last executing test programs: 8m26.439641007s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) 8m16.253747407s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000000)='map_files\x00') fchdir(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 8m11.893331394s ago: executing program 2 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x190) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @loopback, 0xfffffe01}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 8m10.70779967s ago: executing program 32 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) 8m10.591618192s ago: executing program 2 (id=26): setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x12, 0x1000) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'vlan0\x00', 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) 8m8.973506361s ago: executing program 2 (id=28): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 8m3.428994345s ago: executing program 2 (id=35): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) timer_gettime(0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000640)=""/203, 0xcb}, {&(0x7f0000000500)=""/127, 0x7f}], 0x3, 0x8, 0xb40) 8m0.444037358s ago: executing program 2 (id=41): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xdad}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') 7m59.974855934s ago: executing program 33 (id=41): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xdad}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') 6m23.972010525s ago: executing program 4 (id=270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @pic={0x1, 0xfc, 0x8, 0x5, 0x4, 0x9, 0x5, 0x9, 0x1, 0xff, 0xa, 0x2, 0x9, 0x0, 0xfe, 0xee}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x9, 0x100}) 6m23.599372732s ago: executing program 4 (id=272): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xffffffe4, 0x4, 0x0, 0xfffffffffdffffff}) 6m22.751065485s ago: executing program 4 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r5, 0x40305829, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r5, 0x0, 0x4001001) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xe8df}, 0x94) 6m20.124736863s ago: executing program 4 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 6m17.50402995s ago: executing program 4 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'gretap0\x00', 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x8, 0x7ffc1ffb}]}) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m16.268447762s ago: executing program 4 (id=289): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x4}, 0xe) listen(r1, 0x0) 6m15.57113252s ago: executing program 34 (id=289): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x4}, 0xe) listen(r1, 0x0) 4m48.727071763s ago: executing program 5 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x40) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18c49}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xc, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 4m48.428186752s ago: executing program 5 (id=466): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x2, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, 0x26, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x14, 0xdd, 0x0, 0x1, [@nested={0x10, 0x67, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x10}]}]}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x54}}, 0x0) 4m45.456035184s ago: executing program 5 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001812000062d218f4090157f1c84cacfe6a8120c011a01c29bb517974af7a835bb39b75b56702f517c71bf87306a3bf267fa3f83c6f38596b24d469035adbec0b7d5b40e7fed72748ab56c70882122d19811b690718907ace0654bf85d359fd9d42f1c6cba0d579faf54905dfac5cb3dfcb80eef3c495be4755a48d6299c6b4317c9e3adf87342bb595a4abc27f88d393b37f880025d27b175e319f10529e3505371af2c3af0b2d99aca43c84cefb230a3158e1ad92be5071a14ef33dec9d081e0aa6c20139473028b61a0b5e640957b3d98b9c8f94f1094c9df60dedffe903debddc5fc29debb5fe9ae922558077f4a37d10581a668f1cca3c98d423f1a47eaa54c71413395e9d02513398cc968c91b64e8626ba81c70ab5b173d70090901bdb4085977fb6509d557940c8d048f4f063e93175e4783c8f9d4132e3472ba97ebf7157fddff8777b2343e950c9dde46bf1f257da02c3a60158446514881a436053c0502be58af6a708c5c51af8268378b16d58d210745d5e7e10", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x13, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0xfffffffffffffd2d, &(0x7f0000000400)}, 0x10) inotify_init1(0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRESDEC=0x0, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 4m42.824193062s ago: executing program 5 (id=479): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000700)={[{@acl}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) 4m40.986700832s ago: executing program 5 (id=484): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x5f4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, 0x1c, 0x0, 0x0, 0x0, 0x48}}], 0x1, 0x880) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x1, 0x99, &(0x7f0000000480)=""/153}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 4m39.757499023s ago: executing program 5 (id=489): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x2, [0x9, 0x80000001, 0x8, 0x6, 0x2, 0x100400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0x4, 0x39, 0x747d5e13, 0x7, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x3ff, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xf, 0x4, 0x2, 0x6, 0x8, 0x3, 0x2, 0x199f, 0x8, 0x2, 0x9, 0xffffefff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x6, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x29, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x10, 0x5, 0x7, 0x6, 0x4, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x7fffffff, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xfffffffd, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x800, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0xe, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2854, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20005, 0x8a8, 0x2, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x24, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x7, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) mkdir(0x0, 0x108) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0x6e, 0x80000) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 4m24.145145355s ago: executing program 35 (id=489): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x2, [0x9, 0x80000001, 0x8, 0x6, 0x2, 0x100400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0x4, 0x39, 0x747d5e13, 0x7, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x3ff, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xf, 0x4, 0x2, 0x6, 0x8, 0x3, 0x2, 0x199f, 0x8, 0x2, 0x9, 0xffffefff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x6, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x29, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x10, 0x5, 0x7, 0x6, 0x4, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x7fffffff, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xfffffffd, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x800, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0xe, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2854, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20005, 0x8a8, 0x2, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x24, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x7, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) mkdir(0x0, 0x108) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0x6e, 0x80000) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 7.396116374s ago: executing program 1 (id=1267): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r0) 7.091884453s ago: executing program 1 (id=1270): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$packet(0x11, 0x2, 0x300) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="b2f17400dd922cde8add7acdb24bc2dd485dc1b5466138aa952f99b196aac8dd1d8a2631df57949e8ea7ff5dbefc557bd73e8aeff06c7214c82f35745427cd99cae1951f7e2b93e3273df5fd10222d00be604380a0618937852a8cb6fdd9b4837d07d15722ee44d28402fee7", 0x6c}, {&(0x7f0000000280)="e84aa49c1e7e2f5241f68d9762224a3d1b145db089bbd02b317e3a2fec89699be8a5e414408bc7afebc0e061064dcd4026a5a442dfe02ecc336fd11bc31050ed60182586d7bf13c6181b4ca74b2c6b122ae0f5c042b39dbe24e71c3e293b97a780f7767b1b8bb68b47050f1e5c22dc48ae649394abaa98364c94721a6868", 0x7e}, {&(0x7f00000010c0)="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", 0x1000}], 0x3, 0xdd, 0xe58) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200)=0x3, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.947532186s ago: executing program 6 (id=1274): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {0x0, 0x101}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 5.788026412s ago: executing program 1 (id=1275): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xfff1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 4.88103667s ago: executing program 6 (id=1276): getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="000000011df6086379cab88cec5b295da188f375040f980c000000000000000b6e9bd1ce9d8f05386d0ba85f4bcb6ec43170310765ad5ae8c1174ab97ae06806ee2fdff3a6ffd1f40746c59303edfb7151aa388ce7f1a58ad2791b7d75f321e017d9d869d56b30f19da77eb0c03f329f5407bc808c563241d3fd05a84a7c3b61", 0x80}], 0x1, 0x0, 0x0, 0x20048001}, 0x2004080) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280889a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="6187d186b0b63079dcffffffffffffaaaaaaaaaabb86dd60120008004c3afffe800000000000000056c3e4000000bbff0200000000000000000000000000018600907800000000fdffffff000000000007a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0xff, 0x0, 0x0) 4.804695658s ago: executing program 1 (id=1277): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 4.738938254s ago: executing program 8 (id=1278): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfaf8, 0x80, 0x2, 0x11a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xdb4, 0xfffffffd, 0x0, 0x0, 0x0) 4.737964145s ago: executing program 7 (id=1279): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xffffffffffffffff]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x2}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r3}, 0x18) getdents64(r0, &(0x7f0000001ec0)=""/142, 0x8e) 4.656102443s ago: executing program 3 (id=1280): write$proc_mixer(0xffffffffffffffff, &(0x7f0000000040)=[{'MIC', @void}, {'IGAIN', @val={' \'', 'Synth Capture Switch'}}, {'SYNTH', @void}, {'PHONEOUT', @void}], 0x45) close(0xffffffffffffffff) 4.538896194s ago: executing program 6 (id=1281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x5, 0x4) 4.524944915s ago: executing program 7 (id=1282): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000280)={0x0, 0x80}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1) 4.444027753s ago: executing program 3 (id=1283): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.443691924s ago: executing program 8 (id=1284): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') lseek(r0, 0x8, 0x0) 4.328368935s ago: executing program 6 (id=1285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x190) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @loopback, 0xfffffe01}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 4.315949946s ago: executing program 7 (id=1286): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x3c, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@srh={0x87, 0x0, 0x4, 0x0, 0x0, 0x8}]}}}}}, 0x0) 4.211989166s ago: executing program 8 (id=1287): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000001580)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 4.096329647s ago: executing program 3 (id=1288): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10020, 0x0) 4.011339306s ago: executing program 8 (id=1289): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x6, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 3.981824169s ago: executing program 7 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x2, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, 0x26, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x14, 0xdd, 0x0, 0x1, [@nested={0x10, 0x67, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x10}]}]}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x54}}, 0x0) 3.280953248s ago: executing program 6 (id=1291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000210000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.230622042s ago: executing program 8 (id=1292): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mknod(&(0x7f0000000480)='./bus\x00', 0x10, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x1, 0x6, &(0x7f0000000040)={0x480000000, 0x3, 0x1, 0x8}) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) read$FUSE(r5, &(0x7f0000002280)={0x2020}, 0x2020) inotify_rm_watch(r5, r4) 3.229923773s ago: executing program 1 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'gretap0\x00', 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x8, 0x7ffc1ffb}]}) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 3.177122348s ago: executing program 3 (id=1294): io_setup(0xc, &(0x7f0000000100)=0x0) r1 = timerfd_create(0x8, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1}) 2.448233269s ago: executing program 7 (id=1295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x5, 0x4) 2.420984682s ago: executing program 3 (id=1296): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfaf8, 0x80, 0x2, 0x11a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xdb4, 0xfffffffd, 0x0, 0x0, 0x0) 311.694029ms ago: executing program 1 (id=1297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000940)={[0x1, 0x3, 0x8, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x6, 0x0, 0x4], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x20}], 0x1}, 0x0) 252.023095ms ago: executing program 3 (id=1298): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 246.621535ms ago: executing program 7 (id=1299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="66baa000b008ee0b5b01c8c8cd62660f3882559866642664f30f1efb0f20e035080000000f22e0f236f047f699916500000f3066ba4300ee", 0x38}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x8, 0x9, 0x0, 0x0, 0x2, 0x2, 0x1, 0x40, 0x7, 0xd0, 0x8, 0x0, 0x101, 0x5, 0xf9, 0xf9, 0x8, 0x4, '\x00', 0x3, 0x10001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 201.63796ms ago: executing program 6 (id=1300): ioperm(0x0, 0x9, 0x40000000002) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x1001, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) 0s ago: executing program 8 (id=1301): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x106, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 4.532877][ T26] audit: type=1326 audit(1761455872.510:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.6.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 204.662072][ T26] audit: type=1326 audit(1761455872.510:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.6.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 204.667692][ T4521] EXT4-fs (loop5): unmounting filesystem. [ 204.804953][ T26] audit: type=1326 audit(1761455872.510:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.6.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 204.932634][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 205.088354][ T4583] EXT4-fs (loop6): unmounting filesystem. [ 205.136254][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 206.279195][ T5871] hub 2-0:1.0: USB hub found [ 206.293639][ T5871] hub 2-0:1.0: 1 port detected [ 207.065775][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 208.611150][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.631458][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.683992][ T5869] loop6: detected capacity change from 0 to 40427 [ 208.705828][ T5791] device bridge_slave_0 entered promiscuous mode [ 208.734346][ T5869] F2FS-fs (loop6): invalid crc value [ 208.762843][ T5869] F2FS-fs (loop6): Found nat_bits in checkpoint [ 209.019736][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.030713][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.038472][ T5869] F2FS-fs (loop6): Start checkpoint disabled! [ 209.074941][ T5791] device bridge_slave_1 entered promiscuous mode [ 209.082632][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 209.241699][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.904588][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.065074][ T4399] device hsr_slave_0 left promiscuous mode [ 210.099731][ T4399] device hsr_slave_1 left promiscuous mode [ 210.384191][ T4399] device veth1_macvtap left promiscuous mode [ 210.391345][ T4399] device veth0_macvtap left promiscuous mode [ 210.411404][ T5913] loop6: detected capacity change from 0 to 256 [ 210.442886][ T4399] device veth1_vlan left promiscuous mode [ 210.448761][ T4399] device veth0_vlan left promiscuous mode [ 210.553780][ T5912] loop5: detected capacity change from 0 to 4096 [ 210.592213][ T5912] EXT4-fs (loop5): Test dummy encryption mode enabled [ 210.671111][ T5912] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 211.246652][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.315'. [ 211.433007][ T26] audit: type=1326 audit(1761455879.780:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847b58efc9 code=0x7ffc0000 [ 211.556247][ T5912] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 211.568332][ T4284] Bluetooth: hci6: command 0x0406 tx timeout [ 211.643216][ T26] audit: type=1326 audit(1761455879.780:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847b58efc9 code=0x7ffc0000 [ 211.656254][ T5920] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.666354][ T26] audit: type=1326 audit(1761455879.780:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f847b58efc9 code=0x7ffc0000 [ 211.732636][ T5920] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 211.797447][ T26] audit: type=1326 audit(1761455879.780:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847b58efc9 code=0x7ffc0000 [ 211.939811][ T26] audit: type=1326 audit(1761455879.780:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847b58efc9 code=0x7ffc0000 [ 212.293275][ T4521] EXT4-fs (loop5): unmounting filesystem. [ 212.742876][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 212.992826][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 213.010497][ T22] usb 4-1: config 2 has an invalid interface number: 194 but max is 0 [ 213.171305][ T22] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 213.238980][ T22] usb 4-1: config 2 has no interface number 0 [ 213.265316][ T22] usb 4-1: config 2 interface 194 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 213.340004][ T22] usb 4-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 213.390675][ T22] usb 4-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 213.420426][ T22] usb 4-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 213.438673][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.465734][ T5942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 213.687927][ T5947] loop1: detected capacity change from 0 to 40427 [ 213.714148][ T4392] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 213.733999][ T5947] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 213.748631][ T5947] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 213.772290][ T22] usb 4-1: string descriptor 0 read error: -71 [ 213.828902][ T5947] F2FS-fs (loop1): Found nat_bits in checkpoint [ 213.865546][ T22] usb 4-1: USB disconnect, device number 4 [ 213.944400][ T4392] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.952034][ T5062] udevd[5062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.194/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.963865][ T4392] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.053924][ T4392] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 214.063464][ T4392] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.072177][ T5947] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 214.084467][ T5947] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 214.092290][ T4392] usb 6-1: config 0 descriptor?? [ 214.706357][ T4392] usb 6-1: language id specifier not provided by device, defaulting to English [ 214.923235][ T4392] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 214.932086][ T4392] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 214.976696][ T4392] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 215.010098][ T4392] usb 6-1: USB disconnect, device number 3 [ 215.264007][ T5976] syz.1.319: attempt to access beyond end of device [ 215.264007][ T5976] loop1: rw=2049, sector=53248, nr_sectors = 408 limit=40427 [ 215.369308][ T26] audit: type=1326 audit(1761455883.780:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.6.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 215.422597][ T26] audit: type=1326 audit(1761455883.780:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.6.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 215.553191][ T26] audit: type=1326 audit(1761455883.780:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.6.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 215.604370][ T26] audit: type=1326 audit(1761455883.780:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.6.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 215.671437][ T26] audit: type=1326 audit(1761455883.780:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.6.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 216.978085][ T4399] bond0 (unregistering): Released all slaves [ 217.281690][ T5791] team0: Port device team_slave_0 added [ 217.354251][ T5791] team0: Port device team_slave_1 added [ 217.401707][ T4264] syz-executor: attempt to access beyond end of device [ 217.401707][ T4264] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.554118][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.569015][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.682953][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.735557][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.754729][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.890683][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.091817][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 218.122470][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 218.128828][ T26] audit: type=1326 audit(1761455886.530:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 218.457875][ T26] audit: type=1326 audit(1761455886.530:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 218.602038][ T26] audit: type=1326 audit(1761455886.530:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 218.704303][ T26] audit: type=1326 audit(1761455886.530:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 218.757786][ T26] audit: type=1326 audit(1761455886.530:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 219.495688][ T5791] device hsr_slave_0 entered promiscuous mode [ 219.508746][ T5791] device hsr_slave_1 entered promiscuous mode [ 219.561656][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.596381][ T5791] Cannot create hsr debugfs directory [ 219.961855][ T6019] loop1: detected capacity change from 0 to 1024 [ 220.109050][ T6019] EXT4-fs: Ignoring removed i_version option [ 220.115416][ T6019] EXT4-fs: inline encryption not supported [ 220.175427][ T6019] EXT4-fs (loop1): Test dummy encryption mode enabled [ 220.340111][ T6019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.559512][ T6032] syz.6.333[6032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.559913][ T6032] syz.6.333[6032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.737921][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 221.803111][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 222.160633][ T5791] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.205436][ T6037] loop1: detected capacity change from 0 to 16 [ 222.214196][ T5791] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.245672][ T5791] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 222.285507][ T6037] erofs: (device loop1): mounted with root inode @ nid 36. [ 222.313897][ T5791] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 222.700354][ T6052] loop5: detected capacity change from 0 to 4096 [ 222.710347][ T6052] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.743638][ T6052] EXT4-fs (loop5): Test dummy encryption mode enabled [ 222.948099][ T6052] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 224.043813][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.103139][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.118948][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.151595][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.234097][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.259275][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.293835][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.301019][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.568657][ T4521] EXT4-fs (loop5): unmounting filesystem. [ 224.613469][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.970867][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.284532][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.341675][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.348895][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.356955][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.373482][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.415387][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.442008][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.457280][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.468664][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.480726][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.531214][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.591429][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.620253][ T6073] loop5: detected capacity change from 0 to 1024 [ 225.634472][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.667351][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.690548][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.707197][ T6073] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 225.807198][ T6073] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 226.579285][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.641867][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.654124][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.706856][ T6110] loop1: detected capacity change from 0 to 1024 [ 227.717448][ T6110] EXT4-fs: Ignoring removed i_version option [ 227.723841][ T6110] EXT4-fs: inline encryption not supported [ 227.792929][ T6110] EXT4-fs (loop1): Test dummy encryption mode enabled [ 228.025923][ T6110] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.943990][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.971415][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.064177][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.089839][ T4521] EXT4-fs (loop5): unmounting filesystem. [ 229.126712][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.169011][ T5791] device veth0_vlan entered promiscuous mode [ 229.195524][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.231703][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.297896][ T5791] device veth1_vlan entered promiscuous mode [ 229.436031][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.474279][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.483183][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.491867][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.504797][ T5791] device veth0_macvtap entered promiscuous mode [ 229.539301][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 229.604622][ T5791] device veth1_macvtap entered promiscuous mode [ 229.683796][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.714397][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.862309][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.902907][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.913552][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.932660][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.952960][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.961012][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.015343][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.038156][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.066415][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.177146][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.202575][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.212435][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.222940][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.232863][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.290709][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.311034][ T6138] syz.3.346[6138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.311463][ T6138] syz.3.346[6138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.661444][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.870453][ T5791] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.879236][ T5791] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.888128][ T5791] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.897661][ T5791] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.976820][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.023140][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.039163][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.046362][ T4762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.061165][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.100316][ T4762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.116053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.156241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.134225][ T6188] loop7: detected capacity change from 0 to 1024 [ 235.152320][ T6188] EXT4-fs: Ignoring removed i_version option [ 235.158687][ T6188] EXT4-fs: inline encryption not supported [ 235.281899][ T6188] EXT4-fs (loop7): Test dummy encryption mode enabled [ 235.549118][ T6188] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 236.774472][ T5791] EXT4-fs (loop7): unmounting filesystem. [ 237.227106][ T6211] loop5: detected capacity change from 0 to 128 [ 237.319143][ T6211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 237.349707][ T6211] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.611611][ T4521] EXT4-fs (loop5): unmounting filesystem. [ 242.682827][ T6260] loop1: detected capacity change from 0 to 1024 [ 242.690021][ T6260] EXT4-fs: Ignoring removed i_version option [ 242.696822][ T6260] EXT4-fs: inline encryption not supported [ 242.730885][ T6260] EXT4-fs (loop1): Test dummy encryption mode enabled [ 242.805621][ T6260] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 243.619490][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 243.815854][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.371'. [ 244.581061][ T6301] loop7: detected capacity change from 0 to 256 [ 244.605037][ T6301] FAT-fs (loop7): Unrecognized mount option "fs" or missing value [ 245.139882][ T6307] Zero length message leads to an empty skb [ 246.010942][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.380'. [ 247.253530][ T6312] loop7: detected capacity change from 0 to 16 [ 247.260567][ T6312] erofs: Unknown parameter '00000000000000000000003' [ 247.287874][ T6312] ip6t_rpfilter: unknown options [ 248.721975][ T6351] loop5: detected capacity change from 0 to 64 [ 248.782431][ T6333] loop7: detected capacity change from 0 to 32768 [ 248.893376][ T6333] XFS (loop7): Mounting V5 Filesystem [ 249.085135][ T6333] XFS (loop7): Ending clean mount [ 250.772808][ T6385] loop5: detected capacity change from 0 to 1024 [ 250.780728][ T6385] EXT4-fs: Ignoring removed i_version option [ 250.786854][ T6385] EXT4-fs: inline encryption not supported [ 250.793354][ T6385] EXT4-fs (loop5): Test dummy encryption mode enabled [ 250.836934][ T6385] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 251.566641][ T4521] EXT4-fs (loop5): unmounting filesystem. [ 252.742551][ T5791] XFS (loop7): Unmounting Filesystem [ 253.392767][ T4310] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 253.593822][ T4310] usb 6-1: Using ep0 maxpacket: 16 [ 253.600620][ T4310] usb 6-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 253.660749][ T4310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.699249][ T4310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.886085][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.894927][ T4310] usb 6-1: Product: syz [ 253.899133][ T4310] usb 6-1: Manufacturer: syz [ 253.904981][ T4310] usb 6-1: SerialNumber: syz [ 254.268085][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.291315][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.329290][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.387552][ T6444] device bridge_slave_0 left promiscuous mode [ 254.429364][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.479036][ T6444] device bridge_slave_1 left promiscuous mode [ 254.505933][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.582357][ T6444] bond0: (slave bond_slave_0): Releasing backup interface [ 254.715382][ T6444] bond0: (slave bond_slave_1): Releasing backup interface [ 254.888844][ T6444] team0: Port device team_slave_0 removed [ 254.889461][ T6434] loop7: detected capacity change from 0 to 40427 [ 254.920297][ T6434] F2FS-fs (loop7): invalid crc value [ 254.950672][ T6434] F2FS-fs (loop7): Found nat_bits in checkpoint [ 254.976500][ T6444] team0: Port device team_slave_1 removed [ 255.009183][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.063748][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.078547][ T6434] F2FS-fs (loop7): Start checkpoint disabled! [ 255.118433][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.143207][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.150513][ T6434] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 255.245614][ T6445] team0: Mode changed to "loadbalance" [ 255.466967][ T6414] kworker/u4:23: attempt to access beyond end of device [ 255.466967][ T6414] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 255.568616][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.576708][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.688250][ T4310] usb 6-1: 0:2 : does not exist [ 256.259886][ T6457] netlink: 200 bytes leftover after parsing attributes in process `syz.1.408'. [ 256.329880][ T6457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.364801][ T6457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.375909][ T6457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.410793][ T6457] device bridge_slave_0 left promiscuous mode [ 256.418809][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.676712][ T4310] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 256.704136][ T6457] device bridge_slave_1 left promiscuous mode [ 256.710460][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.724489][ T6457] bond0: (slave bond_slave_0): Releasing backup interface [ 256.762683][ T6457] bond0: (slave bond_slave_1): Releasing backup interface [ 256.808807][ T6457] team0: Port device team_slave_0 removed [ 256.862811][ T4310] usb 6-1: USB disconnect, device number 4 [ 256.933415][ T6457] team0: Port device team_slave_1 removed [ 256.939921][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.947542][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.983879][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.991346][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.238290][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.568404][ T6483] syz.5.414 uses obsolete (PF_INET,SOCK_PACKET) [ 260.286098][ T6487] loop1: detected capacity change from 0 to 32768 [ 260.432711][ T6487] XFS (loop1): Mounting V5 Filesystem [ 260.533065][ T6487] XFS (loop1): Ending clean mount [ 260.674540][ T6487] XFS (loop1): Quotacheck needed: Please wait. [ 261.045099][ T6487] XFS (loop1): Quotacheck: Done. [ 261.822805][ T4284] Bluetooth: hci1: command 0x0405 tx timeout [ 262.484598][ T6524] loop5: detected capacity change from 0 to 256 [ 262.679524][ T6524] FAT-fs (loop5): Directory bread(block 64) failed [ 262.686530][ T6524] FAT-fs (loop5): Directory bread(block 65) failed [ 262.693896][ T6524] FAT-fs (loop5): Directory bread(block 66) failed [ 262.700760][ T6524] FAT-fs (loop5): Directory bread(block 67) failed [ 262.708101][ T6524] FAT-fs (loop5): Directory bread(block 68) failed [ 262.714954][ T6524] FAT-fs (loop5): Directory bread(block 69) failed [ 262.722199][ T6524] FAT-fs (loop5): Directory bread(block 70) failed [ 262.728982][ T6524] FAT-fs (loop5): Directory bread(block 71) failed [ 262.736321][ T6524] FAT-fs (loop5): Directory bread(block 72) failed [ 262.743204][ T6524] FAT-fs (loop5): Directory bread(block 73) failed [ 264.060898][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 267.195874][ T4264] XFS (loop1): Unmounting Filesystem [ 267.804353][ T6534] loop5: detected capacity change from 0 to 40427 [ 269.069159][ T6573] loop5: detected capacity change from 0 to 4096 [ 269.242302][ T6573] EXT4-fs (loop5): Test dummy encryption mode enabled [ 269.302677][ T6573] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 269.931552][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.431'. [ 270.383271][ T6573] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 270.610343][ T6596] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 270.939305][ T6596] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 273.844537][ T6634] loop6: detected capacity change from 0 to 64 [ 274.153570][ T4521] EXT4-fs (loop5): unmounting filesystem. [ 274.585286][ T6649] netlink: 200 bytes leftover after parsing attributes in process `syz.5.442'. [ 274.601690][ T6649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.612640][ T6649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.620376][ T6649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.631127][ T6649] device bridge_slave_0 left promiscuous mode [ 274.637760][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.765500][ T6649] device bridge_slave_1 left promiscuous mode [ 275.772278][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.786109][ T6649] bond0: (slave bond_slave_0): Releasing backup interface [ 275.851358][ T6649] bond0: (slave bond_slave_1): Releasing backup interface [ 276.022770][ T6649] team0: Port device team_slave_0 removed [ 276.087539][ T6649] team0: Port device team_slave_1 removed [ 276.094287][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.101797][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.647362][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.654885][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.125286][ T6669] loop6: detected capacity change from 0 to 512 [ 277.153905][ T6669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.518346][ T6669] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 277.527763][ T6669] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.610744][ T4583] EXT4-fs (loop6): unmounting filesystem. [ 282.737822][ T6693] loop6: detected capacity change from 0 to 4096 [ 282.771205][ T6693] EXT4-fs (loop6): Test dummy encryption mode enabled [ 283.049880][ T6693] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 284.244476][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.454'. [ 285.151755][ T6693] fscrypt (loop6): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 285.249952][ T6694] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 285.259506][ T6694] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 285.666056][ T6741] netlink: 200 bytes leftover after parsing attributes in process `syz.3.459'. [ 285.693965][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 285.710959][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.719398][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.483646][ T4583] EXT4-fs (loop6): unmounting filesystem. [ 287.366067][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 287.397998][ T6767] loop1: detected capacity change from 0 to 256 [ 287.435099][ T6767] FAT-fs (loop1): Directory bread(block 64) failed [ 287.442219][ T6767] FAT-fs (loop1): Directory bread(block 65) failed [ 287.449209][ T6767] FAT-fs (loop1): Directory bread(block 66) failed [ 287.456119][ T6767] FAT-fs (loop1): Directory bread(block 67) failed [ 287.463681][ T6767] FAT-fs (loop1): Directory bread(block 68) failed [ 287.470264][ T6767] FAT-fs (loop1): Directory bread(block 69) failed [ 287.476902][ T6767] FAT-fs (loop1): Directory bread(block 70) failed [ 287.483463][ T6767] FAT-fs (loop1): Directory bread(block 71) failed [ 287.490063][ T6767] FAT-fs (loop1): Directory bread(block 72) failed [ 287.496675][ T6767] FAT-fs (loop1): Directory bread(block 73) failed [ 290.670018][ T6797] netlink: 200 bytes leftover after parsing attributes in process `syz.5.474'. [ 290.683736][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.693710][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.701164][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.743317][ T6809] loop1: detected capacity change from 0 to 512 [ 290.985848][ T6809] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.168873][ T6809] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 291.178258][ T6809] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.764557][ T6814] syz.7.473[6814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.764658][ T6814] syz.7.473[6814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.713124][ T6824] loop5: detected capacity change from 0 to 1024 [ 292.731580][ T6824] EXT4-fs: Ignoring removed i_version option [ 292.737698][ T6824] EXT4-fs: inline encryption not supported [ 292.794038][ T6824] EXT4-fs (loop5): Test dummy encryption mode enabled [ 292.828018][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 292.913461][ T6824] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 293.866786][ T6845] loop1: detected capacity change from 0 to 256 [ 293.954836][ T6845] FAT-fs (loop1): Directory bread(block 64) failed [ 293.961454][ T6845] FAT-fs (loop1): Directory bread(block 65) failed [ 293.968481][ T6845] FAT-fs (loop1): Directory bread(block 66) failed [ 293.975218][ T6845] FAT-fs (loop1): Directory bread(block 67) failed [ 293.981826][ T6845] FAT-fs (loop1): Directory bread(block 68) failed [ 293.988384][ T6845] FAT-fs (loop1): Directory bread(block 69) failed [ 293.995520][ T6845] FAT-fs (loop1): Directory bread(block 70) failed [ 294.002066][ T6845] FAT-fs (loop1): Directory bread(block 71) failed [ 294.008842][ T6845] FAT-fs (loop1): Directory bread(block 72) failed [ 294.015440][ T6845] FAT-fs (loop1): Directory bread(block 73) failed [ 294.109983][ T4521] EXT4-fs (loop5): unmounting filesystem. [ 296.996463][ T6880] netlink: 200 bytes leftover after parsing attributes in process `syz.3.490'. [ 297.054630][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.083892][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.093657][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.388279][ T6889] loop1: detected capacity change from 0 to 512 [ 308.926366][ T6889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.940808][ T6889] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 310.560844][ T6907] loop1: detected capacity change from 0 to 1024 [ 310.656777][ T6907] EXT4-fs: Ignoring removed i_version option [ 310.662905][ T6907] EXT4-fs: inline encryption not supported [ 310.678475][ T6907] EXT4-fs (loop1): Test dummy encryption mode enabled [ 310.803935][ T6907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 312.548319][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 313.887784][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.898080][ T6940] overlayfs: failed to clone upperpath [ 313.922809][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.931462][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.959124][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.986210][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 313.996381][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.345221][ T4618] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.394714][ T6936] loop1: detected capacity change from 0 to 32768 [ 314.866158][ T4618] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.196618][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 315.549978][ T4618] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.104288][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 316.566563][ T4618] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.644826][ T6985] netlink: 200 bytes leftover after parsing attributes in process `syz.1.509'. [ 316.658565][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.668195][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.675750][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.698732][ T6944] chnl_net:caif_netlink_parms(): no params data found [ 317.007429][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.013800][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.089008][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.219351][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.264623][ T6944] device bridge_slave_0 entered promiscuous mode [ 317.273715][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.280878][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.289043][ T6944] device bridge_slave_1 entered promiscuous mode [ 317.386474][ T7010] syz.1.510[7010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.386908][ T7010] syz.1.510[7010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.174356][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 318.260966][ T7018] device vlan0 entered promiscuous mode [ 318.308144][ T7018] team0: Port device vlan0 added [ 318.317426][ T6944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.352942][ T6944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.411979][ T7007] loop6: detected capacity change from 0 to 1024 [ 318.445604][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.479281][ T7007] EXT4-fs: Ignoring removed i_version option [ 318.507671][ T7007] EXT4-fs: inline encryption not supported [ 318.549372][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.564673][ T7007] EXT4-fs (loop6): Test dummy encryption mode enabled [ 318.637775][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.686038][ T7007] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 318.707855][ T7015] device bridge_slave_0 left promiscuous mode [ 318.772851][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.835333][ T7015] device bridge_slave_1 left promiscuous mode [ 318.886751][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.057217][ T7018] syz.7.514 (7018) used greatest stack depth: 20032 bytes left [ 319.583335][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 319.912813][ T26] audit: type=1326 audit(1761455988.010:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 319.996923][ T26] audit: type=1326 audit(1761455988.010:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 320.029850][ T7015] bond0: (slave bond_slave_0): Releasing backup interface [ 320.064950][ T7015] bond0: (slave bond_slave_1): Releasing backup interface [ 320.076830][ T26] audit: type=1326 audit(1761455988.010:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 320.100724][ T4583] EXT4-fs (loop6): unmounting filesystem. [ 320.108198][ T26] audit: type=1326 audit(1761455988.010:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 320.170596][ T7015] team0: Port device team_slave_0 removed [ 320.193095][ T26] audit: type=1326 audit(1761455988.020:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 320.222567][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 320.285516][ T26] audit: type=1326 audit(1761455988.020:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 320.367234][ T26] audit: type=1326 audit(1761455988.020:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 320.391311][ T26] audit: type=1326 audit(1761455988.020:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 320.427809][ T7015] team0: Port device team_slave_1 removed [ 320.471228][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.545351][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.565667][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.588299][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.680926][ T7015] team0: Port device vlan0 removed [ 321.563832][ T6944] team0: Port device team_slave_0 added [ 321.571279][ T7047] netlink: 200 bytes leftover after parsing attributes in process `syz.1.520'. [ 321.580938][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.518'. [ 321.593851][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.603316][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.610876][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.908139][ T7060] syz.7.523[7060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.908541][ T7060] syz.7.523[7060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.930351][ T6944] team0: Port device team_slave_1 added [ 322.292878][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 323.909301][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.948750][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.012270][ T7075] loop7: detected capacity change from 0 to 1024 [ 324.019488][ T7075] EXT4-fs: Ignoring removed i_version option [ 324.025625][ T7075] EXT4-fs: inline encryption not supported [ 324.072932][ T7075] EXT4-fs (loop7): Test dummy encryption mode enabled [ 324.080383][ T6944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.143746][ T7075] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 324.202762][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 324.284398][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.291399][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.365106][ T6944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.657635][ T6944] device hsr_slave_0 entered promiscuous mode [ 324.674393][ T7075] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 324.791933][ T6944] device hsr_slave_1 entered promiscuous mode [ 324.819163][ T6944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.820296][ T5791] EXT4-fs (loop7): unmounting filesystem. [ 324.837471][ T6944] Cannot create hsr debugfs directory [ 324.977778][ T7077] loop1: detected capacity change from 0 to 16 [ 325.069516][ T7077] erofs: Unknown parameter '00000000000000000000005' [ 325.069990][ T7101] loop7: detected capacity change from 0 to 64 [ 325.223493][ T7101] hfs: bad catalog entry type 0 [ 325.421038][ T7077] ip6t_rpfilter: unknown options [ 326.031060][ T7117] netlink: 200 bytes leftover after parsing attributes in process `syz.6.533'. [ 326.060745][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 326.078841][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.087434][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.212399][ T4618] device hsr_slave_0 left promiscuous mode [ 327.237480][ T4618] device hsr_slave_1 left promiscuous mode [ 327.304142][ T4618] device veth1_macvtap left promiscuous mode [ 327.320524][ T4618] device veth0_macvtap left promiscuous mode [ 327.341612][ T4618] device veth1_vlan left promiscuous mode [ 327.362918][ T4618] device veth0_vlan left promiscuous mode [ 328.877855][ T7128] loop6: detected capacity change from 0 to 32768 [ 329.148654][ T7128] JBD2: Ignoring recovery information on journal [ 329.377822][ T7128] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 329.488641][ T7143] loop7: detected capacity change from 0 to 32768 [ 329.551214][ T7143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.539 (7143) [ 329.733242][ T7143] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 329.800396][ T7143] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 329.845396][ T7143] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 329.896507][ T7143] BTRFS info (device loop7): use lzo compression, level 0 [ 329.963359][ T7143] BTRFS info (device loop7): using free space tree [ 330.110561][ T4583] ocfs2: Unmounting device (7,6) on (node local) [ 331.044575][ T7143] BTRFS info (device loop7): enabling ssd optimizations [ 331.462701][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 331.594904][ T5791] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.654428][ T7] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 331.672614][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.692641][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.702471][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 331.801194][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 331.823721][ T7] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 331.831885][ T7] usb 4-1: Manufacturer: syz [ 331.854781][ T7] usb 4-1: config 0 descriptor?? [ 332.483493][ T7] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 332.507071][ T7] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 332.517280][ T7] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 332.735971][ T7181] loop6: detected capacity change from 0 to 65536 [ 332.832171][ T7181] XFS (loop6): Mounting V5 Filesystem [ 332.930604][ T7203] loop7: detected capacity change from 0 to 764 [ 333.004103][ T7181] XFS (loop6): Ending clean mount [ 333.038620][ T7181] XFS (loop6): Quotacheck needed: Please wait. [ 333.052252][ T7203] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 333.119691][ T4392] XFS (loop6): Metadata CRC error detected at xfs_agi_read_verify+0x18d/0x250, xfs_agi block 0x8002 [ 333.167375][ T4392] XFS (loop6): Unmount and run xfs_repair [ 333.195453][ T4392] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 333.214400][ T4392] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 333.877290][ T4392] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 333.886722][ T4392] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 333.895970][ T4392] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 333.905099][ T4392] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 333.914265][ T4392] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 333.923448][ T4392] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 333.932662][ T4392] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 333.941781][ T4410] XFS (loop6): metadata I/O error in "xfs_read_agi+0x295/0x650" at daddr 0x8002 len 1 error 74 [ 333.953512][ T22] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 [ 333.967430][ T22] XFS (loop6): Unmount and run xfs_repair [ 333.973750][ T22] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 333.982995][ T22] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 333.991884][ T22] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 334.010456][ T22] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 334.019727][ T22] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 334.029459][ T22] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 334.061141][ T22] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 334.083412][ T22] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 334.099230][ T22] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 334.118481][ T4385] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x6 len 2 error 74 [ 334.162242][ T7181] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 334.170536][ T22] usb 4-1: USB disconnect, device number 5 [ 334.853924][ T4583] XFS (loop6): Unmounting Filesystem [ 335.754976][ T7224] loop7: detected capacity change from 0 to 512 [ 335.795923][ T7224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.990147][ T7224] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 336.000031][ T7224] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.546626][ T4618] bond0 (unregistering): Released all slaves [ 336.885104][ T7207] netlink: 200 bytes leftover after parsing attributes in process `syz.1.545'. [ 336.898291][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.908367][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.915972][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.064761][ T7235] loop1: detected capacity change from 0 to 1024 [ 337.169846][ T6944] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 337.244579][ T6944] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 337.309816][ T6944] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 337.361982][ T6944] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 337.407600][ T33] hfsplus: b-tree write err: -5, ino 4 [ 337.604609][ T7231] loop6: detected capacity change from 0 to 32768 [ 337.726625][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.747708][ T7231] XFS (loop6): Mounting V5 Filesystem [ 337.821888][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.869162][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.911989][ T7231] XFS (loop6): Ending clean mount [ 337.927375][ T6944] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.979711][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.998656][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.043100][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.050263][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.083437][ T4583] XFS (loop6): Unmounting Filesystem [ 338.126552][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.179731][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.189783][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.247767][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.254978][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.311240][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.356754][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.425384][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 338.450099][ T26] audit: type=1326 audit(1761456006.860:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 338.719296][ T26] audit: type=1326 audit(1761456006.860:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 338.768542][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.807721][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.816031][ T26] audit: type=1326 audit(1761456006.860:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 338.868082][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.891817][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.955895][ T26] audit: type=1326 audit(1761456006.860:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 338.999030][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.045194][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.050462][ T26] audit: type=1326 audit(1761456006.860:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 339.073278][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.129183][ T6944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.189417][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.202297][ T26] audit: type=1326 audit(1761456006.860:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 339.204113][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.279301][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.308114][ T26] audit: type=1326 audit(1761456006.860:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 339.447231][ T26] audit: type=1326 audit(1761456006.860:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 341.642103][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.676751][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.690500][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.823114][ T7308] loop6: detected capacity change from 0 to 1024 [ 342.013151][ T4410] hfsplus: b-tree write err: -5, ino 4 [ 343.677652][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 343.702582][ T26] audit: type=1326 audit(1761456012.110:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 343.959198][ T26] audit: type=1326 audit(1761456012.110:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 344.120869][ T26] audit: type=1326 audit(1761456012.110:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 344.143518][ T26] audit: type=1326 audit(1761456012.110:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 344.166027][ T26] audit: type=1326 audit(1761456012.110:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 344.193523][ T26] audit: type=1326 audit(1761456012.110:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 344.222656][ T26] audit: type=1326 audit(1761456012.110:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 344.284431][ T26] audit: type=1326 audit(1761456012.110:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 344.404462][ T6944] device veth0_vlan entered promiscuous mode [ 344.433671][ T6944] device veth1_vlan entered promiscuous mode [ 344.510497][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.531311][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.829666][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.066257][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.286463][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.324333][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.348185][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.359946][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.370701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.384048][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.406399][ T6944] device veth0_macvtap entered promiscuous mode [ 345.454298][ T6944] device veth1_macvtap entered promiscuous mode [ 345.513692][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.534433][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.574256][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.581698][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.603838][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.762703][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.797756][ T6944] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.809662][ T6944] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.834143][ T5791] EXT4-fs (loop7): unmounting filesystem. [ 346.017578][ T6944] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.230154][ T6944] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.418234][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.428536][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.441504][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 346.698992][ T7371] loop7: detected capacity change from 0 to 64 [ 346.724284][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.757954][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.854046][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.909976][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.939435][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.972363][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.215808][ T7378] loop8: detected capacity change from 0 to 256 [ 347.251709][ T7378] FAT-fs (loop8): Directory bread(block 64) failed [ 347.258434][ T7378] FAT-fs (loop8): Directory bread(block 65) failed [ 347.265134][ T7378] FAT-fs (loop8): Directory bread(block 66) failed [ 347.271660][ T7378] FAT-fs (loop8): Directory bread(block 67) failed [ 347.278293][ T7378] FAT-fs (loop8): Directory bread(block 68) failed [ 347.284843][ T7378] FAT-fs (loop8): Directory bread(block 69) failed [ 347.291423][ T7378] FAT-fs (loop8): Directory bread(block 70) failed [ 347.297975][ T7378] FAT-fs (loop8): Directory bread(block 71) failed [ 347.304598][ T7378] FAT-fs (loop8): Directory bread(block 72) failed [ 347.311124][ T7378] FAT-fs (loop8): Directory bread(block 73) failed [ 347.521212][ T7375] syz.7.579[7375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.521313][ T7375] syz.7.579[7375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.924979][ T7364] loop6: detected capacity change from 0 to 32768 [ 348.340384][ T7364] JBD2: Ignoring recovery information on journal [ 348.585637][ T7392] loop1: detected capacity change from 0 to 256 [ 348.654569][ T7392] exfat: Deprecated parameter 'utf8' [ 348.681425][ T7364] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 348.743124][ T7392] exfat: Unknown parameter 'zero_size_dir' [ 348.986617][ T4583] ocfs2: Unmounting device (7,6) on (node local) [ 351.082692][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 355.288659][ T7473] loop1: detected capacity change from 0 to 256 [ 355.312034][ T7473] FAT-fs (loop1): Directory bread(block 64) failed [ 355.318727][ T7473] FAT-fs (loop1): Directory bread(block 65) failed [ 355.325437][ T7473] FAT-fs (loop1): Directory bread(block 66) failed [ 355.332643][ T7473] FAT-fs (loop1): Directory bread(block 67) failed [ 355.339255][ T7473] FAT-fs (loop1): Directory bread(block 68) failed [ 355.345948][ T7473] FAT-fs (loop1): Directory bread(block 69) failed [ 355.352660][ T7473] FAT-fs (loop1): Directory bread(block 70) failed [ 355.359217][ T7473] FAT-fs (loop1): Directory bread(block 71) failed [ 355.365931][ T7473] FAT-fs (loop1): Directory bread(block 72) failed [ 355.372477][ T7473] FAT-fs (loop1): Directory bread(block 73) failed [ 356.808320][ T7447] syz.8.593[7447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.808424][ T7447] syz.8.593[7447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.956804][ T7485] loop1: detected capacity change from 0 to 256 [ 357.025475][ T7485] FAT-fs (loop1): Directory bread(block 64) failed [ 357.057781][ T7485] FAT-fs (loop1): Directory bread(block 65) failed [ 357.085989][ T7485] FAT-fs (loop1): Directory bread(block 66) failed [ 357.104718][ T7485] FAT-fs (loop1): Directory bread(block 67) failed [ 357.123355][ T7485] FAT-fs (loop1): Directory bread(block 68) failed [ 357.137832][ T7485] FAT-fs (loop1): Directory bread(block 69) failed [ 357.158403][ T7485] FAT-fs (loop1): Directory bread(block 70) failed [ 357.177624][ T7460] loop7: detected capacity change from 0 to 32768 [ 357.180891][ T7485] FAT-fs (loop1): Directory bread(block 71) failed [ 357.275586][ T7485] FAT-fs (loop1): Directory bread(block 72) failed [ 357.318681][ T7485] FAT-fs (loop1): Directory bread(block 73) failed [ 359.397092][ T7505] input: syz1 as /devices/virtual/input/input6 [ 360.522731][ T128] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 360.832676][ T128] usb 2-1: Using ep0 maxpacket: 16 [ 360.884005][ T128] usb 2-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 361.329786][ T128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.455030][ T128] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.488903][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.534536][ T128] usb 2-1: Product: syz [ 361.592571][ T128] usb 2-1: Manufacturer: syz [ 361.608056][ T128] usb 2-1: SerialNumber: syz [ 362.960556][ T7537] syz.7.616[7537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.960654][ T7537] syz.7.616[7537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.259510][ T128] usb 2-1: 0:2 : does not exist [ 363.317110][ T128] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 363.419713][ T128] usb 2-1: USB disconnect, device number 6 [ 363.688690][ T7561] netlink: 52 bytes leftover after parsing attributes in process `syz.1.623'. [ 363.707663][ T7561] netlink: 52 bytes leftover after parsing attributes in process `syz.1.623'. [ 363.734287][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.590354][ T7584] loop6: detected capacity change from 0 to 64 [ 366.140624][ T7597] fuse: root generation should be zero [ 369.672258][ T7646] loop6: detected capacity change from 0 to 1024 [ 370.182810][ T7655] loop6: detected capacity change from 0 to 1024 [ 370.190022][ T7655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.471544][ T7655] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 371.093331][ T7666] loop7: detected capacity change from 0 to 256 [ 371.240029][ T7666] FAT-fs (loop7): Directory bread(block 64) failed [ 371.272654][ T7666] FAT-fs (loop7): Directory bread(block 65) failed [ 371.279323][ T7666] FAT-fs (loop7): Directory bread(block 66) failed [ 371.352808][ T7666] FAT-fs (loop7): Directory bread(block 67) failed [ 371.369904][ T7669] capability: warning: `syz.3.647' uses 32-bit capabilities (legacy support in use) [ 371.378788][ T7666] FAT-fs (loop7): Directory bread(block 68) failed [ 371.406364][ T7666] FAT-fs (loop7): Directory bread(block 69) failed [ 371.432807][ T7666] FAT-fs (loop7): Directory bread(block 70) failed [ 371.439475][ T7666] FAT-fs (loop7): Directory bread(block 71) failed [ 371.472745][ T7666] FAT-fs (loop7): Directory bread(block 72) failed [ 371.489764][ T7666] FAT-fs (loop7): Directory bread(block 73) failed [ 373.346411][ T4583] EXT4-fs (loop6): unmounting filesystem. [ 373.660532][ T7688] loop1: detected capacity change from 0 to 256 [ 373.940316][ T7688] FAT-fs (loop1): Directory bread(block 64) failed [ 373.947076][ T7688] FAT-fs (loop1): Directory bread(block 65) failed [ 373.953844][ T7688] FAT-fs (loop1): Directory bread(block 66) failed [ 373.960429][ T7688] FAT-fs (loop1): Directory bread(block 67) failed [ 373.968886][ T7688] FAT-fs (loop1): Directory bread(block 68) failed [ 373.975544][ T7688] FAT-fs (loop1): Directory bread(block 69) failed [ 373.982267][ T7688] FAT-fs (loop1): Directory bread(block 70) failed [ 373.988979][ T7688] FAT-fs (loop1): Directory bread(block 71) failed [ 373.995734][ T7688] FAT-fs (loop1): Directory bread(block 72) failed [ 374.002353][ T7688] FAT-fs (loop1): Directory bread(block 73) failed [ 374.505476][ T7694] loop8: detected capacity change from 0 to 256 [ 374.555306][ T7694] exfat: Deprecated parameter 'utf8' [ 374.726984][ T7702] loop6: detected capacity change from 0 to 512 [ 374.765477][ T7702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.916020][ T7694] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 375.087116][ T7702] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 375.097081][ T7702] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.874587][ T4583] EXT4-fs (loop6): unmounting filesystem. [ 377.364590][ T7740] netlink: 'syz.7.663': attribute type 10 has an invalid length. [ 377.482841][ T7740] team0: Port device wlan1 added [ 378.523439][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.530149][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.109916][ T7766] loop7: detected capacity change from 0 to 8 [ 379.322721][ T4284] Bluetooth: hci3: command 0x0405 tx timeout [ 382.100848][ T7803] loop1: detected capacity change from 0 to 4096 [ 382.204960][ T7803] EXT4-fs (loop1): Test dummy encryption mode enabled [ 383.236689][ T7803] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 383.523383][ T7803] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 383.593416][ T7819] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 383.602197][ T7819] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 383.828336][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'. [ 383.886912][ T26] audit: type=1326 audit(1761456052.300:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c878efc9 code=0x7ffc0000 [ 383.990833][ T26] audit: type=1326 audit(1761456052.300:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c878efc9 code=0x7ffc0000 [ 384.117531][ T26] audit: type=1326 audit(1761456052.300:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd1c878efc9 code=0x7ffc0000 [ 384.241492][ T26] audit: type=1326 audit(1761456052.300:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c878efc9 code=0x7ffc0000 [ 384.369012][ T26] audit: type=1326 audit(1761456052.300:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c878efc9 code=0x7ffc0000 [ 384.404469][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 384.476014][ T7813] loop8: detected capacity change from 0 to 32768 [ 384.482608][ T26] audit: type=1326 audit(1761456052.300:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd1c878efc9 code=0x7ffc0000 [ 384.575383][ T26] audit: type=1326 audit(1761456052.300:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c878efc9 code=0x7ffc0000 [ 384.628970][ T7817] loop7: detected capacity change from 0 to 32768 [ 384.676940][ T7817] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.683 (7817) [ 384.812596][ T26] audit: type=1326 audit(1761456052.300:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c878efc9 code=0x7ffc0000 [ 384.814101][ T7817] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 385.014784][ T7817] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 385.149930][ T7817] BTRFS info (device loop7): force clearing of disk cache [ 385.380265][ T7817] BTRFS info (device loop7): enabling auto defrag [ 385.572734][ T7817] BTRFS info (device loop7): max_inline at 0 [ 385.642653][ T7817] BTRFS info (device loop7): enabling disk space caching [ 385.649741][ T7817] BTRFS info (device loop7): disk space caching is enabled [ 385.693731][ T7845] loop1: detected capacity change from 0 to 64 [ 386.987013][ T7817] BTRFS error (device loop7): open_ctree failed: -12 [ 387.698600][ T7885] syz.3.692[7885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.699187][ T7885] syz.3.692[7885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.437657][ T7912] loop6: detected capacity change from 0 to 64 [ 391.588703][ T7932] loop6: detected capacity change from 0 to 64 [ 393.328697][ T7958] loop8: detected capacity change from 0 to 64 [ 393.596256][ T7942] loop6: detected capacity change from 0 to 32768 [ 393.740817][ T7944] loop7: detected capacity change from 0 to 32768 [ 394.288365][ T7942] XFS (loop6): Mounting V5 Filesystem [ 394.829357][ T7944] XFS (loop7): Mounting V5 Filesystem [ 394.870233][ T7942] XFS (loop6): AIL initialisation failed: error -12 [ 394.956041][ T7942] XFS (loop6): log mount failed [ 395.315286][ T7944] XFS (loop7): log mount failed [ 399.121503][ T8053] netlink: 80 bytes leftover after parsing attributes in process `syz.8.734'. [ 399.425167][ T8069] loop6: detected capacity change from 0 to 256 [ 399.517876][ T8069] FAT-fs (loop6): Directory bread(block 64) failed [ 399.545299][ T8069] FAT-fs (loop6): Directory bread(block 65) failed [ 399.552917][ T8069] FAT-fs (loop6): Directory bread(block 66) failed [ 399.560057][ T8069] FAT-fs (loop6): Directory bread(block 67) failed [ 399.566891][ T8069] FAT-fs (loop6): Directory bread(block 68) failed [ 399.574191][ T8069] FAT-fs (loop6): Directory bread(block 69) failed [ 399.580809][ T8069] FAT-fs (loop6): Directory bread(block 70) failed [ 399.587808][ T8069] FAT-fs (loop6): Directory bread(block 71) failed [ 399.594687][ T8069] FAT-fs (loop6): Directory bread(block 72) failed [ 399.601555][ T8069] FAT-fs (loop6): Directory bread(block 73) failed [ 400.469785][ T8075] loop1: detected capacity change from 0 to 512 [ 400.493701][ T8075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.319386][ T8075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 401.328759][ T8075] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.041154][ T8088] syz.8.742[8088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.041252][ T8088] syz.8.742[8088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.586061][ T8096] loop7: detected capacity change from 0 to 256 [ 402.652186][ T8096] exfat: Unknown parameter 'zero_size_dir' [ 402.672222][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 402.708157][ T4258] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 404.797389][ T8126] loop7: detected capacity change from 0 to 256 [ 405.058883][ T8126] FAT-fs (loop7): Directory bread(block 64) failed [ 405.112806][ T8126] FAT-fs (loop7): Directory bread(block 65) failed [ 405.162766][ T8126] FAT-fs (loop7): Directory bread(block 66) failed [ 405.169353][ T8126] FAT-fs (loop7): Directory bread(block 67) failed [ 405.202727][ T8126] FAT-fs (loop7): Directory bread(block 68) failed [ 405.209307][ T8126] FAT-fs (loop7): Directory bread(block 69) failed [ 405.262680][ T8126] FAT-fs (loop7): Directory bread(block 70) failed [ 405.269285][ T8126] FAT-fs (loop7): Directory bread(block 71) failed [ 405.322787][ T8126] FAT-fs (loop7): Directory bread(block 72) failed [ 405.329635][ T8126] FAT-fs (loop7): Directory bread(block 73) failed [ 406.778110][ T8143] loop8: detected capacity change from 0 to 4096 [ 406.834391][ T8143] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 407.850176][ T8163] syz.1.763[8163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.850272][ T8163] syz.1.763[8163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.101420][ T8157] loop6: detected capacity change from 0 to 32768 [ 409.171040][ T8157] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.761 (8157) [ 409.234233][ T8157] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 409.337471][ T8157] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 409.372608][ T8157] BTRFS info (device loop6): setting nodatacow, compression disabled [ 409.380741][ T8157] BTRFS info (device loop6): turning off barriers [ 409.460386][ T8157] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 409.656212][ T8157] BTRFS info (device loop6): trying to use backup root at mount time [ 409.665440][ T8157] BTRFS info (device loop6): turning on barriers [ 409.672426][ T8157] BTRFS info (device loop6): max_inline at 4096 [ 409.679043][ T8157] BTRFS info (device loop6): using free space tree [ 410.381754][ T8157] BTRFS error (device loop6): open_ctree failed: -12 [ 414.135860][ T8248] loop6: detected capacity change from 0 to 128 [ 414.164833][ T8248] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 414.202884][ T8248] affs: Error parsing options [ 414.486428][ T8254] loop1: detected capacity change from 0 to 16 [ 414.616808][ T8254] erofs: (device loop1): mounted with root inode @ nid 36. [ 415.895671][ T8253] syz.1.778: attempt to access beyond end of device [ 415.895671][ T8253] loop1: rw=524288, sector=296, nr_sectors = 32 limit=16 [ 415.910076][ T8253] syz.1.778: attempt to access beyond end of device [ 415.910076][ T8253] loop1: rw=524288, sector=304, nr_sectors = 32 limit=16 [ 416.765200][ T8290] syz.6.783[8290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.765292][ T8290] syz.6.783[8290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.372345][ T8277] loop8: detected capacity change from 0 to 32768 [ 421.332055][ T8348] syz.6.797[8348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.332586][ T8348] syz.6.797[8348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.074358][ T8352] loop6: detected capacity change from 0 to 32768 [ 423.227621][ T8352] XFS (loop6): Mounting V5 Filesystem [ 423.392888][ T8352] XFS (loop6): Ending clean mount [ 423.408225][ T8379] loop8: detected capacity change from 0 to 2048 [ 423.456042][ T8352] XFS (loop6): Quotacheck needed: Please wait. [ 423.595988][ T8352] XFS (loop6): Quotacheck: Done. [ 424.463271][ T8379] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6 [ 424.997838][ T7] XFS (loop6): Metadata CRC error detected at xfs_refcountbt_read_verify+0x3a/0xd0, xfs_refcountbt block 0x28 [ 425.072956][ T7] XFS (loop6): Unmount and run xfs_repair [ 425.078733][ T7] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 425.142732][ T7] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 425.202675][ T7] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 425.211585][ T7] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 425.292166][ T7] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 425.342602][ T7] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 425.408351][ T7] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 425.452541][ T7] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 425.531271][ T7] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 425.577970][ T8387] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x28 len 8 error 74 [ 425.641913][ T8387] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 425.689253][ T8385] loop7: detected capacity change from 0 to 32768 [ 425.738397][ T8387] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 425.927739][ T4583] XFS (loop6): Unmounting Filesystem [ 426.037547][ T8385] XFS (loop7): Mounting V5 Filesystem [ 426.973108][ T8385] XFS (loop7): log mount failed [ 427.088391][ T8421] syz.3.810[8421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.088812][ T8421] syz.3.810[8421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.594562][ T8424] loop1: detected capacity change from 0 to 32768 [ 429.680146][ T8424] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.811 (8424) [ 429.775910][ T8424] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 429.815988][ T8424] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 429.862746][ T8424] BTRFS info (device loop1): using free space tree [ 429.999095][ T8443] loop6: detected capacity change from 0 to 32768 [ 430.008592][ T8440] loop7: detected capacity change from 0 to 32768 [ 430.021140][ T8443] XFS (loop6): invalid logbufsize: -1073741824 [not 16k,32k,64k,128k or 256k] [ 430.142979][ T8424] BTRFS info (device loop1): enabling ssd optimizations [ 430.453472][ T8440] XFS (loop7): Mounting V5 Filesystem [ 431.041688][ T8440] XFS (loop7): Ending clean mount [ 431.073161][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.8.819'. [ 431.233974][ T4264] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 432.306799][ T8500] loop8: detected capacity change from 0 to 4096 [ 432.414743][ T8500] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 432.545474][ T8505] loop6: detected capacity change from 0 to 256 [ 432.656546][ T8505] FAT-fs (loop6): Directory bread(block 64) failed [ 432.694578][ T8500] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 432.733680][ T5791] XFS (loop7): Unmounting Filesystem [ 432.767554][ T8505] FAT-fs (loop6): Directory bread(block 65) failed [ 432.800734][ T8500] ntfs3: loop8: Failed to load $Extend. [ 432.823933][ T8505] FAT-fs (loop6): Directory bread(block 66) failed [ 432.830523][ T8505] FAT-fs (loop6): Directory bread(block 67) failed [ 432.913343][ T8505] FAT-fs (loop6): Directory bread(block 68) failed [ 432.916098][ T8515] loop1: detected capacity change from 0 to 256 [ 432.919909][ T8505] FAT-fs (loop6): Directory bread(block 69) failed [ 432.987680][ T8505] FAT-fs (loop6): Directory bread(block 70) failed [ 433.005549][ T8505] FAT-fs (loop6): Directory bread(block 71) failed [ 433.039152][ T8515] FAT-fs (loop1): Directory bread(block 64) failed [ 433.046863][ T8505] FAT-fs (loop6): Directory bread(block 72) failed [ 433.054785][ T8515] FAT-fs (loop1): Directory bread(block 65) failed [ 433.061822][ T8505] FAT-fs (loop6): Directory bread(block 73) failed [ 433.070596][ T8515] FAT-fs (loop1): Directory bread(block 66) failed [ 433.122864][ T8515] FAT-fs (loop1): Directory bread(block 67) failed [ 433.150946][ T8515] FAT-fs (loop1): Directory bread(block 68) failed [ 433.188550][ T8515] FAT-fs (loop1): Directory bread(block 69) failed [ 433.297673][ T8515] FAT-fs (loop1): Directory bread(block 70) failed [ 433.351934][ T8515] FAT-fs (loop1): Directory bread(block 71) failed [ 433.359725][ T8515] FAT-fs (loop1): Directory bread(block 72) failed [ 433.366426][ T8515] FAT-fs (loop1): Directory bread(block 73) failed [ 434.294935][ T8533] loop8: detected capacity change from 0 to 64 [ 434.335273][ T8531] loop6: detected capacity change from 0 to 16 [ 434.375464][ T8535] loop1: detected capacity change from 0 to 1024 [ 434.493459][ T8531] erofs: (device loop6): mounted with root inode @ nid 36. [ 434.763238][ T4354] hfsplus: b-tree write err: -5, ino 4 [ 434.940094][ T8546] syz.6.828: attempt to access beyond end of device [ 434.940094][ T8546] loop6: rw=524288, sector=296, nr_sectors = 32 limit=16 [ 434.954659][ T8546] syz.6.828: attempt to access beyond end of device [ 434.954659][ T8546] loop6: rw=524288, sector=304, nr_sectors = 32 limit=16 [ 435.624162][ T8555] netlink: 16146 bytes leftover after parsing attributes in process `syz.8.837'. [ 435.955985][ T8564] loop8: detected capacity change from 0 to 512 [ 436.019793][ T8564] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.838: casefold flag without casefold feature [ 436.052153][ T8564] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.838: couldn't read orphan inode 15 (err -117) [ 436.094210][ T8564] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 436.276013][ T6944] EXT4-fs (loop8): unmounting filesystem. [ 436.424032][ T8573] loop8: detected capacity change from 0 to 256 [ 436.781637][ T8579] loop8: detected capacity change from 0 to 256 [ 436.842312][ T8559] loop7: detected capacity change from 0 to 32768 [ 436.849036][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 436.891455][ T8567] loop1: detected capacity change from 0 to 32768 [ 436.901667][ T8559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.823 (8559) [ 436.955513][ T8579] FAT-fs (loop8): Directory bread(block 64) failed [ 436.967562][ T8567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.839 (8567) [ 436.980757][ T8559] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 436.997581][ T8579] FAT-fs (loop8): Directory bread(block 65) failed [ 437.014681][ T8559] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 437.041922][ T8579] FAT-fs (loop8): Directory bread(block 66) failed [ 437.064047][ T8567] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 437.079333][ T8579] FAT-fs (loop8): Directory bread(block 67) failed [ 437.105157][ T8559] BTRFS info (device loop7): using free space tree [ 437.111906][ T8579] FAT-fs (loop8): Directory bread(block 68) failed [ 437.142882][ T8567] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 437.167741][ T8579] FAT-fs (loop8): Directory bread(block 69) failed [ 437.198045][ T8579] FAT-fs (loop8): Directory bread(block 70) failed [ 437.218637][ T8567] BTRFS info (device loop1): turning off barriers [ 437.222649][ T8579] FAT-fs (loop8): Directory bread(block 71) failed [ 437.248872][ T8579] FAT-fs (loop8): Directory bread(block 72) failed [ 437.265588][ T8579] FAT-fs (loop8): Directory bread(block 73) failed [ 437.312659][ T8567] BTRFS info (device loop1): setting nodatasum [ 437.482922][ T8567] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 437.492413][ T8567] BTRFS info (device loop1): use zstd compression, level 3 [ 437.852621][ T8567] BTRFS info (device loop1): using free space tree [ 438.127237][ T8559] BTRFS info (device loop7): enabling ssd optimizations [ 438.408507][ T5791] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 438.442800][ T8637] loop8: detected capacity change from 0 to 64 [ 438.465184][ T8576] loop6: detected capacity change from 0 to 32768 [ 438.492624][ T4264] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 438.608028][ T8576] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 438.878355][ T8576] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 438.898234][ T5959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by udevd (5959) [ 440.273856][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.280190][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.646354][ T4583] ocfs2: Unmounting device (7,6) on (node local) [ 441.159829][ T8673] loop7: detected capacity change from 0 to 4096 [ 442.296003][ T8686] loop6: detected capacity change from 0 to 64 [ 442.363935][ T8673] ntfs3: loop7: failed to convert "0000" to iso8859-7 [ 442.418456][ T8690] loop1: detected capacity change from 0 to 1024 [ 442.428912][ T8673] ntfs3: loop7: failed to convert name for inode 1e. [ 442.748456][ T8690] EXT4-fs: inline encryption not supported [ 443.114359][ T8690] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #3: block 1: comm syz.1.856: lblock 1 mapped to illegal pblock 1 (length 1) [ 443.205048][ T8690] EXT4-fs (loop1): Remounting filesystem read-only [ 443.211639][ T8690] Quota error (device loop1): write_blk: dquota write failed [ 443.480343][ T8690] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 443.505658][ T8690] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.856: Failed to acquire dquot type 0 [ 445.312219][ T8690] EXT4-fs (loop1): Remounting filesystem read-only [ 445.319462][ T8690] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.856: Freeing blocks not in datazone - block = 0, count = 4096 [ 445.395896][ T8709] loop8: detected capacity change from 0 to 256 [ 445.403062][ T8709] exfat: Deprecated parameter 'utf8' [ 445.419914][ T8709] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 445.501214][ T8690] EXT4-fs (loop1): Remounting filesystem read-only [ 445.542906][ T8690] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.856: Invalid inode bitmap blk 0 in block_group 0 [ 445.649912][ T8690] EXT4-fs (loop1): Remounting filesystem read-only [ 445.662785][ T4509] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 445.673273][ T8690] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 445.817559][ T8690] EXT4-fs (loop1): Remounting filesystem read-only [ 445.932065][ T8690] EXT4-fs (loop1): 1 orphan inode deleted [ 446.067921][ T4509] EXT4-fs (loop1): Remounting filesystem read-only [ 446.116546][ T8690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 446.400969][ T4509] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 446.455664][ T7191] kernel write not supported for file /709/gid_map (pid: 7191 comm: kworker/0:13) [ 446.470533][ T4509] EXT4-fs error (device loop1): ext4_release_dquot:6852: comm kworker/u4:16: Failed to release dquot type 0 [ 446.543218][ T8724] loop8: detected capacity change from 0 to 256 [ 446.564108][ T4509] EXT4-fs (loop1): Remounting filesystem read-only [ 446.623967][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 446.674081][ T8728] loop7: detected capacity change from 0 to 16 [ 446.800476][ T8728] erofs: (device loop7): mounted with root inode @ nid 36. [ 448.891150][ T8738] syz.7.866: attempt to access beyond end of device [ 448.891150][ T8738] loop7: rw=524288, sector=296, nr_sectors = 32 limit=16 [ 448.904972][ T8738] syz.7.866: attempt to access beyond end of device [ 448.904972][ T8738] loop7: rw=524288, sector=304, nr_sectors = 32 limit=16 [ 449.995463][ T8746] loop6: detected capacity change from 0 to 1024 [ 450.011223][ T8746] EXT4-fs: Ignoring removed orlov option [ 451.486779][ T8746] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 452.166227][ T8766] sctp: [Deprecated]: syz.8.876 (pid 8766) Use of int in maxseg socket option. [ 452.166227][ T8766] Use struct sctp_assoc_value instead [ 452.925285][ T8761] EXT4-fs (loop3): unmounting filesystem. [ 453.175191][ T4583] EXT4-fs (loop6): unmounting filesystem. [ 454.394149][ T8792] loop6: detected capacity change from 0 to 16 [ 454.433054][ T8792] erofs: (device loop6): mounted with root inode @ nid 36. [ 454.736083][ T8794] syz.6.882: attempt to access beyond end of device [ 454.736083][ T8794] loop6: rw=524288, sector=296, nr_sectors = 32 limit=16 [ 454.750229][ T8794] syz.6.882: attempt to access beyond end of device [ 454.750229][ T8794] loop6: rw=524288, sector=304, nr_sectors = 32 limit=16 [ 455.416763][ T8774] loop8: detected capacity change from 0 to 40427 [ 455.421036][ T8796] loop1: detected capacity change from 0 to 1764 [ 455.459917][ T8774] F2FS-fs (loop8): invalid crc value [ 455.470949][ T8799] loop6: detected capacity change from 0 to 128 [ 455.554257][ T8774] F2FS-fs (loop8): Found nat_bits in checkpoint [ 455.559021][ T5959] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 456.712954][ T8818] netlink: 200 bytes leftover after parsing attributes in process `syz.6.885'. [ 456.740053][ T8818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 456.755928][ T8818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 456.764501][ T8818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.553022][ T8827] loop6: detected capacity change from 0 to 32768 [ 458.723407][ T8831] loop8: detected capacity change from 0 to 32768 [ 458.752715][ T8827] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 459.374985][ T8831] XFS (loop8): Mounting V5 Filesystem [ 459.658439][ T4583] ocfs2: Unmounting device (7,6) on (node local) [ 459.669242][ T8831] XFS (loop8): Ending clean mount [ 460.117749][ T8831] XFS (loop8): Quotacheck needed: Please wait. [ 460.463580][ T8831] XFS (loop8): Quotacheck: Done. [ 460.694236][ T6944] XFS (loop8): Unmounting Filesystem [ 460.834451][ T8879] loop6: detected capacity change from 0 to 2048 [ 461.017099][ T8879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.419238][ T8889] loop1: detected capacity change from 0 to 1024 [ 461.704620][ T8896] netlink: 200 bytes leftover after parsing attributes in process `syz.7.902'. [ 461.732558][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 461.750304][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.758769][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 462.221433][ T8896] team0: Port device wlan1 removed [ 462.513860][ T8906] loop7: detected capacity change from 0 to 1024 [ 462.872128][ T8906] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 463.371175][ T8917] loop1: detected capacity change from 0 to 16 [ 463.430103][ T5791] EXT4-fs (loop7): unmounting filesystem. [ 463.453561][ T8917] erofs: (device loop1): mounted with root inode @ nid 36. [ 463.769887][ T8925] syz.1.907: attempt to access beyond end of device [ 463.769887][ T8925] loop1: rw=524288, sector=296, nr_sectors = 32 limit=16 [ 463.784318][ T8925] syz.1.907: attempt to access beyond end of device [ 463.784318][ T8925] loop1: rw=524288, sector=304, nr_sectors = 32 limit=16 [ 464.473488][ T8931] loop7: detected capacity change from 0 to 1024 [ 464.506494][ T8936] loop6: detected capacity change from 0 to 256 [ 464.540119][ T4258] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 464.565729][ T8936] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 464.754411][ T8939] loop1: detected capacity change from 0 to 256 [ 464.761681][ T8939] exfat: Deprecated parameter 'namecase' [ 464.821248][ T8939] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 466.021872][ T8953] netlink: 200 bytes leftover after parsing attributes in process `syz.7.915'. [ 466.054181][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.069043][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.077623][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.139908][ T8964] loop7: detected capacity change from 0 to 256 [ 467.304114][ T8964] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 468.673081][ T8960] loop6: detected capacity change from 0 to 32768 [ 468.775935][ T8960] XFS (loop6): Mounting V5 Filesystem [ 468.861406][ T8960] XFS (loop6): Ending clean mount [ 468.887167][ T8960] XFS (loop6): Quotacheck needed: Please wait. [ 469.040807][ T8960] XFS (loop6): Quotacheck: Done. [ 469.942952][ T4583] XFS (loop6): Unmounting Filesystem [ 470.066268][ T9018] loop8: detected capacity change from 0 to 128 [ 470.226455][ T9018] affs: No valid root block on device loop8 [ 470.617952][ T4284] Bluetooth: hci3: command 0x0405 tx timeout [ 471.235213][ T9030] netlink: 200 bytes leftover after parsing attributes in process `syz.8.930'. [ 471.260694][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 471.275975][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 471.284353][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.298428][ T9030] device bridge_slave_0 left promiscuous mode [ 471.305255][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.382896][ T9030] device bridge_slave_1 left promiscuous mode [ 471.389697][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.428201][ T9030] bond0: (slave bond_slave_0): Releasing backup interface [ 471.670406][ T9030] bond0: (slave bond_slave_1): Releasing backup interface [ 471.774181][ T9030] team0: Port device team_slave_0 removed [ 472.633508][ T9030] team0: Port device team_slave_1 removed [ 472.643207][ T9030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.650943][ T9030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.945873][ T9030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.953548][ T9030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.098505][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.929'. [ 473.989545][ T9045] loop6: detected capacity change from 0 to 4096 [ 474.388525][ T9058] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.829784][ T9092] netlink: 200 bytes leftover after parsing attributes in process `syz.6.945'. [ 476.856465][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.872185][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 476.881260][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 477.749146][ T9105] loop8: detected capacity change from 0 to 256 [ 478.552297][ T9097] loop7: detected capacity change from 0 to 32768 [ 482.059827][ T9167] loop7: detected capacity change from 0 to 256 [ 482.193129][ T9167] exfat: Deprecated parameter 'utf8' [ 482.482215][ T9167] exfat: Unknown parameter 'zero_size_dir' [ 482.899562][ T9173] loop6: detected capacity change from 0 to 512 [ 484.410172][ T9167] loop7: detected capacity change from 0 to 32768 [ 484.618896][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.969'. [ 485.128886][ T9213] loop6: detected capacity change from 0 to 256 [ 485.267979][ T9213] FAT-fs (loop6): Directory bread(block 64) failed [ 485.292750][ T9213] FAT-fs (loop6): Directory bread(block 65) failed [ 485.299449][ T9213] FAT-fs (loop6): Directory bread(block 66) failed [ 485.342608][ T9213] FAT-fs (loop6): Directory bread(block 67) failed [ 485.349284][ T9213] FAT-fs (loop6): Directory bread(block 68) failed [ 485.402596][ T9213] FAT-fs (loop6): Directory bread(block 69) failed [ 485.436157][ T9213] FAT-fs (loop6): Directory bread(block 70) failed [ 485.477475][ T9213] FAT-fs (loop6): Directory bread(block 71) failed [ 485.502710][ T9213] FAT-fs (loop6): Directory bread(block 72) failed [ 485.509347][ T9213] FAT-fs (loop6): Directory bread(block 73) failed [ 486.375521][ T9240] device syzkaller0 entered promiscuous mode [ 486.882355][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.986'. [ 488.660506][ T9276] loop6: detected capacity change from 0 to 16 [ 488.681475][ T9276] erofs: (device loop6): mounted with root inode @ nid 36. [ 488.991388][ T9281] syz.6.994: attempt to access beyond end of device [ 488.991388][ T9281] loop6: rw=524288, sector=296, nr_sectors = 32 limit=16 [ 489.005622][ T9281] syz.6.994: attempt to access beyond end of device [ 489.005622][ T9281] loop6: rw=524288, sector=304, nr_sectors = 32 limit=16 [ 490.047491][ T9295] loop1: detected capacity change from 0 to 4096 [ 490.124278][ T9295] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 491.796638][ T9320] loop8: detected capacity change from 0 to 16 [ 491.841983][ T9320] erofs: (device loop8): mounted with root inode @ nid 36. [ 492.104151][ T9328] loop1: detected capacity change from 0 to 512 [ 492.200586][ T9331] syz.8.1007: attempt to access beyond end of device [ 492.200586][ T9331] loop8: rw=524288, sector=296, nr_sectors = 32 limit=16 [ 492.215341][ T9331] syz.8.1007: attempt to access beyond end of device [ 492.215341][ T9331] loop8: rw=524288, sector=304, nr_sectors = 32 limit=16 [ 492.726734][ T9328] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 492.777577][ T9328] ext4 filesystem being mounted at /198/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.919156][ T9339] binder: Bad value for 'stats' [ 492.974233][ T9340] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.1009: corrupted xattr block 33 [ 493.036321][ T9307] loop6: detected capacity change from 0 to 32768 [ 493.246040][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 493.299968][ T9345] loop8: detected capacity change from 0 to 4096 [ 493.320895][ T9307] overlayfs: upper fs needs to support d_type. [ 493.391594][ T9307] overlayfs: upper fs does not support tmpfile. [ 493.421451][ T9307] read_mapping_page failed! [ 493.468793][ T9307] ERROR: (device loop6): txCommit: [ 493.468793][ T9307] [ 493.499578][ T9307] ERROR: (device loop6): remounting filesystem as read-only [ 494.857189][ T9365] loop1: detected capacity change from 0 to 256 [ 497.010261][ T9405] loop8: detected capacity change from 0 to 256 [ 497.038827][ T9405] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 497.132329][ T9405] exFAT-fs (loop8): hint_cluster is invalid (17) [ 497.791257][ T9388] loop7: detected capacity change from 0 to 32768 [ 498.159294][ T9388] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 498.265587][ T9388] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 498.355967][ T9388] BTRFS info (device loop7): using free space tree [ 498.382207][ T9417] loop8: detected capacity change from 0 to 4096 [ 498.497992][ T9417] EXT4-fs (loop8): Test dummy encryption mode enabled [ 498.765003][ T9417] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 498.911897][ T9455] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 499.518263][ T9455] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 499.952905][ T9388] BTRFS error (device loop7): open_ctree failed: -12 [ 500.465701][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1030'. [ 500.478257][ T26] audit: type=1326 audit(1761456168.890:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 500.551671][ T26] audit: type=1326 audit(1761456168.890:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 500.622906][ T26] audit: type=1326 audit(1761456168.890:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 500.672802][ T26] audit: type=1326 audit(1761456168.890:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 500.698532][ T26] audit: type=1326 audit(1761456168.890:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 500.750739][ T26] audit: type=1326 audit(1761456168.920:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 500.798877][ T26] audit: type=1326 audit(1761456168.920:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 500.828838][ T9486] loop6: detected capacity change from 0 to 2048 [ 500.855144][ T26] audit: type=1326 audit(1761456168.920:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 500.987116][ T9486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.064595][ T26] audit: type=1326 audit(1761456168.960:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.7.1037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83a98efc9 code=0x0 [ 501.325445][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.332546][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.237676][ T9503] sctp: [Deprecated]: syz.7.1045 (pid 9503) Use of int in maxseg socket option. [ 502.237676][ T9503] Use struct sctp_assoc_value instead [ 502.958113][ T6944] EXT4-fs (loop8): unmounting filesystem. [ 503.171974][ T9515] loop8: detected capacity change from 0 to 256 [ 503.252690][ T9515] exfat: Deprecated parameter 'utf8' [ 503.364288][ T9515] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 503.764191][ T9520] loop7: detected capacity change from 0 to 1024 [ 504.099366][ T9524] hfsplus: xattr exists yet [ 504.245108][ T4546] hfsplus: b-tree write err: -5, ino 4 [ 504.959311][ T9539] sctp: [Deprecated]: syz.7.1063 (pid 9539) Use of int in maxseg socket option. [ 504.959311][ T9539] Use struct sctp_assoc_value instead [ 505.684763][ T9523] loop1: detected capacity change from 0 to 40427 [ 505.724371][ T9523] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 505.758643][ T9523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 505.788124][ T9523] F2FS-fs (loop1): invalid crc value [ 505.852650][ T9523] F2FS-fs (loop1): Found nat_bits in checkpoint [ 505.986497][ T9523] F2FS-fs (loop1): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 506.011649][ T9523] F2FS-fs (loop1): Failed to read root inode [ 507.379652][ T9558] loop7: detected capacity change from 0 to 512 [ 507.573944][ T9558] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1069: iget: bad i_size value: 38620345925642 [ 507.604486][ T9558] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1069: couldn't read orphan inode 15 (err -117) [ 507.691755][ T9558] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 507.940211][ T5791] EXT4-fs (loop7): unmounting filesystem. [ 507.993286][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 508.102775][ T8511] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 508.145308][ T9574] loop7: detected capacity change from 0 to 256 [ 508.241634][ T9574] FAT-fs (loop7): Directory bread(block 64) failed [ 508.262700][ T8511] usb 7-1: device descriptor read/64, error -71 [ 508.272865][ T9574] FAT-fs (loop7): Directory bread(block 65) failed [ 508.303349][ T9574] FAT-fs (loop7): Directory bread(block 66) failed [ 508.327730][ T9574] FAT-fs (loop7): Directory bread(block 67) failed [ 508.355210][ T9574] FAT-fs (loop7): Directory bread(block 68) failed [ 508.397238][ T9574] FAT-fs (loop7): Directory bread(block 69) failed [ 508.407424][ T9574] FAT-fs (loop7): Directory bread(block 70) failed [ 508.434689][ T9574] FAT-fs (loop7): Directory bread(block 71) failed [ 508.455226][ T9574] FAT-fs (loop7): Directory bread(block 72) failed [ 508.472091][ T9574] FAT-fs (loop7): Directory bread(block 73) failed [ 508.495398][ T9561] loop1: detected capacity change from 0 to 32768 [ 508.532626][ T8511] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 508.713214][ T8511] usb 7-1: device descriptor read/64, error -71 [ 508.727738][ T9580] device veth0_to_bridge entered promiscuous mode [ 508.758565][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1077'. [ 508.775146][ T9579] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 508.775146][ T9579] [ 508.811021][ T9579] ERROR: (device loop1): remounting filesystem as read-only [ 508.832755][ T8511] usb usb7-port1: attempt power cycle [ 508.848171][ T9579] ialloc: diAlloc returned -5! [ 509.105064][ T9578] device veth0_to_bridge left promiscuous mode [ 509.242710][ T8511] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 509.443561][ T8511] usb 7-1: device descriptor read/8, error -71 [ 509.732586][ T8511] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 509.779621][ T8511] usb 7-1: device descriptor read/8, error -71 [ 509.953303][ T8511] usb usb7-port1: unable to enumerate USB device [ 510.397907][ T9598] loop1: detected capacity change from 0 to 2048 [ 510.441360][ T9598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.514072][ T9601] loop7: detected capacity change from 0 to 256 [ 511.102797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.111194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.140692][ T9612] loop7: detected capacity change from 0 to 4096 [ 511.163083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.171443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.196160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 511.324159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.467208][ T9624] overlayfs: upper fs does not support tmpfile. [ 511.525788][ T9624] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 511.543387][ T9624] overlayfs: conflicting lowerdir path [ 511.644902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 511.653248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!! [ 511.661596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!! [ 511.710108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.887595][ T9632] loop7: detected capacity change from 0 to 256 [ 511.949421][ T9632] FAT-fs (loop7): Directory bread(block 64) failed [ 511.982646][ T9632] FAT-fs (loop7): Directory bread(block 65) failed [ 512.009713][ T9632] FAT-fs (loop7): Directory bread(block 66) failed [ 512.087866][ T9632] FAT-fs (loop7): Directory bread(block 67) failed [ 512.122722][ T9632] FAT-fs (loop7): Directory bread(block 68) failed [ 512.129351][ T9632] FAT-fs (loop7): Directory bread(block 69) failed [ 512.162751][ T9632] FAT-fs (loop7): Directory bread(block 70) failed [ 512.169334][ T9632] FAT-fs (loop7): Directory bread(block 71) failed [ 512.228352][ T9632] FAT-fs (loop7): Directory bread(block 72) failed [ 512.277624][ T9632] FAT-fs (loop7): Directory bread(block 73) failed [ 512.485874][ T9642] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 514.144869][ T26] audit: type=1326 audit(1761456181.530:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.8.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7fc00000 [ 516.891728][ T9686] loop7: detected capacity change from 0 to 4096 [ 516.926870][ T9686] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 517.286415][ T9692] syz.3.1115[9692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.286512][ T9692] syz.3.1115[9692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 519.209702][ T9693] loop7: detected capacity change from 0 to 65536 [ 519.308857][ T9709] loop8: detected capacity change from 0 to 16 [ 519.328342][ T9709] erofs: (device loop8): mounted with root inode @ nid 36. [ 519.511595][ T9693] XFS (loop7): Mounting V5 Filesystem [ 519.570328][ T9693] XFS (loop7): Ending clean mount [ 519.653667][ T9718] syz.8.1123: attempt to access beyond end of device [ 519.653667][ T9718] loop8: rw=524288, sector=296, nr_sectors = 32 limit=16 [ 519.667805][ T9718] syz.8.1123: attempt to access beyond end of device [ 519.667805][ T9718] loop8: rw=524288, sector=304, nr_sectors = 32 limit=16 [ 520.583711][ T5791] XFS (loop7): Unmounting Filesystem [ 522.527436][ T9723] loop8: detected capacity change from 0 to 40427 [ 522.568830][ T9723] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 522.617949][ T9723] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 522.738894][ T9723] F2FS-fs (loop8): Found nat_bits in checkpoint [ 522.846414][ T9746] loop7: detected capacity change from 0 to 256 [ 522.889201][ T9746] exfat: Deprecated parameter 'namecase' [ 522.958337][ T9746] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 522.973616][ T9723] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 523.001748][ T9723] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 523.116216][ T9723] syz.8.1125: attempt to access beyond end of device [ 523.116216][ T9723] loop8: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 523.431824][ T9738] syz.6.1131[9738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.459584][ T9738] syz.6.1131[9738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.064980][ T6944] syz-executor: attempt to access beyond end of device [ 525.064980][ T6944] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 528.345215][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 533.201629][ T9869] loop7: detected capacity change from 0 to 256 [ 535.691577][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1170'. [ 536.879979][ T9884] loop7: detected capacity change from 0 to 32768 [ 536.987073][ T9884] XFS (loop7): Mounting V5 Filesystem [ 537.060428][ T9884] XFS (loop7): Ending clean mount [ 537.127415][ T9884] XFS (loop7): Quotacheck needed: Please wait. [ 537.405057][ T9884] XFS (loop7): Quotacheck: Done. [ 538.600166][ T9931] sctp: [Deprecated]: syz.8.1179 (pid 9931) Use of int in maxseg socket option. [ 538.600166][ T9931] Use struct sctp_assoc_value instead [ 541.853946][ T9943] loop8: detected capacity change from 0 to 32768 [ 542.468489][ T9943] XFS (loop8): Mounting V5 Filesystem [ 542.555813][ T9943] XFS (loop8): Ending clean mount [ 542.698105][ T5791] XFS (loop7): Unmounting Filesystem [ 542.778423][ T6944] XFS (loop8): Unmounting Filesystem [ 543.529100][ T9973] loop7: detected capacity change from 0 to 256 [ 543.914169][ T9977] sctp: [Deprecated]: syz.8.1191 (pid 9977) Use of int in maxseg socket option. [ 543.914169][ T9977] Use struct sctp_assoc_value instead [ 548.179517][ T9997] loop7: detected capacity change from 0 to 32768 [ 548.377070][T10020] loop8: detected capacity change from 0 to 128 [ 548.417949][ T9997] XFS (loop7): Mounting V5 Filesystem [ 548.423957][T10020] FAT-fs (loop8): bogus number of FAT structure [ 548.430321][T10020] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 548.445468][T10020] FAT-fs (loop8): Can't find a valid FAT filesystem [ 548.641272][ T5959] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 548.670249][ T9997] XFS (loop7): Ending clean mount [ 548.730028][ T9997] XFS (loop7): Quotacheck needed: Please wait. [ 548.941430][ T9997] XFS (loop7): Quotacheck: Done. [ 549.252225][T10035] syz.1.1210[10035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.252744][T10035] syz.1.1210[10035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.248848][ T5791] XFS (loop7): Unmounting Filesystem [ 551.471394][T10032] loop8: detected capacity change from 0 to 32768 [ 551.488019][T10032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1211 (10032) [ 551.522246][T10032] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 551.550947][T10032] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 551.560209][T10032] BTRFS info (device loop8): metadata ratio 4 [ 551.572005][T10032] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 551.584593][T10032] BTRFS info (device loop8): force lzo compression, level 0 [ 551.592107][T10032] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 551.611497][T10032] BTRFS info (device loop8): trying to use backup root at mount time [ 551.620048][T10032] BTRFS info (device loop8): use zlib compression, level 3 [ 551.635039][T10032] BTRFS info (device loop8): enabling ssd optimizations [ 551.646934][T10032] BTRFS info (device loop8): disabling tree log [ 551.654506][T10032] BTRFS info (device loop8): using free space tree [ 551.940437][T10032] BTRFS error (device loop8): open_ctree failed: -12 [ 551.982889][ T4258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by udevd (4258) [ 552.226500][T10076] sctp: [Deprecated]: syz.6.1220 (pid 10076) Use of int in maxseg socket option. [ 552.226500][T10076] Use struct sctp_assoc_value instead [ 553.275256][T10084] syz.6.1223[10084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.275677][T10084] syz.6.1223[10084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.252025][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1225'. [ 556.704344][T10118] sctp: [Deprecated]: syz.6.1233 (pid 10118) Use of int in maxseg socket option. [ 556.704344][T10118] Use struct sctp_assoc_value instead [ 557.683063][ T26] audit: type=1326 audit(1761456226.010:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 557.705586][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.929471][ T26] audit: type=1326 audit(1761456226.010:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 558.036468][ T26] audit: type=1326 audit(1761456226.020:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 558.062674][ T26] audit: type=1326 audit(1761456226.020:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 558.142645][ T26] audit: type=1326 audit(1761456226.020:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 558.204868][ T26] audit: type=1326 audit(1761456226.020:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 558.316039][ T26] audit: type=1326 audit(1761456226.020:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 558.458197][T10133] syz.3.1237[10133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.458613][T10133] syz.3.1237[10133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.867850][ T26] audit: type=1326 audit(1761456226.020:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139418efc9 code=0x7ffc0000 [ 559.241031][T10113] loop7: detected capacity change from 0 to 32768 [ 560.565383][T10156] sctp: [Deprecated]: syz.7.1245 (pid 10156) Use of int in maxseg socket option. [ 560.565383][T10156] Use struct sctp_assoc_value instead [ 562.132721][ T26] audit: type=1326 audit(1761456230.490:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.6.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 562.532757][ T26] audit: type=1326 audit(1761456230.490:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.6.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45eb58efc9 code=0x7ffc0000 [ 562.793541][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.807897][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.917166][T10182] syz.1.1249[10182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 562.917572][T10182] syz.1.1249[10182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.738723][T10164] loop8: detected capacity change from 0 to 32768 [ 563.939233][T10164] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1246 (10164) [ 564.102579][T10164] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 564.454423][T10164] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 564.534187][T10164] BTRFS error (device loop8): unrecognized mount option 'subj_user=btrfs' [ 564.555030][T10164] BTRFS error (device loop8): open_ctree failed: -22 [ 564.810387][T10201] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1253'. [ 564.934781][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1250'. [ 565.693988][ T5959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by udevd (5959) [ 566.036745][T10217] sctp: [Deprecated]: syz.6.1260 (pid 10217) Use of int in maxseg socket option. [ 566.036745][T10217] Use struct sctp_assoc_value instead [ 566.956515][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1261'. [ 567.033660][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 567.034193][ T26] audit: type=1326 audit(1761456235.390:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.8.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 567.362370][ T26] audit: type=1326 audit(1761456235.390:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.8.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 567.431140][ T26] audit: type=1326 audit(1761456235.390:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.8.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 567.453697][ T26] audit: type=1326 audit(1761456235.390:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.8.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 567.530634][ T26] audit: type=1326 audit(1761456235.400:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.8.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 567.659271][ T26] audit: type=1326 audit(1761456235.400:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.8.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 567.792587][ T26] audit: type=1326 audit(1761456235.400:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.8.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 568.032242][ T26] audit: type=1326 audit(1761456235.400:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.8.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11f8efc9 code=0x7ffc0000 [ 570.417216][ T3637] udevd[3637]: worker [4258] terminated by signal 33 (Unknown signal 33) [ 570.436091][ T3637] udevd[3637]: worker [4258] failed while handling '/devices/virtual/block/loop6' [ 571.939703][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1290'. [ 573.422756][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 574.978022][T10316] ------------[ cut here ]------------ [ 574.984616][T10316] WARNING: CPU: 0 PID: 10316 at arch/x86/kvm/x86.c:11235 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 574.995199][T10316] Modules linked in: [ 574.999128][T10316] CPU: 0 PID: 10316 Comm: syz.1.1297 Not tainted syzkaller #0 [ 575.006650][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.016778][T10316] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 575.023265][T10316] Code: e8 17 38 c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 dc 37 c1 00 e9 ce e5 ff ff e8 62 09 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 575.043141][T10316] RSP: 0018:ffffc9000c6dfc48 EFLAGS: 00010283 [ 575.049240][T10316] RAX: ffffffff810fc9ae RBX: ffff88807bcc27c0 RCX: 0000000000080000 [ 575.057294][T10316] RDX: ffffc90005d59000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 575.065327][T10316] RBP: ffff88807e7f0000 R08: dffffc0000000000 R09: fffffbfff215c472 [ 575.073377][T10316] R10: fffffbfff215c472 R11: 1ffffffff215c471 R12: ffff88807bcc2ab4 [ 575.081387][T10316] R13: ffff88807bcc2898 R14: dffffc0000000000 R15: 0000000000000000 [ 575.089423][T10316] FS: 00007fd1c96026c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 575.098424][T10316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.105070][T10316] CR2: 00002000000004a0 CR3: 000000005727d000 CR4: 00000000003526f0 [ 575.113121][T10316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.121115][T10316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 575.129146][T10316] Call Trace: [ 575.132454][T10316] [ 575.135445][T10316] ? mutex_lock_nested+0x10/0x10 [ 575.140422][T10316] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 575.146219][T10316] kvm_vcpu_ioctl+0x887/0xb80 [ 575.150930][T10316] ? xa_release+0x50/0x50 [ 575.155366][T10316] ? __fget_files+0x28/0x4d0 [ 575.160006][T10316] ? bpf_lsm_file_ioctl+0x5/0x10 [ 575.165029][T10316] ? security_file_ioctl+0x7c/0xa0 [ 575.170182][T10316] ? xa_release+0x50/0x50 [ 575.174603][T10316] __se_sys_ioctl+0xfa/0x170 [ 575.179238][T10316] do_syscall_64+0x4c/0xa0 [ 575.183744][T10316] ? clear_bhb_loop+0x60/0xb0 [ 575.188465][T10316] ? clear_bhb_loop+0x60/0xb0 [ 575.193233][T10316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.199163][T10316] RIP: 0033:0x7fd1c878efc9 [ 575.203669][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.223431][T10316] RSP: 002b:00007fd1c9602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.231883][T10316] RAX: ffffffffffffffda RBX: 00007fd1c89e5fa0 RCX: 00007fd1c878efc9 [ 575.239943][T10316] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 575.247983][T10316] RBP: 00007fd1c8811f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.256042][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.264075][T10316] R13: 00007fd1c89e6038 R14: 00007fd1c89e5fa0 R15: 00007fff917cd238 [ 575.272180][T10316] [ 575.275299][T10316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 575.282605][T10316] CPU: 0 PID: 10316 Comm: syz.1.1297 Not tainted syzkaller #0 [ 575.290086][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.300249][T10316] Call Trace: [ 575.303543][T10316] [ 575.306478][T10316] dump_stack_lvl+0x168/0x22e [ 575.311178][T10316] ? memcpy+0x3c/0x60 [ 575.315193][T10316] ? show_regs_print_info+0x12/0x12 [ 575.320417][T10316] ? load_image+0x3b0/0x3b0 [ 575.324965][T10316] panic+0x2c9/0x710 [ 575.328889][T10316] ? bpf_jit_dump+0xd0/0xd0 [ 575.333440][T10316] __warn+0x2f8/0x4f0 [ 575.337474][T10316] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 575.343309][T10316] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 575.349134][T10316] report_bug+0x2ba/0x4f0 [ 575.353490][T10316] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 575.359323][T10316] handle_bug+0x3a/0x70 [ 575.363505][T10316] exc_invalid_op+0x16/0x40 [ 575.368032][T10316] asm_exc_invalid_op+0x16/0x20 [ 575.372900][T10316] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 575.379335][T10316] Code: e8 17 38 c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 dc 37 c1 00 e9 ce e5 ff ff e8 62 09 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 575.398963][T10316] RSP: 0018:ffffc9000c6dfc48 EFLAGS: 00010283 [ 575.405054][T10316] RAX: ffffffff810fc9ae RBX: ffff88807bcc27c0 RCX: 0000000000080000 [ 575.413145][T10316] RDX: ffffc90005d59000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 575.421153][T10316] RBP: ffff88807e7f0000 R08: dffffc0000000000 R09: fffffbfff215c472 [ 575.429235][T10316] R10: fffffbfff215c472 R11: 1ffffffff215c471 R12: ffff88807bcc2ab4 [ 575.437226][T10316] R13: ffff88807bcc2898 R14: dffffc0000000000 R15: 0000000000000000 [ 575.445228][T10316] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 575.451068][T10316] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 575.456902][T10316] ? mutex_lock_nested+0x10/0x10 [ 575.461872][T10316] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 575.467620][T10316] kvm_vcpu_ioctl+0x887/0xb80 [ 575.472327][T10316] ? xa_release+0x50/0x50 [ 575.476689][T10316] ? __fget_files+0x28/0x4d0 [ 575.481315][T10316] ? bpf_lsm_file_ioctl+0x5/0x10 [ 575.486274][T10316] ? security_file_ioctl+0x7c/0xa0 [ 575.491409][T10316] ? xa_release+0x50/0x50 [ 575.495755][T10316] __se_sys_ioctl+0xfa/0x170 [ 575.500375][T10316] do_syscall_64+0x4c/0xa0 [ 575.504809][T10316] ? clear_bhb_loop+0x60/0xb0 [ 575.509501][T10316] ? clear_bhb_loop+0x60/0xb0 [ 575.514193][T10316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.520101][T10316] RIP: 0033:0x7fd1c878efc9 [ 575.524538][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.544166][T10316] RSP: 002b:00007fd1c9602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.552602][T10316] RAX: ffffffffffffffda RBX: 00007fd1c89e5fa0 RCX: 00007fd1c878efc9 [ 575.560595][T10316] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 575.568590][T10316] RBP: 00007fd1c8811f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.576672][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.584668][T10316] R13: 00007fd1c89e6038 R14: 00007fd1c89e5fa0 R15: 00007fff917cd238 [ 575.592669][T10316] [ 575.595965][T10316] Kernel Offset: disabled [ 575.600365][T10316] Rebooting in 86400 seconds..