last executing test programs: 4m46.792119332s ago: executing program 1 (id=2567): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) 4m45.355218909s ago: executing program 1 (id=2569): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m45.125124498s ago: executing program 1 (id=2571): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000001140)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getcwd(&(0x7f0000000000)=""/125, 0x7d) r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x392) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 4m44.49079093s ago: executing program 1 (id=2572): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003100000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0}, 0x10) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x0, &(0x7f0000000640), &(0x7f00000000c0)='syzkaller\x00', 0x1ff, 0x27, &(0x7f0000000380)=""/39, 0x41000, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0xb, 0xff, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7b8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) 4m28.846880735s ago: executing program 1 (id=2573): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) 4m28.614231985s ago: executing program 1 (id=2620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4m13.503366417s ago: executing program 32 (id=2620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 15.858550497s ago: executing program 4 (id=3497): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x7, 0x4) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f00000000c0)) r6 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") socket$nl_route(0x10, 0x3, 0x0) 12.796900667s ago: executing program 4 (id=3510): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, 0x0, 0xb6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000698000/0x1000)=nil, 0x1000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) syz_clone(0xa1889800, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.155654584s ago: executing program 4 (id=3513): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x8, 0x0, 0x4000000, 0x7}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) recvmsg(r3, &(0x7f0000000180)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 6.112099022s ago: executing program 0 (id=3519): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@user_xattr}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {0x0, 0x1}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x4}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0xc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x20000009, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x3}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 5.280928239s ago: executing program 4 (id=3520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.240140154s ago: executing program 4 (id=3521): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chroot(&(0x7f0000000040)='./cgroup\x00') 3.822351148s ago: executing program 2 (id=3523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0x940c, 0x3002, 0x0, 0x2c0, 0x368, 0x3d8, 0x3d8, 0x368, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x250, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x2, 0x3, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv4=@broadcast, @ipv4=@broadcast, @ipv4=@multicast2, @ipv4=@remote, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth1\x00', {0xb8cd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x470) 3.712953097s ago: executing program 2 (id=3524): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@user_xattr}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {0x0, 0x1}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x4}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0xc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x20000009, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x3}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 3.602688476s ago: executing program 3 (id=3525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$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") 3.410032702s ago: executing program 0 (id=3526): r0 = syz_open_dev$video4linux(0x0, 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) 2.595976399s ago: executing program 2 (id=3527): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003100000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0}, 0x10) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x0, &(0x7f0000000640), &(0x7f00000000c0)='syzkaller\x00', 0x1ff, 0x27, &(0x7f0000000380)=""/39, 0x41000, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0xb, 0xff, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7b8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) 2.505010226s ago: executing program 3 (id=3528): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) 2.45827783s ago: executing program 0 (id=3529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e1742fa0baeb3", 0x1b}, {&(0x7f0000002440)="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", 0x228}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) 1.520445506s ago: executing program 0 (id=3530): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) clock_getres(0x7ffffffff000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 986.50476ms ago: executing program 4 (id=3531): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/18, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 913.306336ms ago: executing program 3 (id=3532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0x940c, 0x3002, 0x0, 0x2c0, 0x368, 0x3d8, 0x3d8, 0x368, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x250, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x2, 0x3, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv4=@broadcast, @ipv4=@broadcast, @ipv4=@multicast2, @ipv4=@remote, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth1\x00', {0xb8cd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x470) 720.993681ms ago: executing program 0 (id=3533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={0x34, r1, 0xb3d3e8a28760fb9b, 0x70bd27, 0x20000, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) 560.529945ms ago: executing program 3 (id=3534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d07400001020301090224000101033005"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x418}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0205000000030109021200010000000003000000003710eb00"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="20090a000000f533f0a37c33f9ea2ca70063ab0e328862c63836b6959eeeb3b123e676567d0ea982dcf15d4f706f65cb8f99091e9dfb79ab9c7c8070022292775ef6a03ac8330d470dba6ead87227a93ed92ef5329dbf4a4552b33bf102ce03cf5ee45659e6bf065ed8ff547fe9f0a72f5553660349189d77efff9f12cc37eff741e56e104b75ab1115dd2f406929cfcfe87b305e5b1f4fab49095ec8f31a2bf51a763ab26e695847f554cd74bc351ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x36, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002122) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x0) 349.549992ms ago: executing program 2 (id=3535): syz_open_procfs$namespace(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00') syz_emit_ethernet(0x15, &(0x7f0000000300)=ANY=[], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$incfs(0xffffffffffffffff, 0x0, 0x452000, 0x59) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x0, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100007000000fddbdf25370000000c009900080000005100000008003b005a05faba7a1c2ec3bfa6b9de88d51600000800a1"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x11) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r5 = socket$nl_crypto(0x10, 0x3, 0x15) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_crypto(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) 294.452566ms ago: executing program 0 (id=3536): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@user_xattr}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {0x0, 0x1}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x4}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0xc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x20000009, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x3}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 243.80891ms ago: executing program 2 (id=3537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$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") 0s ago: executing program 2 (id=3538): r0 = syz_open_dev$video4linux(0x0, 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) kernel console output (not intermixed with test programs): 0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 560.479696][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.488103][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.495740][T14005] bridge_slave_0: entered allmulticast mode [ 560.502495][T14005] bridge_slave_0: entered promiscuous mode [ 560.511632][T14005] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.520564][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.535958][T14005] bridge_slave_1: entered allmulticast mode [ 560.552076][T14005] bridge_slave_1: entered promiscuous mode [ 560.981801][ T7681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.249268][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.277774][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.316362][ T7681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.439177][ T7681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.536144][T14005] team0: Port device team_slave_0 added [ 561.568656][T14005] team0: Port device team_slave_1 added [ 561.626913][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.638024][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.664559][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.693024][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.700422][ T5796] Bluetooth: hci3: command tx timeout [ 561.706331][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.751753][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.043443][ T7681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.572279][T14005] hsr_slave_0: entered promiscuous mode [ 562.579630][T14005] hsr_slave_1: entered promiscuous mode [ 562.586646][T14005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.598941][T14005] Cannot create hsr debugfs directory [ 563.763011][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.774641][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.793923][ T5796] Bluetooth: hci3: command tx timeout [ 566.515949][T14116] loop0: detected capacity change from 0 to 764 [ 566.525524][T14116] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 566.591474][T14005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 566.610524][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 566.610540][ T28] audit: type=1326 audit(1754079292.547:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 566.687036][T14005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 566.722221][ T28] audit: type=1326 audit(1754079292.547:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 566.819179][T14005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 566.835232][ T28] audit: type=1326 audit(1754079292.567:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 566.958000][ T28] audit: type=1326 audit(1754079292.567:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 567.034780][T14005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 567.258890][ T28] audit: type=1326 audit(1754079292.567:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 568.795816][ T28] audit: type=1326 audit(1754079292.587:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 568.917730][ T28] audit: type=1326 audit(1754079292.587:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 569.051045][ T28] audit: type=1326 audit(1754079292.587:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 569.104857][ T28] audit: type=1326 audit(1754079292.597:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 569.231106][ T28] audit: type=1326 audit(1754079292.597:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 569.447432][T14005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.222382][T14005] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.272184][T14157] loop0: detected capacity change from 0 to 512 [ 571.289460][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.296692][ T7684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.396536][T14160] loop9: detected capacity change from 0 to 7 [ 571.431983][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.441321][ C0] buffer_io_error: 9 callbacks suppressed [ 571.441333][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.474455][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.483704][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.495909][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.505137][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.516528][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.525751][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.540524][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.549760][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.559595][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.568811][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.578419][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.587623][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.595627][T14160] ldm_validate_partition_table(): Disk read failed. [ 571.604089][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.613290][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.623791][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.633007][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.642406][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.651613][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 571.667796][T14157] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2713: corrupted inode contents [ 571.695099][T14160] Dev loop9: unable to read RDB block 0 [ 571.731685][T14160] loop9: unable to read partition table [ 571.745337][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.752550][ T7684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.762436][T14157] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #16: comm syz.0.2713: mark_inode_dirty error [ 571.776529][T14160] loop9: partition table beyond EOD, truncated [ 571.813979][T14160] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 571.813979][T14160] ) failed (rc=-5) [ 571.845399][T14157] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2713: corrupted inode contents [ 571.967994][T14157] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2713: mark_inode_dirty error [ 572.081303][T14157] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2713: corrupted inode contents [ 572.158500][T14157] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 572.189998][T14157] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2713: corrupted inode contents [ 572.227475][T14157] EXT4-fs error (device loop0): ext4_truncate:4288: inode #16: comm syz.0.2713: mark_inode_dirty error [ 572.577234][T14171] loop3: detected capacity change from 0 to 512 [ 572.764572][T14157] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 572.782083][T14171] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 572.790706][T14171] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 572.808264][T14171] EXT4-fs (loop3): 1 truncate cleaned up [ 572.821227][T14171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.151695][T14157] EXT4-fs (loop0): 1 truncate cleaned up [ 573.205799][T14157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.223993][T14157] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.231207][ T7684] __quota_error: 20 callbacks suppressed [ 573.231224][ T7684] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 573.288041][ T7684] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:21: Failed to release dquot type 1 [ 573.529822][T14157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2713'. [ 573.976784][T14179] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2716'. [ 575.310239][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.336481][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.533130][ T28] audit: type=1326 audit(1754079301.467:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.0.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 575.671648][ T28] audit: type=1326 audit(1754079301.477:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.0.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 575.786763][ T28] audit: type=1326 audit(1754079301.487:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 576.232475][ T28] audit: type=1326 audit(1754079301.487:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 576.472460][ T28] audit: type=1326 audit(1754079301.497:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 576.495685][ T28] audit: type=1326 audit(1754079301.497:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 576.518232][ T28] audit: type=1326 audit(1754079301.497:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 576.541115][ T28] audit: type=1326 audit(1754079301.507:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 576.563725][ T28] audit: type=1326 audit(1754079301.507:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 576.586490][ T7681] hsr_slave_0: left promiscuous mode [ 576.606529][ T7681] hsr_slave_1: left promiscuous mode [ 576.623004][ T7681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.642209][ T7681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.848518][ T7681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.856308][ T7681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.864946][ T7681] bridge_slave_1: left allmulticast mode [ 576.870621][ T7681] bridge_slave_1: left promiscuous mode [ 576.877118][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.888915][ T7681] bridge_slave_0: left allmulticast mode [ 577.317893][ T7681] bridge_slave_0: left promiscuous mode [ 577.323689][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.431795][ T7681] veth1_macvtap: left promiscuous mode [ 577.437455][ T7681] veth0_macvtap: left promiscuous mode [ 577.443103][ T7681] veth1_vlan: left promiscuous mode [ 577.448509][ T7681] veth0_vlan: left promiscuous mode [ 577.968143][ T7681] team0 (unregistering): Port device team_slave_1 removed [ 578.017709][ T7681] team0 (unregistering): Port device team_slave_0 removed [ 578.061657][ T7681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.109894][ T7681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.584528][ T7681] bond0 (unregistering): Released all slaves [ 579.032424][T14217] loop3: detected capacity change from 0 to 512 [ 579.075417][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.132720][T14217] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.2724: corrupted inode contents [ 579.226566][T14217] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #16: comm syz.3.2724: mark_inode_dirty error [ 579.272640][T14217] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.2724: corrupted inode contents [ 579.298693][T14217] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.2724: mark_inode_dirty error [ 579.463586][T14217] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.2724: corrupted inode contents [ 579.688730][T14217] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 579.907494][T14217] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.2724: corrupted inode contents [ 580.168024][T14217] EXT4-fs error (device loop3): ext4_truncate:4288: inode #16: comm syz.3.2724: mark_inode_dirty error [ 580.260778][T14217] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 580.360371][T14217] EXT4-fs (loop3): 1 truncate cleaned up [ 580.375762][ T7698] __quota_error: 34 callbacks suppressed [ 580.375777][ T7698] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 580.431397][T14217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.489749][ T7698] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:34: Failed to release dquot type 1 [ 580.533599][T14217] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.649965][T14217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2724'. [ 580.944530][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.441689][T14005] veth0_vlan: entered promiscuous mode [ 581.505537][T14005] veth1_vlan: entered promiscuous mode [ 581.598857][T14005] veth0_macvtap: entered promiscuous mode [ 583.294739][T14005] veth1_macvtap: entered promiscuous mode [ 583.401845][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.432816][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.463160][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.474141][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.489807][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.515945][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.543751][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.581713][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.612707][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.636090][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.680008][T14005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.719786][T14005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.742811][T14005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.764908][T14005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.942345][ T7681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.972929][ T7681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.993504][T14282] binfmt_misc: register: failed to install interpreter file ./bus [ 584.021480][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.035805][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.460896][T14295] siw: device registration error -23 [ 584.482919][T14300] loop3: detected capacity change from 0 to 1024 [ 584.509597][T14300] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 584.595180][T14300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.724890][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.223187][T14348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2760'. [ 586.260570][T14348] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.269649][T14348] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.278417][T14348] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.287262][T14348] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.356645][T14354] syz.4.2763[14354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 586.356762][T14354] syz.4.2763[14354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 586.377430][T14348] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.398181][T14348] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.407237][T14348] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.416197][T14348] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.736929][ T28] audit: type=1326 audit(1754079312.677:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 586.847363][ T28] audit: type=1326 audit(1754079312.677:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 586.931208][ T28] audit: type=1326 audit(1754079312.707:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 587.037975][ T28] audit: type=1326 audit(1754079312.707:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 587.069595][T14387] syz.2.2774[14387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 587.069721][T14387] syz.2.2774[14387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 587.128687][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 587.155229][ T28] audit: type=1326 audit(1754079312.707:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 587.227691][ T28] audit: type=1326 audit(1754079312.707:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 587.376137][ T28] audit: type=1326 audit(1754079312.717:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 587.408024][ T28] audit: type=1326 audit(1754079312.717:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 587.455711][ T28] audit: type=1326 audit(1754079312.717:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 587.480246][ T28] audit: type=1326 audit(1754079312.717:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.4.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 587.611732][T14406] loop3: detected capacity change from 0 to 1024 [ 587.622548][T14406] EXT4-fs: Ignoring removed i_version option [ 587.674133][T14406] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 587.900205][T14406] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.2779: Invalid block bitmap block 0 in block_group 0 [ 587.916116][T14406] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2779: Failed to acquire dquot type 0 [ 587.964543][T14406] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.2779: Freeing blocks not in datazone - block = 0, count = 4096 [ 588.014483][T14406] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2779: Invalid inode bitmap blk 0 in block_group 0 [ 588.069449][T14406] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 588.080759][T14406] EXT4-fs (loop3): 1 orphan inode deleted [ 588.091764][T14406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.145687][ T42] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0 [ 588.868794][T14420] loop4: detected capacity change from 0 to 1024 [ 588.977110][T14420] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 589.072577][T14420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.385730][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.400944][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.803533][T14455] loop4: detected capacity change from 0 to 1024 [ 590.854338][T14455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.916131][T14455] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2793'. [ 592.458188][T14455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 592.502455][T14455] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 592.589869][T14455] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 592.615052][T14455] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 592.629535][T14455] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 592.652214][T14455] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 592.731673][T14455] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 592.749188][T14455] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 592.790291][T14455] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 592.825289][T14455] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 592.831331][T14455] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 592.951185][T14502] loop3: detected capacity change from 0 to 1024 [ 592.961631][T14502] EXT4-fs: Ignoring removed i_version option [ 593.005327][T14502] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 593.054502][ T5796] Bluetooth: hci0: command 0x0c1a tx timeout [ 593.129419][T14502] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.2803: Invalid block bitmap block 0 in block_group 0 [ 593.146698][T14502] __quota_error: 21 callbacks suppressed [ 593.146732][T14502] Quota error (device loop3): write_blk: dquota write failed [ 593.160031][T14502] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 593.170287][T14502] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2803: Failed to acquire dquot type 0 [ 593.192145][T14502] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.2803: Freeing blocks not in datazone - block = 0, count = 4096 [ 593.208078][T14502] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2803: Invalid inode bitmap blk 0 in block_group 0 [ 593.266732][T14502] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 593.279979][T14502] EXT4-fs (loop3): 1 orphan inode deleted [ 593.292269][T14502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.342312][ T7684] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 593.365001][T14455] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 593.572496][ T7684] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:21: Failed to release dquot type 0 [ 593.908469][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.197628][ T28] audit: type=1326 audit(1754079320.147:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14514 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 594.343460][ T28] audit: type=1326 audit(1754079320.167:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14514 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 594.420329][ T28] audit: type=1326 audit(1754079320.187:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14514 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 594.500815][ T28] audit: type=1326 audit(1754079320.187:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14514 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 594.630768][ T28] audit: type=1326 audit(1754079320.187:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14514 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 594.681057][ T5796] Bluetooth: hci2: command 0x0c1a tx timeout [ 594.743950][ T5796] Bluetooth: hci4: command 0x0c1a tx timeout [ 594.834728][ T28] audit: type=1326 audit(1754079320.187:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14514 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 594.900643][ T5796] Bluetooth: hci3: command 0x0c1a tx timeout [ 594.961009][ T28] audit: type=1326 audit(1754079320.197:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14514 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 595.012286][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.135092][ T5796] Bluetooth: hci0: command 0x0c1a tx timeout [ 595.175987][T14530] 9pnet: Could not find request transport: 0xffffffffffffffff [ 596.129279][T14544] loop4: detected capacity change from 0 to 512 [ 596.251518][T14544] EXT4-fs warning (device loop4): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 596.278389][T14554] loop0: detected capacity change from 0 to 1024 [ 596.286747][T14554] EXT4-fs: Ignoring removed i_version option [ 596.298457][T14554] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 596.341224][T14544] EXT4-fs (loop4): mount failed [ 596.367830][T14554] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.2819: Invalid block bitmap block 0 in block_group 0 [ 596.382756][T14554] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2819: Failed to acquire dquot type 0 [ 596.394608][T14554] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.2819: Freeing blocks not in datazone - block = 0, count = 4096 [ 596.409741][T14554] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2819: Invalid inode bitmap blk 0 in block_group 0 [ 596.426413][ T7681] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:18: Failed to release dquot type 0 [ 596.439360][T14554] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 596.460760][T14554] EXT4-fs (loop0): 1 orphan inode deleted [ 596.468204][T14554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.556116][T14559] loop3: detected capacity change from 0 to 764 [ 596.580072][T14559] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 596.733996][ T5796] Bluetooth: hci2: command 0x0c1a tx timeout [ 596.814033][ T5796] Bluetooth: hci4: command 0x0c1a tx timeout [ 596.975368][ T5796] Bluetooth: hci3: command 0x0c1a tx timeout [ 597.304336][ T5796] Bluetooth: hci0: command 0x0c1a tx timeout [ 598.081614][T14593] loop4: detected capacity change from 0 to 764 [ 598.136173][T14593] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 598.159058][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 598.159071][ T28] audit: type=1326 audit(1754079324.107:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 598.684041][ T28] audit: type=1326 audit(1754079324.107:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 598.714242][T14598] loop3: detected capacity change from 0 to 128 [ 598.813898][ T5796] Bluetooth: hci2: command 0x0c1a tx timeout [ 598.884957][ T28] audit: type=1326 audit(1754079324.377:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 598.923823][ T5796] Bluetooth: hci4: command 0x0c1a tx timeout [ 598.993997][ T28] audit: type=1326 audit(1754079324.377:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 599.053925][ T5796] Bluetooth: hci3: command 0x0c1a tx timeout [ 599.075239][ T28] audit: type=1326 audit(1754079324.427:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45e4d8d4d0 code=0x7ffc0000 [ 599.097897][ T28] audit: type=1326 audit(1754079324.527:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 599.141730][ T28] audit: type=1326 audit(1754079324.527:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 599.197608][ T28] audit: type=1326 audit(1754079324.787:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 599.454093][ T28] audit: type=1326 audit(1754079324.797:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 599.576050][ T28] audit: type=1326 audit(1754079324.797:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 600.338017][T14619] @: renamed from vlan0 (while UP) [ 604.424557][T14674] loop4: detected capacity change from 0 to 1024 [ 604.435177][T14674] EXT4-fs: Ignoring removed i_version option [ 604.570730][T14674] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 604.606939][T14674] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.2852: Invalid block bitmap block 0 in block_group 0 [ 604.621836][T14674] __quota_error: 28 callbacks suppressed [ 604.621869][T14674] Quota error (device loop4): write_blk: dquota write failed [ 604.635212][T14674] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 604.645465][T14674] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2852: Failed to acquire dquot type 0 [ 604.662708][T14674] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.2852: Freeing blocks not in datazone - block = 0, count = 4096 [ 604.688637][T14674] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2852: Invalid inode bitmap blk 0 in block_group 0 [ 604.702236][T14674] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 604.711790][T14674] EXT4-fs (loop4): 1 orphan inode deleted [ 604.722429][T14674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.769336][ T7685] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 604.983226][ T7685] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:22: Failed to release dquot type 0 [ 605.783885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 606.035261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 606.050161][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.085277][T14682] sctp: [Deprecated]: syz.3.2853 (pid 14682) Use of int in maxseg socket option. [ 606.085277][T14682] Use struct sctp_assoc_value instead [ 607.919787][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.044396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 610.084681][T14732] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 612.261464][T14765] loop0: detected capacity change from 0 to 1024 [ 612.316326][T14765] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 612.413522][T14765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.564525][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.883737][T14790] loop4: detected capacity change from 0 to 1024 [ 613.926436][T14790] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 614.036522][T14790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.123923][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 614.723995][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 615.034080][ T8] usb 1-1: config 0 has no interfaces? [ 615.044906][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 615.054732][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.067625][ T8] usb 1-1: config 0 descriptor?? [ 615.085764][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.098641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 615.413415][T14791] warning: `syz.0.2872' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 615.717936][T14827] lo speed is unknown, defaulting to 1000 [ 616.126397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 616.436843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 616.654606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 616.740317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 616.824158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 616.947452][T14841] loop4: detected capacity change from 0 to 512 [ 617.000747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 617.026049][T14841] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 617.108113][T14841] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 617.142996][T14841] EXT4-fs (loop4): 1 truncate cleaned up [ 617.151448][T14841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.241874][ T5818] usb 1-1: USB disconnect, device number 4 [ 617.639116][T14858] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2889'. [ 617.791795][T14862] @: renamed from vlan0 (while UP) [ 619.534220][T14844] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 619.826563][T14885] program syz.0.2896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.151891][T14893] lo speed is unknown, defaulting to 1000 [ 620.157820][T14893] lo speed is unknown, defaulting to 1000 [ 620.164399][T14893] lo speed is unknown, defaulting to 1000 [ 620.180508][T14893] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 620.237824][T14894] lo speed is unknown, defaulting to 1000 [ 620.245028][T14894] lo speed is unknown, defaulting to 1000 [ 620.380924][T14893] lo speed is unknown, defaulting to 1000 [ 620.392350][T14893] lo speed is unknown, defaulting to 1000 [ 620.403217][T14893] lo speed is unknown, defaulting to 1000 [ 620.414195][T14893] lo speed is unknown, defaulting to 1000 [ 622.404005][ T28] audit: type=1326 audit(1754079348.267:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 622.494314][ T28] audit: type=1326 audit(1754079348.267:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 622.562002][ T28] audit: type=1326 audit(1754079348.267:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 622.614014][ T28] audit: type=1326 audit(1754079348.267:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 622.701308][T14923] fuse: Bad value for 'fd' [ 622.720087][ T28] audit: type=1326 audit(1754079348.277:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 622.778352][ T28] audit: type=1326 audit(1754079348.277:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 622.857883][ T28] audit: type=1326 audit(1754079348.277:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 623.043884][ T28] audit: type=1326 audit(1754079348.277:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 623.149096][ T28] audit: type=1326 audit(1754079348.277:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 623.244993][ T28] audit: type=1326 audit(1754079348.277:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.0.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 623.651161][T14945] loop3: detected capacity change from 0 to 1024 [ 623.673542][T14945] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 623.851535][T14945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.013642][T14958] loop0: detected capacity change from 0 to 1024 [ 624.021291][T14958] EXT4-fs: Ignoring removed i_version option [ 624.498940][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.376630][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.394659][T14958] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 626.852613][T14958] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.2910: Invalid block bitmap block 0 in block_group 0 [ 626.868170][T14958] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2910: Failed to acquire dquot type 0 [ 626.885168][T14958] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.2910: Freeing blocks not in datazone - block = 0, count = 4096 [ 626.900475][T14958] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2910: Invalid inode bitmap blk 0 in block_group 0 [ 627.192493][T14958] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 627.223534][T14958] EXT4-fs (loop0): 1 orphan inode deleted [ 627.229976][T14958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.308687][ T1313] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 0 [ 627.338372][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.604803][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 628.604817][ T28] audit: type=1326 audit(1754079354.557:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 628.646328][ T28] audit: type=1326 audit(1754079354.557:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 628.676090][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.714147][ T28] audit: type=1326 audit(1754079354.587:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 628.849327][ T28] audit: type=1326 audit(1754079354.587:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 629.036696][ T28] audit: type=1326 audit(1754079354.587:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 629.097696][ T28] audit: type=1326 audit(1754079354.617:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 629.124914][ T28] audit: type=1326 audit(1754079354.617:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 629.577418][ T28] audit: type=1326 audit(1754079354.617:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 629.793908][ T28] audit: type=1326 audit(1754079354.617:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 629.944907][ T28] audit: type=1326 audit(1754079354.617:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 630.101270][T15000] loop0: detected capacity change from 0 to 1024 [ 630.200242][T15000] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 630.357648][T15000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.420288][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.651483][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.780762][T15029] loop0: detected capacity change from 0 to 1024 [ 631.788276][T15029] EXT4-fs: Ignoring removed i_version option [ 633.394199][T15029] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 633.625776][T15029] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.2919: Invalid block bitmap block 0 in block_group 0 [ 633.646608][T15029] __quota_error: 7 callbacks suppressed [ 633.646623][T15029] Quota error (device loop0): write_blk: dquota write failed [ 633.659948][T15029] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 633.670221][T15029] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2919: Failed to acquire dquot type 0 [ 633.683523][T15029] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.2919: Freeing blocks not in datazone - block = 0, count = 4096 [ 634.371813][T15029] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2919: Invalid inode bitmap blk 0 in block_group 0 [ 634.397559][T15029] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 634.659083][T15029] EXT4-fs (loop0): 1 orphan inode deleted [ 634.671164][T15029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.934078][ T42] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 635.144901][ T42] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0 [ 635.204213][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.616923][ T28] audit: type=1326 audit(1754079362.567:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 637.654445][ T28] audit: type=1326 audit(1754079362.567:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 637.784939][ T28] audit: type=1326 audit(1754079362.567:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 637.796922][T15064] program syz.0.2928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.070492][ T28] audit: type=1326 audit(1754079362.567:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 638.129286][T15069] lo speed is unknown, defaulting to 1000 [ 638.136797][T15069] lo speed is unknown, defaulting to 1000 [ 638.814407][ T28] audit: type=1326 audit(1754079362.567:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 638.827747][T15062] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2927'. [ 638.927555][ T28] audit: type=1326 audit(1754079362.567:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 639.213938][ T28] audit: type=1326 audit(1754079362.567:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 639.243917][ T28] audit: type=1326 audit(1754079362.567:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 639.647705][ T28] audit: type=1326 audit(1754079362.567:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 639.887772][ T28] audit: type=1326 audit(1754079362.567:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 639.989584][ T28] audit: type=1326 audit(1754079362.567:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 644.297323][T15169] lo speed is unknown, defaulting to 1000 [ 644.317692][T15169] lo speed is unknown, defaulting to 1000 [ 644.711227][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 645.246484][T15187] program syz.4.2956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.555416][T15190] siw: device registration error -23 [ 645.582375][T15190] lo speed is unknown, defaulting to 1000 [ 645.589668][T15190] lo speed is unknown, defaulting to 1000 [ 646.664909][T15206] loop0: detected capacity change from 0 to 1024 [ 646.706333][T15206] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 646.832048][T15206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.297775][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.516602][ T28] audit: type=1326 audit(1754079374.467:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 648.607410][ T28] audit: type=1326 audit(1754079374.467:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 648.725031][ T28] audit: type=1326 audit(1754079374.467:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 648.782296][ T28] audit: type=1326 audit(1754079374.467:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 648.851454][T15234] loop4: detected capacity change from 0 to 8192 [ 648.873929][ T28] audit: type=1326 audit(1754079374.467:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 648.983719][ T28] audit: type=1326 audit(1754079374.467:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 649.103271][ T28] audit: type=1326 audit(1754079374.467:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 649.167066][ T28] audit: type=1326 audit(1754079374.467:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 649.189608][ T28] audit: type=1326 audit(1754079374.487:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 649.233063][ T28] audit: type=1326 audit(1754079374.487:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.4.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 650.655540][T15271] lo speed is unknown, defaulting to 1000 [ 650.680406][T15271] lo speed is unknown, defaulting to 1000 [ 651.133040][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'. [ 651.169264][ T5849] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 651.406379][ T5849] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 651.462955][ T5849] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 651.544705][ T5849] usb 4-1: config 0 has no interface number 0 [ 651.570517][ T5849] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 651.630720][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.713475][ T5849] usb 4-1: Product: syz [ 653.038069][ T5849] usb 4-1: Manufacturer: syz [ 653.049537][ T5849] usb 4-1: SerialNumber: syz [ 653.062646][T15296] loop0: detected capacity change from 0 to 1024 [ 653.070070][T15296] EXT4-fs: Ignoring removed i_version option [ 653.077706][T15296] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 654.078921][ T5849] usb 4-1: config 0 descriptor?? [ 655.037101][T15296] EXT4-fs: error -4 creating inode table initialization thread [ 655.046222][T15296] EXT4-fs (loop0): mount failed [ 655.290455][ T5849] usb 4-1: can't set config #0, error -71 [ 655.311637][ T5849] usb 4-1: USB disconnect, device number 8 [ 656.142354][T15312] loop3: detected capacity change from 0 to 1024 [ 656.757882][T15312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.780556][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 656.780566][ T28] audit: type=1800 audit(1754079382.727:5320): pid=15309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2994" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 657.035517][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.442164][T15329] loop4: detected capacity change from 0 to 1024 [ 657.452819][T15329] EXT4-fs: Ignoring removed i_version option [ 657.617691][T15329] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 657.659968][T15329] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.2999: Invalid block bitmap block 0 in block_group 0 [ 657.678083][T15329] Quota error (device loop4): write_blk: dquota write failed [ 657.686221][T15329] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 657.696924][T15329] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2999: Failed to acquire dquot type 0 [ 657.723554][T15329] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.2999: Freeing blocks not in datazone - block = 0, count = 4096 [ 657.754698][T15329] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2999: Invalid inode bitmap blk 0 in block_group 0 [ 657.770836][T15329] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 657.792066][T15329] EXT4-fs (loop4): 1 orphan inode deleted [ 657.804904][T15329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.172343][ T1313] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 658.244260][ T1313] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 0 [ 658.716040][T15340] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3004'. [ 659.681662][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.353911][T15364] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3013'. [ 661.637715][T15378] loop0: detected capacity change from 0 to 1024 [ 661.647182][T15378] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 661.702942][T15378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.557603][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.978352][T15398] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3026'. [ 664.774064][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 664.973953][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 664.989613][ T23] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 665.009603][ T23] usb 1-1: config 0 has no interface number 0 [ 665.029964][ T23] usb 1-1: config 0 interface 12 has no altsetting 0 [ 665.046213][ T23] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 665.063556][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.261739][ T23] usb 1-1: Product: syz [ 666.212113][ T23] usb 1-1: Manufacturer: syz [ 666.216992][ T23] usb 1-1: SerialNumber: syz [ 666.245375][T15432] loop4: detected capacity change from 0 to 1024 [ 666.246330][ T23] usb 1-1: config 0 descriptor?? [ 666.269408][ T23] f81534 1-1:0.12: required endpoints missing [ 666.289562][T15432] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 666.359252][T15432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.427218][T15441] loop3: detected capacity change from 0 to 1024 [ 666.434722][T15441] EXT4-fs: Ignoring removed i_version option [ 666.591222][T15441] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 666.652959][T15441] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.3039: Invalid block bitmap block 0 in block_group 0 [ 666.669812][T15441] Quota error (device loop3): write_blk: dquota write failed [ 666.677579][T15441] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 666.688004][T15441] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3039: Failed to acquire dquot type 0 [ 666.708024][T15441] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.3039: Freeing blocks not in datazone - block = 0, count = 4096 [ 666.730447][T15441] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3039: Invalid inode bitmap blk 0 in block_group 0 [ 666.744313][T15441] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 666.753871][T15441] EXT4-fs (loop3): 1 orphan inode deleted [ 666.765075][T15441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.038418][ T7702] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 668.098227][T15444] lo speed is unknown, defaulting to 1000 [ 668.106124][T15444] lo speed is unknown, defaulting to 1000 [ 668.240142][ T7702] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:38: Failed to release dquot type 0 [ 668.525871][ T5818] usb 1-1: USB disconnect, device number 5 [ 669.417475][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.162538][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.180905][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3050'. [ 671.301847][T15482] loop4: detected capacity change from 0 to 1024 [ 671.330276][T15482] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 671.372012][T15482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.720327][T15493] loop0: detected capacity change from 0 to 1024 [ 671.727684][T15493] EXT4-fs: Ignoring removed i_version option [ 672.569613][T15493] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 672.652725][T15493] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.3054: Invalid block bitmap block 0 in block_group 0 [ 672.668209][T15493] Quota error (device loop0): write_blk: dquota write failed [ 672.675833][T15493] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 672.686126][T15493] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.3054: Failed to acquire dquot type 0 [ 672.701995][T15493] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.3054: Freeing blocks not in datazone - block = 0, count = 4096 [ 672.717171][T15493] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3054: Invalid inode bitmap blk 0 in block_group 0 [ 672.732389][T15493] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 672.743030][T15493] EXT4-fs (loop0): 1 orphan inode deleted [ 672.755455][T15493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.958646][ T48] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 673.014116][ T48] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0 [ 673.111036][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.299816][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.555146][ T28] audit: type=1326 audit(1754079403.497:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 677.638858][ T28] audit: type=1326 audit(1754079403.497:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 677.675110][ T28] audit: type=1326 audit(1754079403.507:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 677.719945][ T28] audit: type=1326 audit(1754079403.507:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 677.763097][ T28] audit: type=1326 audit(1754079403.507:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 677.832536][ T28] audit: type=1326 audit(1754079403.507:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 677.886253][ T28] audit: type=1326 audit(1754079403.507:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 677.909374][ T28] audit: type=1326 audit(1754079403.507:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 677.932640][ T28] audit: type=1326 audit(1754079403.527:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 677.955953][ T28] audit: type=1326 audit(1754079403.527:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 678.011903][ T28] audit: type=1326 audit(1754079403.527:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 678.096711][ T28] audit: type=1326 audit(1754079403.537:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.2.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 678.982287][T15572] program syz.4.3081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 679.235485][T15577] loop3: detected capacity change from 0 to 1024 [ 680.617877][T15579] siw: device registration error -23 [ 680.723566][T15579] lo speed is unknown, defaulting to 1000 [ 680.737396][T15579] lo speed is unknown, defaulting to 1000 [ 681.067312][T15577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.432445][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.528768][T15595] loop0: detected capacity change from 0 to 764 [ 681.562719][T15595] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 682.688985][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3093'. [ 682.715944][T15612] loop4: detected capacity change from 0 to 1024 [ 682.732761][T15612] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 682.771297][T15612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.887847][T15622] loop0: detected capacity change from 0 to 764 [ 682.899542][T15622] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 683.762429][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.967188][T15638] program syz.0.3103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 684.313017][T15642] lo speed is unknown, defaulting to 1000 [ 684.319610][T15642] lo speed is unknown, defaulting to 1000 [ 684.991964][T15653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3107'. [ 685.056677][T15656] loop3: detected capacity change from 0 to 764 [ 685.091719][T15656] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 685.435747][T15661] loop0: detected capacity change from 0 to 1024 [ 685.458777][T15661] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 685.527346][T15661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.974413][T15668] loop3: detected capacity change from 0 to 1024 [ 685.991967][T15668] EXT4-fs: Ignoring removed i_version option [ 687.054221][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.060504][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.058179][T15668] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 689.063564][T15668] EXT4-fs: error -4 creating inode table initialization thread [ 689.071849][T15668] EXT4-fs (loop3): mount failed [ 689.321296][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.645079][T15686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3117'. [ 689.759188][T15688] loop0: detected capacity change from 0 to 512 [ 689.864006][T15688] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 689.970409][T15688] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 690.094502][T15688] EXT4-fs (loop0): 1 truncate cleaned up [ 690.124000][T15688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.160492][T15707] siw: device registration error -23 [ 691.794289][T15706] loop4: detected capacity change from 0 to 1024 [ 691.821476][T15706] EXT4-fs: Ignoring removed i_version option [ 693.053958][T15694] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 693.268037][T15706] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 693.328816][T15706] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.3122: Invalid block bitmap block 0 in block_group 0 [ 693.350946][T15706] __quota_error: 29 callbacks suppressed [ 693.350984][T15706] Quota error (device loop4): write_blk: dquota write failed [ 693.364459][T15706] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 693.374797][T15706] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3122: Failed to acquire dquot type 0 [ 693.398478][T15706] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.3122: Freeing blocks not in datazone - block = 0, count = 4096 [ 693.414746][T15706] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3122: Invalid inode bitmap blk 0 in block_group 0 [ 693.431181][T15706] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 693.446126][T15706] EXT4-fs (loop4): 1 orphan inode deleted [ 693.457548][T15706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.692905][ T42] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 693.865063][ T42] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0 [ 695.038877][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.422459][T15726] loop3: detected capacity change from 0 to 764 [ 695.451771][T15726] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 695.473476][T15728] lo speed is unknown, defaulting to 1000 [ 695.515787][T15728] lo speed is unknown, defaulting to 1000 [ 696.058089][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3131'. [ 697.303342][T15763] lo speed is unknown, defaulting to 1000 [ 697.318335][T15763] lo speed is unknown, defaulting to 1000 [ 697.527314][T15768] loop3: detected capacity change from 0 to 1024 [ 697.539783][T15768] EXT4-fs: Ignoring removed i_version option [ 697.716974][T15768] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 697.792279][T15768] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.3146: Invalid block bitmap block 0 in block_group 0 [ 697.809940][T15768] Quota error (device loop3): write_blk: dquota write failed [ 697.817732][T15768] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 697.828197][T15768] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3146: Failed to acquire dquot type 0 [ 697.863109][T15768] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.3146: Freeing blocks not in datazone - block = 0, count = 4096 [ 697.881580][T15768] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3146: Invalid inode bitmap blk 0 in block_group 0 [ 697.906102][ T5890] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 697.927512][T15768] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 697.937908][T15768] EXT4-fs (loop3): 1 orphan inode deleted [ 697.954157][T15768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.283918][ T5890] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:9: Failed to release dquot type 0 [ 699.327007][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.374019][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3145'. [ 699.974138][T15788] program syz.3.3153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 700.202060][T15788] siw: device registration error -23 [ 700.231398][T15788] lo speed is unknown, defaulting to 1000 [ 700.238593][T15788] lo speed is unknown, defaulting to 1000 [ 701.028166][T15807] loop3: detected capacity change from 0 to 1024 [ 701.282872][T15807] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 701.655553][T15807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.029593][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.421997][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.901078][T15834] loop3: detected capacity change from 0 to 1024 [ 703.929207][T15834] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 703.992366][T15834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.033425][T15843] loop4: detected capacity change from 0 to 1024 [ 704.059791][T15843] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 704.205173][T15843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.279259][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.281145][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.858339][T15879] loop3: detected capacity change from 0 to 1024 [ 706.866673][T15879] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 706.922348][ T28] audit: type=1326 audit(1754079432.867:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 706.952483][T15879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.984191][ T28] audit: type=1326 audit(1754079432.867:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 707.080347][T15884] loop0: detected capacity change from 0 to 8192 [ 707.122907][ T28] audit: type=1326 audit(1754079432.897:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 707.172182][ T28] audit: type=1326 audit(1754079432.897:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 707.244440][ T28] audit: type=1326 audit(1754079432.897:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 707.269750][ T28] audit: type=1326 audit(1754079432.897:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 707.320682][ T28] audit: type=1326 audit(1754079432.897:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 707.639754][T15892] fuse: Bad value for 'fd' [ 707.785622][ T28] audit: type=1326 audit(1754079432.897:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 707.948972][ T28] audit: type=1326 audit(1754079432.897:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 707.972806][ T28] audit: type=1326 audit(1754079432.897:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 708.057270][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.101880][T15917] loop3: detected capacity change from 0 to 1024 [ 709.113269][T15917] EXT4-fs: Ignoring removed i_version option [ 709.161321][T15917] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 709.296174][T15917] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.3195: Invalid block bitmap block 0 in block_group 0 [ 709.313624][T15917] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3195: Failed to acquire dquot type 0 [ 709.364522][T15917] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.3195: Freeing blocks not in datazone - block = 0, count = 4096 [ 709.399609][T15917] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3195: Invalid inode bitmap blk 0 in block_group 0 [ 709.420696][ T42] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0 [ 709.436841][T15917] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 709.446686][T15917] EXT4-fs (loop3): 1 orphan inode deleted [ 709.457622][T15917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.763423][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.159879][T15949] siw: device registration error -23 [ 713.043930][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 713.043943][ T28] audit: type=1326 audit(1754079438.987:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 713.090864][ T28] audit: type=1326 audit(1754079438.987:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 713.137194][ T28] audit: type=1326 audit(1754079438.987:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 713.216699][ T28] audit: type=1326 audit(1754079438.987:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 713.242637][ T28] audit: type=1326 audit(1754079438.987:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 713.339098][ T28] audit: type=1326 audit(1754079438.987:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 713.388602][ T28] audit: type=1326 audit(1754079438.987:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 714.078265][ T28] audit: type=1326 audit(1754079438.987:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 714.873865][ T28] audit: type=1326 audit(1754079438.987:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 714.966754][T15966] loop3: detected capacity change from 0 to 1024 [ 714.974139][T15966] EXT4-fs: Ignoring removed i_version option [ 716.094177][ T28] audit: type=1326 audit(1754079438.987:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 717.050074][T15966] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 718.031506][T15966] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.3211: Invalid block bitmap block 0 in block_group 0 [ 718.045366][T15966] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3211: Failed to acquire dquot type 0 [ 718.063980][T15966] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.3211: Freeing blocks not in datazone - block = 0, count = 4096 [ 718.079817][T15966] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3211: Invalid inode bitmap blk 0 in block_group 0 [ 718.096407][T15966] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 718.111979][T15966] EXT4-fs (loop3): 1 orphan inode deleted [ 718.123842][T15966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.174164][ T42] __quota_error: 14 callbacks suppressed [ 718.174178][ T42] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 718.189393][ T42] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0 [ 718.368087][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.926105][T15997] loop4: detected capacity change from 0 to 1024 [ 720.958372][T15997] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 721.027148][T15997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.721295][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.774720][T16029] loop0: detected capacity change from 0 to 1024 [ 723.811626][T16029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.827726][ T28] audit: type=1800 audit(1754079449.777:5431): pid=16029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3232" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 724.046877][T16039] loop4: detected capacity change from 0 to 1024 [ 724.067288][T16039] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 724.111262][T16039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.188210][T16029] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4036: comm syz.0.3232: Allocating blocks 497-513 which overlap fs metadata [ 724.358223][T16027] EXT4-fs (loop0): pa ffff888077edecb0: logic 32, phys. 161, len 22 [ 724.367699][T16027] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 726.057291][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.588528][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.661501][T16063] loop0: detected capacity change from 0 to 1024 [ 726.726918][T16063] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 726.787683][T16063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.090414][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.021678][T16094] loop3: detected capacity change from 0 to 1024 [ 730.119305][T16094] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 730.203354][T16094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.301458][T16108] siw: device registration error -23 [ 732.660744][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.156342][T16122] loop4: detected capacity change from 0 to 512 [ 734.664700][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3258'. [ 734.988727][T16124] lo speed is unknown, defaulting to 1000 [ 734.995941][T16124] lo speed is unknown, defaulting to 1000 [ 735.178427][T16122] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 735.186723][T16122] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 735.209205][T16122] EXT4-fs (loop4): 1 truncate cleaned up [ 735.217930][T16122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.276898][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.037722][T16143] loop0: detected capacity change from 0 to 1024 [ 736.045596][T16143] EXT4-fs: Ignoring removed i_version option [ 736.775097][T16145] siw: device registration error -23 [ 738.686125][T16143] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 738.696937][T16143] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 738.697357][T16143] EXT4-fs: failed to create workqueue [ 738.713363][T16143] EXT4-fs (loop0): mount failed [ 738.951817][T16148] loop4: detected capacity change from 0 to 764 [ 738.979983][T16148] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 740.681861][T16178] siw: device registration error -23 [ 742.207902][T16198] vti0: entered promiscuous mode [ 742.212912][T16198] vti0: entered allmulticast mode [ 742.242854][T16197] lo speed is unknown, defaulting to 1000 [ 742.249422][T16197] lo speed is unknown, defaulting to 1000 [ 742.452426][T16206] loop4: detected capacity change from 0 to 512 [ 743.338530][T16206] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 743.347803][T16206] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 743.357479][T16206] EXT4-fs (loop4): 1 truncate cleaned up [ 743.363918][T16206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.954370][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 744.329905][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.380090][ T28] audit: type=1326 audit(1754079470.327:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 744.507266][ T28] audit: type=1326 audit(1754079470.357:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 745.086074][ T28] audit: type=1326 audit(1754079470.357:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 745.110423][ T28] audit: type=1326 audit(1754079470.357:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 745.152469][ T28] audit: type=1326 audit(1754079470.647:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 745.214621][ T28] audit: type=1326 audit(1754079470.647:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 745.247356][ T28] audit: type=1326 audit(1754079470.647:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 745.278972][ T28] audit: type=1326 audit(1754079470.697:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 745.397326][ T28] audit: type=1326 audit(1754079470.697:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 745.505498][T16226] loop3: detected capacity change from 0 to 1024 [ 745.522286][ T28] audit: type=1326 audit(1754079470.707:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f4568d8eb69 code=0x7ffc0000 [ 745.595724][T16226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.890327][T16226] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.3289: Allocating blocks 497-513 which overlap fs metadata [ 745.912700][T16224] EXT4-fs (loop3): pa ffff888077ede658: logic 32, phys. 161, len 22 [ 745.921133][T16224] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 746.058647][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.410270][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.416969][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.523915][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 748.713861][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 748.726212][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 748.755069][ T23] usb 4-1: config 9 has an invalid interface number: 48 but max is 0 [ 748.763552][ T23] usb 4-1: config 9 has no interface number 0 [ 748.779983][ T23] usb 4-1: config 9 interface 48 has no altsetting 0 [ 748.800012][ T23] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 748.812923][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.831194][ T23] usb 4-1: Product: syz [ 748.841313][ T23] usb 4-1: Manufacturer: syz [ 748.851567][ T23] usb 4-1: SerialNumber: syz [ 749.089397][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 749.305316][T16279] loop4: detected capacity change from 0 to 764 [ 749.325463][T16279] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 749.693700][ T23] gspca_vc032x: reg_r err -71 [ 749.767151][T16286] loop4: detected capacity change from 0 to 1024 [ 749.774920][T16286] EXT4-fs: Ignoring removed i_version option [ 751.069827][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.089103][T16286] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 752.079661][T16286] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.3307: Invalid block bitmap block 0 in block_group 0 [ 752.095574][T16286] __quota_error: 65 callbacks suppressed [ 752.095611][T16286] Quota error (device loop4): write_blk: dquota write failed [ 752.109201][T16286] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 752.120771][T16286] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3307: Failed to acquire dquot type 0 [ 752.149391][T16286] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.3307: Freeing blocks not in datazone - block = 0, count = 4096 [ 752.173534][T16286] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3307: Invalid inode bitmap blk 0 in block_group 0 [ 752.187043][T16286] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 752.196606][T16286] EXT4-fs (loop4): 1 orphan inode deleted [ 752.207383][T16286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.736624][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.741938][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.763875][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.769178][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.787299][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.792603][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.823901][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.829791][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.839832][ T7681] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 752.844099][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.878400][ T7681] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:18: Failed to release dquot type 0 [ 752.903901][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.909243][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.919297][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.980275][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 752.996508][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 753.001851][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 753.061271][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 753.094376][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 753.099724][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 753.134000][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 753.153891][ T23] gspca_vc032x: Unknown sensor... [ 753.164275][ T23] vc032x: probe of 4-1:9.48 failed with error -22 [ 753.214286][ T23] usb 4-1: USB disconnect, device number 9 [ 753.604286][ T28] audit: type=1326 audit(1754079479.557:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16302 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 753.688222][ T28] audit: type=1326 audit(1754079479.577:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16302 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 753.752611][ T28] audit: type=1326 audit(1754079479.607:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16302 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 753.833488][ T28] audit: type=1326 audit(1754079479.607:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16302 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 753.926688][ T28] audit: type=1326 audit(1754079479.607:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16302 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 753.949532][ T28] audit: type=1326 audit(1754079479.607:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16302 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 753.988281][ T28] audit: type=1326 audit(1754079479.607:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16302 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 754.016087][T16303] loop4: detected capacity change from 0 to 8192 [ 754.190431][T16316] loop3: detected capacity change from 0 to 1024 [ 754.201169][T16316] EXT4-fs: Ignoring removed i_version option [ 754.253697][T16316] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 754.291649][T16316] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.3317: Invalid block bitmap block 0 in block_group 0 [ 754.307573][T16316] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3317: Failed to acquire dquot type 0 [ 754.322899][T16316] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.3317: Freeing blocks not in datazone - block = 0, count = 4096 [ 754.338178][T16316] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3317: Invalid inode bitmap blk 0 in block_group 0 [ 754.363135][T16316] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 754.375641][T16316] EXT4-fs (loop3): 1 orphan inode deleted [ 754.387182][T16316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.447316][ T7702] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:38: Failed to release dquot type 0 [ 755.806103][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.910798][T16350] loop0: detected capacity change from 0 to 512 [ 756.943673][T16350] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 756.951921][T16350] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 756.969784][T16355] program syz.4.3328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 756.988086][T16350] EXT4-fs (loop0): 1 truncate cleaned up [ 756.995455][T16350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.264268][T16357] siw: device registration error -23 [ 757.379820][T16357] lo speed is unknown, defaulting to 1000 [ 757.393879][T16357] lo speed is unknown, defaulting to 1000 [ 757.937167][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.243574][T16365] loop3: detected capacity change from 0 to 764 [ 758.326530][T16365] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 758.631314][T16370] loop0: detected capacity change from 0 to 1024 [ 758.660392][T16370] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 758.721982][T16370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.763558][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3335'. [ 759.739803][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.462478][T16421] program syz.4.3352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 760.710206][T16421] siw: device registration error -23 [ 760.737556][T16421] lo speed is unknown, defaulting to 1000 [ 760.749531][T16421] lo speed is unknown, defaulting to 1000 [ 761.110372][T16436] loop3: detected capacity change from 0 to 1024 [ 761.143022][T16436] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 761.316788][T16436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.588175][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.688093][T16467] loop3: detected capacity change from 0 to 764 [ 762.759017][T16467] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 763.542618][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 763.542632][ T28] audit: type=1326 audit(1754079489.487:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 763.674595][ T28] audit: type=1326 audit(1754079489.487:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 763.741902][ T28] audit: type=1326 audit(1754079489.487:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 763.775153][ T28] audit: type=1326 audit(1754079489.487:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 763.918583][ T28] audit: type=1326 audit(1754079489.487:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 763.943907][ T28] audit: type=1326 audit(1754079489.517:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 764.044443][T16480] lo speed is unknown, defaulting to 1000 [ 764.051611][T16480] lo speed is unknown, defaulting to 1000 [ 764.626951][T16476] loop3: detected capacity change from 0 to 8192 [ 764.734270][ T28] audit: type=1326 audit(1754079489.517:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 764.816628][ T28] audit: type=1326 audit(1754079489.517:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 764.920769][ T28] audit: type=1326 audit(1754079489.547:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 764.969077][T16489] loop0: detected capacity change from 0 to 1024 [ 764.979121][T16486] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3372'. [ 764.997980][T16489] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 765.042410][ T28] audit: type=1326 audit(1754079489.547:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.3.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e4d8eb69 code=0x7ffc0000 [ 765.082191][T16489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.101080][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.129136][T16539] loop4: detected capacity change from 0 to 512 [ 767.157008][T16539] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 767.166302][T16539] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 767.186106][T16539] EXT4-fs (loop4): 1 truncate cleaned up [ 767.192488][T16539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.316222][T16543] fuse: Bad value for 'group_id' [ 767.889093][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.330181][T16564] loop0: detected capacity change from 0 to 764 [ 768.355432][T16564] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 769.067525][T16581] fuse: Bad value for 'group_id' [ 769.617293][T16586] lo speed is unknown, defaulting to 1000 [ 769.640913][T16586] lo speed is unknown, defaulting to 1000 [ 769.777759][T16596] loop4: detected capacity change from 0 to 764 [ 769.794043][ T1701] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 769.812518][T16596] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 770.172519][ T1701] usb 4-1: config 0 has no interfaces? [ 770.185635][ T1701] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 770.205027][ T1701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.894351][ T1701] usb 4-1: Product: syz [ 770.898570][ T1701] usb 4-1: Manufacturer: syz [ 770.959717][ T1701] usb 4-1: SerialNumber: syz [ 771.018669][ T1701] usb 4-1: config 0 descriptor?? [ 771.079742][T16606] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3414'. [ 771.500554][T16586] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.570998][T16616] loop4: detected capacity change from 0 to 1024 [ 771.679350][T16616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.722676][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 771.722690][ T28] audit: type=1800 audit(1754079497.667:5639): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3416" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 771.771854][ T23] usb 4-1: USB disconnect, device number 10 [ 773.134118][T16638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3425'. [ 773.193283][T16640] loop0: detected capacity change from 0 to 512 [ 773.230572][T16640] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 773.238849][T16640] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 773.249673][T16640] EXT4-fs (loop0): 1 truncate cleaned up [ 773.256717][T16640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.206543][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.410903][T14005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.302877][T16673] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3438'. [ 776.694665][T16692] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3444'. [ 776.928362][ T28] audit: type=1326 audit(1754079502.867:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 777.006983][ T28] audit: type=1326 audit(1754079502.867:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 777.222143][ T28] audit: type=1326 audit(1754079502.867:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 777.276642][ T28] audit: type=1326 audit(1754079502.867:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 777.361114][T16708] loop0: detected capacity change from 0 to 1024 [ 777.368593][T16708] EXT4-fs: Ignoring removed i_version option [ 779.056148][T16699] loop4: detected capacity change from 0 to 8192 [ 779.094563][T16708] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 779.105849][ T28] audit: type=1326 audit(1754079502.867:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 780.127954][ T28] audit: type=1326 audit(1754079502.867:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 780.748364][ T28] audit: type=1326 audit(1754079502.867:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 780.771187][T16708] EXT4-fs: error -4 creating inode table initialization thread [ 780.778975][T16708] EXT4-fs (loop0): mount failed [ 780.920894][ T28] audit: type=1326 audit(1754079502.867:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 780.944271][ T28] audit: type=1326 audit(1754079502.897:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 780.968779][ T28] audit: type=1326 audit(1754079502.907:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 781.234118][T16719] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3450'. [ 782.084696][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3454'. [ 782.109496][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3454'. [ 784.601781][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 784.601795][ T28] audit: type=1326 audit(1754079510.547:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 784.697317][ T28] audit: type=1326 audit(1754079510.547:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 785.064473][ T28] audit: type=1326 audit(1754079510.547:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 785.174471][ T28] audit: type=1326 audit(1754079510.547:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 785.233603][T16760] loop4: detected capacity change from 0 to 8192 [ 785.351821][ T28] audit: type=1326 audit(1754079510.547:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 785.523870][ T28] audit: type=1326 audit(1754079510.547:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 785.557506][T16766] lo speed is unknown, defaulting to 1000 [ 785.613081][T16766] lo speed is unknown, defaulting to 1000 [ 785.725563][ T28] audit: type=1326 audit(1754079510.547:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 785.803954][T16771] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3460'. [ 785.823565][ T28] audit: type=1326 audit(1754079510.547:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 785.949474][ T28] audit: type=1326 audit(1754079510.587:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 786.053841][ T28] audit: type=1326 audit(1754079510.587:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.4.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ddb8eb69 code=0x7ffc0000 [ 786.352626][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 786.484880][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 786.853956][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 786.874769][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 786.893884][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.925160][ T23] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:16.0/input/input5 [ 787.150854][ T5141] bcm5974 5-1:16.0: could not read from device [ 787.182724][ T5141] bcm5974 5-1:16.0: could not read from device [ 787.220781][ T5141] bcm5974 5-1:16.0: could not read from device [ 787.240313][ T23] usb 5-1: USB disconnect, device number 2 [ 787.267154][ T5141] bcm5974 5-1:16.0: could not read from device [ 787.702441][T16806] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3473'. [ 788.327391][T16819] lo speed is unknown, defaulting to 1000 [ 788.383119][T16819] lo speed is unknown, defaulting to 1000 [ 788.984227][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3477'. [ 789.090811][T16838] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3484'. [ 789.824045][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 789.915888][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 789.915902][ T28] audit: type=1326 audit(1754079515.867:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 789.977624][ T28] audit: type=1326 audit(1754079515.897:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 790.037025][ T28] audit: type=1326 audit(1754079515.897:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 790.043886][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 790.071451][T16854] loop0: detected capacity change from 0 to 8192 [ 790.081055][ T28] audit: type=1326 audit(1754079515.897:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 790.081450][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.119517][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 790.132983][ T28] audit: type=1326 audit(1754079515.897:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 790.156709][ T8] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 790.207342][ T28] audit: type=1326 audit(1754079515.897:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 790.244084][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 790.258475][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.267301][ T8] usb 5-1: Product: syz [ 790.271497][ T8] usb 5-1: Manufacturer: syz [ 790.281266][ T28] audit: type=1326 audit(1754079515.897:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 790.307035][ T8] usb 5-1: SerialNumber: syz [ 790.314480][ T28] audit: type=1326 audit(1754079515.897:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 790.340919][ T8] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 790.350004][ T8] cdc_ncm 5-1:1.0: bind() failure [ 790.369180][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 790.384140][ T8] cdc_ncm 5-1:1.1: bind() failure [ 790.416543][ T28] audit: type=1326 audit(1754079515.897:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 790.485837][ T28] audit: type=1326 audit(1754079515.897:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 790.611392][T12294] usb 5-1: USB disconnect, device number 3 [ 790.965023][T16871] lo speed is unknown, defaulting to 1000 [ 790.972951][T16871] lo speed is unknown, defaulting to 1000 [ 791.055603][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 793.805139][T16890] loop3: detected capacity change from 0 to 8192 [ 794.121257][T16906] netlink: 'syz.0.3504': attribute type 10 has an invalid length. [ 794.177512][T16906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3504'. [ 794.234351][T16906] team0: entered promiscuous mode [ 794.239441][T16906] team_slave_0: entered promiscuous mode [ 794.259603][T16906] team_slave_1: entered promiscuous mode [ 794.327939][T16916] loop3: detected capacity change from 0 to 512 [ 794.452579][T16918] program syz.4.3510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.582252][T16916] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 794.590467][T16916] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 794.605754][T16906] team0: entered allmulticast mode [ 794.611288][T16906] team_slave_0: entered allmulticast mode [ 794.617209][T16906] team_slave_1: entered allmulticast mode [ 794.677633][T16923] siw: device registration error -23 [ 795.378122][T16916] EXT4-fs (loop3): 1 truncate cleaned up [ 795.384689][T16916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.881309][T16906] bridge0: port 3(team0) entered blocking state [ 795.956212][T16906] bridge0: port 3(team0) entered disabled state [ 795.968369][T16906] bridge0: port 3(team0) entered blocking state [ 795.975998][T16906] bridge0: port 3(team0) entered forwarding state [ 796.118204][T16923] lo speed is unknown, defaulting to 1000 [ 796.124831][T16923] lo speed is unknown, defaulting to 1000 [ 796.924461][T16924] lo speed is unknown, defaulting to 1000 [ 796.930932][T16924] lo speed is unknown, defaulting to 1000 [ 799.683010][T16921] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 800.847089][T16974] lo speed is unknown, defaulting to 1000 [ 800.876820][T16974] lo speed is unknown, defaulting to 1000 [ 801.150542][T16984] loop0: detected capacity change from 0 to 1024 [ 801.193970][T16984] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 801.258287][T16984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.087806][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3517'. [ 803.440290][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.595000][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.393469][T17007] loop3: detected capacity change from 0 to 764 [ 804.423038][T17007] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 805.596361][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 805.596375][ T28] audit: type=1326 audit(1754079531.547:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 805.707292][ T28] audit: type=1326 audit(1754079531.577:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 805.767605][ T28] audit: type=1326 audit(1754079531.597:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 805.856416][ T28] audit: type=1326 audit(1754079531.597:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 805.927544][ T28] audit: type=1326 audit(1754079531.597:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 806.067546][ T28] audit: type=1326 audit(1754079531.597:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 806.109699][T17020] loop0: detected capacity change from 0 to 8192 [ 806.214640][ T28] audit: type=1326 audit(1754079531.597:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 806.399446][ T28] audit: type=1326 audit(1754079531.597:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 806.576159][ T28] audit: type=1326 audit(1754079531.597:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 806.662517][ T28] audit: type=1326 audit(1754079531.597:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bed8eb69 code=0x7ffc0000 [ 806.858525][T17038] loop0: detected capacity change from 0 to 1024 [ 806.892963][T17038] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 807.039757][T17038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.123280][T12297] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 807.153405][T17044] lo speed is unknown, defaulting to 1000 [ 807.160170][T17044] lo speed is unknown, defaulting to 1000 [ 807.927559][T12297] usb 4-1: Using ep0 maxpacket: 16 [ 807.955378][T17051] [ 807.957728][T17051] ============================================ [ 807.963854][T17051] WARNING: possible recursive locking detected [ 807.969986][T17051] 6.6.101-syzkaller #0 Not tainted [ 807.975073][T17051] -------------------------------------------- [ 807.981419][T17051] syz.0.3536/17051 is trying to acquire lock: [ 807.987469][T17051] ffff88805e9fbe88 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_truncate+0x91d/0x1060 [ 807.996765][T17051] [ 807.996765][T17051] but task is already holding lock: [ 808.004112][T17051] ffff88805c40f088 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x15fa/0x1c90 [ 808.013403][T17051] [ 808.013403][T17051] other info that might help us debug this: [ 808.021442][T17051] Possible unsafe locking scenario: [ 808.021442][T17051] [ 808.028875][T17051] CPU0 [ 808.032136][T17051] ---- [ 808.035394][T17051] lock(&ei->i_data_sem/3); [ 808.039967][T17051] lock(&ei->i_data_sem/3); [ 808.044541][T17051] [ 808.044541][T17051] *** DEADLOCK *** [ 808.044541][T17051] [ 808.052664][T17051] May be due to missing lock nesting notation [ 808.052664][T17051] [ 808.060963][T17051] 5 locks held by syz.0.3536/17051: [ 808.066144][T17051] #0: ffff88814d6c2418 (sb_writers#4){++++}-{0:0}, at: mnt_want_write+0x41/0x90 [ 808.075272][T17051] #1: ffff88805c40f210 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x187/0x220 [ 808.085555][T17051] #2: ffff88805c40f3a0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xef3/0x1c90 [ 808.095713][T17051] #3: ffff88805c40f088 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x15fa/0x1c90 [ 808.105438][T17051] #4: ffff88805c40eec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 808.115679][T17051] [ 808.115679][T17051] stack backtrace: [ 808.121545][T17051] CPU: 0 PID: 17051 Comm: syz.0.3536 Not tainted 6.6.101-syzkaller #0 [ 808.129676][T17051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 808.139732][T17051] Call Trace: [ 808.142993][T17051] [ 808.145908][T17051] dump_stack_lvl+0x16c/0x230 [ 808.150659][T17051] ? show_regs_print_info+0x20/0x20 [ 808.155849][T17051] ? print_deadlock_bug+0x435/0x5d0 [ 808.161058][T17051] __lock_acquire+0x5d40/0x7c80 [ 808.165929][T17051] ? verify_lock_unused+0x140/0x140 [ 808.171143][T17051] ? verify_lock_unused+0x140/0x140 [ 808.176334][T17051] ? ext4_get_group_desc+0x10e/0x4d0 [ 808.181617][T17051] ? __lock_acquire+0x7c80/0x7c80 [ 808.186648][T17051] lock_acquire+0x197/0x410 [ 808.191137][T17051] ? ext4_truncate+0x91d/0x1060 [ 808.195984][T17051] ? __might_sleep+0xe0/0xe0 [ 808.200744][T17051] ? ext4_orphan_add+0x128/0x11e0 [ 808.205758][T17051] ? read_lock_is_recursive+0x20/0x20 [ 808.211114][T17051] ? mark_buffer_dirty+0x231/0x4d0 [ 808.216213][T17051] ? __ext4_handle_dirty_metadata+0x2fd/0x800 [ 808.222280][T17051] down_write+0x97/0x1f0 [ 808.227735][T17051] ? ext4_truncate+0x91d/0x1060 [ 808.232585][T17051] ? down_read_killable+0x340/0x340 [ 808.237793][T17051] ext4_truncate+0x91d/0x1060 [ 808.242461][T17051] ? __ext4_mark_inode_dirty+0x6e0/0x6e0 [ 808.248079][T17051] ext4_evict_inode+0x8af/0xea0 [ 808.252935][T17051] ? _raw_spin_unlock+0x28/0x40 [ 808.257781][T17051] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 808.263659][T17051] ? do_raw_spin_unlock+0x121/0x230 [ 808.268856][T17051] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 808.274730][T17051] evict+0x486/0x870 [ 808.278617][T17051] ? __lock_acquire+0x7c80/0x7c80 [ 808.283623][T17051] ? proc_nr_inodes+0x230/0x230 [ 808.288456][T17051] ? do_raw_spin_unlock+0x121/0x230 [ 808.293637][T17051] ? _raw_spin_unlock+0x28/0x40 [ 808.298489][T17051] ? iput+0x70a/0x920 [ 808.302451][T17051] ext4_xattr_set_entry+0x132e/0x1e90 [ 808.307818][T17051] ext4_xattr_ibody_set+0x254/0x6a0 [ 808.313031][T17051] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 808.318925][T17051] __ext4_expand_extra_isize+0x306/0x400 [ 808.324549][T17051] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 808.330058][T17051] ext4_setattr+0x1673/0x1c90 [ 808.334750][T17051] ? ext4_write_inode+0x550/0x550 [ 808.339854][T17051] notify_change+0xb0d/0xe10 [ 808.344437][T17051] do_truncate+0x19b/0x220 [ 808.348838][T17051] ? put_page_bootmem+0x2c0/0x2c0 [ 808.353862][T17051] ? bpf_lsm_path_truncate+0x9/0x10 [ 808.359070][T17051] vfs_truncate+0x266/0x300 [ 808.363557][T17051] do_sys_truncate+0xe0/0x1a0 [ 808.368216][T17051] ? break_lease+0xd0/0xd0 [ 808.372615][T17051] ? lockdep_hardirqs_on+0x98/0x150 [ 808.378324][T17051] do_syscall_64+0x55/0xb0 [ 808.382760][T17051] ? clear_bhb_loop+0x40/0x90 [ 808.387419][T17051] ? clear_bhb_loop+0x40/0x90 [ 808.392163][T17051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.398046][T17051] RIP: 0033:0x7fa4bed8eb69 [ 808.402445][T17051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.422210][T17051] RSP: 002b:00007fa4bfc4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 808.430611][T17051] RAX: ffffffffffffffda RBX: 00007fa4befb6240 RCX: 00007fa4bed8eb69 [ 808.438577][T17051] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000100 [ 808.446541][T17051] RBP: 00007fa4bee11df1 R08: 0000000000000000 R09: 0000000000000000 [ 808.454496][T17051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.462460][T17051] R13: 0000000000000001 R14: 00007fa4befb6240 R15: 00007ffde9cff928 [ 808.470424][T17051] [ 808.481562][T12297] usb 4-1: unable to get BOS descriptor or descriptor too short [ 808.531555][T12297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.542584][T12297] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 808.555480][T12297] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 808.564575][T12297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.572558][T12297] usb 4-1: Product: syz [ 808.581525][T12297] usb 4-1: Manufacturer: syz [ 808.593162][T13277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.613882][T12297] usb 4-1: SerialNumber: syz [ 808.718014][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 808.819195][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.825621][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.868624][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.877496][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.895169][ T23] IPVS: starting estimator thread 0... [ 808.984429][T17059] IPVS: using max 70 ests per chain, 168000 per kthread [ 810.238340][T12297] usb 4-1: USB disconnect, device number 11