last executing test programs: 3.740629661s ago: executing program 0 (id=1242): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000bd900bccdf9dd094ebe0000fd0f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000007000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000007000000040000000500000020020100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/24, @ANYRES32=r0, @ANYBLOB], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) eventfd2(0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d80)={'wpan1\x00'}) 3.254703635s ago: executing program 0 (id=1251): ustat(0xb, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000340), 0x4003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.840834562s ago: executing program 1 (id=1258): r0 = socket(0x2a, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000b00)=ANY=[@ANYRESOCT], 0xfd, 0x1cf, &(0x7f0000000900)="$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") r1 = open$dir(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) renameat(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) mkdirat(r1, &(0x7f0000000000)='./file1/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x800}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f00000007c0)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@resuid}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x40002000, &(0x7f0000000100)={0x23, 0x0, 0x4, 0x5}, 0x10) sync() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@getchain={0x24, 0x66, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0xffe0, 0x6}, {0xf, 0xf}}}, 0x24}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 2.337367228s ago: executing program 0 (id=1263): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_GET_THP_DISABLE(0x2a) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x89}}, {@data_ordered}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x401) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x4008040) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x7, &(0x7f00000003c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0xfff, 0x2003) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x7, 0xfffffd9b, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0f00"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="02000000040000d34400"/28], 0x48) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x1) sendfile(r6, r1, 0x0, 0x100800001) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000080)) listen(r0, 0x0) listen(r0, 0x0) 2.336375298s ago: executing program 1 (id=1264): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x4}]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x3ff, 0x8}], 0x3e0000) 2.168660673s ago: executing program 1 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a57d2cedd3412f4e80000000400000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0xfffffffd, 0x0}, 0x8) socket$inet_sctp(0x2, 0x400000000001, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e6, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x0, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000200)=""/209, 0xd1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @alu={0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0xd, 0x4, 0x1, 0xfffffffffffffff8, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x0, 0x0, 0x2, 0x4, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00'}) close(r9) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0xf, 0x1}, {0xf, 0x5}]}, @datasec={0x5, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x200, 0x4}], "38d2"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x8}}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/49, 0x73, 0x31, 0x0, 0xab, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r10, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/41, 0x29, 0x0, &(0x7f0000000380)=""/186, 0xba}}, 0x10) r11 = socket$unix(0x1, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000d00)=@filename='./bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x1101090, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffde) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) capset(&(0x7f0000000600)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x4}) 1.862105871s ago: executing program 3 (id=1273): perf_event_open(&(0x7f00000001c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() getpid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000d1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) chmod(&(0x7f0000000340)='./file0\x00', 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2a5, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc08c5334, &(0x7f0000000480)) tkill(r0, 0x7) 1.688899827s ago: executing program 3 (id=1275): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_GET_THP_DISABLE(0x2a) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x89}}, {@data_ordered}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x401) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x0, 0x4008040) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x7, &(0x7f00000003c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0xfff, 0x2003) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x7, 0xfffffd9b, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0f00"/20, @ANYRES32=r5, @ANYBLOB="02000000040000d34400"/28], 0x48) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x1) sendfile(r6, r1, 0x0, 0x100800001) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000080)) listen(r0, 0x0) listen(r0, 0x0) 1.642091991s ago: executing program 4 (id=1276): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000b00)=ANY=[@ANYRESOCT], 0xfd, 0x1cf, &(0x7f0000000900)="$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") r0 = open$dir(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) mkdirat(r0, &(0x7f0000000000)='./file1/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x800}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f00000007c0)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@resuid}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x40002000, &(0x7f0000000100)={0x23, 0x0, 0x4, 0x5}, 0x10) sync() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@getchain={0x24, 0x66, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0xffe0, 0x6}, {0xf, 0xf}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 1.415042662s ago: executing program 0 (id=1277): r0 = socket(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000b00)=ANY=[@ANYRESOCT], 0xfd, 0x1cf, &(0x7f0000000900)="$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") r1 = open$dir(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) renameat(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)='./file1\x00') r5 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000b40)={{r2}, 0x0, 0x1c, @unused=[0x8000000000000000, 0x400, 0x7c0d, 0x2], @subvolid}) mkdirat(r1, &(0x7f0000000000)='./file1/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x800}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f00000007c0)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@resuid}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x40002000, &(0x7f0000000100)={0x23, 0x0, 0x4, 0x5}, 0x10) sync() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@getchain={0x24, 0x66, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0xffe0, 0x6}, {0xf, 0xf}}}, 0x24}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002a00)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x3, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf41, 0x10000000, 0x4, 0xfffff800, 0x80000000, {0x4, 0x2, 0x401, 0x0, 0x7f, 0x95}, {0xf, 0x2, 0x8000, 0x49, 0x5, 0x2}, 0x6, 0x3, 0x7}}]}]}}]}, 0x74}}, 0x0) 1.328996819s ago: executing program 4 (id=1278): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000880)=ANY=[], 0x386, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 1.080692302s ago: executing program 1 (id=1280): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x25, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.061224623s ago: executing program 4 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000540)=ANY=[], 0x8, 0x2fd, &(0x7f0000000e40)="$eJzs3MtrE18UwPGTR9MkpU0XP36iIL3oRjdDG11Lg7QgBiy1ER8gTNuJhoxJyYRKRGwFwa34R7goXXZX0P4D3bjTjRt33Qgu7EIcyWQmafNobZpHtd8PlDnMuWdyb6Yp54YmO3ffPMmmLS2tF8UfVuITEdkVGRW/eHzu0e/EIdlrVS4Pff90/va9+zcTyeTUrFLTibkrcaXUyNj7p88j7rDNQdkefbjzLf51+//tszu/5h5nLJWxVC5fVLqaz38p6vOmoRYzVlZTasY0dMtQmZxlFCr5fCWfNvNLSyWl5xaHo0sFw7KUniuprFFSxbwqFkoq8EjP5JSmaWo4KjhMam12Vk+0WbzQ4cmgSwqFhB4QkUhDJrXWlwkBAIC+qu///aI62f+vX9gqDt3ZGHH7/81Qs/7/6ufKtfb1/2ERadr/e4/ftP/Xj9b/N3ZEp8ux+n+cDGOhhlO+WlhOFhJ61H39Ol4+WB93Avp/AAAAAAAAAAAAAAAAAAAAAAD+Bru2HbNtO+Yeg+7p2KCIhEXEdvMNhXbFSs9njE6qu//Vn+r9l9V+TxFdVPvgXnBExHy9nFpOVY7ugC0RMcWQcYnJz+rL3rbtcux98kiVjcoHc8WtX1lOBZxMIi0Zp35CYgNSX2/b0zeSUxOqYn/9gET31sclJv81r483rQ/JpYt76jWJyccFyYspi848avUvJpS6fitZVx9xxgEAAAAA8C/QVFXT/bumtcpX6qv76/r3BwK1/fV40/15UM4F+7t2AAAAAABOC6v0LKubplE4IIjI4WPaD4JdurK3wj+t8v6XoXsrPSDwHnxfKuye7PjT4jvC09Ii8Es7VWPl1ajjrsJ726jVGJmZ7P0ddIIzb9/96NwFr22ED1lp+0Hg4F+AgZ79AQIAAADQM7Wm3zsz2d8JAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABwCrX+hrBX9V9H13bQ7zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8XvAAAA///zVACC") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x110) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7000, 0x0, 0x0) 1.048169705s ago: executing program 0 (id=1282): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000bd900bccdf9dd094ebe0000fd0f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000007000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000007000000040000000500000020020100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/24, @ANYRES32=r0, @ANYBLOB], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) eventfd2(0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d80)={'wpan1\x00'}) 989.69264ms ago: executing program 4 (id=1283): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x69, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000000580)={0x80208000, &(0x7f0000000200), &(0x7f0000000300), &(0x7f00000001c0), {0x8}, &(0x7f0000000640)=""/59, 0x3b, &(0x7f0000000400)=""/74, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x9}, 0x58) 932.097825ms ago: executing program 4 (id=1285): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000090000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d", 0x80}, {&(0x7f0000000c00)="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", 0x1a3}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3e", 0xdd}, {&(0x7f0000000440)="fff5c0", 0x3}], 0x4}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a48ddda58f0c3202e4331de15e27c2f6b69ccda5c86d79ec8171a6447231bbf9a1a064d718209a1013baec29196d3ae2707e8d813dc1c962f5edc8a102000000684ba48796800608d791fcd2b838e7735cf89f00ed2121ae7146135b1d4f15bc73c4057b2601adaa2d899114ca12ffc32ac806d560415a55d3f6dd24c9bba19109eb46", 0x83}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)="14fafa37bf25f04bda99eefbf2930f3151214ef6ddee25bdb2d1873ce347c7b623dd3140cfb20100a1bf9f1d", 0x2c}, {&(0x7f0000000380)="16a6fca1dfaa429ca0fab228943502d7ac24a672321690c0215b73b201e67576bde0f856ef32889f13b66393016cbe3def51abd7cb2bcd21ebc41893e2", 0x3d}, {&(0x7f0000000180)="c3e361cced0e01b0c035139c64932a377f926342f6b052b6a3b27354eb9b6be2ac2df69e0400000000000000a162b6aa0d4734e36aad318ea99500000000000000000000ed49395690ff35a4983aa925555f326a929733d0b6bd7ed012192e4eed93fee9eef398839b1c4340476892f33c2e80de29490ffaf6ae7326728a89743ecd4211fb55f30c1802c6855fbea91df0b13e1551c27adfa9b6fc1a", 0x9c}], 0x3}, 0x24000090) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00000000000000000000000000000000067cdbe56301000000000002"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5e97, 0x0, 0x0, 0x0, 0xc, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xa47, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x200, 0xfffffffffffffffe, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 931.520106ms ago: executing program 2 (id=1286): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000f7ffffffffffffff000095", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1c, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func, @alu={0x7, 0x1, 0x4, 0x3, 0x3, 0x0, 0xffffffffffffffff}, @generic={0x2, 0x3, 0xe, 0x2, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x6, 0xaa, &(0x7f0000000680)=""/170, 0x40f00, 0x45, '\x00', r9, 0x0, r3, 0x8, &(0x7f0000000400)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r7, r1, r3, r7, r7, r2, r7, r7], 0x0, 0x10, 0x7f, @void, @value}, 0x94) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00'], 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031000070060"]) ioctl$USBDEVFS_CONTROL(r10, 0x4004550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r11, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r11, 0xa, 0x12) 803.195397ms ago: executing program 3 (id=1288): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000bd900bccdf9dd094ebe0000fd0f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000007000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000007000000040000000500000020020100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/24, @ANYRES32=r0, @ANYBLOB], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) eventfd2(0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d80)={'wpan1\x00'}) 733.577343ms ago: executing program 1 (id=1289): ustat(0xb, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000340), 0x4003) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x5bb8, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)) 715.598545ms ago: executing program 4 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a57d2cedd3412f4e80000000400000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0xfffffffd, 0x0}, 0x8) socket$inet_sctp(0x2, 0x400000000001, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e6, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x0, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000200)=""/209, 0xd1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @alu={0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0xd, 0x4, 0x1, 0xfffffffffffffff8, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x0, 0x0, 0x2, 0x4, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00'}) close(r9) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0xf, 0x1}, {0xf, 0x5}]}, @datasec={0x5, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x200, 0x4}], "38d2"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x8}}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/49, 0x73, 0x31, 0x0, 0xab, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r10, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/41, 0x29, 0x0, &(0x7f0000000380)=""/186, 0xba}}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffde) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) 688.052377ms ago: executing program 0 (id=1291): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x367c, 0x0, @perf_config_ext={0x200000000000000}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00010000000000000000000000ffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x13}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_usbip_server_init(0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BLKIOOPT(r9, 0x1279, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) 629.753783ms ago: executing program 2 (id=1292): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000880)=ANY=[], 0x386, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 377.211845ms ago: executing program 2 (id=1293): r0 = socket(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000b00)=ANY=[@ANYRESOCT], 0xfd, 0x1cf, &(0x7f0000000900)="$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") r1 = open$dir(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) renameat(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)='./file1\x00') r5 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000b40)={{r2}, 0x0, 0x1c, @unused=[0x8000000000000000, 0x400, 0x7c0d, 0x2], @subvolid}) mkdirat(r1, &(0x7f0000000000)='./file1/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x800}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f00000007c0)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@resuid}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x40002000, &(0x7f0000000100)={0x23, 0x0, 0x4, 0x5}, 0x10) sync() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@getchain={0x24, 0x66, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0xffe0, 0x6}, {0xf, 0xf}}}, 0x24}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002a00)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x3, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf41, 0x10000000, 0x4, 0xfffff800, 0x80000000, {0x4, 0x2, 0x401, 0x0, 0x7f, 0x95}, {0xf, 0x2, 0x8000, 0x49, 0x5, 0x2}, 0x6, 0x3, 0x7}}]}]}}]}, 0x74}}, 0x0) 353.720907ms ago: executing program 3 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000540)=ANY=[], 0x8, 0x2fd, &(0x7f0000000e40)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x110) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7000, 0x0, 0x0) 258.877786ms ago: executing program 3 (id=1295): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x4}]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x3ff, 0x8}], 0x3e0000) 110.98093ms ago: executing program 2 (id=1296): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x69, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000000580)={0x80208000, &(0x7f0000000200), &(0x7f0000000300), &(0x7f00000001c0), {0x8}, &(0x7f0000000640)=""/59, 0x3b, &(0x7f0000000400)=""/74, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x9}, 0x58) 16.502978ms ago: executing program 3 (id=1297): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x25, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 16.126288ms ago: executing program 2 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0x36, {0xff}, {}, @addr={0x2, 0x6}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @note={0x0, 0x0, 0x2}}], 0x38) 0s ago: executing program 2 (id=1299): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xa, 0x2c3, &(0x7f0000000900)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x161102) read$usbmon(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000009000000010000001000000000000000000000003d63eacf399fec3d519d80272ebe4dd920ed8ec15721ab9256dcd4e618cbd7c6d28e6a9b77f2e30eee6754d27f54df6eb00e78589a1b75825703"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r8, 0xffffffffffffffff, 0x36, 0x0, @val=@perf_event={0x4}}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000f7ffffffffffffff000095", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1c, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func, @alu={0x7, 0x1, 0x4, 0x3, 0x3, 0x0, 0xffffffffffffffff}, @generic={0x2, 0x3, 0xe, 0x2, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x6, 0xaa, &(0x7f0000000680)=""/170, 0x40f00, 0x45, '\x00', r9, 0x0, r3, 0x8, &(0x7f0000000400)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r7, r1, r3, r7, r7, r2, r7, r7], 0x0, 0x10, 0x7f, @void, @value}, 0x94) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00'], 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031000070060"]) ioctl$USBDEVFS_CONTROL(r10, 0x4004550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r11, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r11, 0xa, 0x12) kernel console output (not intermixed with test programs): ror (device loop1): ext4_validate_block_bitmap:441: comm syz.1.852: bg 0: block 400: padding at end of block bitmap is not set [ 95.812268][ T6000] EXT4-fs (loop1): Remounting filesystem read-only [ 95.816486][ T6009] loop0: p1 < > p4 [ 95.824608][ T6009] loop0: p4 size 8388608 extends beyond EOD, truncated [ 95.857208][ T6011] loop1: detected capacity change from 0 to 256 [ 95.863933][ T6011] msdos: Unknown parameter '01777777777777777777777' [ 95.880162][ T6011] loop1: detected capacity change from 0 to 1024 [ 95.893254][ T6011] EXT4-fs: Ignoring removed orlov option [ 95.899032][ T6011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.918571][ T6011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 95.926944][ T6011] System zones: 0-1, 3-36 [ 95.930589][ T2964] loop0: p1 p4 [ 95.934917][ T2964] loop0: p1 start 8771727 is beyond EOD, truncated [ 95.941658][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 95.963313][ T6014] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 95.963313][ T6014] program syz.0.857 not setting count and/or reply_len properly [ 95.970968][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 96.002718][ T6016] loop0: detected capacity change from 0 to 256 [ 96.010124][ T6016] msdos: Unknown parameter '01777777777777777777777' [ 96.025547][ T6016] loop0: detected capacity change from 0 to 1024 [ 96.035845][ T6016] EXT4-fs: Ignoring removed orlov option [ 96.041610][ T6016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.055664][ T6016] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 96.069154][ T6018] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 96.075886][ T6018] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.083733][ T6018] vhci_hcd vhci_hcd.0: Device attached [ 96.102876][ T6016] System zones: 0-1, 3-36 [ 96.135248][ T6020] vhci_hcd: connection closed [ 96.135655][ T303] vhci_hcd: stop threads [ 96.144934][ T303] vhci_hcd: release socket [ 96.149414][ T303] vhci_hcd: disconnect device [ 96.149887][ T6025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.861'. [ 96.237512][ T6032] loop4: detected capacity change from 0 to 512 [ 96.268677][ T6032] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.289085][ T6036] loop3: detected capacity change from 0 to 512 [ 96.300189][ T6036] EXT4-fs: Ignoring removed i_version option [ 96.317905][ T6036] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.331571][ T6036] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.866: bg 0: block 400: padding at end of block bitmap is not set [ 96.346806][ T6036] EXT4-fs (loop3): Remounting filesystem read-only [ 96.376230][ T6044] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 96.376230][ T6044] program syz.3.868 not setting count and/or reply_len properly [ 96.605246][ T6056] loop3: detected capacity change from 0 to 2048 [ 96.636539][ T6056] loop3: p1 < > p4 [ 96.641248][ T6056] loop3: p4 size 8388608 extends beyond EOD, truncated [ 96.680272][ T6058] loop1: detected capacity change from 0 to 1024 [ 96.687011][ T6058] EXT4-fs: Invalid want_extra_isize 137 [ 96.783355][ T2964] loop3: p1 p4 [ 96.787400][ T2964] loop3: p1 start 8771727 is beyond EOD, truncated [ 96.793958][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 96.818721][ T2964] loop3: p1 p4 [ 96.821103][ T6063] loop4: detected capacity change from 0 to 256 [ 96.822350][ T2964] loop3: p1 start 8771727 is beyond EOD, truncated [ 96.830504][ T6063] msdos: Unknown parameter '01777777777777777777777' [ 96.835109][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 96.852442][ T6059] loop1: detected capacity change from 0 to 512 [ 96.869138][ T6059] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.888935][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 96.898526][ T6069] loop3: detected capacity change from 0 to 512 [ 96.903033][ T6063] loop4: detected capacity change from 0 to 1024 [ 96.912179][ T6069] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.912867][ T6063] EXT4-fs: Ignoring removed orlov option [ 96.924393][ T6063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.926519][ T6069] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.936430][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 96.956554][ T6069] EXT4-fs (loop3): 1 truncate cleaned up [ 96.963439][ T6063] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 96.972674][ T6063] System zones: 0-1, 3-36 [ 96.999748][ T6073] loop3: detected capacity change from 0 to 128 [ 97.012912][ T6073] syz.3.878: attempt to access beyond end of device [ 97.012912][ T6073] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 97.014380][ T3844] kworker/u8:8: attempt to access beyond end of device [ 97.014380][ T3844] loop3: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 97.103238][ T6079] siw: device registration error -23 [ 97.182225][ T6086] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 97.188894][ T6086] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.196605][ T6086] vhci_hcd vhci_hcd.0: Device attached [ 97.205854][ T6087] vhci_hcd: connection closed [ 97.206082][ T303] vhci_hcd: stop threads [ 97.215105][ T303] vhci_hcd: release socket [ 97.219695][ T303] vhci_hcd: disconnect device [ 97.264571][ T6091] loop3: detected capacity change from 0 to 256 [ 97.271285][ T6091] msdos: Unknown parameter '01777777777777777777777' [ 97.289553][ T6091] loop3: detected capacity change from 0 to 1024 [ 97.296485][ T6091] EXT4-fs: Ignoring removed orlov option [ 97.302238][ T6091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.310857][ T6091] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 97.319021][ T6091] System zones: 0-1, 3-36 [ 97.354874][ T6096] loop0: detected capacity change from 0 to 256 [ 97.389066][ T6096] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.421145][ T6102] loop2: detected capacity change from 0 to 512 [ 97.428245][ T6102] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.435805][ T6102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.450409][ T6102] EXT4-fs (loop2): 1 truncate cleaned up [ 97.461007][ T6104] loop3: detected capacity change from 0 to 2048 [ 97.526448][ T6104] loop3: p1 < > p4 [ 97.531283][ T6104] loop3: p4 size 8388608 extends beyond EOD, truncated [ 97.542740][ T2964] loop3: p1 < > p4 [ 97.548771][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 97.574876][ T6111] syz.1.892[6111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.575011][ T6111] syz.1.892[6111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.625553][ T6114] loop2: detected capacity change from 0 to 1024 [ 97.643945][ T6114] EXT4-fs: Invalid want_extra_isize 137 [ 97.655255][ T2964] loop3: p1 < > p4 [ 97.662711][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 97.766269][ T6122] loop1: detected capacity change from 0 to 2048 [ 97.768125][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 97.776797][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 97.801812][ T6125] loop4: detected capacity change from 0 to 256 [ 97.809894][ T6125] msdos: Unknown parameter '01777777777777777777777' [ 97.826277][ T6125] loop4: detected capacity change from 0 to 1024 [ 97.826569][ T6122] loop1: p1 < > p4 [ 97.833982][ T6125] EXT4-fs: Ignoring removed orlov option [ 97.842234][ T6125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.843429][ T6122] loop1: p4 size 8388608 extends beyond EOD, truncated [ 97.855400][ T6125] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 97.866103][ T6125] System zones: 0-1, 3-36 [ 97.871934][ T6125] EXT4-fs mount: 148 callbacks suppressed [ 97.871951][ T6125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.951950][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 97.963685][ T6130] siw: device registration error -23 [ 97.973591][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 97.987089][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.008820][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 98.021171][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 98.068306][ T6138] loop4: detected capacity change from 0 to 256 [ 98.079888][ T6136] loop3: detected capacity change from 0 to 1024 [ 98.090245][ T6136] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.101399][ T6136] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.106749][ T6140] loop1: detected capacity change from 0 to 2048 [ 98.113768][ T6136] JBD2: no valid journal superblock found [ 98.123372][ T6136] EXT4-fs (loop3): Could not load journal inode [ 98.136755][ T6140] loop1: p1 < > p4 [ 98.141543][ T6140] loop1: p4 size 8388608 extends beyond EOD, truncated [ 98.147276][ T6136] lo speed is unknown, defaulting to 1000 [ 98.154048][ T2964] loop1: p1 < > p4 [ 98.159454][ T2964] loop1: p4 size 8388608 extends beyond EOD, truncated [ 98.169828][ T6138] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.202136][ T6144] syz.3.906[6144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.202203][ T6144] syz.3.906[6144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.238785][ T2964] loop1: p1 < > p4 [ 98.255583][ T2964] loop1: p4 size 8388608 extends beyond EOD, truncated [ 98.279067][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 98.288494][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.907'. [ 98.312876][ T6148] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 98.319536][ T6148] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.327164][ T6148] vhci_hcd vhci_hcd.0: Device attached [ 98.336546][ T6149] vhci_hcd: connection closed [ 98.336638][ T50] vhci_hcd: stop threads [ 98.345620][ T50] vhci_hcd: release socket [ 98.350086][ T50] vhci_hcd: disconnect device [ 98.363684][ T6151] loop1: detected capacity change from 0 to 512 [ 98.379245][ T6151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.391949][ T6151] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.470547][ T6156] loop0: detected capacity change from 0 to 512 [ 98.481498][ T6156] EXT4-fs: Ignoring removed oldalloc option [ 98.501986][ T6159] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 98.501986][ T6159] program syz.2.910 not setting count and/or reply_len properly [ 98.517115][ T6156] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.909: Parent and EA inode have the same ino 15 [ 98.543601][ T6156] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.909: Parent and EA inode have the same ino 15 [ 98.543792][ T3590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.557849][ T6156] EXT4-fs (loop0): 1 orphan inode deleted [ 98.571782][ T6156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.578845][ T6161] loop2: detected capacity change from 0 to 1024 [ 98.591686][ T6156] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 13: comm syz.0.909: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 98.600043][ T6161] EXT4-fs: Invalid want_extra_isize 137 [ 98.643404][ T6165] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 13: comm syz.0.909: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 98.697003][ T6168] loop1: detected capacity change from 0 to 128 [ 98.717226][ T6168] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.730690][ T6168] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.772915][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.796270][ T3590] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.805837][ T6172] loop4: detected capacity change from 0 to 1024 [ 98.822211][ T6170] loop2: detected capacity change from 0 to 512 [ 98.830194][ T6172] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.841308][ T6172] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.853849][ T6172] JBD2: no valid journal superblock found [ 98.857171][ T6176] syz.0.918[6176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.859658][ T6172] EXT4-fs (loop4): Could not load journal inode [ 98.859697][ T6176] syz.0.918[6176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.874245][ T6170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.901588][ T6170] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.951221][ T6172] lo speed is unknown, defaulting to 1000 [ 98.959798][ T6182] loop3: detected capacity change from 0 to 1024 [ 98.974447][ T6182] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.985430][ T6182] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.995246][ T6184] loop1: detected capacity change from 0 to 1024 [ 98.998660][ T6182] JBD2: no valid journal superblock found [ 99.008128][ T6182] EXT4-fs (loop3): Could not load journal inode [ 99.014929][ T6184] EXT4-fs: Invalid want_extra_isize 137 [ 99.077940][ T6188] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 99.077940][ T6188] program syz.4.921 not setting count and/or reply_len properly [ 99.125216][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.922'. [ 99.140501][ T6192] loop0: detected capacity change from 0 to 512 [ 99.192152][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.206013][ T6192] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.216877][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 99.216892][ T29] audit: type=1326 audit(1726665927.391:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdefc4c890 code=0x7ffc0000 [ 99.257308][ T29] audit: type=1326 audit(1726665927.421:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbdefc4cc77 code=0x7ffc0000 [ 99.281090][ T29] audit: type=1326 audit(1726665927.421:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdefc4c890 code=0x7ffc0000 [ 99.304612][ T29] audit: type=1326 audit(1726665927.421:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 99.328178][ T29] audit: type=1326 audit(1726665927.421:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 99.351519][ T29] audit: type=1326 audit(1726665927.421:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 99.375207][ T29] audit: type=1326 audit(1726665927.421:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 99.398675][ T29] audit: type=1326 audit(1726665927.421:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 99.422506][ T29] audit: type=1326 audit(1726665927.421:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 99.445861][ T29] audit: type=1326 audit(1726665927.421:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 99.474711][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.515720][ T6198] loop0: detected capacity change from 0 to 256 [ 99.522974][ T6198] msdos: Unknown parameter '01777777777777777777777' [ 99.523522][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.559605][ T6198] loop0: detected capacity change from 0 to 1024 [ 99.570183][ T6198] EXT4-fs: Ignoring removed orlov option [ 99.576030][ T6198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.585927][ T6198] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 99.595424][ T6200] ALSA: seq fatal error: cannot create timer (-22) [ 99.602590][ T6198] System zones: 0-1, 3-36 [ 99.608915][ T6198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.790078][ T6206] netlink: 44 bytes leftover after parsing attributes in process `syz.2.926'. [ 99.945467][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.953504][ T6218] loop1: detected capacity change from 0 to 512 [ 99.961923][ T6218] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.973119][ T6218] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.992446][ T6218] EXT4-fs (loop1): 1 truncate cleaned up [ 99.998425][ T6220] loop3: detected capacity change from 0 to 1024 [ 100.013346][ T6218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.038933][ T6220] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.050012][ T6220] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 100.056641][ T6224] loop2: detected capacity change from 0 to 2048 [ 100.071568][ T6225] syz.0.932[6225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.071646][ T6225] syz.0.932[6225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.078516][ T6220] JBD2: no valid journal superblock found [ 100.084600][ T3590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.094648][ T6220] EXT4-fs (loop3): Could not load journal inode [ 100.104914][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.936'. [ 100.127072][ T3497] loop2: p1 < > p4 [ 100.133215][ T3497] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.144766][ T6224] loop2: p1 < > p4 [ 100.154578][ T6224] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.192550][ T6231] loop1: detected capacity change from 0 to 1024 [ 100.199577][ T6231] EXT4-fs: Invalid want_extra_isize 137 [ 100.260644][ T2964] loop2: p1 < > p4 [ 100.265165][ T2964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.347557][ T6237] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 100.347557][ T6237] program syz.4.940 not setting count and/or reply_len properly [ 100.408289][ T6239] lo speed is unknown, defaulting to 1000 [ 100.417329][ T6242] loop2: detected capacity change from 0 to 1024 [ 100.447251][ T6242] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.458213][ T6242] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 100.499473][ T6248] loop0: detected capacity change from 0 to 256 [ 100.506158][ T6242] JBD2: no valid journal superblock found [ 100.512013][ T6242] EXT4-fs (loop2): Could not load journal inode [ 100.514946][ T6248] msdos: Unknown parameter '01777777777777777777777' [ 100.563971][ T6248] loop0: detected capacity change from 0 to 1024 [ 100.571646][ T6248] EXT4-fs: Ignoring removed orlov option [ 100.577454][ T6248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.597376][ T6248] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 100.615882][ T6248] System zones: 0-1, 3-36 [ 100.628324][ T6248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.802263][ T6260] ALSA: seq fatal error: cannot create timer (-22) [ 100.863928][ T6259] loop4: detected capacity change from 0 to 2048 [ 100.912275][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.944622][ T6259] loop4: p1 < > p4 [ 100.953461][ T6259] loop4: p4 size 8388608 extends beyond EOD, truncated [ 101.100936][ T6263] loop1: detected capacity change from 0 to 256 [ 101.117752][ T6263] msdos: Unknown parameter '01777777777777777777777' [ 101.133758][ T6263] loop1: detected capacity change from 0 to 1024 [ 101.146343][ T6263] EXT4-fs: Ignoring removed orlov option [ 101.152052][ T6263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.196116][ T6263] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 101.223238][ T2964] loop4: p1 p4 [ 101.226128][ T6263] System zones: 0-1, 3-36 [ 101.231707][ T2964] loop4: p1 start 8771727 is beyond EOD, truncated [ 101.238281][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 101.252345][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.255445][ T2964] loop4: p1 p4 [ 101.268803][ T2964] loop4: p1 start 8771727 is beyond EOD, truncated [ 101.275411][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 101.303142][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 101.342659][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 101.357359][ T6271] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 101.357359][ T6271] program syz.2.949 not setting count and/or reply_len properly [ 101.395420][ T6273] loop0: detected capacity change from 0 to 1024 [ 101.415214][ T6273] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 101.426317][ T6273] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 101.441775][ T3590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.458235][ T6273] JBD2: no valid journal superblock found [ 101.464086][ T6273] EXT4-fs (loop0): Could not load journal inode [ 101.509075][ T6275] loop2: detected capacity change from 0 to 256 [ 101.594949][ T6280] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 101.601608][ T6280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.609226][ T6280] vhci_hcd vhci_hcd.0: Device attached [ 101.617614][ T6275] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.629329][ T6282] vhci_hcd: connection closed [ 101.629531][ T55] vhci_hcd: stop threads [ 101.638543][ T55] vhci_hcd: release socket [ 101.642975][ T55] vhci_hcd: disconnect device [ 101.715022][ T6288] lo speed is unknown, defaulting to 1000 [ 102.047906][ T6300] loop4: detected capacity change from 0 to 256 [ 102.055640][ T6300] msdos: Unknown parameter '01777777777777777777777' [ 102.074402][ T6298] loop4: detected capacity change from 0 to 1024 [ 102.084929][ T6297] loop2: detected capacity change from 0 to 1024 [ 102.094714][ T6298] EXT4-fs: Ignoring removed orlov option [ 102.100512][ T6298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.103537][ T6297] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.118190][ T6297] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.130430][ T6297] JBD2: no valid journal superblock found [ 102.136246][ T6297] EXT4-fs (loop2): Could not load journal inode [ 102.142855][ T6298] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 102.151260][ T6298] System zones: 0-1, 3-36 [ 102.160026][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.248347][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.318663][ T6311] loop4: detected capacity change from 0 to 256 [ 102.325102][ T6308] loop0: detected capacity change from 0 to 1024 [ 102.326591][ T6311] msdos: Unknown parameter '01777777777777777777777' [ 102.346160][ T6308] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.357116][ T6308] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.371665][ T6308] JBD2: no valid journal superblock found [ 102.377526][ T6308] EXT4-fs (loop0): Could not load journal inode [ 102.419195][ T6316] ALSA: seq fatal error: cannot create timer (-22) [ 102.756834][ T6326] syz.4.968[6326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.756976][ T6326] syz.4.968[6326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.764829][ T6322] lo speed is unknown, defaulting to 1000 [ 102.838044][ T6328] loop1: detected capacity change from 0 to 1024 [ 102.869659][ T6331] loop2: detected capacity change from 0 to 256 [ 102.979514][ T6331] msdos: Unknown parameter '01777777777777777777777' [ 102.997509][ T6331] loop2: detected capacity change from 0 to 1024 [ 103.004227][ T6331] EXT4-fs: Ignoring removed orlov option [ 103.010070][ T6331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.021162][ T6331] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 103.029575][ T6331] System zones: 0-1, 3-36 [ 103.040572][ T6331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.057856][ T6334] loop1: detected capacity change from 0 to 512 [ 103.101345][ T6334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.114073][ T6334] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.231152][ T6343] loop4: detected capacity change from 0 to 256 [ 103.242564][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.257830][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.974'. [ 103.259014][ T6343] msdos: Unknown parameter '01777777777777777777777' [ 103.311820][ T6343] loop4: detected capacity change from 0 to 1024 [ 103.338285][ T6343] EXT4-fs: Ignoring removed orlov option [ 103.344008][ T6343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.375224][ T6343] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 103.380997][ T6351] loop3: detected capacity change from 0 to 1024 [ 103.383540][ T6343] System zones: 0-1, 3-36 [ 103.395734][ T6343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.422975][ T6351] EXT4-fs: Invalid want_extra_isize 137 [ 103.539522][ T6356] loop2: detected capacity change from 0 to 256 [ 103.546698][ T6356] msdos: Unknown parameter '01777777777777777777777' [ 103.553649][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.584222][ T6356] loop2: detected capacity change from 0 to 1024 [ 103.593429][ T6356] EXT4-fs: Ignoring removed orlov option [ 103.599236][ T6356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.647389][ T6356] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 103.649132][ T3590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.655582][ T6356] System zones: 0-1, 3-36 [ 103.657439][ T6356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.775008][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.826143][ T6380] loop2: detected capacity change from 0 to 512 [ 103.834672][ T6380] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.854968][ T6381] loop4: detected capacity change from 0 to 1024 [ 103.861872][ T6380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.875389][ T6381] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.886381][ T6381] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 103.886505][ T6383] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 103.886505][ T6383] program syz.1.989 not setting count and/or reply_len properly [ 103.902272][ T6381] JBD2: no valid journal superblock found [ 103.918887][ T6381] EXT4-fs (loop4): Could not load journal inode [ 103.929115][ T6380] EXT4-fs (loop2): 1 truncate cleaned up [ 103.939791][ T6386] loop1: detected capacity change from 0 to 256 [ 103.940864][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.950170][ T6386] msdos: Unknown parameter '01777777777777777777777' [ 103.984762][ T6386] loop1: detected capacity change from 0 to 1024 [ 103.995119][ T6386] EXT4-fs: Ignoring removed orlov option [ 104.000968][ T6386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.036496][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.048016][ T6386] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 104.056568][ T6386] System zones: 0-1, 3-36 [ 104.062067][ T6386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.120508][ T6392] loop2: detected capacity change from 0 to 128 [ 104.128414][ T3590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.129515][ T6392] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.150191][ T6392] ext4 filesystem being mounted at /204/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.255154][ T3265] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.329531][ T6397] loop3: detected capacity change from 0 to 2048 [ 104.360831][ T6398] lo speed is unknown, defaulting to 1000 [ 104.376549][ T6397] loop3: p1 < > p4 [ 104.381118][ T6397] loop3: p4 size 8388608 extends beyond EOD, truncated [ 104.546295][ T2964] loop3: p1 p4 [ 104.549929][ T2964] loop3: p1 start 8771727 is beyond EOD, truncated [ 104.556616][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 104.652704][ T6417] loop0: detected capacity change from 0 to 512 [ 104.661893][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 104.681176][ T6417] EXT4-fs: Ignoring removed i_version option [ 104.702460][ T6417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.739147][ T6417] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.741910][ T6421] loop3: detected capacity change from 0 to 256 [ 104.758092][ T6421] msdos: Unknown parameter '01777777777777777777777' [ 104.773493][ T6417] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1000: bg 0: block 400: padding at end of block bitmap is not set [ 104.809428][ T6421] loop3: detected capacity change from 0 to 1024 [ 104.820938][ T6421] EXT4-fs: Ignoring removed orlov option [ 104.826682][ T6421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.835032][ T6417] EXT4-fs (loop0): Remounting filesystem read-only [ 104.844951][ T6421] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 104.853366][ T6421] System zones: 0-1, 3-36 [ 104.864865][ T6421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.886925][ T6427] loop1: detected capacity change from 0 to 1024 [ 104.893771][ T6427] EXT4-fs: Invalid want_extra_isize 137 [ 104.995749][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 104.995768][ T29] audit: type=1326 audit(1726665933.161:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.025458][ T29] audit: type=1326 audit(1726665933.161:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.053327][ T29] audit: type=1326 audit(1726665933.231:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.076990][ T29] audit: type=1326 audit(1726665933.231:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.100832][ T29] audit: type=1326 audit(1726665933.231:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.104986][ T6431] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 105.104986][ T6431] program syz.4.1005 not setting count and/or reply_len properly [ 105.124305][ T29] audit: type=1326 audit(1726665933.231:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.126351][ T29] audit: type=1326 audit(1726665933.231:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.188087][ T29] audit: type=1326 audit(1726665933.231:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.211697][ T29] audit: type=1326 audit(1726665933.251:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.235370][ T29] audit: type=1326 audit(1726665933.251:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 105.291406][ T6437] loop4: detected capacity change from 0 to 128 [ 105.305171][ T6437] syz.4.1009: attempt to access beyond end of device [ 105.305171][ T6437] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 105.319767][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.346987][ T50] kworker/u8:3: attempt to access beyond end of device [ 105.346987][ T50] loop4: rw=1, sector=153, nr_sectors = 24 limit=128 [ 105.394387][ T6441] loop3: detected capacity change from 0 to 2048 [ 105.426506][ T6441] loop3: p1 < > p4 [ 105.431908][ T6441] loop3: p4 size 8388608 extends beyond EOD, truncated [ 105.478994][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.513032][ T6450] loop0: detected capacity change from 0 to 2048 [ 105.542571][ T2964] loop3: p1 p4 [ 105.546342][ T2964] loop3: p1 start 8771727 is beyond EOD, truncated [ 105.546706][ T6450] loop0: p1 < > p4 [ 105.552949][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 105.559673][ T6450] loop0: p4 size 8388608 extends beyond EOD, truncated [ 105.620202][ T6452] loop3: detected capacity change from 0 to 1024 [ 105.629908][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 105.631923][ T6452] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.650769][ T6452] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.662637][ T6452] JBD2: no valid journal superblock found [ 105.668547][ T6452] EXT4-fs (loop3): Could not load journal inode [ 105.677035][ T6456] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 105.677035][ T6456] program syz.0.1017 not setting count and/or reply_len properly [ 105.920389][ T6468] lo speed is unknown, defaulting to 1000 [ 105.994393][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.001876][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.009359][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.016942][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.024340][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.031776][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.039193][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.046625][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.054064][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.061482][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.068986][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.076389][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.083845][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.091286][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.098774][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.106193][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.113677][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.121337][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.128846][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.136391][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.143787][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.151398][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.159391][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.166799][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.174270][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.181812][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.189410][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.196842][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.204241][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.211709][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.219180][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.226682][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.234165][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.241658][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.249425][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.256887][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.264448][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.272121][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.279668][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.287338][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.294753][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.302239][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.309666][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 106.335571][ T6474] loop2: detected capacity change from 0 to 512 [ 106.336341][ T8] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.80 Device [syz0] on syz0 [ 106.352730][ T6474] EXT4-fs: Ignoring removed i_version option [ 106.373976][ T6478] loop4: detected capacity change from 0 to 512 [ 106.390776][ T6474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.394633][ T6478] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.403991][ T6474] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.424376][ T6474] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1024: bg 0: block 400: padding at end of block bitmap is not set [ 106.429949][ T6478] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.443131][ T6474] EXT4-fs (loop2): Remounting filesystem read-only [ 106.454861][ T6483] loop1: detected capacity change from 0 to 2048 [ 106.487321][ T6478] EXT4-fs (loop4): 1 truncate cleaned up [ 106.493389][ T6478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.524215][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.534130][ T6483] loop1: p1 < > p4 [ 106.539320][ T6483] loop1: p4 size 8388608 extends beyond EOD, truncated [ 106.582522][ T6491] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 106.582522][ T6491] program syz.3.1029 not setting count and/or reply_len properly [ 106.600165][ T6489] loop4: detected capacity change from 0 to 2048 [ 106.621216][ T6493] siw: device registration error -23 [ 106.657515][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 106.659031][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 106.673247][ T6496] loop1: detected capacity change from 0 to 1024 [ 106.687762][ T6489] loop4: p1 < > p4 [ 106.689956][ T6496] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 106.702602][ T6496] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 106.716936][ T6489] loop4: p4 size 8388608 extends beyond EOD, truncated [ 106.735438][ T6496] JBD2: no valid journal superblock found [ 106.741280][ T6496] EXT4-fs (loop1): Could not load journal inode [ 106.742196][ T6499] loop0: detected capacity change from 0 to 2048 [ 106.796899][ T6499] loop0: p1 < > p4 [ 106.802896][ T6499] loop0: p4 size 8388608 extends beyond EOD, truncated [ 106.878037][ T2964] loop0: p1 < > p4 [ 106.882614][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 106.971594][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 107.006566][ T6508] lo speed is unknown, defaulting to 1000 [ 107.133538][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.141089][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.148523][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.155916][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.163398][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.170821][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.178274][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.185680][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.193120][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.200621][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.208089][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.215491][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.222913][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.230359][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.237792][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.245186][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.252631][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.260046][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.267455][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.274969][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.282425][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.289903][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.297349][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.304761][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.312282][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.319713][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.327136][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.334663][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.342158][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.349572][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.357031][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.364470][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.371898][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.379379][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.386869][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.394357][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.401868][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.409312][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.416882][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.424412][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.432100][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.439698][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.447311][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 107.465675][ T8] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.80 Device [syz0] on syz0 [ 107.471395][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.524382][ T6513] loop0: detected capacity change from 0 to 1024 [ 107.536231][ T6513] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.547248][ T6513] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 107.562856][ T6515] loop1: detected capacity change from 0 to 512 [ 107.576972][ T6515] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.591319][ T6517] loop2: detected capacity change from 0 to 1024 [ 107.602476][ T6515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.605864][ T6513] JBD2: no valid journal superblock found [ 107.617444][ T6521] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 107.617444][ T6521] program syz.3.1041 not setting count and/or reply_len properly [ 107.618169][ T6513] EXT4-fs (loop0): Could not load journal inode [ 107.642429][ T6517] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.653473][ T6517] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 107.662221][ T6519] loop4: detected capacity change from 0 to 2048 [ 107.671332][ T6517] JBD2: no valid journal superblock found [ 107.672564][ T6515] EXT4-fs (loop1): 1 truncate cleaned up [ 107.677167][ T6517] EXT4-fs (loop2): Could not load journal inode [ 107.696477][ T6515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.723283][ T6519] loop4: p1 < > p4 [ 107.727822][ T6519] loop4: p4 size 8388608 extends beyond EOD, truncated [ 107.817287][ T6525] siw: device registration error -23 [ 107.877825][ T2964] loop4: p1 < > p4 [ 107.911554][ T6531] lo speed is unknown, defaulting to 1000 [ 107.981976][ T6528] ALSA: seq fatal error: cannot create timer (-22) [ 108.033295][ T3590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.054482][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 108.083809][ T6534] loop3: detected capacity change from 0 to 128 [ 108.171700][ T6534] syz.3.1047: attempt to access beyond end of device [ 108.171700][ T6534] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 108.271573][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.280591][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.292004][ T28] kworker/u8:1: attempt to access beyond end of device [ 108.292004][ T28] loop3: rw=1, sector=153, nr_sectors = 24 limit=128 [ 108.335888][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.346796][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.385081][ T6543] loop1: detected capacity change from 0 to 256 [ 108.400108][ T6543] msdos: Unknown parameter '01777777777777777777777' [ 108.464295][ T6541] loop3: detected capacity change from 0 to 512 [ 108.467513][ T6545] syz.0.1050[6545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.470997][ T6541] EXT4-fs: Ignoring removed i_version option [ 108.485863][ T6545] syz.0.1050[6545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.498977][ T6541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.528032][ T6541] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.558323][ T6541] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1048: bg 0: block 400: padding at end of block bitmap is not set [ 108.563849][ T6554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1053'. [ 108.572969][ T6541] EXT4-fs (loop3): Remounting filesystem read-only [ 108.605013][ T6556] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 108.605013][ T6556] program syz.1.1054 not setting count and/or reply_len properly [ 108.648878][ T6560] loop2: detected capacity change from 0 to 512 [ 108.669366][ T6560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.682201][ T6560] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.831783][ T6564] ALSA: seq fatal error: cannot create timer (-22) [ 109.120141][ T6566] loop4: detected capacity change from 0 to 2048 [ 109.166411][ T6566] loop4: p1 < > p4 [ 109.196566][ T6566] loop4: p4 size 8388608 extends beyond EOD, truncated [ 109.275880][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.341705][ T6572] loop3: detected capacity change from 0 to 1024 [ 109.348585][ T6572] EXT4-fs: Invalid want_extra_isize 137 [ 109.391219][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.427882][ T6575] loop0: detected capacity change from 0 to 1024 [ 109.435015][ T6575] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.446045][ T6575] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 109.459354][ T6575] JBD2: no valid journal superblock found [ 109.465165][ T6575] EXT4-fs (loop0): Could not load journal inode [ 109.476752][ T2964] loop4: p1 p4 [ 109.480341][ T2964] loop4: p1 start 8771727 is beyond EOD, truncated [ 109.486942][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 109.519725][ T2964] loop4: p1 p4 [ 109.523386][ T2964] loop4: p1 start 8771727 is beyond EOD, truncated [ 109.530020][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 109.575430][ T6581] syz.1.1062[6581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.575555][ T6581] syz.1.1062[6581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.619301][ T6576] loop3: detected capacity change from 0 to 512 [ 109.641272][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 109.661838][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 109.708498][ T6576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.721103][ T6576] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.755092][ T6592] lo speed is unknown, defaulting to 1000 [ 109.819940][ T6591] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 109.819940][ T6591] program syz.4.1065 not setting count and/or reply_len properly [ 110.059069][ T6599] loop4: detected capacity change from 0 to 512 [ 110.065701][ T6599] EXT4-fs: Ignoring removed i_version option [ 110.077850][ T6599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.090680][ T6599] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.103635][ T6599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1067: bg 0: block 400: padding at end of block bitmap is not set [ 110.118778][ T6599] EXT4-fs (loop4): Remounting filesystem read-only [ 110.205405][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.230571][ T6604] loop3: detected capacity change from 0 to 256 [ 110.238031][ T6604] msdos: Unknown parameter '01777777777777777777777' [ 110.255432][ T6604] loop3: detected capacity change from 0 to 1024 [ 110.262690][ T6604] EXT4-fs: Ignoring removed orlov option [ 110.268414][ T6604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.287970][ T6604] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 110.296709][ T6604] System zones: 0-1, 3-36 [ 110.302218][ T6604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.317663][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 110.317680][ T29] audit: type=1326 audit(1726665938.491:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.349025][ T29] audit: type=1326 audit(1726665938.491:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.372595][ T29] audit: type=1326 audit(1726665938.491:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.396271][ T29] audit: type=1326 audit(1726665938.491:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.419768][ T29] audit: type=1326 audit(1726665938.491:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.443432][ T29] audit: type=1326 audit(1726665938.491:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.466882][ T29] audit: type=1326 audit(1726665938.491:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.490729][ T29] audit: type=1326 audit(1726665938.491:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.514272][ T29] audit: type=1326 audit(1726665938.491:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.537911][ T29] audit: type=1326 audit(1726665938.491:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 110.572205][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.602161][ T6610] loop3: detected capacity change from 0 to 2048 [ 110.666530][ T6610] loop3: p1 < > p4 [ 110.671264][ T6610] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.724178][ T2964] loop3: p1 p4 [ 110.729343][ T2964] loop3: p1 start 8771727 is beyond EOD, truncated [ 110.736174][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.764509][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 110.894278][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.950168][ T6616] ALSA: seq fatal error: cannot create timer (-22) [ 111.226196][ T6618] syz.0.1074[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.226297][ T6618] syz.0.1074[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.370345][ T6623] loop4: detected capacity change from 0 to 1024 [ 111.390983][ T6623] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.402082][ T6623] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.412100][ T6623] JBD2: no valid journal superblock found [ 111.414412][ T6626] loop0: detected capacity change from 0 to 256 [ 111.417944][ T6623] EXT4-fs (loop4): Could not load journal inode [ 111.424700][ T6626] msdos: Unknown parameter '01777777777777777777777' [ 111.448367][ T6626] loop0: detected capacity change from 0 to 1024 [ 111.467487][ T6626] EXT4-fs: Ignoring removed orlov option [ 111.473206][ T6626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.491778][ T6626] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 111.500251][ T6626] System zones: 0-1, 3-36 [ 111.507205][ T6626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.576667][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.609266][ T6628] ALSA: seq fatal error: cannot create timer (-22) [ 111.623684][ T6632] loop0: detected capacity change from 0 to 512 [ 111.632523][ T6632] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.647367][ T6632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.658764][ T6634] loop3: detected capacity change from 0 to 1024 [ 111.660294][ T6632] EXT4-fs (loop0): 1 truncate cleaned up [ 111.671513][ T6632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.674607][ T6634] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.695065][ T6634] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.711893][ T6634] JBD2: no valid journal superblock found [ 111.713352][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.717739][ T6634] EXT4-fs (loop3): Could not load journal inode [ 111.732805][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1081'. [ 111.774874][ T6639] loop0: detected capacity change from 0 to 2048 [ 111.846563][ T3497] loop0: p1 < > p4 [ 111.851218][ T3497] loop0: p4 size 8388608 extends beyond EOD, truncated [ 111.861255][ T6639] loop0: p1 < > p4 [ 111.865809][ T6639] loop0: p4 size 8388608 extends beyond EOD, truncated [ 111.969109][ T2964] loop0: p1 p4 [ 111.972982][ T2964] loop0: p1 start 8771727 is beyond EOD, truncated [ 111.979647][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 112.008950][ T6644] lo speed is unknown, defaulting to 1000 [ 112.025571][ T2964] loop0: p1 p4 [ 112.031315][ T2964] loop0: p1 start 8771727 is beyond EOD, truncated [ 112.037970][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 112.060319][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.067881][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.075318][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.087630][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.095108][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.102584][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.107417][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 112.110042][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.127347][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.134942][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.142507][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.150081][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.157661][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.161604][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 112.165086][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.182381][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.189871][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.194256][ T6647] loop0: detected capacity change from 0 to 512 [ 112.197451][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.211250][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.214800][ T6647] EXT4-fs: Ignoring removed i_version option [ 112.218705][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.218778][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.239560][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.250096][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.257587][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.264992][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.272565][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.279986][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.287491][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.294891][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.302473][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.310128][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.317581][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.325075][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.325929][ T6650] loop4: detected capacity change from 0 to 512 [ 112.332792][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.346278][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.350165][ T6650] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.353802][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.367708][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.368706][ T6650] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.375130][ T3338] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 112.408454][ T6647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.421716][ T6647] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.422690][ T6650] EXT4-fs (loop4): 1 truncate cleaned up [ 112.440882][ T6647] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1083: bg 0: block 400: padding at end of block bitmap is not set [ 112.441764][ T6650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.456598][ T3338] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 112.497506][ T6647] EXT4-fs (loop0): Remounting filesystem read-only [ 112.555374][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.632687][ T6660] loop4: detected capacity change from 0 to 2048 [ 112.649315][ T6662] loop2: detected capacity change from 0 to 256 [ 112.657041][ T6662] msdos: Unknown parameter '01777777777777777777777' [ 112.672451][ T6664] loop1: detected capacity change from 0 to 1024 [ 112.688359][ T6664] EXT4-fs: Invalid want_extra_isize 137 [ 112.697182][ T6660] loop4: p1 < > p4 [ 112.701623][ T6660] loop4: p4 size 8388608 extends beyond EOD, truncated [ 112.717812][ T6662] loop2: detected capacity change from 0 to 1024 [ 112.724380][ T6662] EXT4-fs: Ignoring removed orlov option [ 112.730239][ T6662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.813315][ T6662] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 112.822984][ T6662] System zones: 0-1, 3-36 [ 112.838203][ T6662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.866142][ T6666] loop1: detected capacity change from 0 to 512 [ 112.904716][ T2964] loop4: p1 p4 [ 112.904836][ T6666] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.908561][ T2964] loop4: p1 start 8771727 is beyond EOD, truncated [ 112.925427][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 112.957895][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 113.007305][ T6671] loop4: detected capacity change from 0 to 256 [ 113.039384][ T6671] msdos: Unknown parameter '01777777777777777777777' [ 113.046637][ T6675] loop0: detected capacity change from 0 to 512 [ 113.070817][ T6677] loop3: detected capacity change from 0 to 2048 [ 113.078922][ T6675] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.090014][ T6675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.097295][ T6671] loop4: detected capacity change from 0 to 1024 [ 113.106169][ T6679] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 113.106169][ T6679] program syz.2.1095 not setting count and/or reply_len properly [ 113.107979][ T6675] EXT4-fs (loop0): 1 truncate cleaned up [ 113.126442][ T6677] loop3: p1 < > p4 [ 113.132864][ T6671] EXT4-fs: Ignoring removed orlov option [ 113.134738][ T6677] loop3: p4 size 8388608 extends beyond EOD, [ 113.138598][ T6671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.151404][ T6677] truncated [ 113.177471][ T6671] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 113.185792][ T6671] System zones: 0-1, 3-36 [ 113.264196][ T6690] loop0: detected capacity change from 0 to 512 [ 113.271778][ T6690] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.284808][ T6690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.324655][ T6690] EXT4-fs (loop0): 1 truncate cleaned up [ 113.334960][ T6694] loop4: detected capacity change from 0 to 256 [ 113.348797][ T6694] msdos: Unknown parameter '01777777777777777777777' [ 113.355703][ T6685] syz.3.1098 (6685) used greatest stack depth: 9944 bytes left [ 113.388326][ T6697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 113.405524][ T6694] loop4: detected capacity change from 0 to 1024 [ 113.412726][ T6694] EXT4-fs: Ignoring removed orlov option [ 113.418560][ T6694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.420487][ T6697] loop0: detected capacity change from 0 to 512 [ 113.433407][ T6694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 113.443627][ T6694] System zones: 0-1, 3-36 [ 113.457376][ T6697] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.465817][ T6701] loop3: detected capacity change from 0 to 2048 [ 113.528495][ T6704] loop0: detected capacity change from 0 to 512 [ 113.531920][ T6701] loop3: p1 < > p4 [ 113.535927][ T6704] EXT4-fs: Ignoring removed i_version option [ 113.547384][ T6701] loop3: p4 size 8388608 extends beyond EOD, truncated [ 113.570472][ T6706] loop1: detected capacity change from 0 to 1024 [ 113.577682][ T2964] loop3: p1 < > p4 [ 113.579242][ T6706] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 113.583790][ T2964] loop3: p4 size 8388608 extends beyond EOD, [ 113.592398][ T6706] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 113.595090][ T6704] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.598543][ T2964] truncated [ 113.643299][ T6706] JBD2: no valid journal superblock found [ 113.649183][ T6706] EXT4-fs (loop1): Could not load journal inode [ 113.668630][ T6704] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1103: bg 0: block 400: padding at end of block bitmap is not set [ 113.720635][ T6704] EXT4-fs (loop0): Remounting filesystem read-only [ 113.777118][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 113.782637][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 113.805937][ T6719] loop3: detected capacity change from 0 to 512 [ 113.814527][ T6719] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.821747][ T6719] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.841264][ T6719] EXT4-fs (loop3): 1 truncate cleaned up [ 113.901598][ T6726] syz.3.1110[6726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.901670][ T6726] syz.3.1110[6726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.933190][ T6724] lo speed is unknown, defaulting to 1000 [ 113.968845][ T6730] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.977365][ T6728] loop4: detected capacity change from 0 to 2048 [ 114.027109][ T6728] loop4: p1 < > p4 [ 114.032075][ T6728] loop4: p4 size 8388608 extends beyond EOD, truncated [ 114.239235][ T6736] loop3: detected capacity change from 0 to 512 [ 114.258770][ T6736] EXT4-fs: Ignoring removed oldalloc option [ 114.275103][ T6736] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1114: Parent and EA inode have the same ino 15 [ 114.307017][ T6736] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1114: Parent and EA inode have the same ino 15 [ 114.325313][ T6736] EXT4-fs (loop3): 1 orphan inode deleted [ 114.361850][ T6739] loop4: detected capacity change from 0 to 1024 [ 114.373937][ T6739] EXT4-fs: Invalid want_extra_isize 137 [ 114.439858][ T6736] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #2: block 13: comm syz.3.1114: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 114.466316][ T6741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1116'. [ 114.491387][ T6742] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #2: block 13: comm syz.3.1114: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 114.542242][ T6736] siw: device registration error -23 [ 114.545322][ T6744] loop4: detected capacity change from 0 to 512 [ 114.572867][ T6744] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.612270][ T6751] loop3: detected capacity change from 0 to 2048 [ 114.657691][ T6751] loop3: p1 < > p4 [ 114.662440][ T6751] loop3: p4 size 8388608 extends beyond EOD, truncated [ 114.725418][ T2964] loop3: p1 p4 [ 114.729791][ T2964] loop3: p1 start 8771727 is beyond EOD, truncated [ 114.736459][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 114.774125][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 114.809931][ T6757] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 114.816578][ T6757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.824243][ T6757] vhci_hcd vhci_hcd.0: Device attached [ 114.837430][ T6758] vhci_hcd: connection closed [ 114.837631][ T50] vhci_hcd: stop threads [ 114.846772][ T50] vhci_hcd: release socket [ 114.851286][ T50] vhci_hcd: disconnect device [ 115.111221][ T6768] loop1: detected capacity change from 0 to 128 [ 115.120436][ T6768] syz.1.1125: attempt to access beyond end of device [ 115.120436][ T6768] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 115.142641][ T28] kworker/u8:1: attempt to access beyond end of device [ 115.142641][ T28] loop1: rw=1, sector=153, nr_sectors = 24 limit=128 [ 115.172922][ T6770] loop1: detected capacity change from 0 to 512 [ 115.182852][ T6770] EXT4-fs: Ignoring removed i_version option [ 115.222168][ T6770] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.225490][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1127'. [ 115.235043][ T6770] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1126: bg 0: block 400: padding at end of block bitmap is not set [ 115.257857][ T6770] EXT4-fs (loop1): Remounting filesystem read-only [ 115.293383][ T6778] loop4: detected capacity change from 0 to 1024 [ 115.300463][ T6778] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.311498][ T6778] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 115.321575][ T6778] JBD2: no valid journal superblock found [ 115.327429][ T6778] EXT4-fs (loop4): Could not load journal inode [ 115.420118][ T6784] loop0: detected capacity change from 0 to 256 [ 115.436377][ T6785] loop3: detected capacity change from 0 to 256 [ 115.444896][ T6785] msdos: Unknown parameter '01777777777777777777777' [ 115.462649][ T6785] loop3: detected capacity change from 0 to 1024 [ 115.469513][ T6785] EXT4-fs: Ignoring removed orlov option [ 115.475204][ T6785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.484783][ T6785] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 115.494480][ T6785] System zones: 0-1, 3-36 [ 115.496937][ T6784] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.508117][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 115.508135][ T29] audit: type=1326 audit(1726665943.681:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.538908][ T29] audit: type=1326 audit(1726665943.681:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.562429][ T29] audit: type=1326 audit(1726665943.681:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.585958][ T29] audit: type=1326 audit(1726665943.681:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.590788][ T6789] lo speed is unknown, defaulting to 1000 [ 115.609478][ T29] audit: type=1326 audit(1726665943.681:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.609516][ T29] audit: type=1326 audit(1726665943.681:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.662115][ T29] audit: type=1326 audit(1726665943.681:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.685645][ T29] audit: type=1326 audit(1726665943.681:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.709155][ T29] audit: type=1326 audit(1726665943.681:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.732695][ T29] audit: type=1326 audit(1726665943.681:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd471bedef9 code=0x7ffc0000 [ 115.769630][ T6793] loop0: detected capacity change from 0 to 256 [ 115.777445][ T6793] msdos: Unknown parameter '01777777777777777777777' [ 115.794955][ T6793] loop0: detected capacity change from 0 to 1024 [ 115.801666][ T6793] EXT4-fs: Ignoring removed orlov option [ 115.807484][ T6793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.818464][ T6793] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 115.869698][ T6793] System zones: 0-1, 3-36 [ 116.200959][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1138'. [ 116.232530][ T6806] loop2: detected capacity change from 0 to 512 [ 116.242532][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1139'. [ 116.262313][ T6806] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.315223][ T6812] loop0: detected capacity change from 0 to 512 [ 116.323185][ T6812] EXT4-fs: Ignoring removed oldalloc option [ 116.354253][ T6812] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1140: Parent and EA inode have the same ino 15 [ 116.376263][ T6812] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1140: Parent and EA inode have the same ino 15 [ 116.397445][ T6812] EXT4-fs (loop0): 1 orphan inode deleted [ 116.409305][ T6823] syz.1.1145[6823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.409392][ T6823] syz.1.1145[6823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.426758][ T6812] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 13: comm syz.0.1140: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 116.458816][ T6812] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 13: comm syz.0.1140: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 116.512426][ T6826] loop0: detected capacity change from 0 to 512 [ 116.521386][ T6828] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 116.521386][ T6828] program syz.1.1147 not setting count and/or reply_len properly [ 116.524197][ T6826] EXT4-fs: Ignoring removed i_version option [ 116.560517][ T6826] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.562494][ T6832] loop1: detected capacity change from 0 to 128 [ 116.577338][ T6826] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1146: bg 0: block 400: padding at end of block bitmap is not set [ 116.577566][ T6826] EXT4-fs (loop0): Remounting filesystem read-only [ 116.602817][ T6832] syz.1.1148: attempt to access beyond end of device [ 116.602817][ T6832] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 116.624418][ T3844] kworker/u8:8: attempt to access beyond end of device [ 116.624418][ T3844] loop1: rw=1, sector=153, nr_sectors = 24 limit=128 [ 116.710299][ T6841] loop1: detected capacity change from 0 to 256 [ 116.710615][ T6839] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 116.723301][ T6839] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.731038][ T6839] vhci_hcd vhci_hcd.0: Device attached [ 116.739813][ T6842] vhci_hcd: connection closed [ 116.740171][ T55] vhci_hcd: stop threads [ 116.749293][ T55] vhci_hcd: release socket [ 116.753733][ T55] vhci_hcd: disconnect device [ 116.954206][ T6849] loop1: detected capacity change from 0 to 1024 [ 116.961387][ T6849] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.972398][ T6849] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.982421][ T6849] JBD2: no valid journal superblock found [ 116.988474][ T6849] EXT4-fs (loop1): Could not load journal inode [ 117.195945][ T6851] lo speed is unknown, defaulting to 1000 [ 117.255605][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1155'. [ 117.310119][ T6856] loop4: detected capacity change from 0 to 2048 [ 117.349727][ T6858] syz.3.1157[6858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.349793][ T6858] syz.3.1157[6858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.407543][ T6856] loop4: p1 < > p4 [ 117.463340][ T6856] loop4: p4 size 8388608 extends beyond EOD, truncated [ 117.490510][ T6863] loop2: detected capacity change from 0 to 256 [ 117.497136][ T6863] msdos: Unknown parameter '01777777777777777777777' [ 117.532546][ T6867] loop0: detected capacity change from 0 to 256 [ 117.552110][ T6867] msdos: Unknown parameter '01777777777777777777777' [ 117.578927][ T6863] loop2: detected capacity change from 0 to 1024 [ 117.598992][ T6867] loop0: detected capacity change from 0 to 1024 [ 117.607300][ T6863] EXT4-fs: Ignoring removed orlov option [ 117.612983][ T6863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.627203][ T6867] EXT4-fs: Ignoring removed orlov option [ 117.633002][ T6867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.657994][ T6863] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 117.668160][ T6867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 117.672062][ T2964] loop4: p1 p4 [ 117.677539][ T6863] System zones: 0-1, 3-36 [ 117.680032][ T2964] loop4: p1 start 8771727 is beyond EOD, truncated [ 117.690839][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 117.695305][ T6867] System zones: 0-1, 3-36 [ 117.727141][ T6874] loop3: detected capacity change from 0 to 2048 [ 117.758049][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 117.778775][ T6874] loop3: p1 < > p4 [ 117.799906][ T6874] loop3: p4 size 8388608 extends beyond EOD, truncated [ 117.837730][ T6883] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 117.844398][ T6883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.852057][ T6883] vhci_hcd vhci_hcd.0: Device attached [ 117.884025][ T6884] vhci_hcd: connection closed [ 117.890179][ T28] vhci_hcd: stop threads [ 117.899216][ T28] vhci_hcd: release socket [ 117.903643][ T28] vhci_hcd: disconnect device [ 117.942780][ T2964] loop3: p1 p4 [ 117.948640][ T2964] loop3: p1 start 8771727 is beyond EOD, truncated [ 117.955682][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 118.015168][ T6890] loop1: detected capacity change from 0 to 1024 [ 118.027674][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 118.042715][ T6890] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 118.053893][ T6890] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 118.066845][ T6890] JBD2: no valid journal superblock found [ 118.072754][ T6890] EXT4-fs (loop1): Could not load journal inode [ 118.141602][ T6893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1169'. [ 118.157794][ T6893] loop3: detected capacity change from 0 to 512 [ 118.158684][ T6894] loop2: detected capacity change from 0 to 128 [ 118.174940][ T6894] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.209693][ T6893] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.308635][ T6904] syz.3.1173[6904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.308704][ T6904] syz.3.1173[6904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.338810][ T6905] lo speed is unknown, defaulting to 1000 [ 118.477991][ T6908] loop0: detected capacity change from 0 to 512 [ 118.503210][ T6908] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.540776][ T6908] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.553533][ T6910] loop3: detected capacity change from 0 to 2048 [ 118.567301][ T6908] EXT4-fs (loop0): 1 truncate cleaned up [ 118.607457][ T6910] loop3: p1 < > p4 [ 118.623943][ T6910] loop3: p4 size 8388608 extends beyond EOD, truncated [ 118.641316][ T2964] loop3: p1 < > p4 [ 118.647237][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 118.667324][ T6919] loop2: detected capacity change from 0 to 2048 [ 118.675852][ T6917] loop0: detected capacity change from 0 to 512 [ 118.692333][ T6917] EXT4-fs: Ignoring removed i_version option [ 118.706772][ T2964] loop2: p1 < > p4 [ 118.711975][ T2964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 118.713261][ T6917] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.734066][ T6919] loop2: p1 < > p4 [ 118.738049][ T6917] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1177: bg 0: block 400: padding at end of block bitmap is not set [ 118.739465][ T6919] loop2: p4 size 8388608 extends beyond EOD, truncated [ 118.754966][ T6917] EXT4-fs (loop0): Remounting filesystem read-only [ 118.760546][ T6923] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 118.760546][ T6923] program syz.4.1181 not setting count and/or reply_len properly [ 118.794537][ T2964] loop2: p1 < > p4 [ 118.802322][ T2964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 118.834153][ T6927] syz.4.1182[6927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.834299][ T6927] syz.4.1182[6927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.848452][ T2964] loop2: p1 < > p4 [ 118.869683][ T2964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 118.918116][ T2964] loop3: p1 p4 [ 118.921697][ T2964] loop3: p1 start 8771727 is beyond EOD, truncated [ 118.928296][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 119.002973][ T2964] loop2: p1 p4 [ 119.008978][ T2964] loop2: p1 start 8771727 is beyond EOD, [ 119.009041][ T6935] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 119.009015][ T2964] truncated [ 119.014800][ T6935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.021432][ T2964] loop2: p4 size 8388608 extends beyond EOD, [ 119.024567][ T6935] vhci_hcd vhci_hcd.0: Device attached [ 119.031958][ T2964] truncated [ 119.056718][ T6939] vhci_hcd: connection closed [ 119.056960][ T3844] vhci_hcd: stop threads [ 119.066216][ T3844] vhci_hcd: release socket [ 119.070646][ T3844] vhci_hcd: disconnect device [ 119.085027][ T2964] loop2: p1 p4 [ 119.085953][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 119.089675][ T2964] loop2: p1 start 8771727 is beyond EOD, truncated [ 119.105017][ T2964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 119.129515][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 119.139789][ T3255] udevd[3255]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 119.147671][ T3614] udevd[3614]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 119.187371][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 119.190073][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 119.237072][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 119.237184][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 119.259200][ T6947] loop2: detected capacity change from 0 to 512 [ 119.267815][ T6947] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.279758][ T6947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.295256][ T6947] EXT4-fs (loop2): 1 truncate cleaned up [ 119.324943][ T6950] loop2: detected capacity change from 0 to 256 [ 119.357212][ T6952] loop2: detected capacity change from 0 to 512 [ 119.364340][ T6952] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.371408][ T6952] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.383078][ T6952] EXT4-fs (loop2): 1 truncate cleaned up [ 119.416561][ T6955] loop2: detected capacity change from 0 to 512 [ 119.423244][ T6955] EXT4-fs: Ignoring removed i_version option [ 119.437725][ T6955] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.450556][ T6955] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1193: bg 0: block 400: padding at end of block bitmap is not set [ 119.465575][ T6955] EXT4-fs (loop2): Remounting filesystem read-only [ 119.627753][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1194'. [ 119.652438][ T6962] loop3: detected capacity change from 0 to 128 [ 119.661471][ T6962] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.751055][ T6965] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 119.751055][ T6965] program syz.0.1197 not setting count and/or reply_len properly [ 119.780877][ T6967] loop3: detected capacity change from 0 to 1024 [ 119.790082][ T6967] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 119.801057][ T6967] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 119.826117][ T6967] JBD2: no valid journal superblock found [ 119.829043][ T6969] loop0: detected capacity change from 0 to 2048 [ 119.832317][ T6967] EXT4-fs (loop3): Could not load journal inode [ 119.856607][ T6969] loop0: p1 < > p4 [ 119.862167][ T6971] loop1: detected capacity change from 0 to 2048 [ 119.864511][ T6969] loop0: p4 size 8388608 extends beyond EOD, truncated [ 119.885147][ T2964] loop0: p1 < > p4 [ 119.889841][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 119.912766][ T6971] loop1: p1 < > p4 [ 119.934136][ T6971] loop1: p4 size 8388608 extends beyond EOD, truncated [ 119.942831][ T6975] loop4: detected capacity change from 0 to 128 [ 119.955145][ T6975] syz.4.1201: attempt to access beyond end of device [ 119.955145][ T6975] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 119.985840][ T36] kworker/u8:2: attempt to access beyond end of device [ 119.985840][ T36] loop4: rw=1, sector=153, nr_sectors = 24 limit=128 [ 120.004326][ T2964] loop1: p1 < > p4 [ 120.010784][ T2964] loop1: p4 size 8388608 extends beyond EOD, truncated [ 120.018884][ T6977] loop4: detected capacity change from 0 to 512 [ 120.025905][ T6977] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.034319][ T6977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.049762][ T6977] EXT4-fs (loop4): 1 truncate cleaned up [ 120.088677][ T6980] loop4: detected capacity change from 0 to 1024 [ 120.098084][ T6980] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.109142][ T6980] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 120.122451][ T2964] loop0: p1 p4 [ 120.126463][ T2964] loop0: p1 start 8771727 is beyond EOD, truncated [ 120.127777][ T6980] JBD2: no valid journal superblock found [ 120.133031][ T2964] loop0: p4 size 8388608 extends beyond EOD, [ 120.138807][ T6980] EXT4-fs (loop4): Could not load journal inode [ 120.151289][ T2964] truncated [ 120.200054][ T6983] loop0: detected capacity change from 0 to 512 [ 120.211241][ T6983] EXT4-fs: Ignoring removed i_version option [ 120.338765][ T6984] lo speed is unknown, defaulting to 1000 [ 120.372457][ T6983] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.649710][ T6989] lo speed is unknown, defaulting to 1000 [ 120.781180][ T6983] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1204: bg 0: block 400: padding at end of block bitmap is not set [ 121.042833][ T55] __quota_error: 392 callbacks suppressed [ 121.042854][ T55] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 121.080965][ T6983] EXT4-fs (loop0): Remounting filesystem read-only [ 121.127300][ T55] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 121.193645][ T6999] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 121.193645][ T6999] program syz.3.1208 not setting count and/or reply_len properly [ 121.266640][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1209'. [ 121.279122][ T36] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 121.290008][ T7007] loop3: detected capacity change from 0 to 1024 [ 121.298463][ T36] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 121.301994][ T29] audit: type=1326 audit(1726665949.471:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31eb40def9 code=0x7ffc0000 [ 121.315428][ T7007] EXT4-fs: Invalid want_extra_isize 137 [ 121.343239][ T29] audit: type=1326 audit(1726665949.491:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31eb40def9 code=0x7ffc0000 [ 121.366782][ T29] audit: type=1326 audit(1726665949.511:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31eb40def9 code=0x7ffc0000 [ 121.387908][ T7004] loop4: detected capacity change from 0 to 512 [ 121.390342][ T29] audit: type=1326 audit(1726665949.511:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31eb40def9 code=0x7ffc0000 [ 121.418971][ T7004] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.420403][ T29] audit: type=1326 audit(1726665949.511:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31eb40def9 code=0x7ffc0000 [ 121.464383][ T29] audit: type=1326 audit(1726665949.551:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31eb40def9 code=0x7ffc0000 [ 121.546414][ T7007] loop3: detected capacity change from 0 to 512 [ 121.573551][ T7007] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.601924][ T7021] syz.4.1213[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.602061][ T7021] syz.4.1213[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.724491][ T7024] loop4: detected capacity change from 0 to 512 [ 121.743155][ T7024] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.750530][ T7024] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.762335][ T7024] EXT4-fs (loop4): 1 truncate cleaned up [ 121.797952][ T7027] loop4: detected capacity change from 0 to 2048 [ 121.826526][ T7027] loop4: p1 < > p4 [ 121.831108][ T7027] loop4: p4 size 8388608 extends beyond EOD, truncated [ 121.879271][ T2964] loop4: p1 p4 [ 121.882876][ T2964] loop4: p1 start 8771727 is beyond EOD, truncated [ 121.889455][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 121.911814][ T7029] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.105683][ T7032] loop4: detected capacity change from 0 to 512 [ 122.120262][ T7032] EXT4-fs: Ignoring removed i_version option [ 122.141547][ T7034] loop1: detected capacity change from 0 to 1024 [ 122.154294][ T7034] EXT4-fs: Ignoring removed orlov option [ 122.160235][ T7034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.170146][ T7032] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.181390][ T7034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 122.193240][ T7032] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1217: bg 0: block 400: padding at end of block bitmap is not set [ 122.200519][ T7034] System zones: 0-1, 3-36 [ 122.213755][ T7032] EXT4-fs (loop4): Remounting filesystem read-only [ 122.323096][ T7044] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.419749][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1222'. [ 122.435010][ T7048] loop0: detected capacity change from 0 to 512 [ 122.448099][ T7048] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.488307][ T7052] loop0: detected capacity change from 0 to 1024 [ 122.495072][ T7052] EXT4-fs: Invalid want_extra_isize 137 [ 122.532552][ T7054] syz.1.1224[7054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.532696][ T7054] syz.1.1224[7054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.647555][ T7055] loop0: detected capacity change from 0 to 512 [ 122.678343][ T7055] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.783679][ T7063] loop1: detected capacity change from 0 to 512 [ 122.790694][ T7063] EXT4-fs: Ignoring removed oldalloc option [ 122.799090][ T7063] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1227: Parent and EA inode have the same ino 15 [ 122.812118][ T7063] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1227: Parent and EA inode have the same ino 15 [ 122.824981][ T7063] EXT4-fs (loop1): 1 orphan inode deleted [ 122.837093][ T7063] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #2: block 13: comm syz.1.1227: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 122.858155][ T7063] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #2: block 13: comm syz.1.1227: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 122.879903][ T7063] siw: device registration error -23 [ 122.944593][ T7068] syz.1.1229[7068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.944754][ T7068] syz.1.1229[7068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.000808][ T7076] loop1: detected capacity change from 0 to 128 [ 123.024847][ T7076] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.092296][ T7080] syz.3.1235[7080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.092350][ T7080] syz.3.1235[7080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.140425][ T7085] loop4: detected capacity change from 0 to 128 [ 123.172003][ T7085] syz.4.1236: attempt to access beyond end of device [ 123.172003][ T7085] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 123.218906][ T36] kworker/u8:2: attempt to access beyond end of device [ 123.218906][ T36] loop4: rw=1, sector=153, nr_sectors = 24 limit=128 [ 123.264575][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.272608][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.280101][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.287579][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.295214][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.297094][ T7095] loop1: detected capacity change from 0 to 2048 [ 123.302685][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.316437][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.324014][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.331702][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.339249][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.344509][ T7093] loop4: detected capacity change from 0 to 1024 [ 123.346714][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.357249][ T7093] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.360485][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.371348][ T7093] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.378867][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.378897][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.398441][ T7093] JBD2: no valid journal superblock found [ 123.403539][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.403572][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.409356][ T7093] EXT4-fs (loop4): Could not load journal inode [ 123.416766][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.437959][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.445357][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.452866][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.460397][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.467906][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.475421][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.482897][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.490452][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.498006][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.505451][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.512892][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.520315][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.527875][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.535329][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.543024][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.550533][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.557965][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.565377][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.573253][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.581205][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.588714][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.596164][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.603582][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.611007][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.618439][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.625893][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 123.640768][ T7098] loop1: p1 < > p4 [ 123.648090][ T7098] loop1: p4 size 8388608 extends beyond EOD, truncated [ 123.675184][ T35] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.80 Device [syz0] on syz0 [ 123.685731][ T7095] loop1: p1 < > p4 [ 123.690413][ T7095] loop1: p4 size 8388608 extends beyond EOD, truncated [ 123.743191][ T7102] loop0: detected capacity change from 0 to 2048 [ 123.762694][ T7104] loop3: detected capacity change from 0 to 256 [ 123.769353][ T7104] msdos: Unknown parameter '01777777777777777777777' [ 123.784334][ T7104] loop3: detected capacity change from 0 to 1024 [ 123.791076][ T7104] EXT4-fs: Ignoring removed orlov option [ 123.796841][ T7104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.802585][ T2964] loop1: p1 < > p4 [ 123.806030][ T7104] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 123.808193][ T2964] loop1: p4 size 8388608 extends beyond EOD, truncated [ 123.829353][ T7104] System zones: 0-1, 3-36 [ 123.835930][ T3407] loop0: p1 < > p4 [ 123.840243][ T7093] ALSA: seq fatal error: cannot create timer (-22) [ 123.866160][ T3407] loop0: p4 size 8388608 extends beyond EOD, truncated [ 123.884531][ T7110] loop1: detected capacity change from 0 to 128 [ 123.893499][ T2964] loop0: p1 < > p4 [ 123.899845][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 123.907088][ T7110] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.944812][ T7102] loop0: p1 < > p4 [ 123.949300][ T7102] loop0: p4 size 8388608 extends beyond EOD, truncated [ 123.997903][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 124.008251][ T7113] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 124.014566][ T3407] udevd[3407]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 124.014866][ T7113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.032338][ T7113] vhci_hcd vhci_hcd.0: Device attached [ 124.044626][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 124.068885][ T3614] udevd[3614]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 124.088795][ T7115] vhci_hcd: connection closed [ 124.089358][ T36] vhci_hcd: stop threads [ 124.098374][ T36] vhci_hcd: release socket [ 124.102841][ T36] vhci_hcd: disconnect device [ 124.127407][ T2964] loop0: p1 p4 [ 124.131166][ T2964] loop0: p1 start 8771727 is beyond EOD, truncated [ 124.133058][ T7123] syz.3.1249[7123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.137751][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 124.160314][ T7123] syz.3.1249[7123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.163095][ T7125] loop1: detected capacity change from 0 to 128 [ 124.189712][ T7125] syz.1.1250: attempt to access beyond end of device [ 124.189712][ T7125] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 124.194477][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 124.206941][ T7127] loop0: detected capacity change from 0 to 1024 [ 124.228389][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 124.237447][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 124.252106][ T7127] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.263361][ T7127] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.274910][ T28] kworker/u8:1: attempt to access beyond end of device [ 124.274910][ T28] loop1: rw=1, sector=153, nr_sectors = 24 limit=128 [ 124.281544][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 124.316090][ T7127] JBD2: no valid journal superblock found [ 124.322027][ T7127] EXT4-fs (loop0): Could not load journal inode [ 124.331326][ T7129] loop2: detected capacity change from 0 to 2048 [ 124.338664][ T7133] loop1: detected capacity change from 0 to 512 [ 124.349374][ T7133] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.350378][ T7132] loop3: detected capacity change from 0 to 256 [ 124.357950][ T7133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.375362][ T7132] msdos: Unknown parameter '01777777777777777777777' [ 124.396474][ T7129] loop2: p1 < > p4 [ 124.402956][ T7129] loop2: p4 size 8388608 extends beyond EOD, truncated [ 124.441381][ T7133] EXT4-fs (loop1): 1 truncate cleaned up [ 124.599882][ T7143] lo speed is unknown, defaulting to 1000 [ 124.703623][ T7146] loop1: detected capacity change from 0 to 256 [ 124.714678][ T7146] msdos: Unknown parameter '01777777777777777777777' [ 124.753160][ T7146] loop1: detected capacity change from 0 to 1024 [ 124.759970][ T7147] loop3: detected capacity change from 0 to 256 [ 124.768789][ T7146] EXT4-fs: Ignoring removed orlov option [ 124.774686][ T7146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.782277][ T7147] msdos: Unknown parameter '01777777777777777777777' [ 124.831203][ T7146] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 124.898548][ T7147] loop3: detected capacity change from 0 to 1024 [ 124.911360][ T7146] System zones: 0-1, 3-36 [ 124.916225][ T7147] EXT4-fs: Ignoring removed orlov option [ 124.922089][ T7147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.933411][ T7150] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 124.933411][ T7150] program syz.4.1259 not setting count and/or reply_len properly [ 124.937597][ T2964] loop2: p1 p4 [ 124.959370][ T7147] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 124.960997][ T2964] loop2: p1 start 8771727 is beyond EOD, truncated [ 124.974232][ T2964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 124.981414][ T7147] System zones: 0-1, 3-36 [ 125.062291][ T7157] loop4: detected capacity change from 0 to 2048 [ 125.104888][ T7162] loop0: detected capacity change from 0 to 1024 [ 125.111674][ T7162] EXT4-fs: Invalid want_extra_isize 137 [ 125.152088][ T7168] loop3: detected capacity change from 0 to 512 [ 125.160108][ T7168] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.167246][ T7168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.186736][ T2964] loop4: p1 < > p4 [ 125.202140][ T7171] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 125.209998][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 125.220845][ T7168] EXT4-fs (loop3): 1 truncate cleaned up [ 125.222716][ T2964] loop4: p1 < > p4 [ 125.231123][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 125.250783][ T7157] loop4: p1 < > p4 [ 125.255218][ T7157] loop4: p4 size 8388608 extends beyond EOD, truncated [ 125.255998][ T7176] loop3: detected capacity change from 0 to 256 [ 125.284866][ T7172] loop0: detected capacity change from 0 to 512 [ 125.289776][ T2964] loop4: p1 < > p4 [ 125.295607][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 125.305703][ T7172] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.322050][ T2964] loop4: p1 < > p4 [ 125.329551][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 125.382848][ T2964] loop4: p1 p4 [ 125.386631][ T2964] loop4: p1 start 8771727 is beyond EOD, truncated [ 125.393185][ T2964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 125.453870][ T3617] udevd[3617]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 125.461363][ T3614] udevd[3614]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 125.494601][ T7185] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 125.494601][ T7185] program syz.4.1271 not setting count and/or reply_len properly [ 125.573335][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1274'. [ 125.657526][ T7195] loop4: detected capacity change from 0 to 512 [ 125.668981][ T7195] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.737770][ T7200] loop3: detected capacity change from 0 to 1024 [ 125.744524][ T7200] EXT4-fs: Invalid want_extra_isize 137 [ 125.845178][ T7203] loop4: detected capacity change from 0 to 256 [ 125.852729][ T7203] msdos: Unknown parameter '01777777777777777777777' [ 125.867529][ T7203] loop4: detected capacity change from 0 to 1024 [ 125.874134][ T7203] EXT4-fs: Ignoring removed orlov option [ 125.879951][ T7203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.889836][ T7203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 125.892386][ T7201] loop3: detected capacity change from 0 to 512 [ 125.899906][ T7203] System zones: 0-1, 3-36 [ 125.957315][ T7201] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.981880][ T7209] loop0: detected capacity change from 0 to 256 [ 125.988836][ T7209] msdos: Unknown parameter '01777777777777777777777' [ 126.005226][ T7209] loop0: detected capacity change from 0 to 1024 [ 126.011967][ T7209] EXT4-fs: Ignoring removed orlov option [ 126.017698][ T7209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.026401][ T7209] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 126.034727][ T7209] System zones: 0-1, 3-36 [ 126.046081][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 126.046100][ T29] audit: type=1326 audit(1726665954.211:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 126.076171][ T29] audit: type=1326 audit(1726665954.221:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 126.099954][ T29] audit: type=1326 audit(1726665954.221:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 126.123613][ T29] audit: type=1326 audit(1726665954.221:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7202 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31eb40def9 code=0x7ffc0000 [ 126.147233][ T29] audit: type=1326 audit(1726665954.221:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7202 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31eb40def9 code=0x7ffc0000 [ 126.151213][ T7212] loop4: detected capacity change from 0 to 512 [ 126.170717][ T29] audit: type=1326 audit(1726665954.221:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 126.170762][ T29] audit: type=1326 audit(1726665954.221:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 126.170793][ T29] audit: type=1326 audit(1726665954.221:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 126.202739][ T7212] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.224292][ T29] audit: type=1326 audit(1726665954.221:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 126.248594][ T7212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.254029][ T29] audit: type=1326 audit(1726665954.221:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdefc4def9 code=0x7ffc0000 [ 126.318093][ T7212] EXT4-fs (loop4): 1 truncate cleaned up [ 126.357609][ T7217] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.391905][ T7222] loop4: detected capacity change from 0 to 128 [ 126.401184][ T7222] syz.4.1281: attempt to access beyond end of device [ 126.401184][ T7222] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 126.408297][ T7220] loop0: detected capacity change from 0 to 2048 [ 126.425826][ T28] kworker/u8:1: attempt to access beyond end of device [ 126.425826][ T28] loop4: rw=1, sector=153, nr_sectors = 24 limit=128 [ 126.457204][ T7226] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 126.457204][ T7226] program syz.2.1284 not setting count and/or reply_len properly [ 126.481141][ T7220] loop0: p1 < > p4 [ 126.485643][ T7220] loop0: p4 size 8388608 extends beyond EOD, truncated [ 126.494369][ T7229] loop2: detected capacity change from 0 to 512 [ 126.501292][ T7229] EXT4-fs: Ignoring removed oldalloc option [ 126.510456][ T7229] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1286: Parent and EA inode have the same ino 15 [ 126.523185][ T7229] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1286: Parent and EA inode have the same ino 15 [ 126.538544][ T7229] EXT4-fs (loop2): 1 orphan inode deleted [ 126.549718][ T2964] loop0: p1 < > p4 [ 126.554247][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 126.558584][ T7234] loop1: detected capacity change from 0 to 256 [ 126.618547][ T7229] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 13: comm syz.2.1286: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 126.643247][ T7229] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 13: comm syz.2.1286: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 126.653754][ T7238] loop3: detected capacity change from 0 to 2048 [ 126.700031][ T2964] loop0: p1 p4 [ 126.703677][ T2964] loop0: p1 start 8771727 is beyond EOD, truncated [ 126.710287][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 126.728991][ T7238] loop3: p1 < > p4 [ 126.733070][ T2964] loop0: p1 p4 [ 126.736980][ T7238] loop3: p4 size 8388608 extends beyond EOD, truncated [ 126.741087][ T2964] loop0: p1 start 8771727 is beyond EOD, truncated [ 126.750586][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 126.778580][ T7241] loop1: detected capacity change from 0 to 1024 [ 126.811245][ T7245] loop2: detected capacity change from 0 to 512 [ 126.815053][ T7241] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 126.828709][ T7241] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 126.835089][ T7245] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.851915][ T7247] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 126.858613][ T7247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.866412][ T7247] vhci_hcd vhci_hcd.0: Device attached [ 126.873290][ T7241] JBD2: no valid journal superblock found [ 126.879150][ T7241] EXT4-fs (loop1): Could not load journal inode [ 126.884995][ T7245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.903288][ T7245] EXT4-fs (loop2): 1 truncate cleaned up [ 126.919227][ T7249] vhci_hcd: connection closed [ 126.954901][ T2219] vhci_hcd: stop threads [ 126.963962][ T2219] vhci_hcd: release socket [ 126.968415][ T2219] vhci_hcd: disconnect device [ 127.023695][ T2964] loop3: p1 p4 [ 127.027934][ T2964] loop3: p1 start 8771727 is beyond EOD, truncated [ 127.034507][ T2964] loop3: p4 size 8388608 extends beyond EOD, truncated [ 127.072863][ T7256] loop2: detected capacity change from 0 to 256 [ 127.076739][ T7258] loop3: detected capacity change from 0 to 128 [ 127.088873][ T7258] syz.3.1294: attempt to access beyond end of device [ 127.088873][ T7258] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 127.098619][ T7256] msdos: Unknown parameter '01777777777777777777777' [ 127.140901][ T7259] ALSA: seq fatal error: cannot create timer (-22) [ 127.148665][ T7256] loop2: detected capacity change from 0 to 1024 [ 127.157789][ T36] kworker/u8:2: attempt to access beyond end of device [ 127.157789][ T36] loop3: rw=1, sector=153, nr_sectors = 24 limit=128 [ 127.158901][ T7256] EXT4-fs: Ignoring removed orlov option [ 127.177069][ T7256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.188402][ T7256] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 127.206691][ T7256] System zones: 0-1, 3-36 [ 127.216692][ T7262] bpf_get_probe_write_proto: 6 callbacks suppressed [ 127.216712][ T7262] syz.3.1295[7262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.226246][ T7262] syz.3.1295[7262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.362832][ T7266] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.363405][ T7268] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 127.363405][ T7268] program syz.2.1298 not setting count and/or reply_len properly [ 127.427651][ T7270] loop2: detected capacity change from 0 to 256 [ 127.434596][ T2964] ================================================================== [ 127.442726][ T2964] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 127.451815][ T2964] [ 127.454181][ T2964] read-write to 0xffff8881006311f8 of 8 bytes by task 7270 on cpu 0: [ 127.462254][ T2964] __filemap_add_folio+0x439/0x710 [ 127.467390][ T2964] filemap_add_folio+0x9c/0x1b0 [ 127.472266][ T2964] __filemap_get_folio+0x2f1/0x5b0 [ 127.477387][ T2964] bdev_getblk+0x173/0x3b0 [ 127.481819][ T2964] __bread_gfp+0x52/0x280 [ 127.486161][ T2964] fat_fill_super+0x371/0x1bf0 [ 127.490946][ T2964] vfat_fill_super+0x24/0x30 [ 127.495554][ T2964] get_tree_bdev+0x256/0x2e0 [ 127.500162][ T2964] vfat_get_tree+0x1c/0x30 [ 127.504599][ T2964] vfs_get_tree+0x56/0x1e0 [ 127.509033][ T2964] do_new_mount+0x227/0x690 [ 127.513555][ T2964] path_mount+0x49b/0xb30 [ 127.517898][ T2964] __se_sys_mount+0x27c/0x2d0 [ 127.522592][ T2964] __x64_sys_mount+0x67/0x80 [ 127.527212][ T2964] x64_sys_call+0x203e/0x2d60 [ 127.531907][ T2964] do_syscall_64+0xc9/0x1c0 [ 127.536439][ T2964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.542351][ T2964] [ 127.544681][ T2964] read to 0xffff8881006311f8 of 8 bytes by task 2964 on cpu 1: [ 127.552227][ T2964] filemap_write_and_wait_range+0x58/0x1f0 [ 127.558069][ T2964] bdev_release+0xea/0x420 [ 127.562503][ T2964] blkdev_release+0x15/0x20 [ 127.567024][ T2964] __fput+0x17a/0x6d0 [ 127.571018][ T2964] __fput_sync+0x43/0x60 [ 127.575386][ T2964] __se_sys_close+0xf9/0x1a0 [ 127.579996][ T2964] __x64_sys_close+0x1f/0x30 [ 127.584625][ T2964] x64_sys_call+0x25cb/0x2d60 [ 127.589319][ T2964] do_syscall_64+0xc9/0x1c0 [ 127.593830][ T2964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.599744][ T2964] [ 127.602068][ T2964] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 127.609178][ T2964] [ 127.611526][ T2964] Reported by Kernel Concurrency Sanitizer on: [ 127.617765][ T2964] CPU: 1 UID: 0 PID: 2964 Comm: udevd Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 127.627667][ T2964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 127.637730][ T2964] ==================================================================