last executing test programs: 7m24.745935793s ago: executing program 4 (id=1375): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x8, 0x0, 0x4000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 7m22.851290575s ago: executing program 4 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=maciceland,umask=00000000000010000000011,iocharset=cp948,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a1) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') 7m19.898637962s ago: executing program 4 (id=1390): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m19.29851608s ago: executing program 32 (id=1393): r0 = add_key$keyring(&(0x7f0000001400), &(0x7f0000001300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000001340)={'syz', 0x0}, 0x0, 0x0, r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f0000000700)="$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") prlimit64(0x0, 0x1, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) socket(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) sendfile(r2, r3, 0x0, 0x4000000000010046) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="48ed16350a46", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x8, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) 7m17.703512183s ago: executing program 4 (id=1400): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x2, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 7m17.703147013s ago: executing program 4 (id=1401): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000820000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) 7m15.961930565s ago: executing program 4 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531fff300000000"], 0x40}}, 0x0) 6m59.499000836s ago: executing program 33 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531fff300000000"], 0x40}}, 0x0) 1m51.72573655s ago: executing program 0 (id=2175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 1m51.70351363s ago: executing program 0 (id=2176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") 1m50.968590737s ago: executing program 3 (id=2180): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m50.954649007s ago: executing program 3 (id=2181): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") chdir(&(0x7f0000000000)='./file0\x00') getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x110, &(0x7f0000000480)=ANY=[@ANYBLOB='iocharset=macromanian,dmask=00000000000000000000000,errors=remount-ro,errors=continue,fmask=00000000000000000122753,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6d6163726f6d616e69616e2c646973636172642c757466382c6572726f72733d636f6e74696e75652c00b24a414a138ea1f090829675858b"], 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") recvmmsg(0xffffffffffffffff, &(0x7f000000ae80)=[{{&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x3}, 0x1ff}, {{0x0, 0x0, &(0x7f0000002180)}, 0x8}, {{&(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002240)=""/230, 0xe6}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003440)=""/123, 0x7b}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0x4}, 0xa24f}, {{&(0x7f0000003540)=@generic, 0x80, &(0x7f0000001f80)=[{&(0x7f00000035c0)=""/252, 0xfc}], 0x1, &(0x7f00000036c0)=""/12, 0xc}, 0xc}, {{&(0x7f0000003700)=@xdp, 0x80, &(0x7f0000003780)=[{&(0x7f0000005d00)=""/116, 0x74}, {&(0x7f0000005e80)=""/4096, 0x1000}], 0x2, &(0x7f0000006e80)}, 0x3}, {{&(0x7f0000006ec0)=@nfc, 0x80, &(0x7f00000073c0)=[{&(0x7f0000006f40)=""/143, 0x8f}, {&(0x7f0000007000)=""/207, 0xcf}, {&(0x7f0000007100)=""/64, 0x40}, {&(0x7f0000007140)=""/206, 0xce}, {&(0x7f0000007240)=""/145, 0x91}, {&(0x7f0000007300)=""/155, 0x9b}], 0x6, &(0x7f0000007440)=""/134, 0x86}, 0x401}, {{0x0, 0x0, &(0x7f0000007580), 0x0, &(0x7f00000075c0)=""/175, 0xaf}, 0x5}, {{&(0x7f0000007680)=@nfc_llcp, 0x80, &(0x7f0000008c40)=[{&(0x7f0000007700)=""/4096, 0x1000}, {&(0x7f0000008700)=""/89, 0x59}, {&(0x7f0000008780)=""/138, 0x8a}, {&(0x7f0000008840)=""/150, 0x96}, {&(0x7f0000008900)=""/107, 0x6b}, {&(0x7f0000008980)=""/254, 0xfe}, {&(0x7f0000008a80)=""/196, 0xc4}, {&(0x7f0000008b80)=""/29, 0x1d}, {&(0x7f0000008bc0)=""/112, 0x70}], 0x9, &(0x7f0000008d00)=""/105, 0x69}, 0xc}, {{&(0x7f0000008d80)=@hci, 0x80, &(0x7f0000009e40)=[{&(0x7f0000008e00)=""/53, 0x35}, {&(0x7f0000008e40)=""/4096, 0x1000}], 0x2, &(0x7f0000009e80)=""/4096, 0x1000}, 0x9}], 0x9, 0x2020, &(0x7f000000b0c0)={0x0, 0x989680}) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 1m50.817992066s ago: executing program 0 (id=2182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 1m50.737304586s ago: executing program 0 (id=2183): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x208000, &(0x7f00000003c0)={[{@sysvgroups}, {@nodelalloc}]}, 0x1, 0x4fe, &(0x7f0000000540)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x100000}], 0x2, 0x1400, 0x0, 0x3) 1m50.555743235s ago: executing program 0 (id=2184): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) write$evdev(r0, &(0x7f0000000000), 0x100000008) 1m50.424558955s ago: executing program 0 (id=2185): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x8f8c, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) write$binfmt_misc(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000440)={0x0, 0xfffffd33, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void, @void}}}, 0x28}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)="bd30f56a07639fd7d5d4e184d3dd3ac0854b760d44603acbc6fc253fac097fe2de1aca5e7d2a631f5c764e58786819e981ed75683c0f8c2c931256e0243e216c3c99d9316cbdf4f0800e58d156e719f195aa924625873fe6104b946a2c656b852a7f807de4053bd7eeccf7138ba7cdc51205fc54f3f77f0c69ba0901087a1442fba39239c113067b5a738eb05d3124926b783e6943eabdde458f4d2ee1bbee88b0f2bdfaf6abc9cb5788abb09d7c272ab89ad560241c", 0xb6}, {&(0x7f0000000480)="67cece0bd96577be51f29a21261aa7e9b137b174a3ad6a7ce7280c7ed75f0d60f3", 0x21}, {&(0x7f00000004c0)="67c5954ada81ea596a503b72d2c98d78968c1877545a2ab07b9c75756bb1f17d905489b30dd7e7c081412a4d49189c1b0923e32151e92611bbec772a40ed6d4f4ecd7326a1b863e218e02f6ddd80da675bca1d9caaf05d8d841a935205a70f905edef3be0c4c1e9d999c2f64eaeec69b8301ef206b751833042f0840202103dfb42ded7ef0c78a21d6ad4aed45739b602731370bc087bc73862b20057494a2a570855e8a4565", 0xa6}], 0x3, &(0x7f00000005c0)="a74e413423fc5bdce07b307858092de68371cd6aab8ab23df301cfe3b656ef440f43eb26bcb8da42a4656e2bf4e0e5ca9cef5d7f45f484dfff360287e5865bc36ebb7ca52a83a224788229d9f69cce6d10485a342118565bea5976e0edf7c46c673dca792c52bde436367c6c1e15193df41fa45b8da0c4db3078fbdde66eaba0a46d0bf135978be25fdc4e2d72c778d2dd0ee80a973a28f2f774d81ae192daffcb1ad10d033e1c66c0d543366a96a2d7dfdcebfe9cd4152908e10346c720917d787f53f6ba833a298ef0dae440e6c8ac8b52c87db0d2c139bf1f16d67d7bd3dc05dc22a4f5", 0xe5, 0x20000000}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) 1m50.411731965s ago: executing program 34 (id=2185): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x8f8c, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) write$binfmt_misc(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000440)={0x0, 0xfffffd33, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void, @void}}}, 0x28}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)="bd30f56a07639fd7d5d4e184d3dd3ac0854b760d44603acbc6fc253fac097fe2de1aca5e7d2a631f5c764e58786819e981ed75683c0f8c2c931256e0243e216c3c99d9316cbdf4f0800e58d156e719f195aa924625873fe6104b946a2c656b852a7f807de4053bd7eeccf7138ba7cdc51205fc54f3f77f0c69ba0901087a1442fba39239c113067b5a738eb05d3124926b783e6943eabdde458f4d2ee1bbee88b0f2bdfaf6abc9cb5788abb09d7c272ab89ad560241c", 0xb6}, {&(0x7f0000000480)="67cece0bd96577be51f29a21261aa7e9b137b174a3ad6a7ce7280c7ed75f0d60f3", 0x21}, {&(0x7f00000004c0)="67c5954ada81ea596a503b72d2c98d78968c1877545a2ab07b9c75756bb1f17d905489b30dd7e7c081412a4d49189c1b0923e32151e92611bbec772a40ed6d4f4ecd7326a1b863e218e02f6ddd80da675bca1d9caaf05d8d841a935205a70f905edef3be0c4c1e9d999c2f64eaeec69b8301ef206b751833042f0840202103dfb42ded7ef0c78a21d6ad4aed45739b602731370bc087bc73862b20057494a2a570855e8a4565", 0xa6}], 0x3, &(0x7f00000005c0)="a74e413423fc5bdce07b307858092de68371cd6aab8ab23df301cfe3b656ef440f43eb26bcb8da42a4656e2bf4e0e5ca9cef5d7f45f484dfff360287e5865bc36ebb7ca52a83a224788229d9f69cce6d10485a342118565bea5976e0edf7c46c673dca792c52bde436367c6c1e15193df41fa45b8da0c4db3078fbdde66eaba0a46d0bf135978be25fdc4e2d72c778d2dd0ee80a973a28f2f774d81ae192daffcb1ad10d033e1c66c0d543366a96a2d7dfdcebfe9cd4152908e10346c720917d787f53f6ba833a298ef0dae440e6c8ac8b52c87db0d2c139bf1f16d67d7bd3dc05dc22a4f5", 0xe5, 0x20000000}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) 1m49.772568382s ago: executing program 3 (id=2190): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531fff3000000000000000800100000e20000"], 0x40}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="06"], 0x10) 1m47.419814522s ago: executing program 3 (id=2200): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x208000, &(0x7f00000003c0)={[{@sysvgroups}, {@nodelalloc}]}, 0x1, 0x4fe, &(0x7f0000000540)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x100000}], 0x2, 0x1400, 0x0, 0x3) 1m47.248978141s ago: executing program 3 (id=2202): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m47.05711224s ago: executing program 3 (id=2204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB='trans']) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8000000000004, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x2, 0x104, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) 1m47.03478856s ago: executing program 35 (id=2204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB='trans']) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8000000000004, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x2, 0x104, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) 1m42.050634859s ago: executing program 7 (id=2233): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) 1m41.965597579s ago: executing program 7 (id=2234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 1m40.952174045s ago: executing program 7 (id=2238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB='trans']) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8000000000004, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x2, 0x104, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) 1m40.502191903s ago: executing program 7 (id=2242): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x208000, &(0x7f00000003c0)={[{@sysvgroups}, {@nodelalloc}]}, 0x1, 0x4fe, &(0x7f0000000540)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x100000}], 0x2, 0x1400, 0x0, 0x3) 1m40.188261361s ago: executing program 7 (id=2246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=maciceland,umask=00000000000010000000011,iocharset=cp948,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a1) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') 1m39.7780091s ago: executing program 7 (id=2247): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x84c436, &(0x7f0000000bc0)=ANY=[], 0x1, 0x2a8, &(0x7f0000001000)="$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") getpid() socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1282, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002180)=@newsa={0x200, 0x11, 0x633, 0x0, 0x0, {{@in=@remote, @in6=@mcast2}, {@in6=@private1, 0x0, 0x32}, @in6=@private2, {}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0xc7, 0x1, {{'md5\x00'}, 0x3f8, "e8c9e8016283329d5210c2f58be640fb9e7cf404c8c5541a0e1c34e8a9f1459ac43b5e7bdd236555bbf5946459517be331bff60ca247e4696f007aaaa0ab59819c0f59a70f76710602b8cb65ccc86e3daaf6855d891fde9ecf4ed877e7d976edff1782781946f646452213f531026d024049009fede8ee928251637a53339f"}}]}, 0x200}}, 0x0) 1m39.196607107s ago: executing program 36 (id=2247): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x84c436, &(0x7f0000000bc0)=ANY=[], 0x1, 0x2a8, &(0x7f0000001000)="$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") getpid() socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1282, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002180)=@newsa={0x200, 0x11, 0x633, 0x0, 0x0, {{@in=@remote, @in6=@mcast2}, {@in6=@private1, 0x0, 0x32}, @in6=@private2, {}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0xc7, 0x1, {{'md5\x00'}, 0x3f8, "e8c9e8016283329d5210c2f58be640fb9e7cf404c8c5541a0e1c34e8a9f1459ac43b5e7bdd236555bbf5946459517be331bff60ca247e4696f007aaaa0ab59819c0f59a70f76710602b8cb65ccc86e3daaf6855d891fde9ecf4ed877e7d976edff1782781946f646452213f531026d024049009fede8ee928251637a53339f"}}]}, 0x200}}, 0x0) 43.189163492s ago: executing program 5 (id=2504): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 43.126553491s ago: executing program 5 (id=2506): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000"], 0x4c}}, 0x0) 43.100973401s ago: executing program 5 (id=2507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB='trans']) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8000000000004, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x2, 0x104, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) 39.900296218s ago: executing program 5 (id=2517): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfa, 0x56b, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$tun(r0, &(0x7f00000003c0)={@void, @void, @llc={@snap={0xaa, 0x1, "c4", "969095", 0x890d, "93f9b95efbcb0372359eb8631e760594c6296c5f8c15ae0aa33e854f757be329750435331d2c4efdfaabb5158aad54d656d290ee4efb1c8781454f16a4bf17daea1392b06cf6658cb6803105282a1053994ec7bca74af1b5b27e"}}}, 0x62) 39.439635755s ago: executing program 5 (id=2521): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="550a0000000000006311300000000000180000000000000000000000000000009500000000000000c8012f7d343577bc5489bea3ca16da006176dc78b8da072a924eaf875ca8460ae6b76fc6d4db013097f0c39ed90a4ffc2b65d4e0b2b338a5ad658c4394a3e9f481a7b2391c6ed42c2ab53302b40d59b3cfac4fbb397c396d6c8709b3f45bd0d78c66b85c199d4cee73394b744e963f9fa4fe26cff0ad5f5559adc7b2ed92113d45a1540a14ecee2cd3d1dff654d6bb8423"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xe0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000540)={0xa, {0x8, 0x7, 0x1}}, 0xa) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x114a, 0x0) 39.212622515s ago: executing program 5 (id=2522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 39.212462235s ago: executing program 37 (id=2522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 11.733563179s ago: executing program 6 (id=2590): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x4, [{@rand_addr=0x64010102, 0xf}]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x2}, 0x20) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.547125364s ago: executing program 2 (id=2594): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000900)={[{@noblock_validity}, {@data_ordered}, {@norecovery}, {@init_itable}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 10.300169073s ago: executing program 6 (id=2596): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x17, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x80000000, 0x5e, &(0x7f00000008c0)=""/94, 0x40f00, 0x22, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, &(0x7f00000009c0), 0x10, 0xe, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) write$evdev(r0, &(0x7f0000000000), 0x100000008) 8.835703637s ago: executing program 2 (id=2600): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095000000000000000d58d3223f1c3aebbced6b862ea798030e098d26c77fa072ad94e185"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) getpid() setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 6.789689908s ago: executing program 2 (id=2604): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f"], 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000d8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 6.730685638s ago: executing program 8 (id=2605): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) 6.033387155s ago: executing program 6 (id=2606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") 5.850175524s ago: executing program 2 (id=2607): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 5.795948664s ago: executing program 8 (id=2608): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000900)={[{@noblock_validity}, {@data_ordered}, {@norecovery}, {@init_itable}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") creat(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) 5.579332473s ago: executing program 2 (id=2610): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 5.541156893s ago: executing program 1 (id=2611): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x4, [{@rand_addr=0x64010102, 0xf}]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x2}, 0x20) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.093178961s ago: executing program 6 (id=2613): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095000000000000000d58d3223f1c3aebbced6b862ea798030e098d26c77fa072ad94e185"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) getpid() setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 3.707285345s ago: executing program 9 (id=2614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=maciceland,umask=00000000000010000000011,iocharset=cp948,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") rename(0x0, &(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a1) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') 3.705191825s ago: executing program 6 (id=2615): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2880, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000100)) 3.680787525s ago: executing program 1 (id=2616): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x4, [{@rand_addr=0x64010102, 0xf}]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x2}, 0x20) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.664070255s ago: executing program 8 (id=2617): ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 3.652944285s ago: executing program 2 (id=2618): r0 = add_key$keyring(&(0x7f0000001400), &(0x7f0000001300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000001340)={'syz', 0x0}, 0x0, 0x0, r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f0000000700)="$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") prlimit64(0x0, 0x1, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) socket(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(r2, r3, 0x0, 0x4000000000010046) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r8, r1, 0x1) 2.44745034s ago: executing program 9 (id=2619): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 2.37293801s ago: executing program 9 (id=2620): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0xa0080e, &(0x7f0000001100), 0x3, 0x443, &(0x7f0000000a40)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) 2.361396469s ago: executing program 1 (id=2621): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2.269985779s ago: executing program 1 (id=2622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=maciceland,umask=00000000000010000000011,iocharset=cp948,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a1) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') 1.890342257s ago: executing program 8 (id=2623): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0xe7681c38bdbee7c1, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.199922365s ago: executing program 6 (id=2624): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x17, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x80000000, 0x5e, &(0x7f00000008c0)=""/94, 0x40f00, 0x22, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f00000009c0), 0x10, 0xe, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) write$evdev(r0, &(0x7f0000000000), 0x100000008) 999.702704ms ago: executing program 1 (id=2625): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) 897.797493ms ago: executing program 8 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) 887.244414ms ago: executing program 9 (id=2627): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 846.292704ms ago: executing program 9 (id=2628): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 710.261803ms ago: executing program 9 (id=2629): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=") r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@updpolicy={0xfc, 0x19, 0x1, 0x4000000, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0x0, @in6=@private1}]}]}, 0xfc}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x0, 0xfffffffd, {0x3}}, 0x14}}, 0x0) 113.70367ms ago: executing program 8 (id=2630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=maciceland,umask=00000000000010000000011,iocharset=cp948,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") rename(0x0, &(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a1) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') 0s ago: executing program 1 (id=2631): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) kernel console output (not intermixed with test programs): config [ 985.407007][ T728] usb 6-1: config 0 has no interface number 0 [ 985.415254][ T728] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 985.424184][ T498] usb 8-1: Using ep0 maxpacket: 16 [ 985.429149][ T728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.436946][ T728] usb 6-1: Product: syz [ 985.441064][ T728] usb 6-1: Manufacturer: syz [ 985.445553][ T728] usb 6-1: SerialNumber: syz [ 985.450429][ T498] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.461383][ T498] usb 8-1: config 0 interface 0 has no altsetting 0 [ 985.468137][ T728] usb 6-1: config 0 descriptor?? [ 985.473020][ T498] usb 8-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 985.482000][ T498] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.492220][ T498] usb 8-1: config 0 descriptor?? [ 985.500347][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.507310][ T9232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.514366][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.521201][ T9232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.548969][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 985.556581][ T1982] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.564145][ T1982] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.574493][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 985.582648][ T1982] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.589498][ T1982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.601506][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 985.609744][ T1982] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.616637][ T1982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.630851][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 985.643050][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 985.660615][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 985.672793][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 985.681322][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 985.688864][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 985.696466][ T728] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 985.704550][ T9232] device veth0_vlan entered promiscuous mode [ 985.711034][ T728] usb 6-1: No valid video chain found. [ 985.711814][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 985.718154][ T728] usb 6-1: USB disconnect, device number 16 [ 985.738371][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 985.754214][ T9232] device veth1_macvtap entered promiscuous mode [ 985.764493][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 985.774688][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 985.784250][ T1582] device bridge_slave_1 left promiscuous mode [ 985.790253][ T1582] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.797960][ T1582] device bridge_slave_0 left promiscuous mode [ 985.803974][ T1582] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.812139][ T1582] device veth0_vlan left promiscuous mode [ 985.847119][ T290] EXT4-fs (loop1): unmounting filesystem. [ 985.912724][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 985.952001][ T9246] device sit0 entered promiscuous mode [ 985.959111][ T9246] netlink: 'syz.8.2205': attribute type 1 has an invalid length. [ 985.966888][ T9246] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2205'. [ 986.017431][ T5766] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 986.161542][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2210'. [ 986.208196][ T498] usbhid 8-1:0.0: can't add hid device: -71 [ 986.217380][ T728] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 986.277342][ T498] usbhid: probe of 8-1:0.0 failed with error -71 [ 986.331397][ T498] usb 8-1: USB disconnect, device number 2 [ 986.477421][ T728] usb 2-1: Using ep0 maxpacket: 16 [ 986.488367][ T728] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.547637][ T728] usb 2-1: config 0 interface 0 has no altsetting 0 [ 986.612635][ T728] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 986.623354][ T728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.656480][ T728] usb 2-1: config 0 descriptor?? [ 987.103517][ T5766] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.109254][ T9258] loop8: detected capacity change from 0 to 256 [ 987.114699][ T5766] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.130156][ T5766] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 987.139026][ T5766] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.147919][ T5766] usb 7-1: config 0 descriptor?? [ 987.154810][ T9258] exfat: Deprecated parameter 'namecase' [ 987.164351][ T9258] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 987.197371][ T498] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 987.210000][ T9262] loop8: detected capacity change from 0 to 512 [ 987.216853][ T9262] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 987.231870][ T9262] EXT4-fs (loop8): 1 orphan inode deleted [ 987.242125][ T9262] EXT4-fs (loop8): 1 truncate cleaned up [ 987.247763][ T9262] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 987.267255][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 987.303218][ T9269] loop5: detected capacity change from 0 to 512 [ 987.319442][ T9269] __quota_error: 17 callbacks suppressed [ 987.319462][ T9269] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 987.335215][ T9269] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 987.340699][ T9272] loop8: detected capacity change from 0 to 512 [ 987.344449][ T9269] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2216: Failed to acquire dquot type 0 [ 987.362621][ T9269] EXT4-fs (loop5): Remounting filesystem read-only [ 987.363280][ T728] usbhid 2-1:0.0: can't add hid device: -71 [ 987.369068][ T9269] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 987.376264][ T728] usbhid: probe of 2-1:0.0 failed with error -71 [ 987.384945][ T9269] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 987.384972][ T9269] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2216: Failed to acquire dquot type 0 [ 987.393047][ T498] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.403580][ T9269] EXT4-fs (loop5): Remounting filesystem read-only [ 987.416166][ T728] usb 2-1: USB disconnect, device number 45 [ 987.423312][ T9269] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 987.431214][ T498] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.434312][ T9269] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 987.445861][ T498] usb 8-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 987.454387][ T9269] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2216: Failed to acquire dquot type 0 [ 987.480405][ T498] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.491321][ T9269] EXT4-fs (loop5): Remounting filesystem read-only [ 987.493536][ T9272] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 987.497691][ T9269] EXT4-fs (loop5): 1 orphan inode deleted [ 987.507803][ T9272] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 987.507825][ T9272] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2217: Failed to acquire dquot type 0 [ 987.508848][ T9272] EXT4-fs (loop8): Remounting filesystem read-only [ 987.513432][ T9269] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 987.522698][ T9272] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 987.533745][ T9269] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.540003][ T9272] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 987.566696][ T498] usb 8-1: config 0 descriptor?? [ 987.569096][ T9272] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2217: Failed to acquire dquot type 0 [ 987.583171][ T9237] syz.6.2206[9237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 987.594668][ T9272] EXT4-fs (loop8): Remounting filesystem read-only [ 987.594717][ T9237] syz.6.2206[9237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 987.606922][ T9272] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2217: Failed to acquire dquot type 0 [ 987.636256][ T9272] EXT4-fs (loop8): Remounting filesystem read-only [ 987.642703][ T9272] EXT4-fs (loop8): 1 orphan inode deleted [ 987.648385][ T9272] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 987.657501][ T9272] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.839391][ T5766] usbhid 7-1:0.0: can't add hid device: -71 [ 987.845327][ T5766] usbhid: probe of 7-1:0.0 failed with error -71 [ 987.852451][ T5766] usb 7-1: USB disconnect, device number 22 [ 987.984906][ T498] uclogic 0003:5543:0781.004D: item fetching failed at offset 5/7 [ 987.992882][ T498] uclogic 0003:5543:0781.004D: parse failed [ 987.998899][ T498] uclogic: probe of 0003:5543:0781.004D failed with error -22 [ 988.083854][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 988.122286][ T9282] loop5: detected capacity change from 0 to 512 [ 988.133951][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 988.137862][ T9283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 988.170451][ T9283] loop1: detected capacity change from 0 to 512 [ 988.208716][ T9282] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 988.226856][ T9283] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.1.2219: corrupted xattr block 95 [ 988.233942][ T9282] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 988.249831][ T9283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2219: bg 0: block 7: invalid block bitmap [ 988.251691][ T5766] usb 8-1: USB disconnect, device number 3 [ 988.274258][ T9283] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 988.300596][ T9283] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #11: comm syz.1.2219: corrupted xattr block 95 [ 988.368206][ T9283] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 988.384272][ T9283] EXT4-fs (loop1): 1 orphan inode deleted [ 988.390056][ T9283] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 988.411296][ T9298] loop8: detected capacity change from 0 to 512 [ 988.437855][ T9298] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 988.448646][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 988.471879][ T9298] EXT4-fs (loop8): 1 orphan inode deleted [ 988.478921][ T9298] EXT4-fs (loop8): 1 truncate cleaned up [ 988.484410][ T9298] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 988.486220][ T9302] loop5: detected capacity change from 0 to 512 [ 988.515287][ T9302] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 988.613897][ T9302] EXT4-fs (loop5): 1 orphan inode deleted [ 988.620484][ T9302] EXT4-fs (loop5): 1 truncate cleaned up [ 988.631405][ T9302] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 988.660726][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 988.780678][ T9307] syz.5.2229[9307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.780763][ T9307] syz.5.2229[9307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.823828][ T9307] syz.5.2229[9307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.853244][ T9307] syz.5.2229[9307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.910804][ T9312] loop6: detected capacity change from 0 to 512 [ 988.928527][ T9315] 9pnet_fd: Insufficient options for proto=fd [ 988.938957][ T9317] loop7: detected capacity change from 0 to 512 [ 988.949478][ T9316] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.2225: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 988.999470][ T9317] EXT4-fs error (device loop7): ext4_acquire_dquot:6788: comm syz.7.2230: Failed to acquire dquot type 0 [ 989.011732][ T9317] EXT4-fs (loop7): Remounting filesystem read-only [ 989.018348][ T9317] EXT4-fs error (device loop7): ext4_acquire_dquot:6788: comm syz.7.2230: Failed to acquire dquot type 0 [ 989.030787][ T9317] EXT4-fs (loop7): Remounting filesystem read-only [ 989.039033][ T9317] EXT4-fs error (device loop7): ext4_acquire_dquot:6788: comm syz.7.2230: Failed to acquire dquot type 0 [ 989.051306][ T9317] EXT4-fs (loop7): Remounting filesystem read-only [ 989.057942][ T9317] EXT4-fs (loop7): 1 orphan inode deleted [ 989.063616][ T9317] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 989.072728][ T9317] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.302688][ T9316] EXT4-fs (loop8): Remounting filesystem read-only [ 989.371758][ T9312] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 989.405527][ T9312] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 990.185684][ T9163] EXT4-fs (loop7): unmounting filesystem. [ 990.277351][ T7699] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 990.468415][ T7699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.495977][ T7699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.516738][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 990.522624][ T7699] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 990.551831][ T7699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.560405][ T7699] usb 6-1: config 0 descriptor?? [ 990.867455][ T5766] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 990.978570][ T9324] syz.5.2232[9324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 990.978658][ T9324] syz.5.2232[9324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.005520][ T7699] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor [ 991.031341][ T7699] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.004E/input/input36 [ 991.066149][ T5766] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.085948][ T5766] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.104502][ T290] EXT4-fs (loop1): unmounting filesystem. [ 991.109657][ T5766] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 991.114640][ T7699] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 991.157361][ T5766] usb 9-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 991.188167][ T5766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.211179][ T9338] loop1: detected capacity change from 0 to 512 [ 991.234713][ T5766] usb 9-1: config 0 descriptor?? [ 991.252033][ T6142] usb 6-1: USB disconnect, device number 17 [ 991.261696][ T9338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 991.271783][ T9338] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.496157][ T290] EXT4-fs (loop1): unmounting filesystem. [ 991.662408][ T9347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 991.737949][ T9349] syz.6.2241[9349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.738030][ T9349] syz.6.2241[9349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.751306][ T9349] 9pnet_fd: Insufficient options for proto=fd [ 991.798467][ T5766] usbhid 9-1:0.0: can't add hid device: -71 [ 991.804255][ T5766] usbhid: probe of 9-1:0.0 failed with error -71 [ 991.812549][ T5766] usb 9-1: USB disconnect, device number 2 [ 991.829416][ T9355] loop1: detected capacity change from 0 to 512 [ 991.836092][ T9355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 991.847855][ T9355] EXT4-fs (loop1): 1 orphan inode deleted [ 991.853420][ T9355] EXT4-fs (loop1): 1 truncate cleaned up [ 991.858981][ T9355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 991.877192][ T290] EXT4-fs (loop1): unmounting filesystem. [ 991.886425][ T9353] loop7: detected capacity change from 0 to 512 [ 991.949752][ T9361] loop6: detected capacity change from 0 to 256 [ 991.957152][ T9353] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 991.966213][ T9353] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.005006][ T9361] exFAT-fs (loop6): failed to load alloc-bitmap [ 992.011881][ T9361] exFAT-fs (loop6): failed to recognize exfat type [ 992.026833][ T9163] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /6/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 992.052606][ T9163] EXT4-fs (loop7): unmounting filesystem. [ 992.140347][ T9367] loop5: detected capacity change from 0 to 512 [ 992.227615][ T6] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 992.263273][ T9367] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2245: Failed to acquire dquot type 0 [ 992.275528][ T9367] EXT4-fs (loop5): Remounting filesystem read-only [ 992.282279][ T9367] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2245: Failed to acquire dquot type 0 [ 992.296013][ T9367] EXT4-fs (loop5): Remounting filesystem read-only [ 992.304094][ T9367] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2245: Failed to acquire dquot type 0 [ 992.317015][ T9367] EXT4-fs (loop5): Remounting filesystem read-only [ 992.323635][ T9367] EXT4-fs (loop5): 1 orphan inode deleted [ 992.329285][ T9367] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 992.338242][ T9367] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.499139][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.594323][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.650256][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.714547][ T6] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 992.760632][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.828370][ T6] usb 2-1: config 0 descriptor?? [ 993.010176][ T314] device bridge_slave_1 left promiscuous mode [ 993.016648][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.027768][ T314] device bridge_slave_0 left promiscuous mode [ 993.034015][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.062082][ T314] device veth1_macvtap left promiscuous mode [ 993.262525][ T314] device veth0_vlan left promiscuous mode [ 993.269451][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 993.275324][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 993.308951][ T6] usb 2-1: USB disconnect, device number 46 [ 993.389919][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 993.444484][ T9384] bpf_get_probe_write_proto: 2 callbacks suppressed [ 993.444500][ T9384] syz.5.2253[9384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 993.451274][ T9384] syz.5.2253[9384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 993.463525][ T9384] syz.5.2253[9384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 993.474987][ T9384] syz.5.2253[9384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 993.486954][ T9384] 9pnet_fd: Insufficient options for proto=fd [ 993.531188][ T9387] loop8: detected capacity change from 0 to 512 [ 993.538601][ T9387] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 993.551442][ T9387] EXT4-fs (loop8): 1 orphan inode deleted [ 993.557162][ T9387] EXT4-fs (loop8): 1 truncate cleaned up [ 993.562927][ T9387] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 993.581561][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 993.603933][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.610982][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.621251][ T9377] device bridge_slave_0 entered promiscuous mode [ 993.630771][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.637815][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.662130][ T9394] loop5: detected capacity change from 0 to 512 [ 993.805503][ T9377] device bridge_slave_1 entered promiscuous mode [ 993.885546][ T9394] __quota_error: 14 callbacks suppressed [ 993.885570][ T9394] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 993.901331][ T9394] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 993.910680][ T9394] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2254: Failed to acquire dquot type 0 [ 993.923865][ T9394] EXT4-fs (loop5): Remounting filesystem read-only [ 993.930391][ T9394] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 993.940646][ T9394] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 993.949887][ T9394] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2254: Failed to acquire dquot type 0 [ 993.963228][ T9394] EXT4-fs (loop5): Remounting filesystem read-only [ 993.971006][ T9394] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 993.981271][ T9394] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 993.990524][ T9394] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2254: Failed to acquire dquot type 0 [ 994.003016][ T9394] EXT4-fs (loop5): Remounting filesystem read-only [ 994.009613][ T9394] EXT4-fs (loop5): 1 orphan inode deleted [ 994.015324][ T9394] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 994.024300][ T9394] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.455131][ T9402] loop1: detected capacity change from 0 to 1024 [ 994.541759][ T9402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 994.572275][ T28] audit: type=1400 audit(1734591008.236:235): avc: denied { read write } for pid=9399 comm="syz.1.2258" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 994.798244][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 994.819398][ T290] EXT4-fs (loop1): unmounting filesystem. [ 994.828940][ T28] audit: type=1400 audit(1734591008.256:236): avc: denied { open } for pid=9399 comm="syz.1.2258" path="/434/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 994.852018][ T28] audit: type=1400 audit(1734591008.476:237): avc: denied { rmdir } for pid=290 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 995.040381][ T28] audit: type=1400 audit(1734591008.476:238): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 995.112035][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 995.138936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 995.177754][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 995.185331][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 995.204472][ T9414] loop1: detected capacity change from 0 to 8192 [ 995.214218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 995.216830][ T9414] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 995.239695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 995.265117][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.272032][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.308082][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 995.361094][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 995.393825][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.400731][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.453242][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 995.530586][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 995.576888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 995.592224][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 995.626320][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 995.654301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 995.678785][ T9377] device veth0_vlan entered promiscuous mode [ 995.702657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.721153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.752022][ T9377] device veth1_macvtap entered promiscuous mode [ 995.784437][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 995.794409][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.820379][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.860075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 995.877712][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.890529][ T9424] loop8: detected capacity change from 0 to 512 [ 995.967201][ T9424] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 996.020624][ T9424] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.033644][ T9432] loop9: detected capacity change from 0 to 512 [ 996.043118][ T9432] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 996.092032][ T9436] syz.6.2266[9436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 996.092133][ T9436] syz.6.2266[9436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 996.107839][ T9432] EXT4-fs (loop9): 1 orphan inode deleted [ 996.132003][ T9432] EXT4-fs (loop9): 1 truncate cleaned up [ 996.145275][ T9432] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 996.199562][ T9444] loop5: detected capacity change from 0 to 128 [ 996.208468][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 996.878212][ T9451] loop1: detected capacity change from 0 to 512 [ 996.925366][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 997.003443][ T9451] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2271: Failed to acquire dquot type 0 [ 997.015652][ T9451] EXT4-fs (loop1): Remounting filesystem read-only [ 997.022221][ T9451] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2271: Failed to acquire dquot type 0 [ 997.035091][ T9451] EXT4-fs (loop1): Remounting filesystem read-only [ 997.042975][ T9451] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2271: Failed to acquire dquot type 0 [ 997.055398][ T9451] EXT4-fs (loop1): Remounting filesystem read-only [ 997.061996][ T9451] EXT4-fs (loop1): 1 orphan inode deleted [ 997.067619][ T9451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 997.076594][ T9451] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.728602][ T290] EXT4-fs (loop1): unmounting filesystem. [ 997.744857][ T8076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 997.799890][ T9462] loop8: detected capacity change from 0 to 512 [ 997.832787][ T9462] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 997.834484][ T9465] netlink: 472 bytes leftover after parsing attributes in process `syz.5.2270'. [ 997.842256][ T9462] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.933944][ T9470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 997.941041][ T9470] IPv6: NLM_F_CREATE should be set when creating new route [ 997.951484][ T9470] loop9: detected capacity change from 0 to 512 [ 997.958324][ T728] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 998.016280][ T9470] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.9.2273: corrupted xattr block 95 [ 998.029766][ T9470] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.2273: bg 0: block 7: invalid block bitmap [ 998.042682][ T9470] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 998.051564][ T9470] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2925: inode #11: comm syz.9.2273: corrupted xattr block 95 [ 998.064224][ T9470] EXT4-fs warning (device loop9): ext4_evict_inode:299: xattr delete (err -117) [ 998.073235][ T9470] EXT4-fs (loop9): 1 orphan inode deleted [ 998.079055][ T9470] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 998.157511][ T9452] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 998.187313][ T728] usb 7-1: Using ep0 maxpacket: 16 [ 998.193726][ T728] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 998.206810][ T728] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 998.216001][ T728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.224006][ T728] usb 7-1: Product: syz [ 998.228257][ T728] usb 7-1: Manufacturer: syz [ 998.232911][ T728] usb 7-1: SerialNumber: syz [ 998.250019][ T728] usb 7-1: config 0 descriptor?? [ 998.266953][ T728] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 998.279494][ T728] usb 7-1: Detected FT232R [ 998.348994][ T9452] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 998.357115][ T9452] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.367936][ T9452] usb 2-1: config 0 has no interface number 0 [ 998.375679][ T9452] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 998.384968][ T9452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.393708][ T9452] usb 2-1: Product: syz [ 998.397876][ T9452] usb 2-1: Manufacturer: syz [ 998.402449][ T9452] usb 2-1: SerialNumber: syz [ 998.409822][ T9452] usb 2-1: config 0 descriptor?? [ 998.465490][ T728] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 998.698821][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 998.709554][ T728] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 998.913109][ T7699] usb 7-1: USB disconnect, device number 23 [ 998.926395][ T7699] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 998.937361][ T7699] ftdi_sio 7-1:0.0: device disconnected [ 999.932871][ T9452] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 999.944841][ T9452] usb 2-1: No valid video chain found. [ 999.956401][ T9452] usb 2-1: USB disconnect, device number 47 [ 999.995271][ T9483] loop5: detected capacity change from 0 to 512 [ 1000.018868][ T9483] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1000.036384][ T9483] EXT4-fs (loop5): 1 orphan inode deleted [ 1000.042412][ T9483] EXT4-fs (loop5): 1 truncate cleaned up [ 1000.048522][ T9483] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1000.062172][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1000.063925][ T9486] loop8: detected capacity change from 0 to 512 [ 1000.088156][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 1000.097741][ T9490] syz.9.2279[9490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1000.097818][ T9490] syz.9.2279[9490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1000.098399][ T9486] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1000.141659][ T9486] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.285669][ T9498] loop9: detected capacity change from 0 to 1024 [ 1000.958256][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1001.120947][ T9504] netlink: 'syz.9.2283': attribute type 4 has an invalid length. [ 1001.225973][ T9515] loop8: detected capacity change from 0 to 256 [ 1001.310509][ T9515] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1001.706858][ T9522] loop9: detected capacity change from 0 to 512 [ 1001.728804][ T9522] __quota_error: 8 callbacks suppressed [ 1001.728827][ T9522] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1001.744496][ T9522] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1001.753863][ T9522] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2288: Failed to acquire dquot type 0 [ 1001.765649][ T9522] EXT4-fs (loop9): Remounting filesystem read-only [ 1001.772118][ T9522] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1001.782433][ T9522] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1001.791830][ T9522] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2288: Failed to acquire dquot type 0 [ 1001.803801][ T9522] EXT4-fs (loop9): Remounting filesystem read-only [ 1001.810676][ T9522] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1001.820992][ T9522] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1001.830470][ T9522] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2288: Failed to acquire dquot type 0 [ 1001.841867][ T9522] EXT4-fs (loop9): Remounting filesystem read-only [ 1001.848363][ T9522] EXT4-fs (loop9): 1 orphan inode deleted [ 1001.853981][ T9522] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1001.862783][ T9522] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1002.062065][ T9533] loop1: detected capacity change from 0 to 512 [ 1002.078152][ T9533] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1002.106001][ T9533] EXT4-fs (loop1): 1 orphan inode deleted [ 1002.112860][ T9533] EXT4-fs (loop1): 1 truncate cleaned up [ 1002.123575][ T9533] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1002.142681][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1002.479207][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1002.947036][ T9550] loop9: detected capacity change from 0 to 1024 [ 1003.057090][ T9555] loop6: detected capacity change from 0 to 512 [ 1003.058520][ T9550] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1003.072003][ T9555] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1003.119321][ T9555] EXT4-fs (loop6): 1 orphan inode deleted [ 1003.164575][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1003.180630][ T9555] EXT4-fs (loop6): 1 truncate cleaned up [ 1003.186122][ T9555] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1003.217508][ T9558] loop5: detected capacity change from 0 to 512 [ 1003.224439][ T9558] EXT4-fs: Invalid want_extra_isize 6 [ 1003.417399][ T9555] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.6.2299: path /164/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1003.438743][ T9555] EXT4-fs (loop6): Remounting filesystem read-only [ 1003.486151][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1003.645358][ T9571] loop6: detected capacity change from 0 to 512 [ 1003.669637][ T9571] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1003.698607][ T9571] EXT4-fs (loop6): 1 orphan inode deleted [ 1003.707597][ T9571] EXT4-fs (loop6): 1 truncate cleaned up [ 1003.721740][ T9571] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1003.773842][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1003.837328][ T728] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1003.947039][ T9576] loop6: detected capacity change from 0 to 8192 [ 1003.982729][ T9576] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1004.020132][ T728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.037409][ T728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.057318][ T728] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1004.066194][ T728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.102988][ T728] usb 2-1: config 0 descriptor?? [ 1004.253980][ T9583] loop9: detected capacity change from 0 to 256 [ 1004.268409][ T9583] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1004.566959][ T9567] syz.1.2300[9567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1004.567222][ T9567] syz.1.2300[9567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1004.904275][ T9591] loop5: detected capacity change from 0 to 256 [ 1005.357080][ T9591] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1005.591994][ T728] usbhid 2-1:0.0: can't add hid device: -71 [ 1005.740162][ T728] usbhid: probe of 2-1:0.0 failed with error -71 [ 1005.910523][ T728] usb 2-1: USB disconnect, device number 48 [ 1006.077579][ T9605] loop8: detected capacity change from 0 to 512 [ 1006.109032][ T9605] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1006.152924][ T9605] EXT4-fs (loop8): 1 orphan inode deleted [ 1006.159456][ T9605] EXT4-fs (loop8): 1 truncate cleaned up [ 1006.164980][ T9605] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1006.596355][ T9620] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.2313: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1006.655701][ T9620] EXT4-fs (loop8): Remounting filesystem read-only [ 1006.757903][ T9622] loop6: detected capacity change from 0 to 512 [ 1006.794368][ T9622] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1006.824808][ T9622] EXT4-fs (loop6): 1 orphan inode deleted [ 1006.834218][ T9622] EXT4-fs (loop6): 1 truncate cleaned up [ 1006.843979][ T9622] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1006.921968][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1007.002696][ T9625] syz.6.2318[9625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1007.002793][ T9625] syz.6.2318[9625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1007.083754][ T9627] loop6: detected capacity change from 0 to 512 [ 1007.127501][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1007.148849][ T9627] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1007.274196][ T9632] loop1: detected capacity change from 0 to 8192 [ 1007.289394][ T9627] EXT4-fs (loop6): 1 orphan inode deleted [ 1007.294964][ T9627] EXT4-fs (loop6): 1 truncate cleaned up [ 1007.300831][ T9632] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1007.307507][ T9627] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1007.723014][ T9640] 9pnet_fd: Insufficient options for proto=fd [ 1007.880048][ T28] audit: type=1400 audit(1734591021.546:241): avc: denied { bind } for pid=9645 comm="syz.1.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1008.083080][ T9656] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.6.2319: path /174/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1008.125958][ T9656] EXT4-fs (loop6): Remounting filesystem read-only [ 1008.218864][ T9666] loop8: detected capacity change from 0 to 512 [ 1008.297829][ T9666] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1008.334920][ T9666] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1008.365042][ T9666] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2329: Failed to acquire dquot type 0 [ 1008.376906][ T9666] EXT4-fs (loop8): Remounting filesystem read-only [ 1008.383374][ T9666] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1008.393752][ T9666] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1008.403259][ T9666] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2329: Failed to acquire dquot type 0 [ 1008.414403][ T498] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1008.477019][ T9666] EXT4-fs (loop8): Remounting filesystem read-only [ 1008.518641][ T9666] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1008.542936][ T9666] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1008.564204][ T9666] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2329: Failed to acquire dquot type 0 [ 1008.592749][ T9666] EXT4-fs (loop8): Remounting filesystem read-only [ 1008.600775][ T498] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1008.611829][ T498] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.627797][ T9666] EXT4-fs (loop8): 1 orphan inode deleted [ 1008.640934][ T9666] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1008.650818][ T498] usb 2-1: config 0 has no interface number 0 [ 1008.676582][ T498] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1008.694577][ T9666] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.717347][ T498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.725914][ T498] usb 2-1: Product: syz [ 1008.747084][ T498] usb 2-1: Manufacturer: syz [ 1008.777317][ T498] usb 2-1: SerialNumber: syz [ 1008.791510][ T498] usb 2-1: config 0 descriptor?? [ 1008.964671][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1009.001472][ T498] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 1009.012811][ T498] usb 2-1: No valid video chain found. [ 1009.027475][ T498] usb 2-1: USB disconnect, device number 49 [ 1009.044078][ T9676] 9pnet_fd: Insufficient options for proto=fd [ 1009.139096][ T9680] syz.6.2335[9680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1009.139182][ T9680] syz.6.2335[9680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1009.167034][ T9682] device pim6reg1 entered promiscuous mode [ 1009.184812][ T9680] syz.6.2335[9680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1009.184887][ T9680] syz.6.2335[9680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1009.385014][ T9695] 9pnet_fd: Insufficient options for proto=fd [ 1009.427975][ T9695] 9pnet_fd: Insufficient options for proto=fd [ 1009.524480][ T9700] loop6: detected capacity change from 0 to 512 [ 1009.550732][ T9700] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1009.560976][ T9700] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1009.570415][ T9700] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2344: Failed to acquire dquot type 0 [ 1009.584016][ T9700] EXT4-fs (loop6): Remounting filesystem read-only [ 1009.590438][ T9700] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1009.601277][ T9700] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2344: Failed to acquire dquot type 0 [ 1009.607330][ T7699] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1009.612682][ T9700] EXT4-fs (loop6): Remounting filesystem read-only [ 1009.626824][ T9700] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2344: Failed to acquire dquot type 0 [ 1009.638396][ T9700] EXT4-fs (loop6): Remounting filesystem read-only [ 1009.645210][ T9700] EXT4-fs (loop6): 1 orphan inode deleted [ 1009.650946][ T9700] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1009.659723][ T9700] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.679760][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1009.728047][ T9712] loop9: detected capacity change from 0 to 512 [ 1009.748975][ T9712] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2347: Failed to acquire dquot type 0 [ 1009.760420][ T9712] EXT4-fs (loop9): Remounting filesystem read-only [ 1009.766821][ T9712] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2347: Failed to acquire dquot type 0 [ 1009.773583][ T9713] device pim6reg1 entered promiscuous mode [ 1009.783472][ T9712] EXT4-fs (loop9): Remounting filesystem read-only [ 1009.790466][ T9712] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2347: Failed to acquire dquot type 0 [ 1009.801838][ T9712] EXT4-fs (loop9): Remounting filesystem read-only [ 1009.808260][ T9712] EXT4-fs (loop9): 1 orphan inode deleted [ 1009.813744][ T9712] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1009.822500][ T9712] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.837412][ T7699] usb 6-1: Using ep0 maxpacket: 16 [ 1009.842414][ T728] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1009.854216][ T7699] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.865532][ T7699] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1009.872361][ T7699] usb 6-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 1009.881630][ T7699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.911316][ T7699] usb 6-1: config 0 descriptor?? [ 1009.941560][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1009.968108][ T9721] 9pnet_fd: Insufficient options for proto=fd [ 1009.974813][ T9721] 9pnet_fd: Insufficient options for proto=fd [ 1010.882377][ T9728] loop8: detected capacity change from 0 to 512 [ 1010.923391][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1010.949271][ T728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.046934][ T9728] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2352: Failed to acquire dquot type 0 [ 1011.062137][ T9728] EXT4-fs (loop8): Remounting filesystem read-only [ 1011.069030][ T9728] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2352: Failed to acquire dquot type 0 [ 1011.083133][ T9728] EXT4-fs (loop8): Remounting filesystem read-only [ 1011.093289][ T9728] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2352: Failed to acquire dquot type 0 [ 1011.106530][ T9728] EXT4-fs (loop8): Remounting filesystem read-only [ 1011.113557][ T9728] EXT4-fs (loop8): 1 orphan inode deleted [ 1011.119514][ T9728] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1011.130999][ T9728] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.354666][ T728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.364425][ T728] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1011.373313][ T728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.381960][ T728] usb 2-1: config 0 descriptor?? [ 1011.550698][ T7699] usbhid 6-1:0.0: can't add hid device: -71 [ 1011.556556][ T7699] usbhid: probe of 6-1:0.0 failed with error -71 [ 1011.584739][ T7699] usb 6-1: USB disconnect, device number 18 [ 1011.793565][ T728] uclogic 0003:5543:0781.004F: item fetching failed at offset 5/7 [ 1011.810196][ T728] uclogic 0003:5543:0781.004F: parse failed [ 1011.831506][ T728] uclogic: probe of 0003:5543:0781.004F failed with error -22 [ 1011.894435][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1011.917167][ T9741] loop6: detected capacity change from 0 to 512 [ 1011.938666][ T9741] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2359: Failed to acquire dquot type 0 [ 1011.950908][ T9741] EXT4-fs (loop6): Remounting filesystem read-only [ 1011.957326][ T9741] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2359: Failed to acquire dquot type 0 [ 1011.968912][ T9741] EXT4-fs (loop6): Remounting filesystem read-only [ 1011.975694][ T9741] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2359: Failed to acquire dquot type 0 [ 1011.987181][ T9741] EXT4-fs (loop6): Remounting filesystem read-only [ 1011.993628][ T9741] EXT4-fs (loop6): 1 orphan inode deleted [ 1011.999234][ T9741] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1012.007962][ T9741] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.029000][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1012.041983][ T728] usb 2-1: USB disconnect, device number 50 [ 1012.172471][ T9752] xt_TCPMSS: Only works on TCP SYN packets [ 1012.416935][ T9755] loop6: detected capacity change from 0 to 256 [ 1013.843144][ T9755] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1014.422841][ T9765] loop6: detected capacity change from 0 to 512 [ 1014.435048][ T9765] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1014.462457][ T9765] EXT4-fs (loop6): 1 orphan inode deleted [ 1014.468185][ T9765] EXT4-fs (loop6): 1 truncate cleaned up [ 1014.473675][ T9765] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1014.511292][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2365'. [ 1014.522344][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1014.649442][ T9773] loop8: detected capacity change from 0 to 512 [ 1014.757319][ T5766] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1014.771094][ T9773] __quota_error: 21 callbacks suppressed [ 1014.771115][ T9773] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1014.808058][ T9773] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1014.817344][ T9773] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2363: Failed to acquire dquot type 0 [ 1014.828924][ T9773] EXT4-fs (loop8): Remounting filesystem read-only [ 1014.835358][ T9773] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1014.845952][ T9773] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1014.855573][ T9773] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2363: Failed to acquire dquot type 0 [ 1014.867834][ T9773] EXT4-fs (loop8): Remounting filesystem read-only [ 1014.874539][ T9773] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1014.885073][ T9773] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1014.894830][ T9773] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2363: Failed to acquire dquot type 0 [ 1015.295116][ T9773] EXT4-fs (loop8): Remounting filesystem read-only [ 1015.330378][ T9773] EXT4-fs (loop8): 1 orphan inode deleted [ 1015.380481][ T9773] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1015.678847][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.689655][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.707549][ T5766] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1015.732753][ T9785] loop6: detected capacity change from 0 to 512 [ 1015.751723][ T9773] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1015.768267][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.812248][ T5766] usb 2-1: config 0 descriptor?? [ 1015.835459][ T9785] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1015.854645][ T9785] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.108718][ T9790] loop9: detected capacity change from 0 to 512 [ 1016.138438][ T9790] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1016.149504][ T9790] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1016.159173][ T9790] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2371: Failed to acquire dquot type 0 [ 1016.171130][ T9790] EXT4-fs (loop9): Remounting filesystem read-only [ 1016.177567][ T9790] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1016.188063][ T9790] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1016.197308][ T9790] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2371: Failed to acquire dquot type 0 [ 1016.208813][ T9790] EXT4-fs (loop9): Remounting filesystem read-only [ 1016.215602][ T9790] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2371: Failed to acquire dquot type 0 [ 1016.227174][ T9790] EXT4-fs (loop9): Remounting filesystem read-only [ 1016.234018][ T9790] EXT4-fs (loop9): 1 orphan inode deleted [ 1016.239634][ T9790] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1016.248335][ T9790] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.267422][ T5766] uclogic 0003:5543:0781.0050: item fetching failed at offset 5/7 [ 1016.276301][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1016.286818][ T5766] uclogic 0003:5543:0781.0050: parse failed [ 1016.292623][ T5766] uclogic: probe of 0003:5543:0781.0050 failed with error -22 [ 1016.480744][ T9452] usb 2-1: USB disconnect, device number 51 [ 1016.506333][ T9805] loop5: detected capacity change from 0 to 512 [ 1016.546655][ T9805] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2375: Failed to acquire dquot type 0 [ 1016.592328][ T5766] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1016.600926][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1016.643684][ T9805] EXT4-fs (loop5): Remounting filesystem read-only [ 1016.657626][ T9805] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2375: Failed to acquire dquot type 0 [ 1016.668988][ T9805] EXT4-fs (loop5): Remounting filesystem read-only [ 1016.687012][ T9805] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2375: Failed to acquire dquot type 0 [ 1016.732993][ T9805] EXT4-fs (loop5): Remounting filesystem read-only [ 1016.757960][ T9805] EXT4-fs (loop5): 1 orphan inode deleted [ 1016.779319][ T9805] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1016.804727][ T9805] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.816419][ T5766] usb 10-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.834959][ T5766] usb 10-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1016.850872][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1016.880542][ T5766] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1016.907143][ T5766] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.004618][ T9814] loop8: detected capacity change from 0 to 256 [ 1017.055495][ T9814] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1017.143834][ T5766] usb 10-1: string descriptor 0 read error: -71 [ 1017.184464][ T5766] aiptek 10-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1017.382374][ T5766] usb 10-1: USB disconnect, device number 2 [ 1018.647937][ T9823] loop6: detected capacity change from 0 to 8192 [ 1018.674830][ T9823] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1018.787317][ T5766] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1019.100797][ T9834] xt_TCPMSS: Only works on TCP SYN packets [ 1019.988369][ T9842] loop1: detected capacity change from 0 to 512 [ 1020.106186][ T9842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1020.126983][ T9842] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.238590][ T5766] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.271362][ T5766] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.297635][ T5766] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1020.319462][ T5766] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.341430][ T5766] usb 10-1: config 0 descriptor?? [ 1020.518601][ T9853] loop8: detected capacity change from 0 to 512 [ 1020.536212][ T9853] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1020.551329][ T9853] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 1020.716056][ T9856] loop6: detected capacity change from 0 to 512 [ 1020.752570][ T9856] EXT4-fs: Invalid want_extra_isize 6 [ 1020.758692][ T9826] syz.9.2381[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1020.758792][ T9826] syz.9.2381[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1020.855142][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1020.880688][ T9856] loop6: detected capacity change from 0 to 1024 [ 1020.907243][ T9856] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1021.083857][ T5766] usbhid 10-1:0.0: can't add hid device: -71 [ 1021.089830][ T5766] usbhid: probe of 10-1:0.0 failed with error -71 [ 1021.106585][ T5766] usb 10-1: USB disconnect, device number 3 [ 1021.689573][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1021.719652][ T9866] loop6: detected capacity change from 0 to 128 [ 1021.794029][ T9867] netlink: 472 bytes leftover after parsing attributes in process `syz.6.2391'. [ 1021.858516][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 1021.907668][ T5766] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1021.999641][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2395'. [ 1022.100005][ T5766] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.111788][ T5766] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.122860][ T5766] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1022.136834][ T5766] usb 9-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1022.146444][ T5766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.168385][ T5766] usb 9-1: config 0 descriptor?? [ 1022.217328][ T7699] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1022.408943][ T7699] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 1022.427136][ T7699] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.447413][ T7699] usb 10-1: config 0 has no interface number 0 [ 1022.465583][ T7699] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1022.484947][ T7699] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.495813][ T7699] usb 10-1: Product: syz [ 1022.503586][ T9886] loop6: detected capacity change from 0 to 512 [ 1022.518766][ T7699] usb 10-1: Manufacturer: syz [ 1022.532957][ T7699] usb 10-1: SerialNumber: syz [ 1022.543492][ T7699] usb 10-1: config 0 descriptor?? [ 1022.545102][ T9886] __quota_error: 8 callbacks suppressed [ 1022.545120][ T9886] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1022.564109][ T9886] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1022.574213][ T9886] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2398: Failed to acquire dquot type 0 [ 1022.597161][ T5766] gt683r_led 0003:1770:FF00.0051: unknown main item tag 0x0 [ 1022.605854][ T9886] EXT4-fs (loop6): Remounting filesystem read-only [ 1022.612376][ T5766] gt683r_led 0003:1770:FF00.0051: unknown main item tag 0x0 [ 1022.620727][ T9886] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1022.632744][ T5766] gt683r_led 0003:1770:FF00.0051: unknown main item tag 0x0 [ 1022.640544][ T9886] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1022.642360][ T5766] gt683r_led 0003:1770:FF00.0051: unknown main item tag 0x0 [ 1022.650089][ T9886] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2398: Failed to acquire dquot type 0 [ 1022.657440][ T5766] gt683r_led 0003:1770:FF00.0051: unknown main item tag 0x0 [ 1022.675565][ T9896] loop1: detected capacity change from 0 to 512 [ 1022.722672][ T9886] EXT4-fs (loop6): Remounting filesystem read-only [ 1022.734178][ T5766] gt683r_led 0003:1770:FF00.0051: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.8-1/input0 [ 1022.767992][ T9886] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1022.828032][ T9896] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1022.838354][ T9896] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1022.847620][ T9896] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2401: Failed to acquire dquot type 0 [ 1022.860422][ T9896] EXT4-fs (loop1): Remounting filesystem read-only [ 1022.866940][ T9896] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1022.877231][ T9896] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1022.886487][ T9896] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2401: Failed to acquire dquot type 0 [ 1022.898926][ T9896] EXT4-fs (loop1): Remounting filesystem read-only [ 1022.906506][ T9896] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1022.916923][ T9896] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2401: Failed to acquire dquot type 0 [ 1022.929257][ T9896] EXT4-fs (loop1): Remounting filesystem read-only [ 1022.935858][ T9896] EXT4-fs (loop1): 1 orphan inode deleted [ 1022.941506][ T9896] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1022.950477][ T9896] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.059084][ T9886] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2398: Failed to acquire dquot type 0 [ 1023.139831][ T5766] usb 9-1: USB disconnect, device number 3 [ 1023.286330][ T9452] gt683r_led 0003:1770:FF00.0051: failed to send set report request: -19 [ 1023.301376][ T9886] EXT4-fs (loop6): Remounting filesystem read-only [ 1023.476529][ T7699] usb 10-1: Found UVC 0.08 device syz (046d:0823) [ 1023.482850][ T9886] EXT4-fs (loop6): 1 orphan inode deleted [ 1023.488427][ T7699] usb 10-1: No valid video chain found. [ 1023.494266][ T9886] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1023.503067][ T7699] usb 10-1: USB disconnect, device number 4 [ 1023.509395][ T9886] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.651653][ T9903] loop9: detected capacity change from 0 to 8192 [ 1023.658946][ T9903] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1023.694512][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1023.808229][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1023.853286][ T9910] loop5: detected capacity change from 0 to 512 [ 1023.933196][ T9910] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1023.983234][ T9910] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 1024.220472][ T9922] loop8: detected capacity change from 0 to 512 [ 1024.358974][ T9922] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2407: Failed to acquire dquot type 0 [ 1024.370877][ T9922] EXT4-fs (loop8): Remounting filesystem read-only [ 1024.377638][ T9922] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2407: Failed to acquire dquot type 0 [ 1024.397552][ T9922] EXT4-fs (loop8): Remounting filesystem read-only [ 1024.427870][ T9922] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2407: Failed to acquire dquot type 0 [ 1024.451298][ T9922] EXT4-fs (loop8): Remounting filesystem read-only [ 1024.457862][ T9922] EXT4-fs (loop8): 1 orphan inode deleted [ 1024.463444][ T9922] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1024.472223][ T9922] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.556253][ T9933] loop5: detected capacity change from 0 to 512 [ 1024.569224][ T9933] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1024.578118][ T9933] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.604318][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 1024.741919][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2412'. [ 1024.797347][ T5766] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1024.824533][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1024.989519][ T9946] xt_TCPMSS: Only works on TCP SYN packets [ 1025.022146][ T9947] 9pnet_fd: Insufficient options for proto=fd [ 1025.075363][ T9947] 9pnet_fd: Insufficient options for proto=fd [ 1026.040627][ T5766] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.051498][ T9952] loop8: detected capacity change from 0 to 512 [ 1026.061698][ T5766] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.584047][ T5766] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1026.666998][ T9952] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2416: Failed to acquire dquot type 0 [ 1026.679012][ T9952] EXT4-fs (loop8): Remounting filesystem read-only [ 1026.685542][ T9952] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2416: Failed to acquire dquot type 0 [ 1026.698392][ T9952] EXT4-fs (loop8): Remounting filesystem read-only [ 1026.706145][ T9952] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2416: Failed to acquire dquot type 0 [ 1026.719168][ T9952] EXT4-fs (loop8): Remounting filesystem read-only [ 1026.725765][ T9952] EXT4-fs (loop8): 1 orphan inode deleted [ 1026.731398][ T9952] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1026.740282][ T9952] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.775471][ T9959] loop6: detected capacity change from 0 to 512 [ 1026.813976][ T5766] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.348490][ T5766] usb 10-1: config 0 descriptor?? [ 1027.391168][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1027.405360][ T9959] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2417: Failed to acquire dquot type 0 [ 1027.417807][ T9959] EXT4-fs (loop6): Remounting filesystem read-only [ 1027.424196][ T9959] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2417: Failed to acquire dquot type 0 [ 1027.437421][ T9959] EXT4-fs (loop6): Remounting filesystem read-only [ 1027.444944][ T9959] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2417: Failed to acquire dquot type 0 [ 1027.457008][ T9959] EXT4-fs (loop6): Remounting filesystem read-only [ 1027.463431][ T9959] EXT4-fs (loop6): 1 orphan inode deleted [ 1027.468948][ T9959] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1027.477683][ T9959] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.598850][ T9965] loop1: detected capacity change from 0 to 512 [ 1027.631644][ T5766] usbhid 10-1:0.0: can't add hid device: -71 [ 1027.640076][ T5766] usbhid: probe of 10-1:0.0 failed with error -71 [ 1027.646355][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1027.667455][ T9965] __quota_error: 20 callbacks suppressed [ 1027.667474][ T9965] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1027.669793][ T5766] usb 10-1: USB disconnect, device number 5 [ 1027.673471][ T9965] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1027.698246][ T9965] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2418: Failed to acquire dquot type 0 [ 1027.711962][ T9965] EXT4-fs (loop1): Remounting filesystem read-only [ 1027.718693][ T9965] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1027.729535][ T9965] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1027.739009][ T9965] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2418: Failed to acquire dquot type 0 [ 1027.751096][ T9965] EXT4-fs (loop1): Remounting filesystem read-only [ 1027.757961][ T9965] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1027.772128][ T9979] xt_TCPMSS: Only works on TCP SYN packets [ 1027.793936][ T9965] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1027.818321][ T9965] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2418: Failed to acquire dquot type 0 [ 1027.834708][ T9965] EXT4-fs (loop1): Remounting filesystem read-only [ 1027.841991][ T9965] EXT4-fs (loop1): 1 orphan inode deleted [ 1027.848007][ T9965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1027.856902][ T9965] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.960360][ T9980] loop9: detected capacity change from 0 to 512 [ 1027.974451][ T9980] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1027.975528][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2423'. [ 1027.984364][ T9980] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1028.037315][ T920] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1028.057992][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1028.093788][ T9989] loop6: detected capacity change from 0 to 512 [ 1028.143544][ T9989] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1028.159336][ T9989] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1028.168889][ T9989] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2424: Failed to acquire dquot type 0 [ 1028.180863][ T9989] EXT4-fs (loop6): Remounting filesystem read-only [ 1028.187613][ T9989] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1028.198103][ T9989] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1028.207624][ T9989] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2424: Failed to acquire dquot type 0 [ 1028.219182][ T920] usb 9-1: Using ep0 maxpacket: 16 [ 1028.225605][ T9989] EXT4-fs (loop6): Remounting filesystem read-only [ 1028.234737][ T920] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.247338][ T920] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1028.254225][ T9989] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2424: Failed to acquire dquot type 0 [ 1028.266241][ T920] usb 9-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 1028.275755][ T920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.283887][ T9989] EXT4-fs (loop6): Remounting filesystem read-only [ 1028.290315][ T9989] EXT4-fs (loop6): 1 orphan inode deleted [ 1028.295912][ T9989] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1028.308042][ T9989] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.318803][ T920] usb 9-1: config 0 descriptor?? [ 1028.417297][ T6380] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1028.638907][ T6380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.660769][ T6380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.674111][ T6380] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1028.684681][ T6380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.696379][ T6380] usb 2-1: config 0 descriptor?? [ 1029.078261][ T920] usbhid 9-1:0.0: can't add hid device: -71 [ 1029.084380][ T920] usbhid: probe of 9-1:0.0 failed with error -71 [ 1029.101112][ T920] usb 9-1: USB disconnect, device number 4 [ 1029.115462][ T6380] uclogic 0003:5543:0781.0052: item fetching failed at offset 5/7 [ 1029.129622][ T6380] uclogic 0003:5543:0781.0052: parse failed [ 1029.141565][ T6380] uclogic: probe of 0003:5543:0781.0052 failed with error -22 [ 1029.238154][T10003] xt_TCPMSS: Only works on TCP SYN packets [ 1029.319459][ T6380] usb 2-1: USB disconnect, device number 52 [ 1030.126437][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1030.157339][ T920] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1030.368380][ T920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.384508][ T920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.403880][ T920] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1030.422568][ T920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.443668][ T920] usb 2-1: config 0 descriptor?? [ 1030.528224][T10017] loop5: detected capacity change from 0 to 128 [ 1030.674256][T10022] netlink: 472 bytes leftover after parsing attributes in process `syz.5.2432'. [ 1030.870754][ T920] hid (null): bogus close delimiter [ 1031.221247][ T920] usb 2-1: language id specifier not provided by device, defaulting to English [ 1031.454665][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1031.504602][ T920] uclogic 0003:256C:006D.0053: failed retrieving Huion firmware version: -71 [ 1031.514801][ T920] uclogic 0003:256C:006D.0053: failed probing parameters: -71 [ 1031.522144][ T920] uclogic: probe of 0003:256C:006D.0053 failed with error -71 [ 1031.545337][ T920] usb 2-1: USB disconnect, device number 53 [ 1031.950672][T10034] xt_TCPMSS: Only works on TCP SYN packets [ 1033.023401][T10041] loop6: detected capacity change from 0 to 256 [ 1033.068347][T10041] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1033.481863][T10036] loop5: detected capacity change from 0 to 512 [ 1033.488863][T10036] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1033.498611][T10036] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 1033.897770][T10047] loop9: detected capacity change from 0 to 512 [ 1034.477240][T10047] __quota_error: 2 callbacks suppressed [ 1034.482752][T10047] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1034.492938][T10047] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1034.502126][T10047] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2440: Failed to acquire dquot type 0 [ 1034.514257][T10047] EXT4-fs (loop9): Remounting filesystem read-only [ 1034.521254][T10047] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1034.531455][T10047] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1034.540632][T10047] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2440: Failed to acquire dquot type 0 [ 1034.552099][T10047] EXT4-fs (loop9): Remounting filesystem read-only [ 1034.559216][T10047] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1034.569416][T10047] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1034.578596][T10047] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2440: Failed to acquire dquot type 0 [ 1034.589957][T10047] EXT4-fs (loop9): Remounting filesystem read-only [ 1034.596349][T10047] EXT4-fs (loop9): 1 orphan inode deleted [ 1034.601968][T10047] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1034.610715][T10047] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.807798][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1035.097370][ T920] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1035.278981][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.290118][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.301093][ T920] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1035.317328][ T5766] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1035.325933][ T920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.353415][ T920] usb 7-1: config 0 descriptor?? [ 1035.662021][ T5766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.673855][ T5766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.674125][T10070] syz.1.2448[10070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1035.688994][ T5766] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1035.697805][ T7699] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1035.700520][ T5766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.709291][T10070] syz.1.2448[10070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1035.717566][ T5766] usb 6-1: config 0 descriptor?? [ 1035.794320][T10075] loop9: detected capacity change from 0 to 512 [ 1035.809151][T10075] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1035.818788][T10075] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.840433][ T920] uclogic 0003:5543:0781.0054: item fetching failed at offset 5/7 [ 1035.848477][ T920] uclogic 0003:5543:0781.0054: parse failed [ 1035.854240][ T920] uclogic: probe of 0003:5543:0781.0054 failed with error -22 [ 1035.855302][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1035.908594][ T7699] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.919441][ T7699] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.929222][ T7699] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1035.938199][ T7699] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.950152][ T7699] usb 9-1: config 0 descriptor?? [ 1036.045254][ T6380] usb 7-1: USB disconnect, device number 24 [ 1036.057422][ T9452] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1036.166257][ T5766] hid-steam 0003:28DE:1142.0055: unknown main item tag 0x7 [ 1036.174691][ T5766] hid-steam 0003:28DE:1142.0055: item fetching failed at offset 1/5 [ 1036.182821][ T5766] hid-steam 0003:28DE:1142.0055: steam_probe:parse of hid interface failed [ 1036.191690][ T5766] hid-steam: probe of 0003:28DE:1142.0055 failed with error -22 [ 1036.238396][ T9452] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.258792][ T9452] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1036.273236][ T9452] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1036.282270][ T9452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.353956][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2452'. [ 1036.358804][T10067] syz.8.2447[10067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1036.362812][T10067] syz.8.2447[10067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1036.401551][ C1] raw-gadget.2 gadget.8: ignoring, device is not running [ 1036.420220][ T7699] usbhid 9-1:0.0: can't add hid device: -71 [ 1036.426008][ T7699] usbhid: probe of 9-1:0.0 failed with error -71 [ 1036.434585][ T7699] usb 9-1: USB disconnect, device number 5 [ 1036.447312][ T6380] usb 6-1: USB disconnect, device number 19 [ 1036.500609][ T9452] usb 2-1: string descriptor 0 read error: -71 [ 1036.507416][ T9452] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1036.517840][ T9452] usb 2-1: USB disconnect, device number 54 [ 1036.937131][T10093] loop9: detected capacity change from 0 to 256 [ 1037.797848][T10093] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1038.365207][T10113] loop6: detected capacity change from 0 to 512 [ 1038.403281][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2459'. [ 1038.452706][T10113] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1038.525585][T10113] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 1038.597603][T10120] loop9: detected capacity change from 0 to 512 [ 1038.607222][T10120] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1038.700693][T10120] EXT4-fs (loop9): 1 orphan inode deleted [ 1038.728040][T10120] EXT4-fs (loop9): 1 truncate cleaned up [ 1038.766797][T10120] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1038.821759][T10126] loop8: detected capacity change from 0 to 512 [ 1038.992222][T10126] EXT4-fs: Invalid want_extra_isize 6 [ 1039.024380][T10129] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.9.2462: path /39/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1039.045676][T10129] EXT4-fs (loop9): Remounting filesystem read-only [ 1039.061371][T10126] loop8: detected capacity change from 0 to 1024 [ 1039.129191][T10126] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1039.418014][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1039.577312][ T566] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1039.873589][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2467'. [ 1039.978590][ T566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.010718][ T566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.054509][ T566] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1040.105038][ T566] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1040.140424][ T566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.176340][ T566] usb 7-1: config 0 descriptor?? [ 1040.221140][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1040.316980][T10143] loop8: detected capacity change from 0 to 8192 [ 1040.397717][T10147] loop5: detected capacity change from 0 to 1024 [ 1040.404709][T10143] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1040.438952][ T8186] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1040.582295][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2472'. [ 1040.609433][ T566] gt683r_led 0003:1770:FF00.0056: unknown main item tag 0x0 [ 1040.983584][T10154] netlink: 'syz.5.2470': attribute type 4 has an invalid length. [ 1040.986548][T10160] loop1: detected capacity change from 0 to 256 [ 1041.040731][ T566] gt683r_led 0003:1770:FF00.0056: unknown main item tag 0x0 [ 1041.050695][ T566] gt683r_led 0003:1770:FF00.0056: unknown main item tag 0x0 [ 1041.058269][ T566] gt683r_led 0003:1770:FF00.0056: unknown main item tag 0x0 [ 1041.065624][ T566] gt683r_led 0003:1770:FF00.0056: unknown main item tag 0x0 [ 1041.124478][T10160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1041.408322][ T566] gt683r_led 0003:1770:FF00.0056: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.6-1/input0 [ 1041.799345][ T566] usb 7-1: USB disconnect, device number 25 [ 1041.825193][ T5766] gt683r_led 0003:1770:FF00.0056: failed to send set report request: -19 [ 1042.220177][T10180] loop1: detected capacity change from 0 to 256 [ 1042.247550][T10180] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1043.311060][T10195] loop9: detected capacity change from 0 to 512 [ 1043.378131][T10195] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1043.429108][T10196] xt_TCPMSS: Only works on TCP SYN packets [ 1043.572098][T10195] EXT4-fs (loop9): 1 orphan inode deleted [ 1043.600397][T10195] EXT4-fs (loop9): 1 truncate cleaned up [ 1043.666554][T10195] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1045.000004][T10201] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.9.2485: path /47/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1045.028276][T10201] EXT4-fs (loop9): Remounting filesystem read-only [ 1045.121202][T10205] loop5: detected capacity change from 0 to 512 [ 1045.173827][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1045.183820][T10205] EXT4-fs: Invalid want_extra_isize 6 [ 1045.221732][T10205] loop5: detected capacity change from 0 to 1024 [ 1045.263252][T10205] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1045.272985][T10203] loop8: detected capacity change from 0 to 8192 [ 1045.314594][T10203] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1045.474414][T10213] loop9: detected capacity change from 0 to 256 [ 1045.544345][T10213] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1046.768750][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 1047.025081][ T6380] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1047.158477][T10235] xt_TCPMSS: Only works on TCP SYN packets [ 1047.209652][ T6380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.220936][ T6380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.232654][ T6380] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1047.243010][ T6380] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.280061][ T6380] usb 10-1: config 0 descriptor?? [ 1047.701041][ T6380] hid (null): bogus close delimiter [ 1047.900921][ T6380] usb 10-1: language id specifier not provided by device, defaulting to English [ 1048.115937][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'. [ 1048.521786][ T6380] uclogic 0003:256C:006D.0057: failed retrieving string descriptor #100: -71 [ 1048.534685][ T6380] uclogic 0003:256C:006D.0057: failed retrieving pen parameters: -71 [ 1048.562159][ T6380] uclogic 0003:256C:006D.0057: failed probing pen v1 parameters: -71 [ 1048.572957][ T6380] uclogic 0003:256C:006D.0057: failed probing parameters: -71 [ 1048.581915][ T6380] uclogic: probe of 0003:256C:006D.0057 failed with error -71 [ 1048.610515][ T6380] usb 10-1: USB disconnect, device number 6 [ 1048.887304][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1049.122149][T10259] loop1: detected capacity change from 0 to 1024 [ 1049.232077][T10264] xt_TCPMSS: Only works on TCP SYN packets [ 1049.339996][ T8076] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1050.006424][T10270] netlink: 'syz.1.2505': attribute type 4 has an invalid length. [ 1050.606297][T10273] loop1: detected capacity change from 0 to 512 [ 1050.619269][T10273] EXT4-fs (loop1): invalid journal inode [ 1050.632617][T10273] EXT4-fs (loop1): can't get journal size [ 1050.639712][T10273] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a81ec118, mo2=0002] [ 1050.648165][T10273] System zones: 1-12, 13-13, 570624-570624 [ 1050.657533][T10273] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.2510: corrupted in-inode xattr [ 1050.681802][T10273] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2510: couldn't read orphan inode 15 (err -117) [ 1050.696288][T10273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1050.751624][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2511'. [ 1050.770396][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1050.897328][ T6380] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1051.113330][T10285] loop1: detected capacity change from 0 to 512 [ 1051.265021][T10285] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1051.275498][T10285] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1051.285216][T10285] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2513: Failed to acquire dquot type 0 [ 1051.312448][T10285] EXT4-fs (loop1): Remounting filesystem read-only [ 1051.319538][T10285] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1051.329989][T10285] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1051.339301][T10285] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2513: Failed to acquire dquot type 0 [ 1051.355925][T10285] EXT4-fs (loop1): Remounting filesystem read-only [ 1051.368017][T10285] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1051.378459][T10285] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1051.387921][T10285] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2513: Failed to acquire dquot type 0 [ 1051.404423][T10285] EXT4-fs (loop1): Remounting filesystem read-only [ 1051.411491][T10285] EXT4-fs (loop1): 1 orphan inode deleted [ 1051.417335][T10285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1051.427517][T10285] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.265509][ T1376] Bluetooth: hci0: Frame reassembly failed (-84) [ 1052.311805][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1052.328393][ T6380] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.339065][ T6380] usb 7-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1052.352084][ T6380] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1052.361154][ T6380] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.563798][T10304] loop5: detected capacity change from 0 to 1024 [ 1052.574823][ T6380] usb 7-1: string descriptor 0 read error: -71 [ 1052.581436][ T6380] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1052.588900][T10304] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1052.597188][ T6380] usb 7-1: USB disconnect, device number 26 [ 1052.774480][ T6020] EXT4-fs error (device loop5): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1052.793023][ T6020] EXT4-fs error (device loop5): __ext4_get_inode_loc:4508: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 1052.813291][ T6020] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1052.889540][ T6020] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #2: comm syz-executor: mark_inode_dirty error [ 1052.907126][ T1982] EXT4-fs error (device loop5): __ext4_get_inode_loc:4508: comm kworker/u4:12: Invalid inode table block 5 in block_group 0 [ 1052.921319][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 1053.102202][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.109333][T10310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.116575][T10310] device bridge_slave_0 entered promiscuous mode [ 1053.124838][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.131710][T10310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.139043][T10310] device bridge_slave_1 entered promiscuous mode [ 1053.193150][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.200057][T10310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.207129][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.213943][T10310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.252497][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1053.260548][ T1376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.268086][ T1376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.284225][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1053.292602][ T1376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.299498][ T1376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.308566][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1053.316916][ T1376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.323825][ T1376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.341204][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1053.349206][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1053.376080][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1053.393392][T10310] device veth0_vlan entered promiscuous mode [ 1053.400386][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1053.409156][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1053.416573][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1053.434467][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1053.450611][T10310] device veth1_macvtap entered promiscuous mode [ 1053.474278][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1053.493996][T10319] loop9: detected capacity change from 0 to 512 [ 1053.539375][ T1982] device bridge_slave_1 left promiscuous mode [ 1053.550026][ T1982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.560056][ T1982] device bridge_slave_0 left promiscuous mode [ 1053.566585][ T1982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.574840][T10319] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1053.585057][T10319] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1053.594256][T10319] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2525: Failed to acquire dquot type 0 [ 1053.606428][T10319] EXT4-fs (loop9): Remounting filesystem read-only [ 1053.612815][T10319] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1053.623040][T10319] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1053.632283][T10319] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2525: Failed to acquire dquot type 0 [ 1053.644173][T10319] EXT4-fs (loop9): Remounting filesystem read-only [ 1053.651146][T10319] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2525: Failed to acquire dquot type 0 [ 1053.663212][T10319] EXT4-fs (loop9): Remounting filesystem read-only [ 1053.669664][T10319] EXT4-fs (loop9): 1 orphan inode deleted [ 1053.675209][T10319] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1053.684030][T10319] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.705612][ T1982] device veth0_vlan left promiscuous mode [ 1053.964434][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1054.317349][ T9137] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1054.348815][T10292] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1054.467281][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1054.876968][T10330] loop8: detected capacity change from 0 to 512 [ 1054.900961][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1055.006744][T10330] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2527: Failed to acquire dquot type 0 [ 1055.018572][T10330] EXT4-fs (loop8): Remounting filesystem read-only [ 1055.025113][T10330] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2527: Failed to acquire dquot type 0 [ 1055.038021][T10330] EXT4-fs (loop8): Remounting filesystem read-only [ 1055.045683][T10330] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2527: Failed to acquire dquot type 0 [ 1055.057845][T10330] EXT4-fs (loop8): Remounting filesystem read-only [ 1055.064437][T10330] EXT4-fs (loop8): 1 orphan inode deleted [ 1055.070124][T10330] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1055.079219][T10330] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.271958][T10347] loop6: detected capacity change from 0 to 512 [ 1056.302747][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1056.418414][ T566] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1056.428218][T10347] __quota_error: 8 callbacks suppressed [ 1056.428256][T10347] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1056.443918][T10347] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1056.453136][T10347] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2532: Failed to acquire dquot type 0 [ 1056.465197][T10347] EXT4-fs (loop6): Remounting filesystem read-only [ 1056.472898][T10347] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1056.483341][T10347] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1056.492734][T10347] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2532: Failed to acquire dquot type 0 [ 1056.515104][T10347] EXT4-fs (loop6): Remounting filesystem read-only [ 1056.681458][T10347] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1056.692222][T10347] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1056.701842][T10347] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2532: Failed to acquire dquot type 0 [ 1056.726495][T10347] EXT4-fs (loop6): Remounting filesystem read-only [ 1056.743314][T10347] EXT4-fs (loop6): 1 orphan inode deleted [ 1056.751633][T10347] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1056.823477][T10347] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.315826][T10359] device sit0 entered promiscuous mode [ 1057.323211][T10359] netlink: 'syz.9.2536': attribute type 1 has an invalid length. [ 1057.331006][T10359] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2536'. [ 1057.976955][T10374] loop8: detected capacity change from 0 to 512 [ 1058.022775][T10374] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1058.038270][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1058.088992][T10374] EXT4-fs (loop8): 1 orphan inode deleted [ 1058.094563][T10374] EXT4-fs (loop8): 1 truncate cleaned up [ 1058.100075][T10374] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1058.281735][T10381] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.8.2540: path /55/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1058.303252][T10381] EXT4-fs (loop8): Remounting filesystem read-only [ 1058.487274][ T566] usb 2-1: device not accepting address 55, error -71 [ 1058.560212][T10385] loop2: detected capacity change from 0 to 8192 [ 1058.592911][T10385] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1058.829951][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1059.680396][T10394] loop1: detected capacity change from 0 to 256 [ 1060.345262][T10395] loop8: detected capacity change from 0 to 512 [ 1060.397739][T10366] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1060.432242][T10394] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1060.907088][T10395] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1060.917515][T10395] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1060.926751][T10395] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2545: Failed to acquire dquot type 0 [ 1060.939422][T10395] EXT4-fs (loop8): Remounting filesystem read-only [ 1060.945943][T10395] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1060.956182][T10395] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1060.965357][T10395] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2545: Failed to acquire dquot type 0 [ 1060.977952][T10395] EXT4-fs (loop8): Remounting filesystem read-only [ 1060.985753][T10395] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.2545: Failed to acquire dquot type 0 [ 1060.999063][T10395] EXT4-fs (loop8): Remounting filesystem read-only [ 1061.005634][T10395] EXT4-fs (loop8): 1 orphan inode deleted [ 1061.011484][T10395] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1061.020318][T10395] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.708960][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1061.724972][T10407] loop1: detected capacity change from 0 to 512 [ 1061.758930][T10407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1061.769629][T10407] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.942378][T10421] loop2: detected capacity change from 0 to 256 [ 1061.945426][T10417] loop6: detected capacity change from 0 to 512 [ 1061.951728][T10421] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1062.088656][T10425] xt_TCPMSS: Only works on TCP SYN packets [ 1062.250481][T10417] __quota_error: 2 callbacks suppressed [ 1062.250554][T10417] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1062.281153][T10417] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1062.291106][T10417] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2550: Failed to acquire dquot type 0 [ 1062.310971][T10417] EXT4-fs (loop6): Remounting filesystem read-only [ 1062.341874][T10417] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1062.352727][T10417] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1062.363582][T10417] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2550: Failed to acquire dquot type 0 [ 1062.382840][T10417] EXT4-fs (loop6): Remounting filesystem read-only [ 1062.442333][T10417] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1063.997997][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1064.008260][T10417] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1064.034948][T10431] loop9: detected capacity change from 0 to 1024 [ 1064.042475][T10417] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2550: Failed to acquire dquot type 0 [ 1064.074860][T10417] EXT4-fs (loop6): Remounting filesystem read-only [ 1064.088983][T10431] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1064.098466][T10417] EXT4-fs (loop6): 1 orphan inode deleted [ 1064.120863][T10417] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1064.129829][T10417] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.244302][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1065.045342][T10445] loop8: detected capacity change from 0 to 256 [ 1065.066040][T10445] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1065.508724][T10443] device pim6reg1 entered promiscuous mode [ 1065.979301][T10454] loop9: detected capacity change from 0 to 512 [ 1066.094302][T10454] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1066.104667][T10454] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1066.114007][T10454] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2555: Failed to acquire dquot type 0 [ 1066.125720][T10454] EXT4-fs (loop9): Remounting filesystem read-only [ 1066.132121][T10454] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1066.142299][T10454] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1066.151509][T10454] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2555: Failed to acquire dquot type 0 [ 1066.163242][T10454] EXT4-fs (loop9): Remounting filesystem read-only [ 1066.170154][T10454] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2555: Failed to acquire dquot type 0 [ 1066.181741][T10454] EXT4-fs (loop9): Remounting filesystem read-only [ 1066.188182][T10454] EXT4-fs (loop9): 1 orphan inode deleted [ 1066.193666][T10454] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1066.202431][T10454] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.281383][T10462] loop1: detected capacity change from 0 to 512 [ 1066.352200][T10462] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2560: Failed to acquire dquot type 0 [ 1066.377482][T10462] EXT4-fs (loop1): Remounting filesystem read-only [ 1066.385628][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1066.397099][T10462] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2560: Failed to acquire dquot type 0 [ 1066.427477][T10462] EXT4-fs (loop1): Remounting filesystem read-only [ 1066.446952][T10462] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2560: Failed to acquire dquot type 0 [ 1066.464512][T10462] EXT4-fs (loop1): Remounting filesystem read-only [ 1066.476389][T10462] EXT4-fs (loop1): 1 orphan inode deleted [ 1066.482188][T10462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1066.498559][T10462] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.617280][ T7699] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1066.755179][T10477] loop2: detected capacity change from 0 to 512 [ 1066.843272][T10477] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.2561: Failed to acquire dquot type 0 [ 1066.855253][T10477] EXT4-fs (loop2): Remounting filesystem read-only [ 1066.861933][T10477] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.2561: Failed to acquire dquot type 0 [ 1066.878288][T10477] EXT4-fs (loop2): Remounting filesystem read-only [ 1066.886706][T10477] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.2561: Failed to acquire dquot type 0 [ 1066.899011][T10477] EXT4-fs (loop2): Remounting filesystem read-only [ 1066.905587][T10477] EXT4-fs (loop2): 1 orphan inode deleted [ 1066.911257][T10477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1066.920377][T10477] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.048045][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1067.109680][ T7699] usb 9-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.134206][ T7699] usb 9-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1067.149094][ T7699] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1067.160112][ T7699] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.809350][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1067.956162][T10310] EXT4-fs (loop2): unmounting filesystem. [ 1069.423964][T10495] xt_TCPMSS: Only works on TCP SYN packets [ 1071.660059][T10497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1071.667146][T10497] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.058138][T10497] loop2: detected capacity change from 0 to 512 [ 1073.397180][T10497] EXT4-fs: failed to create workqueue [ 1073.403071][T10497] EXT4-fs (loop2): mount failed [ 1073.409032][ T7699] usb 9-1: string descriptor 0 read error: -32 [ 1073.415443][ T7699] aiptek 9-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1073.434315][ T7699] usb 9-1: USB disconnect, device number 6 [ 1073.503059][T10503] device pim6reg1 entered promiscuous mode [ 1073.574408][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2571'. [ 1073.672342][T10517] loop2: detected capacity change from 0 to 512 [ 1073.699827][T10517] __quota_error: 14 callbacks suppressed [ 1073.699873][T10517] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1073.715566][T10517] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1073.724741][T10517] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.2574: Failed to acquire dquot type 0 [ 1073.736526][T10517] EXT4-fs (loop2): Remounting filesystem read-only [ 1073.742910][T10517] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1073.753128][T10517] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1073.762330][T10517] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.2574: Failed to acquire dquot type 0 [ 1073.773756][T10517] EXT4-fs (loop2): Remounting filesystem read-only [ 1073.780570][T10517] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1073.790807][T10517] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1073.799982][T10517] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.2574: Failed to acquire dquot type 0 [ 1073.811987][T10517] EXT4-fs (loop2): Remounting filesystem read-only [ 1073.818407][T10517] EXT4-fs (loop2): 1 orphan inode deleted [ 1073.823905][T10517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1073.832634][T10517] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.845243][ T5766] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1074.048396][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.059604][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.069725][ T5766] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1074.078961][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.095456][ T5766] usb 2-1: config 0 descriptor?? [ 1074.502894][ T5766] hid (null): bogus close delimiter [ 1074.641679][T10310] EXT4-fs (loop2): unmounting filesystem. [ 1074.708424][ T5766] usb 2-1: language id specifier not provided by device, defaulting to English [ 1074.827313][ T498] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1074.837475][ T7699] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1074.984848][T10528] xt_TCPMSS: Only works on TCP SYN packets [ 1076.451664][ T5766] uclogic 0003:256C:006D.0058: failed retrieving Huion firmware version: -71 [ 1076.489174][ T7699] usb 9-1: device descriptor read/all, error -71 [ 1076.495951][ T498] usb 10-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.518683][ T498] usb 10-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1076.713013][ T498] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1076.798106][ T5766] uclogic 0003:256C:006D.0058: failed probing parameters: -71 [ 1076.805435][ T5766] uclogic: probe of 0003:256C:006D.0058 failed with error -71 [ 1076.814560][ T5766] usb 2-1: USB disconnect, device number 57 [ 1076.831400][ T498] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.845431][ T498] usb 10-1: can't set config #17, error -71 [ 1076.859293][T10542] loop2: detected capacity change from 0 to 512 [ 1076.862734][ T498] usb 10-1: USB disconnect, device number 7 [ 1076.880313][T10542] EXT4-fs: Invalid want_extra_isize 6 [ 1077.299570][T10548] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2584'. [ 1078.170446][T10552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1078.180836][T10552] loop1: detected capacity change from 0 to 512 [ 1079.537600][T10552] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.1.2585: corrupted xattr block 95 [ 1079.566354][T10552] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2585: bg 0: block 7: invalid block bitmap [ 1079.583438][T10552] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1079.594983][T10552] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #11: comm syz.1.2585: corrupted xattr block 95 [ 1079.610160][T10552] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 1079.619720][T10552] EXT4-fs (loop1): 1 orphan inode deleted [ 1079.625734][T10552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1080.038594][T10558] loop2: detected capacity change from 0 to 1024 [ 1080.053785][T10558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1080.071722][T10561] loop9: detected capacity change from 0 to 512 [ 1080.221236][T10566] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2583'. [ 1080.479900][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1080.509104][T10561] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1080.538380][T10561] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.610913][T10571] loop6: detected capacity change from 0 to 8192 [ 1080.619139][T10573] syz.1.2589[10573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1080.619214][T10573] syz.1.2589[10573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1080.628529][T10571] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1080.654870][T10573] 9pnet_fd: Insufficient options for proto=fd [ 1080.674989][T10310] EXT4-fs (loop2): unmounting filesystem. [ 1080.838324][T10582] loop1: detected capacity change from 0 to 512 [ 1081.286917][T10582] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1081.297279][T10582] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1081.306518][T10582] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2592: Failed to acquire dquot type 0 [ 1081.318270][T10582] EXT4-fs (loop1): Remounting filesystem read-only [ 1081.324694][T10582] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1081.334834][T10582] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1081.344016][T10582] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2592: Failed to acquire dquot type 0 [ 1081.355905][T10582] EXT4-fs (loop1): Remounting filesystem read-only [ 1081.362807][T10582] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1081.373056][T10582] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1081.382215][T10582] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.2592: Failed to acquire dquot type 0 [ 1081.394295][T10582] EXT4-fs (loop1): Remounting filesystem read-only [ 1081.400722][T10582] EXT4-fs (loop1): 1 orphan inode deleted [ 1081.406233][T10582] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1081.414994][T10582] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.722602][T10590] loop2: detected capacity change from 0 to 512 [ 1081.763080][T10590] EXT4-fs: Invalid want_extra_isize 6 [ 1081.905562][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1081.968594][T10590] loop2: detected capacity change from 0 to 1024 [ 1081.993193][T10590] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1082.048993][T10598] loop1: detected capacity change from 0 to 512 [ 1082.148875][T10598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1082.184403][T10598] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.332772][T10611] loop8: detected capacity change from 0 to 256 [ 1082.394664][T10611] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1083.363603][T10310] EXT4-fs (loop2): unmounting filesystem. [ 1083.548286][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1084.201878][T10621] loop1: detected capacity change from 0 to 512 [ 1084.208846][T10621] EXT4-fs: Invalid want_extra_isize 6 [ 1084.334117][T10626] xt_TCPMSS: Only works on TCP SYN packets [ 1086.281679][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2605'. [ 1086.369037][T10641] loop6: detected capacity change from 0 to 512 [ 1086.480675][T10650] loop8: detected capacity change from 0 to 512 [ 1086.494497][T10641] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1086.504876][T10641] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1086.514199][T10641] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2606: Failed to acquire dquot type 0 [ 1086.525856][T10641] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.532231][T10641] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1086.542478][T10641] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1086.551655][T10641] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2606: Failed to acquire dquot type 0 [ 1086.563117][T10641] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.569826][T10641] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1086.580041][T10641] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1086.589197][T10641] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.2606: Failed to acquire dquot type 0 [ 1086.600491][T10641] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.606858][T10641] EXT4-fs (loop6): 1 orphan inode deleted [ 1086.612399][T10641] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1086.621118][T10641] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.667318][T10650] EXT4-fs: Invalid want_extra_isize 6 [ 1086.807816][T10657] loop1: detected capacity change from 0 to 8192 [ 1086.840567][T10657] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1087.069548][ T9377] EXT4-fs (loop9): unmounting filesystem. [ 1087.141340][ T6179] EXT4-fs (loop6): unmounting filesystem. [ 1087.164796][T10650] loop8: detected capacity change from 0 to 1024 [ 1087.215647][T10650] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1088.538448][ T1376] Bluetooth: hci0: Frame reassembly failed (-84) [ 1088.564310][ T9232] EXT4-fs (loop8): unmounting filesystem. [ 1088.583035][T10677] loop2: detected capacity change from 0 to 512 [ 1088.640982][T10677] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1088.673261][T10681] loop9: detected capacity change from 0 to 256 [ 1088.760352][T10681] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1088.853997][T10677] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.503494][T10686] loop1: detected capacity change from 0 to 8192 [ 1089.516546][T10686] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1090.096083][T10705] loop1: detected capacity change from 0 to 256 [ 1090.114579][T10705] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1090.423800][T10706] loop9: detected capacity change from 0 to 512 [ 1090.527977][T10706] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1090.556395][T10706] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1090.565690][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1090.565740][T10301] Bluetooth: hci0: command 0x1003 tx timeout [ 1090.597894][T10673] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1091.439719][T10726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2625'. [ 1091.553415][T10728] loop9: detected capacity change from 0 to 512 [ 1091.671376][T10728] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1091.681690][T10728] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1091.690949][T10728] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2629: Failed to acquire dquot type 0 [ 1091.703521][T10728] EXT4-fs (loop9): Remounting filesystem read-only [ 1091.710096][T10728] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1091.720356][T10728] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1091.729648][T10728] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2629: Failed to acquire dquot type 0 [ 1091.742093][T10728] EXT4-fs (loop9): Remounting filesystem read-only [ 1091.749821][T10728] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1091.760094][T10728] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1091.769341][T10728] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2629: Failed to acquire dquot type 0 [ 1091.781402][T10728] EXT4-fs (loop9): Remounting filesystem read-only [ 1091.787956][T10728] EXT4-fs (loop9): 1 orphan inode deleted [ 1091.793575][T10728] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1091.802525][T10728] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.627289][ C0] ================================================================== [ 1092.635201][ C0] BUG: KASAN: use-after-free in __run_timers+0x34a/0xa10 [ 1092.642050][ C0] Write of size 8 at addr ffff888118230a00 by task syz.8.2630/10735 [ 1092.649864][ C0] [ 1092.652035][ C0] CPU: 0 PID: 10735 Comm: syz.8.2630 Not tainted 6.1.118-syzkaller-00073-ge50cf165f4e7 #0 [ 1092.661774][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1092.671652][ C0] Call Trace: [ 1092.674780][ C0] [ 1092.677468][ C0] dump_stack_lvl+0x151/0x1b7 [ 1092.681981][ C0] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1092.687271][ C0] ? _printk+0xd1/0x111 [ 1092.691263][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 1092.696213][ C0] print_report+0x158/0x4e0 [ 1092.700550][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 1092.705500][ C0] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 1092.711577][ C0] ? __run_timers+0x34a/0xa10 [ 1092.716085][ C0] kasan_report+0x13c/0x170 [ 1092.720426][ C0] ? __run_timers+0x34a/0xa10 [ 1092.724940][ C0] __asan_report_store8_noabort+0x17/0x20 [ 1092.730497][ C0] __run_timers+0x34a/0xa10 [ 1092.734829][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1092.739861][ C0] ? calc_index+0x270/0x270 [ 1092.744202][ C0] ? sched_clock+0x9/0x10 [ 1092.748370][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 1092.753057][ C0] run_timer_softirq+0x69/0xf0 [ 1092.757654][ C0] handle_softirqs+0x1db/0x650 [ 1092.762256][ C0] ? irqtime_account_irq+0xdc/0x260 [ 1092.767288][ C0] __irq_exit_rcu+0x52/0xf0 [ 1092.771630][ C0] irq_exit_rcu+0x9/0x10 [ 1092.775757][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1092.781184][ C0] [ 1092.783954][ C0] [ 1092.786734][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1092.792548][ C0] RIP: 0010:finish_task_switch+0x16f/0x7b0 [ 1092.798188][ C0] Code: 74 08 4c 89 ff e8 01 78 6c 00 49 8b 1f 48 85 db 4c 8b 6d c0 0f 85 ce 00 00 00 4c 89 e7 e8 79 6c d1 03 fb 49 8d 9d 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 [ 1092.817630][ C0] RSP: 0018:ffffc9000741f320 EFLAGS: 00000282 [ 1092.823530][ C0] RAX: 0000000080000001 RBX: ffff88810d4a5c48 RCX: 0000000000000002 [ 1092.831346][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 [ 1092.839164][ C0] RBP: ffffc9000741f370 R08: dffffc0000000000 R09: ffffed10227e7cae [ 1092.846966][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6e37c80 [ 1092.854775][ C0] R13: ffff88810d4a5100 R14: 0000000000000000 R15: 1ffff1103edc4e65 [ 1092.862611][ C0] ? requeue_task_rt+0x410/0x410 [ 1092.867366][ C0] __schedule+0xcbd/0x1560 [ 1092.871621][ C0] ? avc_denied+0x1b0/0x1b0 [ 1092.875956][ C0] ? __sched_text_start+0x8/0x8 [ 1092.880645][ C0] schedule+0xc3/0x180 [ 1092.884633][ C0] schedule_timeout+0xa9/0x380 [ 1092.889233][ C0] ? __kasan_check_write+0x14/0x20 [ 1092.894180][ C0] ? skb_set_owner_w+0x24b/0x3c0 [ 1092.898954][ C0] ? console_conditional_schedule+0x10/0x10 [ 1092.904683][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1092.910326][ C0] ? prepare_to_wait_exclusive+0x1ac/0x1f0 [ 1092.915969][ C0] unix_wait_for_peer+0x24b/0x330 [ 1092.920829][ C0] ? unix_find_other+0x8e0/0x8e0 [ 1092.925600][ C0] ? wake_bit_function+0x230/0x230 [ 1092.930547][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 1092.935757][ C0] ? security_unix_may_send+0x7b/0xa0 [ 1092.940963][ C0] unix_dgram_sendmsg+0x1348/0x2050 [ 1092.946008][ C0] ? unix_dgram_poll+0x690/0x690 [ 1092.950773][ C0] ? security_socket_sendmsg+0x82/0xb0 [ 1092.956065][ C0] ? unix_dgram_poll+0x690/0x690 [ 1092.960837][ C0] ____sys_sendmsg+0x5d3/0x9a0 [ 1092.965439][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 1092.970302][ C0] ? __sys_sendmmsg+0x4f6/0x6f0 [ 1092.974990][ C0] __sys_sendmmsg+0x3b9/0x6f0 [ 1092.979502][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 1092.984475][ C0] ? futex_wait+0x4b7/0x7e0 [ 1092.988790][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1092.994430][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 1092.999638][ C0] ? do_futex+0x55a/0x9a0 [ 1093.003829][ C0] ? fpregs_restore_userregs+0x130/0x290 [ 1093.009271][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 1093.013956][ C0] x64_sys_call+0x81d/0x9a0 [ 1093.018296][ C0] do_syscall_64+0x3b/0xb0 [ 1093.022551][ C0] ? clear_bhb_loop+0x55/0xb0 [ 1093.027062][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.032788][ C0] RIP: 0033:0x7fc736f85d29 [ 1093.037043][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.056485][ C0] RSP: 002b:00007fc737e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1093.064734][ C0] RAX: ffffffffffffffda RBX: 00007fc737175fa0 RCX: 00007fc736f85d29 [ 1093.072540][ C0] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 1093.080351][ C0] RBP: 00007fc737001a20 R08: 0000000000000000 R09: 0000000000000000 [ 1093.088163][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.095984][ C0] R13: 0000000000000000 R14: 00007fc737175fa0 R15: 00007ffe06adb9d8 [ 1093.103790][ C0] [ 1093.106651][ C0] [ 1093.108819][ C0] Allocated by task 10673: [ 1093.113075][ C0] kasan_set_track+0x4b/0x70 [ 1093.117512][ C0] kasan_save_alloc_info+0x1f/0x30 [ 1093.122449][ C0] __kasan_kmalloc+0x9c/0xb0 [ 1093.126879][ C0] __kmalloc+0xb4/0x1e0 [ 1093.130867][ C0] hci_alloc_dev_priv+0x27/0x1c00 [ 1093.135726][ C0] hci_uart_tty_ioctl+0x401/0xa70 [ 1093.140587][ C0] tty_ioctl+0x903/0xc50 [ 1093.144754][ C0] __se_sys_ioctl+0x114/0x190 [ 1093.149279][ C0] __x64_sys_ioctl+0x7b/0x90 [ 1093.153697][ C0] x64_sys_call+0x98/0x9a0 [ 1093.157946][ C0] do_syscall_64+0x3b/0xb0 [ 1093.162199][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.167932][ C0] [ 1093.170097][ C0] Freed by task 10673: [ 1093.174005][ C0] kasan_set_track+0x4b/0x70 [ 1093.178429][ C0] kasan_save_free_info+0x2b/0x40 [ 1093.183289][ C0] ____kasan_slab_free+0x131/0x180 [ 1093.188237][ C0] __kasan_slab_free+0x11/0x20 [ 1093.192835][ C0] __kmem_cache_free+0x21d/0x410 [ 1093.197611][ C0] kfree+0x7a/0xf0 [ 1093.201168][ C0] hci_release_dev+0x14d3/0x1640 [ 1093.205943][ C0] bt_host_release+0x83/0xa0 [ 1093.210369][ C0] device_release+0x95/0x1c0 [ 1093.214796][ C0] kobject_put+0x178/0x260 [ 1093.219047][ C0] put_device+0x1f/0x30 [ 1093.223039][ C0] hci_dev_cmd+0x2be/0x9b0 [ 1093.227292][ C0] hci_sock_ioctl+0x415/0x7f0 [ 1093.231806][ C0] sock_do_ioctl+0x152/0x450 [ 1093.236232][ C0] sock_ioctl+0x455/0x740 [ 1093.240408][ C0] __se_sys_ioctl+0x114/0x190 [ 1093.244925][ C0] __x64_sys_ioctl+0x7b/0x90 [ 1093.249342][ C0] x64_sys_call+0x98/0x9a0 [ 1093.253593][ C0] do_syscall_64+0x3b/0xb0 [ 1093.257846][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.263574][ C0] [ 1093.265744][ C0] Last potentially related work creation: [ 1093.271298][ C0] kasan_save_stack+0x3b/0x60 [ 1093.275812][ C0] __kasan_record_aux_stack+0xb4/0xc0 [ 1093.281020][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1093.286689][ C0] insert_work+0x56/0x310 [ 1093.290826][ C0] __queue_work+0x9b6/0xd70 [ 1093.295165][ C0] queue_work_on+0x105/0x170 [ 1093.299595][ C0] __hci_cmd_sync_sk+0xc2a/0xf70 [ 1093.304372][ C0] hci_cmd_sync_status+0x52/0x130 [ 1093.309250][ C0] hci_dev_cmd+0x39e/0x9b0 [ 1093.313486][ C0] hci_sock_ioctl+0x415/0x7f0 [ 1093.317994][ C0] sock_do_ioctl+0x152/0x450 [ 1093.322419][ C0] sock_ioctl+0x455/0x740 [ 1093.326587][ C0] __se_sys_ioctl+0x114/0x190 [ 1093.331099][ C0] __x64_sys_ioctl+0x7b/0x90 [ 1093.335534][ C0] x64_sys_call+0x98/0x9a0 [ 1093.339776][ C0] do_syscall_64+0x3b/0xb0 [ 1093.344031][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.349765][ C0] [ 1093.351931][ C0] Second to last potentially related work creation: [ 1093.358354][ C0] kasan_save_stack+0x3b/0x60 [ 1093.362866][ C0] __kasan_record_aux_stack+0xb4/0xc0 [ 1093.368074][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1093.373722][ C0] insert_work+0x56/0x310 [ 1093.377880][ C0] __queue_work+0x9b6/0xd70 [ 1093.382219][ C0] queue_work_on+0x105/0x170 [ 1093.386647][ C0] hci_cmd_timeout+0x199/0x200 [ 1093.391248][ C0] process_one_work+0x73d/0xcb0 [ 1093.395931][ C0] worker_thread+0xa60/0x1260 [ 1093.400447][ C0] kthread+0x26d/0x300 [ 1093.404353][ C0] ret_from_fork+0x1f/0x30 [ 1093.408606][ C0] [ 1093.410775][ C0] The buggy address belongs to the object at ffff888118230000 [ 1093.410775][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 1093.424662][ C0] The buggy address is located 2560 bytes inside of [ 1093.424662][ C0] 8192-byte region [ffff888118230000, ffff888118232000) [ 1093.437942][ C0] [ 1093.440110][ C0] The buggy address belongs to the physical page: [ 1093.446362][ C0] page:ffffea0004608c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118230 [ 1093.456437][ C0] head:ffffea0004608c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1093.464762][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 1093.470675][ C0] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 1093.479088][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1093.487499][ C0] page dumped because: kasan: bad access detected [ 1093.493757][ C0] page_owner tracks the page as allocated [ 1093.499304][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8769, tgid 8768 (syz.6.2074), ts 952387881176, free_ts 952371002483 [ 1093.521959][ C0] post_alloc_hook+0x213/0x220 [ 1093.526559][ C0] prep_new_page+0x1b/0x110 [ 1093.530897][ C0] get_page_from_freelist+0x2f41/0x2fc0 [ 1093.536278][ C0] __alloc_pages+0x234/0x610 [ 1093.540719][ C0] alloc_slab_page+0x6c/0xf0 [ 1093.545135][ C0] new_slab+0x90/0x3e0 [ 1093.549034][ C0] ___slab_alloc+0x6f9/0xb80 [ 1093.553665][ C0] __slab_alloc+0x5d/0xa0 [ 1093.557831][ C0] __kmem_cache_alloc_node+0x207/0x2a0 [ 1093.563124][ C0] __kmalloc+0xa3/0x1e0 [ 1093.567122][ C0] mb_cache_create+0x171/0x620 [ 1093.571715][ C0] ext4_xattr_create_cache+0x13/0x20 [ 1093.576836][ C0] ext4_fill_super+0x6543/0x8460 [ 1093.581627][ C0] get_tree_bdev+0x440/0x680 [ 1093.586037][ C0] ext4_get_tree+0x1c/0x20 [ 1093.590292][ C0] vfs_get_tree+0x88/0x290 [ 1093.594545][ C0] page last free stack trace: [ 1093.599060][ C0] free_unref_page_prepare+0x83d/0x850 [ 1093.604350][ C0] free_unref_page+0xb2/0x5c0 [ 1093.608863][ C0] __free_pages+0x61/0xf0 [ 1093.613055][ C0] __free_slab+0xce/0x1a0 [ 1093.617198][ C0] __unfreeze_partials+0x165/0x1a0 [ 1093.622150][ C0] put_cpu_partial+0xa9/0x100 [ 1093.626657][ C0] __slab_free+0x1c8/0x280 [ 1093.630930][ C0] ___cache_free+0xc6/0xd0 [ 1093.635163][ C0] qlist_free_all+0xc5/0x140 [ 1093.639590][ C0] kasan_quarantine_reduce+0x15a/0x180 [ 1093.644882][ C0] __kasan_slab_alloc+0x24/0x80 [ 1093.649586][ C0] slab_post_alloc_hook+0x53/0x2c0 [ 1093.654524][ C0] kmem_cache_alloc+0x175/0x320 [ 1093.659219][ C0] getname_flags+0xba/0x520 [ 1093.663544][ C0] getname+0x19/0x20 [ 1093.667307][ C0] do_sys_openat2+0xe0/0x870 [ 1093.671703][ C0] [ 1093.673873][ C0] Memory state around the buggy address: [ 1093.679345][ C0] ffff888118230900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1093.687243][ C0] ffff888118230980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1093.695162][ C0] >ffff888118230a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1093.703034][ C0] ^ [ 1093.706945][ C0] ffff888118230a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1093.714862][ C0] ffff888118230b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1093.722738][ C0] ================================================================== [ 1093.730635][ C0] Disabling lock debugging due to kernel taint [ 1093.736698][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1093.748260][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1093.756506][ C0] CPU: 0 PID: 10735 Comm: syz.8.2630 Tainted: G B 6.1.118-syzkaller-00073-ge50cf165f4e7 #0 [ 1093.767707][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1093.777770][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 1093.782893][ C0] Code: 39 03 0f 84 40 01 00 00 e8 fc 6b 2a 00 4c 89 e7 e8 e4 d3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 30 df 71 00 49 8b 3e e8 98 cc d6 [ 1093.802331][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 1093.808229][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810d4a5100 [ 1093.816042][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1093.823853][ C0] RBP: ffffc90000007d00 R08: ffffffff814b186b R09: 0000000000000007 [ 1093.831666][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881182309c8 [ 1093.839475][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881182309e0 [ 1093.847394][ C0] FS: 00007fc737e7d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1093.856227][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1093.862652][ C0] CR2: 0000000020139030 CR3: 0000000116eb3000 CR4: 00000000003506b0 [ 1093.870468][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1093.878272][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1093.886098][ C0] Call Trace: [ 1093.889214][ C0] [ 1093.891919][ C0] ? __die_body+0x62/0xb0 [ 1093.896065][ C0] ? die_addr+0x9f/0xd0 [ 1093.900059][ C0] ? exc_general_protection+0x317/0x4c0 [ 1093.905446][ C0] ? asm_exc_general_protection+0x27/0x30 [ 1093.910994][ C0] ? __queue_work+0x28b/0xd70 [ 1093.915508][ C0] ? __queue_work+0x4f1/0xd70 [ 1093.920025][ C0] ? __queue_work+0x29c/0xd70 [ 1093.924536][ C0] delayed_work_timer_fn+0x61/0x80 [ 1093.929489][ C0] ? queue_work_node+0x1d0/0x1d0 [ 1093.934260][ C0] call_timer_fn+0x3b/0x2d0 [ 1093.938767][ C0] ? queue_work_node+0x1d0/0x1d0 [ 1093.943540][ C0] __run_timers+0x756/0xa10 [ 1093.947882][ C0] ? calc_index+0x270/0x270 [ 1093.952220][ C0] ? sched_clock+0x9/0x10 [ 1093.956385][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 1093.961074][ C0] run_timer_softirq+0x69/0xf0 [ 1093.965676][ C0] handle_softirqs+0x1db/0x650 [ 1093.970274][ C0] ? irqtime_account_irq+0xdc/0x260 [ 1093.975308][ C0] __irq_exit_rcu+0x52/0xf0 [ 1093.979649][ C0] irq_exit_rcu+0x9/0x10 [ 1093.983726][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1093.989202][ C0] [ 1093.991972][ C0] [ 1093.994748][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1094.000566][ C0] RIP: 0010:finish_task_switch+0x16f/0x7b0 [ 1094.006296][ C0] Code: 74 08 4c 89 ff e8 01 78 6c 00 49 8b 1f 48 85 db 4c 8b 6d c0 0f 85 ce 00 00 00 4c 89 e7 e8 79 6c d1 03 fb 49 8d 9d 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 [ 1094.025737][ C0] RSP: 0018:ffffc9000741f320 EFLAGS: 00000282 [ 1094.031636][ C0] RAX: 0000000080000001 RBX: ffff88810d4a5c48 RCX: 0000000000000002 [ 1094.039448][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 [ 1094.047262][ C0] RBP: ffffc9000741f370 R08: dffffc0000000000 R09: ffffed10227e7cae [ 1094.055069][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6e37c80 [ 1094.062880][ C0] R13: ffff88810d4a5100 R14: 0000000000000000 R15: 1ffff1103edc4e65 [ 1094.070697][ C0] ? requeue_task_rt+0x410/0x410 [ 1094.075470][ C0] __schedule+0xcbd/0x1560 [ 1094.079733][ C0] ? avc_denied+0x1b0/0x1b0 [ 1094.084060][ C0] ? __sched_text_start+0x8/0x8 [ 1094.088748][ C0] schedule+0xc3/0x180 [ 1094.092652][ C0] schedule_timeout+0xa9/0x380 [ 1094.097255][ C0] ? __kasan_check_write+0x14/0x20 [ 1094.102201][ C0] ? skb_set_owner_w+0x24b/0x3c0 [ 1094.106970][ C0] ? console_conditional_schedule+0x10/0x10 [ 1094.112711][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1094.118343][ C0] ? prepare_to_wait_exclusive+0x1ac/0x1f0 [ 1094.124077][ C0] unix_wait_for_peer+0x24b/0x330 [ 1094.128936][ C0] ? unix_find_other+0x8e0/0x8e0 [ 1094.133807][ C0] ? wake_bit_function+0x230/0x230 [ 1094.138766][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 1094.143987][ C0] ? security_unix_may_send+0x7b/0xa0 [ 1094.149187][ C0] unix_dgram_sendmsg+0x1348/0x2050 [ 1094.154350][ C0] ? unix_dgram_poll+0x690/0x690 [ 1094.159113][ C0] ? security_socket_sendmsg+0x82/0xb0 [ 1094.164409][ C0] ? unix_dgram_poll+0x690/0x690 [ 1094.169184][ C0] ____sys_sendmsg+0x5d3/0x9a0 [ 1094.173786][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 1094.178645][ C0] ? __sys_sendmmsg+0x4f6/0x6f0 [ 1094.183331][ C0] __sys_sendmmsg+0x3b9/0x6f0 [ 1094.187842][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 1094.192704][ C0] ? futex_wait+0x4b7/0x7e0 [ 1094.197137][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1094.202947][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 1094.208165][ C0] ? do_futex+0x55a/0x9a0 [ 1094.212382][ C0] ? fpregs_restore_userregs+0x130/0x290 [ 1094.217801][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 1094.222472][ C0] x64_sys_call+0x81d/0x9a0 [ 1094.226813][ C0] do_syscall_64+0x3b/0xb0 [ 1094.231064][ C0] ? clear_bhb_loop+0x55/0xb0 [ 1094.235579][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1094.241308][ C0] RIP: 0033:0x7fc736f85d29 [ 1094.245560][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.265109][ C0] RSP: 002b:00007fc737e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1094.273358][ C0] RAX: ffffffffffffffda RBX: 00007fc737175fa0 RCX: 00007fc736f85d29 [ 1094.281166][ C0] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 1094.288968][ C0] RBP: 00007fc737001a20 R08: 0000000000000000 R09: 0000000000000000 [ 1094.296779][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.304590][ C0] R13: 0000000000000000 R14: 00007fc737175fa0 R15: 00007ffe06adb9d8 [ 1094.312407][ C0] [ 1094.315270][ C0] Modules linked in: [ 1094.319004][ C0] ---[ end trace 0000000000000000 ]--- [ 1094.324292][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 1094.329414][ C0] Code: 39 03 0f 84 40 01 00 00 e8 fc 6b 2a 00 4c 89 e7 e8 e4 d3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 30 df 71 00 49 8b 3e e8 98 cc d6 [ 1094.348863][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 1094.354755][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810d4a5100 [ 1094.362568][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1094.370382][ C0] RBP: ffffc90000007d00 R08: ffffffff814b186b R09: 0000000000000007 [ 1094.378192][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881182309c8 [ 1094.386001][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881182309e0 [ 1094.393815][ C0] FS: 00007fc737e7d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1094.402577][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1094.408999][ C0] CR2: 0000000020139030 CR3: 0000000116eb3000 CR4: 00000000003506b0 [ 1094.416813][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1094.424622][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1094.432444][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1094.439825][ C0] Kernel Offset: disabled [ 1094.443952][ C0] Rebooting in 86400 seconds..