs (loop5): unmounting filesystem. [ 206.809611][ T2388] EXT4-fs (loop3): 1 truncate cleaned up [ 206.815179][ T2388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.854712][ T2392] loop6: detected capacity change from 0 to 512 [ 206.865739][ T2392] EXT4-fs (loop6): Test dummy encryption mode enabled [ 206.873987][ T2392] EXT4-fs error (device loop6): __ext4_fill_super:5375: inode #2: comm syz.6.486: casefold flag without casefold feature [ 206.887385][ T2392] EXT4-fs (loop6): get root inode failed [ 206.892902][ T2392] EXT4-fs (loop6): mount failed [ 207.548941][ T2407] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 207.559162][ T2407] SELinux: failed to load policy [ 207.676095][ T2409] loop1: detected capacity change from 0 to 8192 [ 207.734008][ T2409] loop1: p1 < > p2 p3 p4 [ 207.738191][ T2409] loop1: partition table partially beyond EOD, truncated [ 207.745430][ T2409] loop1: p1 start 277760 is beyond EOD, truncated [ 207.752442][ T2409] loop1: p2 start 6684676 is beyond EOD, truncated [ 207.752831][ T291] EXT4-fs (loop3): unmounting filesystem. [ 207.766273][ T2409] incfs: Options parsing error. -22 [ 207.771547][ T102] loop1: p1 < > p2 p3 p4 [ 207.779002][ T102] loop1: partition table partially beyond EOD, truncated [ 207.782696][ T2409] incfs: mount failed -22 [ 207.787555][ T102] loop1: p1 start 277760 is beyond EOD, truncated [ 207.792901][ T2409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'. [ 207.805439][ T102] loop1: p2 start 6684676 is beyond EOD, truncated [ 207.958839][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.025245][ T2424] loop6: detected capacity change from 0 to 1024 [ 208.059455][ T2424] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f01cc01c, mo2=0002] [ 208.074615][ T2424] System zones: 0-1, 3-36 [ 208.115652][ T2424] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 208.150500][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.173801][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.192716][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.205775][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.215260][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.225509][ T6] usb 1-1: config 0 descriptor?? [ 208.232304][ T2434] loop1: detected capacity change from 0 to 128 [ 208.239237][ T1764] EXT4-fs (loop6): unmounting filesystem. [ 208.244986][ T2434] EXT4-fs (loop1): Test dummy encryption mode enabled [ 208.268267][ T2434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.276937][ T2434] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.315898][ T2438] syz.6.502[2438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.315990][ T2438] syz.6.502[2438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.550772][ T2448] loop6: detected capacity change from 0 to 512 [ 208.568495][ T2448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.575586][ T2448] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.587471][ T2448] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 208.595594][ T2448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 208.603994][ T2448] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 208.613366][ T2448] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 208.621999][ T2448] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 208.640031][ T2448] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 208.649120][ T6] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 208.659643][ T2449] loop5: detected capacity change from 0 to 512 [ 208.666618][ T2449] EXT4-fs (loop5): Test dummy encryption mode enabled [ 208.674656][ T6] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 208.687556][ T1764] EXT4-fs (loop6): unmounting filesystem. [ 208.687596][ T2449] EXT4-fs error (device loop5): __ext4_fill_super:5375: inode #2: comm syz.5.506: casefold flag without casefold feature [ 208.709187][ T2449] EXT4-fs (loop5): get root inode failed [ 208.714686][ T2449] EXT4-fs (loop5): mount failed [ 208.767219][ T2460] loop3: detected capacity change from 0 to 512 [ 208.774184][ T2460] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 208.792000][ T2460] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 208.806607][ T2460] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #11: comm syz.3.511: corrupted inode contents [ 208.818644][ T2460] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #11: comm syz.3.511: mark_inode_dirty error [ 208.830741][ T2460] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.511: invalid indirect mapped block 1 (level 1) [ 208.844335][ T2460] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #11: comm syz.3.511: corrupted inode contents [ 208.858158][ T2460] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 208.867198][ T2460] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #11: comm syz.3.511: corrupted inode contents [ 208.879192][ T2460] EXT4-fs error (device loop3): ext4_truncate:4313: inode #11: comm syz.3.511: mark_inode_dirty error [ 208.890535][ T2460] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 208.899600][ T2460] EXT4-fs (loop3): 1 truncate cleaned up [ 208.905191][ T2460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.921800][ T6] usb 1-1: USB disconnect, device number 4 [ 208.928521][ T291] EXT4-fs (loop3): unmounting filesystem. [ 209.270219][ T2468] loop3: detected capacity change from 0 to 512 [ 209.278087][ T2468] EXT4-fs (loop3): Test dummy encryption mode enabled [ 209.318841][ T2468] EXT4-fs error (device loop3): __ext4_fill_super:5375: inode #2: comm syz.3.514: casefold flag without casefold feature [ 209.332320][ T2468] EXT4-fs (loop3): get root inode failed [ 209.337809][ T2468] EXT4-fs (loop3): mount failed [ 209.351723][ T293] EXT4-fs (loop1): unmounting filesystem. [ 209.717259][ T2474] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 209.723492][ T28] audit: type=1400 audit(1738377451.538:507): avc: denied { create } for pid=2473 comm="syz.5.516" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 209.958413][ T2489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.520'. [ 210.072559][ T2492] syz.5.521[2492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.072638][ T2492] syz.5.521[2492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.081156][ T28] audit: type=1400 audit(1738377451.638:508): avc: denied { associate } for pid=2473 comm="syz.5.516" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 210.095124][ T28] audit: type=1400 audit(1738377451.638:509): avc: denied { mounton } for pid=2473 comm="syz.5.516" path="/68/bus" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 210.273337][ T28] audit: type=1400 audit(1738377451.638:510): avc: denied { write } for pid=2473 comm="syz.5.516" name="bus" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 210.366097][ T28] audit: type=1400 audit(1738377451.638:511): avc: denied { add_name } for pid=2473 comm="syz.5.516" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 210.422352][ T2508] loop5: detected capacity change from 0 to 512 [ 210.469426][ T28] audit: type=1400 audit(1738377451.638:512): avc: denied { setattr } for pid=2473 comm="syz.5.516" name="work" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 210.559280][ T2508] EXT4-fs (loop5): Test dummy encryption mode enabled [ 210.652636][ T2510] loop6: detected capacity change from 0 to 128 [ 210.653051][ T28] audit: type=1400 audit(1738377451.658:513): avc: denied { write open } for pid=2473 comm="syz.5.516" path=2F202864656C6574656429 dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 210.661779][ T28] audit: type=1400 audit(1738377451.658:514): avc: denied { create } for pid=2473 comm="syz.5.516" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 210.669282][ T2505] usb usb5: usbfs: process 2505 (syz.0.525) did not claim interface 0 before use [ 210.749296][ T2510] EXT4-fs (loop6): Test dummy encryption mode enabled [ 210.872766][ T2508] EXT4-fs error (device loop5): __ext4_fill_super:5375: inode #2: comm syz.5.527: casefold flag without casefold feature [ 210.885558][ T2508] EXT4-fs (loop5): get root inode failed [ 210.889296][ T2510] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 210.891669][ T2508] EXT4-fs (loop5): mount failed [ 210.899585][ T2510] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.948622][ T28] audit: type=1400 audit(1738377451.668:515): avc: denied { remove_name } for pid=2473 comm="syz.5.516" name="#13" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 210.949109][ T28] audit: type=1400 audit(1738377451.668:516): avc: denied { rename } for pid=2473 comm="syz.5.516" name="#13" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 211.427661][ T2530] loop5: detected capacity change from 0 to 512 [ 211.635246][ T2516] loop0: detected capacity change from 0 to 512 [ 211.644588][ T2516] EXT4-fs: Ignoring removed i_version option [ 211.650824][ T2516] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.662709][ T2530] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.665814][ T2516] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.678841][ T2530] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 211.709331][ T2530] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 211.728313][ T2530] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 211.747185][ T2516] EXT4-fs (loop0): 1 truncate cleaned up [ 211.757511][ T2516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 211.766064][ T2530] System zones: 0-2, 18-18, 34-34 [ 211.784836][ T2530] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 211.799922][ T2519] loop3: detected capacity change from 0 to 40427 [ 211.814497][ T2519] F2FS-fs (loop3): invalid crc value [ 211.821345][ T2519] F2FS-fs (loop3): Found nat_bits in checkpoint [ 211.851249][ T2530] EXT4-fs (loop5): 1 truncate cleaned up [ 211.856725][ T2530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 211.876493][ T2519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 211.910597][ T2530] EXT4-fs (loop5): unmounting filesystem. [ 211.928950][ T723] kworker/u4:7: attempt to access beyond end of device [ 211.928950][ T723] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 212.056980][ T291] syz-executor: attempt to access beyond end of device [ 212.056980][ T291] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 212.078886][ T291] syz-executor: attempt to access beyond end of device [ 212.078886][ T291] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 212.754422][ T2564] loop5: detected capacity change from 0 to 16 [ 212.777572][ T2564] erofs: (device loop5): mounted with root inode @ nid 36. [ 212.786911][ T289] EXT4-fs (loop0): unmounting filesystem. [ 212.806229][ T2564] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 212.817942][ T2564] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 212.888622][ T2564] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 212.898225][ T6] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 212.915104][ T2564] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 212.928148][ T2564] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 212.947357][ T2564] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 212.947412][ T2573] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 212.965474][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.967468][ T2570] loop0: detected capacity change from 0 to 512 [ 212.972845][ T2567] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.985366][ T2570] EXT4-fs (loop0): Test dummy encryption mode enabled [ 212.996608][ T2570] EXT4-fs error (device loop0): __ext4_fill_super:5375: inode #2: comm syz.0.548: casefold flag without casefold feature [ 213.009475][ T2570] EXT4-fs (loop0): get root inode failed [ 213.014935][ T2570] EXT4-fs (loop0): mount failed [ 213.028379][ T2573] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 213.033794][ T2567] device bridge_slave_0 entered promiscuous mode [ 213.045608][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.046048][ T2575] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.053015][ T2567] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.069225][ T2567] device bridge_slave_1 entered promiscuous mode [ 213.079047][ T2575] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 213.110440][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.124563][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 213.146844][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.164626][ T6] usb 2-1: config 0 descriptor?? [ 213.181035][ T723] device bridge_slave_1 left promiscuous mode [ 213.187045][ T723] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.195135][ T723] device bridge_slave_0 left promiscuous mode [ 213.201282][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.210187][ T723] device veth1_macvtap left promiscuous mode [ 213.321387][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.328253][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.335394][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.342252][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.354630][ T1764] EXT4-fs (loop6): unmounting filesystem. [ 213.379505][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.387419][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.395045][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.412820][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.420953][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.427989][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.435655][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.443789][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.450665][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.467014][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.474955][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.493210][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.505775][ T2567] device veth0_vlan entered promiscuous mode [ 213.518971][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.528385][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.544443][ T2567] device veth1_macvtap entered promiscuous mode [ 213.550649][ T314] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 213.559178][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.566743][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.574617][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.582985][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.591257][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.599993][ T6] sony 0003:054C:09CC.000E: unbalanced collection at end of report description [ 213.609289][ T6] sony 0003:054C:09CC.000E: parse failed [ 213.614816][ T6] sony: probe of 0003:054C:09CC.000E failed with error -22 [ 213.625018][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.634845][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.636077][ T2584] loop6: detected capacity change from 0 to 40427 [ 213.643520][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.650364][ T2584] F2FS-fs (loop6): invalid crc value [ 213.673778][ T2584] F2FS-fs (loop6): Found nat_bits in checkpoint [ 213.698397][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.740045][ T314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.757232][ T314] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.766609][ T2584] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 213.784335][ T314] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 213.802925][ T1977] usb 2-1: USB disconnect, device number 7 [ 213.813853][ T314] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.825763][ T314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.833867][ T314] usb 6-1: Product: syz [ 213.837844][ T314] usb 6-1: Manufacturer: syz [ 213.842339][ T314] usb 6-1: SerialNumber: syz [ 213.847186][ T2597] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 214.044435][ T2599] loop7: detected capacity change from 0 to 40427 [ 214.056235][ T2599] F2FS-fs (loop7): invalid crc value [ 214.064720][ T2599] F2FS-fs (loop7): Found nat_bits in checkpoint [ 214.086292][ T2584] F2FS-fs (loop6): Start checkpoint disabled! [ 214.115787][ T2599] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 214.137543][ T2599] F2FS-fs (loop7): access invalid blkaddr:2816 [ 214.143590][ T2599] CPU: 1 PID: 2599 Comm: syz.7.556 Not tainted 6.1.124-syzkaller-00114-g2055772eada0 #0 [ 214.153077][ T2599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 214.162974][ T2599] Call Trace: [ 214.166097][ T2599] [ 214.168876][ T2599] dump_stack_lvl+0x151/0x1b7 [ 214.173387][ T2599] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 214.178678][ T2599] ? f2fs_get_next_page_offset+0x770/0x770 [ 214.184324][ T2599] ? arch_stack_walk+0xf3/0x140 [ 214.189026][ T2599] dump_stack+0x15/0x18 [ 214.193000][ T2599] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 214.198382][ T2599] f2fs_is_valid_blkaddr+0x25/0x30 [ 214.203339][ T2599] f2fs_map_blocks+0xd16/0x4340 [ 214.208202][ T2599] ? memcpy+0x56/0x70 [ 214.212032][ T2599] ? f2fs_map_lock+0x260/0x260 [ 214.216620][ T2599] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 214.222089][ T2599] ? irqentry_exit+0x30/0x40 [ 214.226512][ T2599] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 214.232156][ T2599] f2fs_fiemap+0xa0c/0x1e20 [ 214.236497][ T2599] ? f2fs_overwrite_io+0x310/0x310 [ 214.241438][ T2599] ? avc_has_extended_perms+0xad7/0x10f0 [ 214.246907][ T2599] ? __kasan_check_write+0x14/0x20 [ 214.251853][ T2599] ? f2fs_overwrite_io+0x310/0x310 [ 214.256799][ T2599] do_vfs_ioctl+0x182a/0x29a0 [ 214.261312][ T2599] ? __x64_compat_sys_ioctl+0x90/0x90 [ 214.266519][ T2599] ? futex_unqueue+0x110/0x140 [ 214.271126][ T2599] ? futex_wait_setup+0x330/0x330 [ 214.275982][ T2599] ? ioctl_has_perm+0x1f8/0x560 [ 214.280667][ T2599] ? ioctl_has_perm+0x3f0/0x560 [ 214.285361][ T2599] ? has_cap_mac_admin+0x3c0/0x3c0 [ 214.290322][ T2599] ? putname+0xfa/0x150 [ 214.294308][ T2599] ? do_futex+0x55a/0x9a0 [ 214.298466][ T2599] ? selinux_file_ioctl+0x3cc/0x540 [ 214.303500][ T2599] ? __ia32_sys_get_robust_list+0x90/0x90 [ 214.310114][ T2599] ? selinux_file_alloc_security+0x120/0x120 [ 214.315909][ T2599] ? __fget_files+0x2cb/0x330 [ 214.320421][ T2599] ? security_file_ioctl+0x84/0xb0 [ 214.325373][ T2599] __se_sys_ioctl+0x99/0x190 [ 214.329793][ T2599] __x64_sys_ioctl+0x7b/0x90 [ 214.334222][ T2599] x64_sys_call+0x98/0x9a0 [ 214.338472][ T2599] do_syscall_64+0x3b/0xb0 [ 214.342724][ T2599] ? clear_bhb_loop+0x55/0xb0 [ 214.347237][ T2599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.353059][ T2599] RIP: 0033:0x7ffb0538cda9 [ 214.357305][ T2599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.376747][ T2599] RSP: 002b:00007ffb062cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.384992][ T2599] RAX: ffffffffffffffda RBX: 00007ffb055a5fa0 RCX: 00007ffb0538cda9 [ 214.392805][ T2599] RDX: 0000000020000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 214.400615][ T2599] RBP: 00007ffb0540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.408425][ T2599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.416322][ T2599] R13: 0000000000000000 R14: 00007ffb055a5fa0 R15: 00007ffe2e0faf18 [ 214.424138][ T2599] [ 214.488937][ T981] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.696750][ T2617] loop1: detected capacity change from 0 to 256 [ 214.728812][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 214.734905][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.745986][ T981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.761437][ T2619] loop7: detected capacity change from 0 to 512 [ 214.768409][ T2619] EXT4-fs (loop7): Test dummy encryption mode enabled [ 214.768469][ T981] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.802344][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.802421][ T2619] EXT4-fs error (device loop7): __ext4_fill_super:5375: inode #2: comm syz.7.562: casefold flag without casefold feature [ 214.811243][ T981] usb 1-1: config 0 descriptor?? [ 214.827634][ T2619] EXT4-fs (loop7): get root inode failed [ 214.833176][ T2619] EXT4-fs (loop7): mount failed [ 214.850164][ T320] tipc: Left network mode [ 214.868382][ T2625] device bridge0 entered promiscuous mode [ 214.875758][ T2625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.566'. [ 214.888111][ T2625] device bridge_slave_1 left promiscuous mode [ 214.894809][ T2625] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.903021][ T2625] device bridge_slave_0 left promiscuous mode [ 214.909292][ T2625] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.919756][ T2625] device bridge0 left promiscuous mode [ 215.061702][ T2634] loop6: detected capacity change from 0 to 512 [ 215.081203][ T2634] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 215.090193][ T2634] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.091189][ T2629] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.109529][ T314] cdc_ncm 6-1:1.0: bind() failure [ 215.120814][ T2629] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.125076][ T314] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 215.134692][ T2629] device bridge_slave_0 entered promiscuous mode [ 215.135041][ T314] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 215.150974][ T314] usb 6-1: USB disconnect, device number 5 [ 215.157063][ T2629] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.160949][ T1764] EXT4-fs (loop6): unmounting filesystem. [ 215.166720][ T2629] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.177612][ T2629] device bridge_slave_1 entered promiscuous mode [ 215.195271][ T2642] serio: Serial port ptm0 [ 215.242306][ T981] HID 045e:07da: Invalid code 65791 type 1 [ 215.252928][ T981] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input25 [ 215.266911][ T2645] loop6: detected capacity change from 0 to 128 [ 215.279679][ T981] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 215.308363][ T2629] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.315259][ T2629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.322386][ T2629] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.329442][ T2629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.345981][ T1807] kworker/u4:10: attempt to access beyond end of device [ 215.345981][ T1807] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 215.365014][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.385203][ T536] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.393025][ T536] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.403569][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 215.403584][ T28] audit: type=1400 audit(1738377457.218:525): avc: denied { write } for pid=2646 comm="syz.6.574" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 215.436821][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.445169][ T536] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.452055][ T536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.461530][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.469719][ T536] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.476613][ T536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.493005][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.502237][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.532625][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.544559][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.552767][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.560232][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.568431][ T2629] device veth0_vlan entered promiscuous mode [ 215.575927][ T320] device bridge_slave_1 left promiscuous mode [ 215.582655][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.595652][ T320] device bridge_slave_0 left promiscuous mode [ 215.602320][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.618647][ T320] device vlan0 left promiscuous mode [ 215.621626][ T2654] loop6: detected capacity change from 0 to 512 [ 215.624236][ T320] device veth1_macvtap left promiscuous mode [ 215.655182][ T320] device veth0_vlan left promiscuous mode [ 215.663670][ T2654] Quota error (device loop6): v2_read_file_info: Number of blocks too big for quota file size (33560576 > 6144). [ 215.670424][ T2658] loop5: detected capacity change from 0 to 128 [ 215.681709][ T2654] EXT4-fs warning (device loop6): ext4_enable_quotas:7016: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 215.728128][ T2658] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 215.733433][ T2654] EXT4-fs (loop6): mount failed [ 215.742585][ T2658] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.756281][ T28] audit: type=1400 audit(1738377457.568:526): avc: denied { create } for pid=2656 comm="syz.5.578" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 215.803884][ T28] audit: type=1400 audit(1738377457.578:527): avc: denied { rename } for pid=2656 comm="syz.5.578" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 215.853504][ T833] EXT4-fs (loop5): unmounting filesystem. [ 215.909288][ T2667] loop7: detected capacity change from 0 to 512 [ 215.920234][ T2667] EXT4-fs (loop7): Test dummy encryption mode enabled [ 215.932071][ T2667] EXT4-fs error (device loop7): __ext4_fill_super:5375: inode #2: comm syz.7.576: casefold flag without casefold feature [ 215.950531][ T2667] EXT4-fs (loop7): get root inode failed [ 215.956006][ T2667] EXT4-fs (loop7): mount failed [ 216.006321][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.015993][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.025929][ T2629] device veth1_macvtap entered promiscuous mode [ 216.064611][ T6] usb 1-1: USB disconnect, device number 5 [ 216.118431][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.126718][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.135426][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.144079][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.154718][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.169367][ T2674] loop6: detected capacity change from 0 to 512 [ 216.176889][ T2674] EXT4-fs (loop6): Test dummy encryption mode enabled [ 216.187837][ T2674] EXT4-fs error (device loop6): __ext4_fill_super:5375: inode #2: comm syz.6.582: casefold flag without casefold feature [ 216.200621][ T494] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 216.208982][ T2674] EXT4-fs (loop6): get root inode failed [ 216.214470][ T2674] EXT4-fs (loop6): mount failed [ 216.398845][ T494] usb 6-1: Using ep0 maxpacket: 16 [ 216.404925][ T494] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.428847][ T494] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.438474][ T494] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 216.458824][ T494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.467824][ T494] usb 6-1: config 0 descriptor?? [ 216.510580][ T2682] loop8: detected capacity change from 0 to 128 [ 216.517487][ T2682] EXT4-fs (loop8): Test dummy encryption mode enabled [ 216.528188][ T2682] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 216.537609][ T2682] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.561477][ T2629] EXT4-fs (loop8): unmounting filesystem. [ 216.598400][ T2687] loop8: detected capacity change from 0 to 256 [ 216.921718][ T494] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x2 [ 216.930143][ T494] hid-multitouch 0003:1FD2:6007.0010: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 216.996271][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.009615][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.024822][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.038670][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.046771][ T2706] loop7: detected capacity change from 0 to 512 [ 217.053835][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.068890][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.076597][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.077771][ T2706] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 217.083913][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.101289][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.108516][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.115880][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.116208][ T2706] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.123284][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.123311][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.148338][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.155626][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.162919][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.170279][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.177516][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.184855][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.192129][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.199387][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.205808][ T2706] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 12: comm syz.7.594: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 217.206897][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.234323][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.241852][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.249240][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.256449][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.258344][ T2706] EXT4-fs (loop7): Remounting filesystem read-only [ 217.263692][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.277356][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.280415][ T2706] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 13: comm syz.7.594: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 217.284606][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.309887][ T2706] EXT4-fs (loop7): Remounting filesystem read-only [ 217.313196][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.326059][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.326171][ T2706] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 14: comm syz.7.594: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 217.333351][ T6] hid-generic 0006:0003:0003.0011: unknown main item tag 0x0 [ 217.336344][ T298] usb 6-1: USB disconnect, device number 6 [ 217.355466][ T2706] EXT4-fs (loop7): Remounting filesystem read-only [ 217.360861][ T6] hid-generic 0006:0003:0003.0011: hidraw1: VIRTUAL HID v0.00 Device [syz1] on syz0 [ 217.366837][ T2706] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 15: comm syz.7.594: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 217.440290][ T2706] EXT4-fs (loop7): Remounting filesystem read-only [ 217.449634][ T2706] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 16: comm syz.7.594: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 217.473042][ T2717] 9pnet: p9_errstr2errno: server reported unknown error [ 217.526461][ T2706] EXT4-fs (loop7): Remounting filesystem read-only [ 217.543790][ T2706] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 17: comm syz.7.594: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 217.565411][ T2718] serio: Serial port ptm0 [ 217.570142][ T2706] EXT4-fs (loop7): Remounting filesystem read-only [ 217.576546][ T2706] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #2: block 18: comm syz.7.594: lblock 23 mapped to illegal pblock 18 (length 1) [ 217.591260][ T2706] EXT4-fs (loop7): Remounting filesystem read-only [ 217.598022][ T2706] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 19: comm syz.7.594: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 217.618475][ T2706] EXT4-fs (loop7): Remounting filesystem read-only [ 217.625158][ T2706] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 20: comm syz.7.594: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 217.645327][ T2706] EXT4-fs (loop7): Remounting filesystem read-only [ 217.652143][ T2706] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 21: comm syz.7.594: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 217.718847][ T409] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 217.853758][ T2722] loop5: detected capacity change from 0 to 512 [ 217.889695][ T2722] EXT4-fs (loop5): Test dummy encryption mode enabled [ 217.909903][ T409] usb 1-1: config 0 has no interfaces? [ 217.915365][ T409] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 217.927439][ T2722] EXT4-fs error (device loop5): __ext4_fill_super:5375: inode #2: comm syz.5.599: casefold flag without casefold feature [ 218.707430][ T2735] device pim6reg1 entered promiscuous mode [ 218.831925][ T2722] EXT4-fs (loop5): get root inode failed [ 218.837493][ T2722] EXT4-fs (loop5): mount failed [ 218.842869][ T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.851293][ T409] usb 1-1: config 0 descriptor?? [ 219.060758][ T494] usb 1-1: USB disconnect, device number 6 [ 219.128483][ T2755] loop6: detected capacity change from 0 to 128 [ 219.136215][ T2755] EXT4-fs (loop6): Test dummy encryption mode enabled [ 219.154630][ T2755] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 219.163447][ T2755] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.408810][ T1977] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 219.583196][ T2759] loop0: detected capacity change from 0 to 256 [ 219.590576][ T1977] usb 8-1: config 0 has no interfaces? [ 219.596965][ T1977] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.598419][ T2759] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 219.606393][ T1977] usb 8-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 219.627872][ T1977] usb 8-1: Product: syz [ 219.633076][ T1977] usb 8-1: config 0 descriptor?? [ 219.718848][ T409] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 219.849394][ T298] usb 8-1: USB disconnect, device number 2 [ 219.887860][ T1764] EXT4-fs (loop6): unmounting filesystem. [ 219.912353][ T409] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.924655][ T409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.941276][ T409] usb 6-1: Product: syz [ 219.948531][ T409] usb 6-1: Manufacturer: syz [ 219.952818][ T2769] loop8: detected capacity change from 0 to 40427 [ 219.953147][ T409] usb 6-1: SerialNumber: syz [ 219.966100][ T2769] F2FS-fs (loop8): fault_injection options not supported [ 219.973842][ T2769] F2FS-fs (loop8): invalid crc value [ 219.980324][ T2769] F2FS-fs (loop8): Found nat_bits in checkpoint [ 220.032075][ T2769] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 220.070106][ T2769] syz.8.616: attempt to access beyond end of device [ 220.070106][ T2769] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.092172][ T2629] syz-executor: attempt to access beyond end of device [ 220.092172][ T2629] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 220.223167][ T28] audit: type=1400 audit(1738377462.038:528): avc: denied { mounton } for pid=2785 comm="syz.8.622" path="/proc/40/task" dev="proc" ino=24689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 220.497657][ T2802] loop8: detected capacity change from 0 to 512 [ 220.589676][ T2802] EXT4-fs (loop8): Test dummy encryption mode enabled [ 220.668348][ T2802] EXT4-fs error (device loop8): __ext4_fill_super:5375: inode #2: comm syz.8.626: casefold flag without casefold feature [ 220.682117][ T2802] EXT4-fs (loop8): get root inode failed [ 220.687600][ T2802] EXT4-fs (loop8): mount failed [ 221.264129][ T28] audit: type=1400 audit(1738377463.078:529): avc: denied { setattr } for pid=2810 comm="syz.7.630" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.503791][ T409] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 221.511010][ T409] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 221.560994][ T2833] device bridge0 entered promiscuous mode [ 221.567198][ T2833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 221.575898][ T2833] device bridge_slave_1 left promiscuous mode [ 221.581929][ T2833] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.589426][ T2833] device bridge_slave_0 left promiscuous mode [ 221.595504][ T2833] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.603970][ T2833] device bridge0 left promiscuous mode [ 221.680384][ T2835] loop8: detected capacity change from 0 to 512 [ 221.699332][ T2835] EXT4-fs (loop8): Test dummy encryption mode enabled [ 221.838236][ T2835] EXT4-fs error (device loop8): __ext4_fill_super:5375: inode #2: comm syz.8.637: casefold flag without casefold feature [ 221.851827][ T2835] EXT4-fs (loop8): get root inode failed [ 221.857309][ T2835] EXT4-fs (loop8): mount failed [ 222.472245][ T2843] netlink: 4 bytes leftover after parsing attributes in process `syz.7.641'. [ 222.575105][ T2843] netlink: 28 bytes leftover after parsing attributes in process `syz.7.641'. [ 222.920533][ T409] cdc_ncm 6-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 222.933591][ T409] usb 6-1: USB disconnect, device number 7 [ 222.939547][ T409] cdc_ncm 6-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 222.962263][ T28] audit: type=1400 audit(1738377464.778:530): avc: denied { map } for pid=2856 comm="syz.5.646" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.008121][ T28] audit: type=1400 audit(1738377464.778:531): avc: denied { call } for pid=2856 comm="syz.5.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 223.028331][ T28] audit: type=1400 audit(1738377464.778:532): avc: denied { transfer } for pid=2856 comm="syz.5.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 223.093176][ T2863] xt_hashlimit: size too large, truncated to 1048576 [ 223.144242][ T2867] loop5: detected capacity change from 0 to 1024 [ 223.150787][ T2867] EXT4-fs: Ignoring removed oldalloc option [ 223.156531][ T2867] EXT4-fs: Ignoring removed bh option [ 223.166453][ T2867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.253443][ T2871] loop0: detected capacity change from 0 to 512 [ 223.309666][ T2871] EXT4-fs (loop0): Test dummy encryption mode enabled [ 223.404344][ T2871] EXT4-fs error (device loop0): __ext4_fill_super:5375: inode #2: comm syz.0.648: casefold flag without casefold feature [ 223.459548][ T2871] EXT4-fs (loop0): get root inode failed [ 223.465055][ T2871] EXT4-fs (loop0): mount failed [ 223.489278][ T2867] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 223.794067][ T833] EXT4-fs (loop5): unmounting filesystem. [ 224.518840][ T1977] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 224.718807][ T1977] usb 8-1: Using ep0 maxpacket: 32 [ 224.718802][ T419] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 224.785874][ T1977] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 224.801397][ T2893] device pim6reg1 entered promiscuous mode [ 224.809181][ T1977] usb 8-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 224.818045][ T1977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.841395][ T1977] usb 8-1: config 0 descriptor?? [ 224.872946][ T2898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2898 comm=syz.6.661 [ 224.888990][ T409] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 224.900016][ T419] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.912773][ T419] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.921910][ T419] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.929918][ T419] usb 9-1: Product: syz [ 224.934308][ T419] usb 9-1: Manufacturer: syz [ 224.938981][ T419] usb 9-1: SerialNumber: syz [ 224.945242][ T419] hub 9-1:1.0: bad descriptor, ignoring hub [ 224.951089][ T419] hub: probe of 9-1:1.0 failed with error -5 [ 225.088781][ T409] usb 6-1: Using ep0 maxpacket: 8 [ 225.094929][ T409] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.117433][ T409] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.129597][ T409] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.138682][ T409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.148303][ T409] usb 6-1: Product: syz [ 225.152515][ T409] usb 6-1: Manufacturer: syz [ 225.156941][ T409] usb 6-1: SerialNumber: syz [ 225.251984][ T1977] holtek_mouse 0003:04D9:A072.0012: unknown main item tag 0x0 [ 225.268967][ T1977] holtek_mouse 0003:04D9:A072.0012: unknown main item tag 0x0 [ 225.276313][ T1977] holtek_mouse 0003:04D9:A072.0012: item fetching failed at offset 2/7 [ 225.288252][ T1977] holtek_mouse 0003:04D9:A072.0012: hid parse failed: -22 [ 225.295296][ T1977] holtek_mouse: probe of 0003:04D9:A072.0012 failed with error -22 [ 225.315605][ T2914] loop0: detected capacity change from 0 to 256 [ 225.322076][ T2914] exfat: Unknown parameter '01777777777777777777777' [ 225.342879][ T2914] loop0: detected capacity change from 0 to 512 [ 225.365849][ T409] usb 6-1: cannot find UAC_HEADER [ 225.375704][ T409] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 225.383606][ T409] usb 6-1: USB disconnect, device number 8 [ 225.455792][ T1977] usb 8-1: USB disconnect, device number 3 [ 225.589179][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 225.685572][ T2928] tipc: Failed to remove unknown binding: 66,1,1/0:4155804433/4155804435 [ 225.782600][ T2933] loop0: detected capacity change from 0 to 1024 [ 225.796982][ T2933] EXT4-fs: Ignoring removed nobh option [ 225.802956][ T2933] EXT4-fs: Ignoring removed bh option [ 225.808531][ T2933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.830881][ T2933] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 225.839360][ T2936] loop6: detected capacity change from 0 to 2048 [ 225.885966][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x1 [ 225.893481][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 225.893672][ T2936] loop6: p1 < > p4 [ 225.901069][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 225.905123][ T2936] loop6: p4 size 8388608 extends beyond EOD, [ 225.912332][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 225.918870][ T2936] truncated [ 225.929283][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 225.936544][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 225.944061][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x2 [ 225.944381][ T289] EXT4-fs (loop0): unmounting filesystem. [ 225.951787][ T419] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 225.963485][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 225.977467][ T419] cdc_ncm 9-1:1.0: setting tx_max = 184 [ 225.990007][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 225.997726][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.005011][ T28] audit: type=1400 audit(1738377467.808:533): avc: denied { unmount } for pid=1764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 226.027256][ T419] cdc_ncm 9-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 226.038540][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.049243][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.056948][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.065953][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.074222][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.082059][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.089480][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.096737][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.111230][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.120937][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.128169][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.135653][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.143276][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.150716][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.157976][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.176164][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.178769][ T314] usb 9-1: USB disconnect, device number 2 [ 226.184010][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.189763][ T314] cdc_ncm 9-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 226.196707][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.212767][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.220304][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.227568][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.234877][ T298] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.242888][ T298] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 226.270288][ T419] ================================================================== [ 226.278191][ T419] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 226.278345][ T315] udevd[315]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 226.285822][ T419] Read of size 8 at addr ffff88810d6c6cf0 by task kworker/0:5/419 [ 226.285847][ T419] [ 226.285853][ T419] CPU: 0 PID: 419 Comm: kworker/0:5 Not tainted 6.1.124-syzkaller-00114-g2055772eada0 #0 [ 226.285873][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.285887][ T419] Workqueue: events destroy_super_work [ 226.302941][ T2383] udevd[2383]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 226.303068][ T419] [ 226.303077][ T419] Call Trace: [ 226.345075][ T419] [ 226.347848][ T419] dump_stack_lvl+0x151/0x1b7 [ 226.352360][ T419] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 226.357654][ T419] ? _printk+0xd1/0x111 [ 226.361646][ T419] ? __virt_addr_valid+0x242/0x2f0 [ 226.366597][ T419] print_report+0x158/0x4e0 [ 226.370936][ T419] ? __virt_addr_valid+0x242/0x2f0 [ 226.375883][ T419] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 226.381960][ T419] ? __list_del_entry_valid+0xa6/0x130 [ 226.387265][ T419] kasan_report+0x13c/0x170 [ 226.391678][ T419] ? __list_del_entry_valid+0xa6/0x130 [ 226.396974][ T419] __asan_report_load8_noabort+0x14/0x20 [ 226.402439][ T419] __list_del_entry_valid+0xa6/0x130 [ 226.407562][ T419] process_one_work+0x4d7/0xcb0 [ 226.412262][ T419] worker_thread+0xa60/0x1260 [ 226.416766][ T419] kthread+0x26d/0x300 [ 226.420668][ T419] ? worker_clr_flags+0x1a0/0x1a0 [ 226.425528][ T419] ? kthread_blkcg+0xd0/0xd0 [ 226.429954][ T419] ret_from_fork+0x1f/0x30 [ 226.434207][ T419] [ 226.437068][ T419] [ 226.439238][ T419] Allocated by task 419: [ 226.443406][ T419] kasan_set_track+0x4b/0x70 [ 226.447835][ T419] kasan_save_alloc_info+0x1f/0x30 [ 226.452776][ T419] __kasan_kmalloc+0x9c/0xb0 [ 226.457211][ T419] __kmalloc_node+0xb4/0x1e0 [ 226.461629][ T419] kvmalloc_node+0x221/0x640 [ 226.466152][ T419] alloc_netdev_mqs+0x8c/0xf90 [ 226.470924][ T419] alloc_etherdev_mqs+0x36/0x40 [ 226.475611][ T419] usbnet_probe+0x213/0x28a0 [ 226.480642][ T419] usb_probe_interface+0x5b6/0xa90 [ 226.485873][ T419] really_probe+0x2b8/0x920 [ 226.490156][ T419] __driver_probe_device+0x1a0/0x310 [ 226.495276][ T419] driver_probe_device+0x54/0x3d0 [ 226.500133][ T419] __device_attach_driver+0x2e3/0x490 [ 226.505338][ T419] bus_for_each_drv+0x183/0x200 [ 226.510048][ T419] __device_attach+0x312/0x510 [ 226.514720][ T419] device_initial_probe+0x1a/0x20 [ 226.519595][ T419] bus_probe_device+0xbe/0x1e0 [ 226.524194][ T419] device_add+0xb60/0xf10 [ 226.528373][ T419] usb_set_configuration+0x190f/0x1e80 [ 226.533839][ T419] usb_generic_driver_probe+0x8b/0x150 [ 226.539104][ T419] usb_probe_device+0x144/0x260 [ 226.543783][ T419] really_probe+0x2b8/0x920 [ 226.548120][ T419] __driver_probe_device+0x1a0/0x310 [ 226.553384][ T419] driver_probe_device+0x54/0x3d0 [ 226.558347][ T419] __device_attach_driver+0x2e3/0x490 [ 226.563656][ T419] bus_for_each_drv+0x183/0x200 [ 226.568340][ T419] __device_attach+0x312/0x510 [ 226.572939][ T419] device_initial_probe+0x1a/0x20 [ 226.577803][ T419] bus_probe_device+0xbe/0x1e0 [ 226.582400][ T419] device_add+0xb60/0xf10 [ 226.586563][ T419] usb_new_device+0xf2f/0x1820 [ 226.591169][ T419] hub_event+0x2db1/0x4830 [ 226.595857][ T419] process_one_work+0x73d/0xcb0 [ 226.600559][ T419] worker_thread+0xa60/0x1260 [ 226.605049][ T419] kthread+0x26d/0x300 [ 226.609095][ T419] ret_from_fork+0x1f/0x30 [ 226.613373][ T419] [ 226.615509][ T419] Freed by task 314: [ 226.619329][ T419] kasan_set_track+0x4b/0x70 [ 226.623758][ T419] kasan_save_free_info+0x2b/0x40 [ 226.628628][ T419] ____kasan_slab_free+0x131/0x180 [ 226.633564][ T419] __kasan_slab_free+0x11/0x20 [ 226.638163][ T419] __kmem_cache_free+0x21d/0x410 [ 226.642934][ T419] kfree+0x7a/0xf0 [ 226.646495][ T419] kvfree+0x35/0x40 [ 226.650148][ T419] netdev_freemem+0x3f/0x60 [ 226.654610][ T419] netdev_release+0x7f/0xb0 [ 226.658945][ T419] device_release+0x95/0x1c0 [ 226.663375][ T419] kobject_put+0x178/0x260 [ 226.667620][ T419] put_device+0x1f/0x30 [ 226.671616][ T419] free_netdev+0x393/0x480 [ 226.675869][ T419] usbnet_disconnect+0x25f/0x3b0 [ 226.680642][ T419] usb_unbind_interface+0x1fa/0x8c0 [ 226.685677][ T419] device_release_driver_internal+0x53e/0x870 [ 226.691664][ T419] device_release_driver+0x19/0x20 [ 226.696609][ T419] bus_remove_device+0x2fa/0x360 [ 226.701489][ T419] device_del+0x663/0xe90 [ 226.705656][ T419] usb_disable_device+0x380/0x720 [ 226.710515][ T419] usb_disconnect+0x32a/0x890 [ 226.715031][ T419] hub_event+0x1ed8/0x4830 [ 226.719368][ T419] process_one_work+0x73d/0xcb0 [ 226.724053][ T419] worker_thread+0xa60/0x1260 [ 226.728587][ T419] kthread+0x26d/0x300 [ 226.732473][ T419] ret_from_fork+0x1f/0x30 [ 226.736726][ T419] [ 226.738898][ T419] Last potentially related work creation: [ 226.744453][ T419] kasan_save_stack+0x3b/0x60 [ 226.748967][ T419] __kasan_record_aux_stack+0xb4/0xc0 [ 226.754279][ T419] kasan_record_aux_stack_noalloc+0xb/0x10 [ 226.759987][ T419] insert_work+0x56/0x310 [ 226.764154][ T419] __queue_work+0x9b6/0xd70 [ 226.768493][ T419] queue_work_on+0x105/0x170 [ 226.772920][ T419] usbnet_link_change+0x182/0x1a0 [ 226.777778][ T419] usbnet_probe+0x1e1e/0x28a0 [ 226.782290][ T419] usb_probe_interface+0x5b6/0xa90 [ 226.787239][ T419] really_probe+0x2b8/0x920 [ 226.791580][ T419] __driver_probe_device+0x1a0/0x310 [ 226.796698][ T419] driver_probe_device+0x54/0x3d0 [ 226.801671][ T419] __device_attach_driver+0x2e3/0x490 [ 226.806878][ T419] bus_for_each_drv+0x183/0x200 [ 226.811653][ T419] __device_attach+0x312/0x510 [ 226.816254][ T419] device_initial_probe+0x1a/0x20 [ 226.821113][ T419] bus_probe_device+0xbe/0x1e0 [ 226.825713][ T419] device_add+0xb60/0xf10 [ 226.829877][ T419] usb_set_configuration+0x190f/0x1e80 [ 226.835171][ T419] usb_generic_driver_probe+0x8b/0x150 [ 226.840469][ T419] usb_probe_device+0x144/0x260 [ 226.845155][ T419] really_probe+0x2b8/0x920 [ 226.849507][ T419] __driver_probe_device+0x1a0/0x310 [ 226.854614][ T419] driver_probe_device+0x54/0x3d0 [ 226.859476][ T419] __device_attach_driver+0x2e3/0x490 [ 226.864684][ T419] bus_for_each_drv+0x183/0x200 [ 226.869368][ T419] __device_attach+0x312/0x510 [ 226.873969][ T419] device_initial_probe+0x1a/0x20 [ 226.878829][ T419] bus_probe_device+0xbe/0x1e0 [ 226.883430][ T419] device_add+0xb60/0xf10 [ 226.887595][ T419] usb_new_device+0xf2f/0x1820 [ 226.892194][ T419] hub_event+0x2db1/0x4830 [ 226.896447][ T419] process_one_work+0x73d/0xcb0 [ 226.901148][ T419] worker_thread+0xa60/0x1260 [ 226.905647][ T419] kthread+0x26d/0x300 [ 226.909554][ T419] ret_from_fork+0x1f/0x30 [ 226.913805][ T419] [ 226.915977][ T419] The buggy address belongs to the object at ffff88810d6c6000 [ 226.915977][ T419] which belongs to the cache kmalloc-4k of size 4096 [ 226.929864][ T419] The buggy address is located 3312 bytes inside of [ 226.929864][ T419] 4096-byte region [ffff88810d6c6000, ffff88810d6c7000) [ 226.943412][ T419] [ 226.945574][ T419] The buggy address belongs to the physical page: [ 226.951832][ T419] page:ffffea000435b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d6c0 [ 226.961988][ T419] head:ffffea000435b000 order:3 compound_mapcount:0 compound_pincount:0 [ 226.970315][ T419] flags: 0x4000000000010200(slab|head|zone=1) [ 226.976227][ T419] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 226.984641][ T419] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 226.993063][ T419] page dumped because: kasan: bad access detected [ 226.999324][ T419] page_owner tracks the page as allocated [ 227.004870][ T419] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 102, tgid 102 (udevd), ts 68970016645, free_ts 68949228863 [ 227.026649][ T419] post_alloc_hook+0x213/0x220 [ 227.031244][ T419] prep_new_page+0x1b/0x110 [ 227.035582][ T419] get_page_from_freelist+0x2f41/0x2fc0 [ 227.040963][ T419] __alloc_pages+0x234/0x610 [ 227.045389][ T419] alloc_slab_page+0x6c/0xf0 [ 227.049825][ T419] new_slab+0x90/0x3e0 [ 227.053722][ T419] ___slab_alloc+0x6f9/0xb80 [ 227.058151][ T419] __slab_alloc+0x5d/0xa0 [ 227.062314][ T419] __kmem_cache_alloc_node+0x207/0x2a0 [ 227.067617][ T419] __kmalloc_node+0xa3/0x1e0 [ 227.072040][ T419] kvmalloc_node+0x221/0x640 [ 227.076465][ T419] seq_read_iter+0x1ff/0xd00 [ 227.080892][ T419] kernfs_fop_read_iter+0x145/0x470 [ 227.085924][ T419] vfs_read+0x801/0xae0 [ 227.089916][ T419] ksys_read+0x199/0x2c0 [ 227.093994][ T419] __x64_sys_read+0x7b/0x90 [ 227.098334][ T419] page last free stack trace: [ 227.102848][ T419] free_unref_page_prepare+0x9f1/0xa00 [ 227.108140][ T419] free_unref_page+0xb2/0x5c0 [ 227.112655][ T419] __free_pages+0x61/0xf0 [ 227.116820][ T419] __free_slab+0xce/0x1a0 [ 227.120988][ T419] __unfreeze_partials+0x165/0x1a0 [ 227.125960][ T419] put_cpu_partial+0xa9/0x100 [ 227.130455][ T419] __slab_free+0x1c8/0x280 [ 227.134705][ T419] ___cache_free+0xc6/0xd0 [ 227.139048][ T419] qlist_free_all+0xc5/0x140 [ 227.143467][ T419] kasan_quarantine_reduce+0x15a/0x180 [ 227.148765][ T419] __kasan_slab_alloc+0x24/0x80 [ 227.153448][ T419] slab_post_alloc_hook+0x53/0x2c0 [ 227.158395][ T419] kmem_cache_alloc+0x175/0x320 [ 227.163088][ T419] getname_flags+0xba/0x520 [ 227.167425][ T419] __x64_sys_symlink+0x5f/0x90 [ 227.172025][ T419] x64_sys_call+0x290/0x9a0 [ 227.176363][ T419] [ 227.178530][ T419] Memory state around the buggy address: [ 227.184005][ T419] ffff88810d6c6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.191912][ T419] ffff88810d6c6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.199798][ T419] >ffff88810d6c6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.207697][ T419] ^ [ 227.215347][ T419] ffff88810d6c6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.223229][ T419] ffff88810d6c6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.231135][ T419] ================================================================== [ 227.239025][ T419] Disabling lock debugging due to kernel taint [ 227.256383][ T2958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 227.275170][ T2958] tipc: Started in network mode [ 227.282009][ T2958] tipc: Node identity @, cluster identity 8