last executing test programs: 13.588746686s ago: executing program 4 (id=4506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085b1551db8000000a90000009500d04858e52e850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x0, 0x5}}}, 0x24}}, 0x0) unshare(0x20000400) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000400)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000700)={0x0, 0x3000000, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r8, 0x703, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x20}}, 0x4040840) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x1, 0x40, 0x10, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x7801, 0x400, 0x4}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000328bd700900dbdf250b0000003c0001800600010002000000060005004e2000000800060008000000080006000a000049060005004e22000008000700ff09092ab78a50f4116161400231f3f96842ff69d30841af3cc108f5938185409d39", @ANYRES32=r12, @ANYBLOB="0600010002000000"], 0x50}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) 13.015821787s ago: executing program 0 (id=4507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000003, &(0x7f0000000040), 0x41, 0x4d1, &(0x7f0000001440)="$eJzs3VFrXFkdAPD/vcnspt2sk3V92F1wXdyVdNHOJI1tgw9tBdGnglrfY0wmIWSSCcmkbUKRFD+AIKKCTz75IvgBBOlHEKGg76JFEW31wQd1ZO7ciWky06Q4mesmvx/c3HPuuTf//xmYO3PmHu4N4Nx6LyJuRcRIRHwYEeV8e5ovc+3KXme/Z08fLLSXJFqtO39JIsm3df9Xkq9f6xwSYxHx9a9EfCvpFXl3db5er23mtWpzbaO6tbN7eWVtfrm2XFufmZm+Nnt99urs1Mk7k/ZvmoiIG1968oPv/vTLN375uXu/m/vTpW+30xrP2w/2Y5A6XS9lr0XXaERsnkawgoxmPQQA4KPgzYj4eER8Ovv+X46R7NscAAAAcJa0bo7HP5OIFgAAAHBmpdkc2CSt5NNnxyNNK5XOHN5PxMW03thqfnapsb2+2GmfiFK6tFKvTeVzhSeilLTr0/kc2279yqH6TES8ERHfL1/I6pWFRn2x6B8/AAAA4Jx47dD4/+/lzvj/kI1CkgMAAAAGZ6LoBAAAAIBTZ/wPAAAAZ5/xPwAAAJxpX719u720us+/Xry7s73auHt5sba1WlnbXqgsNDY3KsuNxnJ2z7614/5fvdHY+Hysb9+vNmtbzerWzu7cWmN7vTm38twjsAEAAIAheuNTj36bRMTeFy5kS9vbRScFDEX6Mjv/4fTyAIZvpOgEgMKMFp0AUJhS0QkAhUuOaf9Yv4ZfDT4XAADgdEy+ffT6f7nopICheKnr/wDAmeD6P5xfJTMA4dzre30/1/fmHUeu/9/ss2Or9dJJAQAAAzWeLUlaya8FjkeaVioRr2ePBSglSyv12lQ+PvhNufRquz6dHZkcO2cYAAAAAAAAAAAAAAAAAAAAAAAAAOhotZJoAQAAAGdaRPrHJLubf8Rk+YPxw78PvJL8o5ytI+Lej+/88P58s7k53d7+1/3tzR/l268U8QsGAAAAnBNPTv4kvu44vTuOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBevb0wUJ3GWbcP38xIiZ6xR+NsWw9FqWIuPi3JEYPHJdExMgA4u89jIi3esVP2mnFRJ5Fr/gXhh4/2T8uHUBsOO8etc8/t3q9/9J4L1v3fv+P5sv/qv/5L90//430Of+8fsIY7zz+ebVv/IcR74z2Pv904ydZtKPx3z9h/G9+Y3f3QPXVg22tn0RM9vz8SZ6LVW2ubVS3dnYvr6zNL9eWa+szM9PXZq/PXp2dqi6t1Gv5357xv/fJX/z7Rf2/2Cf+xH7/e7/+H5yw//96fP/pm51iqVf8S+/3/vx9q0/8NP/s+0xebrdPdst7nfJB7/7s1+++qP+Lffo/dkz/L52w/x9+7Tu/P+GuAMAQbO3srs7X67VNBYUCCq/E/0UaCkcKRZ+ZAACAQfvvl/6iMwEAAAAAAAAAAAAAAAAAAIDzaxi3Ezscc6+YrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvNB/AgAA//+tR9Pt") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2004, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46f7800200390000000000000002000600f37a0000ee0100000000000040000000000000002402000000000000b0030000010138000200020002000100010000000c000000299f00000000000005000000000000000100010000000000000800000000000085b1161c000000000080000000000000010000000300000000000000000000007c1b0000000000000600000000000000660000000000000001000000000000000200"/491], 0x2b0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000069f000/0x2000)=nil, 0x2) read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/13, 0xd) 12.943391813s ago: executing program 4 (id=4508): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @tail_call, @alu={0x7, 0x0, 0x5, 0x8, 0x4, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, @generic={0x9, 0x9, 0x4, 0x3, 0xd175}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1, 0x86, &(0x7f00000006c0)=""/134, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x3, 0x1, 0xb, 0x1}], 0x10, 0xff, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='rpcgss_svc_unwrap_failed\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000900)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000010300000000000000000200000000000000000000001c4a620167739606e65f2b4164538c4f1299bda1bfde6413a1bf3545b752cc0b2254ed23708c782ce69d367d0522790ad82234"], 0x1c}}, 0x0) ioctl$KDSETLED(r0, 0x4b45, 0x4) 11.700972744s ago: executing program 0 (id=4509): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000730105000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty, 0x7fff}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[], 0xfff7) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002030108021b000101105034090400030107000000000000000000030705b213a92221e91b907c027c9b1ad6d591daf90626527c55916ed1da64137041e2eafcae4c76c4f3b2e71dfa742a345594b6c5ebc2224bc55e9147335947b148ed0a0cfd8b8cbd642200e384bcdbfe7db3904eb3974a3dc67a1ad4c1f4025ea6d07370922703311dc0f6b3648287fed66920d85afc621b5bda8021958561add495d738ddac46d43767"], &(0x7f0000000ec0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x1, 0xf7, 0x6, 0x40, 0x1}, 0x34, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x5, [{0xe6, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2409}}, {0xe4, &(0x7f0000000640)=ANY=[@ANYBLOB="e4035662ba1a58d276f97672f9cc56656763fd4047bbda01ab9ce126362a917da6e31748e4bdb7f6e5ddddd77eeb2fa195269642d01d58bbad5328d66d32e4ad33e73dfde364a641c5ec1d3b55a38437ae4b5f1541327048826adbbef4420380d3f54e0fee5c62f1680fc710e1bd221309001261f99510c774d4bb53c6f6e4e96a3d7e262de860a883a354f8b62f5bcbe750917b949abe57a2749b93e2777dbcd72ee390cde9ce0cf3f9a69bae501d81ba6cacb75969e926ca2bc70c90416ad1e1f6882d995bfe4f7d31d606061a6d120abeccb85f79d29de7fd5b7a7698aae89e2e1c92ec6f186006d375a4bb46f409de54"]}, {0xc9, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_ep_write(r3, 0x81, 0xc7, &(0x7f0000000440)="b9424705397f0019c136bce374205285c2466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4cf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9ea707a573da8dd49c0c6d33f0a3898c315943f48ff06761880b65a000000000000ac3b4c48afcd22cb4f15e3933a21056cf7b4a6829cddcf76b863c801b1892c543d2c5350c5cc3ca41680129173413ea7dfdfc3a6bc4379d02b2a15b26a4a08e4c9") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000020000103000003000000000002002000000000050000000049c3ddcb44f054f1f1846a7f581913c24ee0565c446728ca170c0d0a213a0d8e6a4614182801d6c22a5ccf4e675feab2ee2096463346b2340269f59ab396d057d96294dc5eda3028e6f2b3a4cde99407e2c2f6162a6a9462abafce0b8387f810f48fabb63d47555891046c5b46edcbf8b323e5af07cbe4f2ebd46c3054a22907cbd44a505985d0ade6a660e330653d638568a2d2"], 0x1c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000001840)={0x0, 0x0, "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"}) 10.84112042s ago: executing program 4 (id=4516): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet(0x2, 0x4, 0xf85) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendto$inet(r0, &(0x7f0000000400)="bccee791ca8932fa84ba96f79bbc0a7f5c224dfd9c7617a6e76a6882782710c81c2f6168d7f10636cf2aa7c32c947621a3c12186929121de9d7dede0e515b9e15d383314f2e7475fe9722fe18c5d9482831fcdd42fa6495440b010c8eaa516a233d75756b8717fa403893ae21033d9bed9b1bbff44f8d280f8ea91fb0e802f78cc0fb3a0a96370a7aa9b636450fc013a484eb69b518063803bcf132905f8acbdef9e93891766be6c0386ba8b502eb2a08a3fedab78c72625296f71e97e83b104622ce6748d96074da1133e7bde8f4004b3b68085d1fcd37378153a8c34be5adfc75914f0df876dacee30d4c02b54a7b41e3a", 0xf2, 0x44004, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400), 0x1}}], 0x40000000000007e, 0x9200000000000000) sendmsg$tipc(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) close_range(r6, 0xffffffffffffffff, 0x0) 9.170497108s ago: executing program 4 (id=4519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085b1551db8000000a90000009500d04858e52e850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x0, 0x5}}}, 0x24}}, 0x0) unshare(0x20000400) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000400)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000700)={0x0, 0x3000000, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r8, 0x703, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x20}}, 0x4040840) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x1, 0x40, 0x10, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x7801, 0x400, 0x4}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000328bd700900dbdf250b0000003c0001800600010002000000060005004e2000000800060008000000080006000a000049060005004e22000008000700ff09092ab78a50f4116161400231f3f96842ff69d30841af3cc108f5938185409d39", @ANYRES32=r12, @ANYBLOB="0600010002000000"], 0x50}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) 9.024340901s ago: executing program 4 (id=4521): r0 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b00"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_usb_connect(0x1, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000001804", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$unix(0x1, 0x5, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) rt_sigaction(0x22, 0x0, 0x0, 0x8, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000700)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40010) 8.110785741s ago: executing program 1 (id=4522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x10000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000980)=0x1) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x202000, &(0x7f0000000300)={[{@nouid32}, {@discard}, {@sysvgroups}, {@norecovery}, {@resuid}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@sb={'sb', 0x3d, 0x6}}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@euid_gt}, {@audit}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, 'sb'}}]}, 0x3, 0x56a, &(0x7f0000000400)="$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") 7.848842965s ago: executing program 2 (id=4515): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$inet6(0xa, 0xa, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000240)=0x38a, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000002c0), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2000]}]}, 0x28}}, 0x0) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) 7.212676351s ago: executing program 0 (id=4523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000088b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_tcp(&(0x7f00000007c0), &(0x7f0000000800)='.\x00', &(0x7f0000000840), 0x8010, &(0x7f0000000880)={'trans=tcp,', {'port', 0x3d, 0x4e23}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2, 0x3, 0x9) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000003c0), 0x0, 0x4004) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001200)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX=0x0, @ANYBLOB="2ca247630000000001000000000000002c6572726f72733d636f6e74696e75652c00"], 0x1, 0x1538, &(0x7f0000003980)="$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") 7.030494427s ago: executing program 1 (id=4524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085b1551db8000000a90000009500d04858e52e850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x0, 0x5}}}, 0x24}}, 0x0) unshare(0x20000400) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000400)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000700)={0x0, 0x3000000, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r8, 0x703, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x20}}, 0x4040840) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x1, 0x40, 0x10, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x7801, 0x400, 0x4}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) 5.998455389s ago: executing program 4 (id=4525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000240)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000540)=[{{0x0, 0x1}}], 0xfffffffffffffd04) quotactl$Q_SYNC(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000080)={0x2, 0x1, 0x6, 0x0, 0xffff7fff}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 5.997536999s ago: executing program 0 (id=4536): r0 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b00"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_usb_connect(0x1, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000001804", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$unix(0x1, 0x5, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) rt_sigaction(0x22, 0x0, 0x0, 0x8, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000700)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40010) 5.997227009s ago: executing program 1 (id=4526): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0xfaa7adca8cba7d97) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$inet(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003440)={[{@uni_xlateno}, {@shortname_mixed}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2ad, &(0x7f0000000240)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000010000b704000005000000008800b55c93dc6fd686a4e58b2d6e94ef2739e952acfcb948483adc877c687989b3f658c841908dd5a679e1714b2079d8ad8bc7dfb1392b1805b7874d1415cc4de530c4b4e3dfec27902cf7137f7e528977ca5d01eb8701d09c26eba53bef04f8bee56284c8039ace8420c69642e6e52e120482f86d5073d7acefcc48a0682acf63bdd13d9ceaace1ff0fc3a335850867a7948cf6a1bb6c45ab79ecb44336618cbc2efa1983e78fe05382"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x2ad, &(0x7f0000000580)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) 5.997023229s ago: executing program 2 (id=4527): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$inet6(0xa, 0xa, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000240)=0x38a, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000002c0), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2000]}]}, 0x28}}, 0x0) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) 5.996796109s ago: executing program 3 (id=4528): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x77c, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$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") open$dir(0x0, 0x0, 0x0) getpid() r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) setfsgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 4.803887534s ago: executing program 1 (id=4529): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$inet6(0xa, 0xa, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000240)=0x38a, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000002c0), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2000]}]}, 0x28}}, 0x0) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) 4.459473035s ago: executing program 3 (id=4530): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x77c, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKip0pAuZeQOFEUJ45ip22iClLxByAhBEiceuLSvwAk1AN/AEJCgjvix65Wu+3uYQ+765XtcZqmdhztOnGVfD7SdN57Huf7fVN5PDPvyRPAkXU+Im5FRF9EXI6I4aw9zZbbtcpmY7sXzx/N1JYkqtW77yaRZG07/+aJxltiICJ+fDviZ8nrccvrG4vTxWJhNauPVZZWxsrrG1cWlqbnC/OF5cnJietTN6auTY13pZ+1ft38/v9++6s//uDmX7714N/33r7081paQ9nrrfrRDY2u5+r7oqk/Ilb3I1gP9GXrXMct/7rvuQAA0FntHP9LEfH1+vn/cPTVz04BAACAw6T63aH4KImoAgAAAIdWWp8Dm6T5bC7AUKRpPt+Yw/uVOJ4WS+XKN+dKa8uzjbmyI5FL5xaKhfFsTu1I5JJafaJeflm/uqM+GRGnIuI3w4P1en6mVJzt9c0PAAAAOCJO7Lj+/2C4cf0PAAAAHDIjvU4AAAAA2HevXP8/6V0eAAAAwP4x/g8AAACH2g/v3Kkt1ebzr2fvr68tlu5fmS2UF/NLazP5mdLqSn6+VJqv/2bfUqe/VyyVVr4dy2sPxyqFcmWsvL5xb6m0tlwZXHjlEdgAAADAATp17tm/kojY/M5gfak51uukgAORdNpg+127/+5vLsDB6svWT//U40SAA9ff6wSAnsn1OgGg5zrdB2g7eedv3c8FAADYH6Nf3Rr/H2y2Ncf/O98b6Dh6CLzB0l4nAAAcOOP/cHTltmYAAkfVF3c2JBGb26qff/y/Wv0seQEAAN0zVF+SNJ+NBQ5FmubzESfrjwXIJXMLxcJ4dn3wz+HcF2r1ifo7E6P/AAAAAAAAAAAAAAAAAAAAAAAAALBH1WoSVQAAAOBQi0jfSrIn+Y8OXxzaeX/gWPLhcH0dEQ/+cPd3D6crldWJWvt7W+2V32ftVz1PHAAAAN4Ezev05nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTi+ePZprLay8e27+473wvIkZaxe+Pgfp6IHIRcfz9JPq3vS+JiL4uxN98HBGnW8VPamnFSJZFq/iDPYyfRsSJLsSHo+xZ7fhzq9XnL43z9XXrz1+t/P8uxG9//Eu3jn99bY4/J/cY48zmLvEfR5zpb338acZP2sS/sMf4P/3Jxka716pPIkZbfv8kr8QaqyytjJXXN64sLE3PF+YLy5OTE9enbkxdmxofm1soFrJ/W8b49df+/Mlu/T/eJv5Io//n2vX/4h77//E/Hj7/cqOYaxX/0oXW37+nG/Ff2/9p9t33jaz8olr9xWhWTjYb+3O7s0//fna3/s+26X+n//9Le+z/5R/98j973BQAOADl9Y3F6WKxsKrQulCt2lEKh7IQA7tt0+sjEwAA0G0vT/p7nQkAAAAAAAAAAAAAAAAAAAAcXQfxS2M7Y+7yc9QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zaQAAAP//6ajYQw==") open$dir(0x0, 0x0, 0x0) getpid() r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) setfsgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 4.274069331s ago: executing program 2 (id=4531): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$inet6(0xa, 0xa, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000000080102000000000000000000000000060002400000"], 0x34}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000240)=0x38a, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000002c0), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2000]}]}, 0x28}}, 0x0) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) 3.605487321s ago: executing program 1 (id=4533): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0xb, 0x1, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x6, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r4}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r7 = dup2(r6, r5) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8], 0x46) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB="00150000000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="100000000000000007"], 0x5c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000040000000000200000", @ANYRES32=r11, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r11, 0x25, 0xa, @void}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0) 3.49528187s ago: executing program 3 (id=4534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085b1551db8000000a90000009500d04858e52e850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x0, 0x5}}}, 0x24}}, 0x0) unshare(0x20000400) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000400)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000700)={0x0, 0x3000000, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r8, 0x703, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x20}}, 0x4040840) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000328bd700900dbdf250b0000003c0001800600010002000000060005004e2000000800060008000000080006000a000049060005004e22000008000700ff09092ab78a50f4116161400231f3f96842ff69d30841af3cc108f5938185409d39", @ANYRES32, @ANYBLOB="0600010002000000"], 0x50}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) 3.008744623s ago: executing program 2 (id=4535): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x77c, &(0x7f0000001180)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2CYMWDCBYKerZdNttQs8mW7KY0IaBFBC+CigdBLz37o968+uOq/4UHsVRNixUPEpnNTrttdtNsmmSr+/nAJO/NzO6b776ZeW93HjMB9KzR9E8u4mBEfJBEDDfmJxExUE/1RxxfW+/GynIxnZJYXX3t96S+zvWV5WI0vSa1v5F5NCK+fzfiUG59udXFpZlCuVyab+THa7PnxquLS4fPzhamS9OluaMTk5NHjj1z7Oj2xfrnT0sHrnz48pNfHf/7nUcuv/9DEsfjQGNZcxzbZTRGG5/JQPoR3ual7S6sy5JubwBbkh6afWtHeRyM4eirpwCA/7O3ImIVAOgp/dp/AOg52e8A11eWi9nU3V8kdtfVFyNi71r82fXNtSX9jWt2e+vXQYeuJ7ddGUkiYmQbyh+NiM++eeOLdIodug4J0MrbFyPi9Mjo+vN/sm7MQqee2mDZnsb/0TvmO//B7vk27f8826r/l7vZ/4kW/Z/BFsfuVtz1+N+3DYVsIO3/Pd80tu1GU/wNI32N3AP1Pt9AcuZsuZSe2x6MiLEYGEzzE2vrthwGNXbtn2vtym/u//3x0Zufp+Wn/2+tkfu1f/D210wVaoV7jTtz9WLEY/2t4k9u1n/Spv97cpNlvPLce5+2W5bGn8abTevjj8bopJ2xeiniiZb1f6sqkw3HJ47Xd4fxbKdo4eufPxlqV35z/adTWn72XWA3pPU/tHH8I0nzeM1q52X8eGn4u3bL7h5/6/1/T/J6PZ31Iy4UarX5iYg9yavr5x+59dosn62fxj/2eOvjf6P9P/1OeHqT8fdf+e3Lrce/s9L4pzqq/84Tl2/M9LUrf3P1P1lPjTXmbOb8t9kNvJfPDgAAAAAAAAAAAAAAAAAAAAAAAAA2KxcRByLJ5W+mc7l8fu0Z3g/HUK5cqdYOnakszE1F/VnZIzGQy251Odx0P9SJxv3ws/yRO/JPR8RDEfHx4L4ku4/iVJdjBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM/jbP/0/9MtjtrQMAdszebm8AALDrtP8A0Hu0/wDQe7T/ANB7tP8A0Hu0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOywkydOpNPqXyvLxTQ/dX5xYaZy/vBUqTqTn10o5ouV+XP56UplulzKFyuzd3u/cqVybjLmFi6M10rV2nh1cenUbGVhrnbq7GxhunSqNLArUQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ6qLSzOFcrk0L7GFxOr9sRndT/Q1dqc7FyUR0ekbvhBdD6ezRHJ/bMY2J7p8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/g3AAD//5EOHsI=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$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") open$dir(0x0, 0x0, 0x0) getpid() r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) setfsgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 2.970469887s ago: executing program 3 (id=4537): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$inet6(0xa, 0xa, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000240)=0x38a, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000002c0), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2000]}]}, 0x28}}, 0x0) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) 2.637353406s ago: executing program 1 (id=4538): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") r0 = syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) tkill(r1, 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="660a00000000000061116c0000000000950000000caa0000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$sock_bt_hci(r6, 0x800448d5, 0x0) 2.528046666s ago: executing program 0 (id=4539): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") r0 = syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) tkill(r1, 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="660a00000000000061116c0000000000950000000caa0000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) bind$bt_hci(r6, &(0x7f0000000140), 0x6) 2.002492142s ago: executing program 2 (id=4540): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x4000000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f108000340"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) getitimer(0x0, &(0x7f0000000240)) rt_sigpending(0x0, 0x0) 1.772773693s ago: executing program 3 (id=4541): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0xfaa7adca8cba7d97) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$inet(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003440)={[{@uni_xlateno}, {@shortname_mixed}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2ad, &(0x7f0000000240)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000010000b704000005000000008800b55c93dc6fd686a4e58b2d6e94ef2739e952acfcb948483adc877c687989b3f658c841908dd5a679e1714b2079d8ad8bc7dfb1392b1805b7874d1415cc4de530c4b4e3dfec27902cf7137f7e528977ca5d01eb8701d09c26eba53bef04f8bee56284c8039ace8420c69642e6e52e120482f86d5073d7acefcc48a0682acf63bdd13d9ceaace1ff0fc3a335850867a7948cf6a1bb6c45ab79ecb44336618cbc2efa1983e78fe05382"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x2ad, &(0x7f0000000580)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) 352.215069ms ago: executing program 3 (id=4542): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x77c, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKip0pAuZeQOFEUJ45ip22iClLxByAhBEiceuLSvwAk1AN/AEJCgjvix65Wu+3uYQ+765XtcZqmdhztOnGVfD7SdN57Huf7fVN5PDPvyRPAkXU+Im5FRF9EXI6I4aw9zZbbtcpmY7sXzx/N1JYkqtW77yaRZG07/+aJxltiICJ+fDviZ8nrccvrG4vTxWJhNauPVZZWxsrrG1cWlqbnC/OF5cnJietTN6auTY13pZ+1ft38/v9++6s//uDmX7714N/33r7081paQ9nrrfrRDY2u5+r7oqk/Ilb3I1gP9GXrXMct/7rvuQAA0FntHP9LEfH1+vn/cPTVz04BAACAw6T63aH4KImoAgAAAIdWWp8Dm6T5bC7AUKRpPt+Yw/uVOJ4WS+XKN+dKa8uzjbmyI5FL5xaKhfFsTu1I5JJafaJeflm/uqM+GRGnIuI3w4P1en6mVJzt9c0PAAAAOCJO7Lj+/2C4cf0PAAAAHDIjvU4AAAAA2HevXP8/6V0eAAAAwP4x/g8AAACH2g/v3Kkt1ebzr2fvr68tlu5fmS2UF/NLazP5mdLqSn6+VJqv/2bfUqe/VyyVVr4dy2sPxyqFcmWsvL5xb6m0tlwZXHjlEdgAAADAATp17tm/kojY/M5gfak51uukgAORdNpg+127/+5vLsDB6svWT//U40SAA9ff6wSAnsn1OgGg5zrdB2g7eedv3c8FAADYH6Nf3Rr/H2y2Ncf/O98b6Dh6CLzB0l4nAAAcOOP/cHTltmYAAkfVF3c2JBGb26qff/y/Wv0seQEAAN0zVF+SNJ+NBQ5FmubzESfrjwXIJXMLxcJ4dn3wz+HcF2r1ifo7E6P/AAAAAAAAAAAAAAAAAAAAAAAAALBH1WoSVQAAAOBQi0jfSrIn+Y8OXxzaeX/gWPLhcH0dEQ/+cPd3D6crldWJWvt7W+2V32ftVz1PHAAAAN4Ezev05nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTi+ePZprLay8e27+473wvIkZaxe+Pgfp6IHIRcfz9JPq3vS+JiL4uxN98HBGnW8VPamnFSJZFq/iDPYyfRsSJLsSHo+xZ7fhzq9XnL43z9XXrz1+t/P8uxG9//Eu3jn99bY4/J/cY48zmLvEfR5zpb338acZP2sS/sMf4P/3Jxka716pPIkZbfv8kr8QaqyytjJXXN64sLE3PF+YLy5OTE9enbkxdmxofm1soFrJ/W8b49df+/Mlu/T/eJv5Io//n2vX/4h77//E/Hj7/cqOYaxX/0oXW37+nG/Ff2/9p9t33jaz8olr9xWhWTjYb+3O7s0//fna3/s+26X+n//9Le+z/5R/98j973BQAOADl9Y3F6WKxsKrQulCt2lEKh7IQA7tt0+sjEwAA0G0vT/p7nQkAAAAAAAAAAAAAAAAAAAAcXQfxS2M7Y+7yc9QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zaQAAAP//6ajYQw==") open$dir(0x0, 0x0, 0x0) getpid() r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) setfsgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 37.680976ms ago: executing program 0 (id=4543): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX=r2], 0x1, 0x14ee, &(0x7f0000004000)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom") openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r9 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) sendfile(r8, r9, 0x0, 0x80000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 0s ago: executing program 2 (id=4544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085b1551db8000000a90000009500d04858e52e850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x0, 0x5}}}, 0x24}}, 0x0) unshare(0x20000400) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000400)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000700)={0x0, 0x3000000, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r8, 0x703, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x20}}, 0x4040840) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x1, 0x40, 0x10, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x7801, 0x400, 0x4}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) kernel console output (not intermixed with test programs): nown main item tag 0x0 [ 1390.001013][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.015583][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.025696][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.035684][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.042883][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.060432][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.067832][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.085203][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.092568][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.099948][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.107373][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.124733][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.132109][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.145565][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.162949][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.175537][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.187760][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.207337][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.214546][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.235709][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.253112][T12115] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1390.272465][T12115] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1390.411568][T20864] netlink: 'syz.3.4297': attribute type 2 has an invalid length. [ 1390.855683][T12115] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1391.219180][T20874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1391.226822][T12115] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.245592][T12115] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1391.258913][T20874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1391.266139][T12115] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1391.285575][T12115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.377504][T19094] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1391.386121][T12115] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1391.408949][T19094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1391.417420][T19094] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1391.425380][T19094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1391.433880][T19094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1391.444074][T19094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1391.453838][T19094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1391.484494][T19094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1391.496752][T20883] binder: 20878:20883 ioctl 4018620d 0 returned -22 [ 1391.540975][T20883] loop2: detected capacity change from 0 to 1024 [ 1391.705568][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1391.816177][T20887] loop1: detected capacity change from 0 to 16 [ 1391.831371][T20887] erofs: (device loop1): mounted with root inode @ nid 36. [ 1391.843779][T20887] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1391.855247][T20887] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1391.870729][T20887] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 1392.239215][T20895] binder: 20892:20895 ioctl 4018620d 0 returned -22 [ 1392.475371][T20897] xt_hashlimit: size too large, truncated to 1048576 [ 1392.773625][T20900] loop4: detected capacity change from 0 to 2048 [ 1392.805749][ T40] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1392.836620][T20900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1393.105936][T20909] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 1393.114826][ T28] audit: type=1326 audit(2000000713.629:6578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc598d7def9 code=0x7ffc0000 [ 1393.215880][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.311369][ T40] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1393.329670][ T28] audit: type=1326 audit(2000000713.629:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc598d7def9 code=0x7ffc0000 [ 1393.330765][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.428266][ T313] usb 2-1: USB disconnect, device number 68 [ 1394.435857][T20617] EXT4-fs (loop4): unmounting filesystem. [ 1394.435959][ T28] audit: type=1326 audit(2000000713.629:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc598d7def9 code=0x7ffc0000 [ 1394.496755][T20914] loop1: detected capacity change from 0 to 1024 [ 1394.503506][T20914] ext4: Bad value for 'commit' [ 1394.624883][ T40] usb 3-1: config 0 descriptor?? [ 1394.630082][ T28] audit: type=1326 audit(2000000713.629:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc598d7df33 code=0x7ffc0000 [ 1394.850961][ T28] audit: type=1326 audit(2000000713.639:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc598d7c9df code=0x7ffc0000 [ 1394.877205][T20920] loop1: detected capacity change from 0 to 1024 [ 1394.885566][ T28] audit: type=1326 audit(2000000713.649:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc598d7df87 code=0x7ffc0000 [ 1394.939233][ T28] audit: type=1326 audit(2000000713.649:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc598d7c890 code=0x7ffc0000 [ 1394.975857][ T28] audit: type=1326 audit(2000000713.649:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc598d7dafb code=0x7ffc0000 [ 1394.976094][T20920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1395.015568][ T28] audit: type=1326 audit(2000000713.649:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc598d7dafb code=0x7ffc0000 [ 1395.079258][T20926] netlink: 'syz.0.4309': attribute type 2 has an invalid length. [ 1395.096484][T20920] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, [ 1395.096508][ T28] audit: type=1326 audit(2000000713.649:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc598daffe5 code=0x7ffc0000 [ 1395.104575][T20920] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1395.127976][ T28] audit: type=1326 audit(2000000713.649:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc598d7dafb code=0x7ffc0000 [ 1395.159942][ T28] audit: type=1326 audit(2000000713.649:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.4.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc598d7cb8a code=0x7ffc0000 [ 1395.166324][ T40] keytouch 0003:0926:3333.006E: fixing up Keytouch IEC report descriptor [ 1395.198106][T20920] xt_TCPMSS: Only works on TCP SYN packets [ 1395.231109][ T40] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.006E/input/input197 [ 1395.370411][T20897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.379464][ T40] keytouch 0003:0926:3333.006E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1395.401380][T20709] EXT4-fs (loop1): unmounting filesystem. [ 1395.415690][T20897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.862446][T20898] loop2: detected capacity change from 0 to 512 [ 1395.866935][T20937] netlink: 'syz.3.4313': attribute type 2 has an invalid length. [ 1395.907591][T20898] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.4307: iget: bad extended attribute block 1 [ 1395.945736][T20898] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.4307: couldn't read orphan inode 15 (err -117) [ 1396.008128][T20898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1396.148176][T12115] usb 3-1: USB disconnect, device number 73 [ 1396.328833][T20948] binder: 20943:20948 ioctl 4018620d 0 returned -22 [ 1396.548138][T20951] xt_hashlimit: size too large, truncated to 1048576 [ 1396.586181][T20933] loop1: detected capacity change from 0 to 40427 [ 1396.593512][T20933] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1396.604238][T20933] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1396.624306][T20933] F2FS-fs (loop1): invalid crc value [ 1396.650735][T20933] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1396.746278][T20723] EXT4-fs (loop2): unmounting filesystem. [ 1396.754865][T20933] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1396.763826][T20933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1399.018924][T20965] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1399.126013][T20965] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1399.138275][T20970] loop2: detected capacity change from 0 to 2048 [ 1399.622755][T20970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1399.968750][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 1399.986950][ T28] audit: type=1326 audit(2000000720.519:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964b7def9 code=0x7ffc0000 [ 1399.990117][T20991] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 1400.035974][ T28] audit: type=1326 audit(2000000720.519:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964b7def9 code=0x7ffc0000 [ 1400.120863][ T28] audit: type=1326 audit(2000000720.519:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2964b7def9 code=0x7ffc0000 [ 1400.126034][T19094] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1400.175575][ T28] audit: type=1326 audit(2000000720.519:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2964b7df33 code=0x7ffc0000 [ 1400.199444][T20723] EXT4-fs (loop2): unmounting filesystem. [ 1400.263313][ T28] audit: type=1326 audit(2000000720.539:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2964b7c9df code=0x7ffc0000 [ 1400.333791][ T28] audit: type=1326 audit(2000000720.539:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2964b7df87 code=0x7ffc0000 [ 1400.659459][ T28] audit: type=1326 audit(2000000720.549:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2964b7c890 code=0x7ffc0000 [ 1400.687927][ T28] audit: type=1326 audit(2000000720.549:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2964b7dafb code=0x7ffc0000 [ 1400.705591][T19094] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.731562][ T28] audit: type=1326 audit(2000000720.549:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2964b7dafb code=0x7ffc0000 [ 1400.756902][T19094] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1400.776330][T21003] loop2: detected capacity change from 0 to 256 [ 1400.791825][T19094] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1400.800930][ T28] audit: type=1326 audit(2000000720.549:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2964baffe5 code=0x7ffc0000 [ 1400.820971][T19094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.839038][T21003] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1400.886367][T19094] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1401.189909][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4328'. [ 1401.692377][T21005] loop1: detected capacity change from 0 to 16 [ 1401.702825][T21005] erofs: (device loop1): mounted with root inode @ nid 36. [ 1401.710532][T21005] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1401.720913][T21005] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1401.733792][T21005] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 1402.400673][T21023] binder: 21019:21023 ioctl 4018620d 0 returned -22 [ 1402.529529][T21023] loop4: detected capacity change from 0 to 1024 [ 1402.690996][ T988] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1402.852360][ T24] usb 2-1: USB disconnect, device number 69 [ 1403.128625][T21036] loop2: detected capacity change from 0 to 512 [ 1403.328541][T21038] loop4: detected capacity change from 0 to 2048 [ 1403.396842][T21036] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1403.443978][T21038] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1403.638005][T21047] EXT4-fs warning (device loop2): dx_probe:868: inode #2: comm syz.2.4335: Unimplemented hash flags: 0x0001 [ 1403.649445][T21047] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.4335: Corrupt directory, running e2fsck is recommended [ 1403.663848][T21047] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.4335: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 1404.388167][T20723] EXT4-fs (loop2): unmounting filesystem. [ 1404.513474][T20617] EXT4-fs (loop4): unmounting filesystem. [ 1404.518226][T21059] loop2: detected capacity change from 0 to 512 [ 1404.525371][T21059] EXT4-fs: Ignoring removed bh option [ 1404.564928][T21064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4340'. [ 1404.574719][T21059] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz.2.4339: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 1404.616864][T21059] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.4339: couldn't read orphan inode 16 (err -117) [ 1404.674513][T21059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1404.704610][T21059] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 1404.933484][T21075] loop4: detected capacity change from 0 to 2048 [ 1404.993793][T21075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1405.116484][T21084] netlink: 'syz.2.4339': attribute type 2 has an invalid length. [ 1405.676060][T20723] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1405.725805][T20723] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1405.852347][T20617] EXT4-fs (loop4): unmounting filesystem. [ 1405.886186][T20723] EXT4-fs (loop2): unmounting filesystem. [ 1406.461232][T21104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.483700][T21104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.508809][T21104] device bridge_slave_0 entered promiscuous mode [ 1406.538274][T21104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.545139][T21104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.585995][T21104] device bridge_slave_1 entered promiscuous mode [ 1406.755979][T20965] device bridge_slave_1 left promiscuous mode [ 1406.762138][T20965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.795687][T20965] device bridge_slave_0 left promiscuous mode [ 1406.802493][T20965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.170773][T20965] device veth1_macvtap left promiscuous mode [ 1407.179338][T20965] device veth0_vlan left promiscuous mode [ 1407.354079][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4351'. [ 1407.459964][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1407.469446][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1407.488622][T21122] loop4: detected capacity change from 0 to 1024 [ 1407.493488][T18908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1407.512103][T18908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1407.571848][T21125] loop1: detected capacity change from 0 to 512 [ 1407.581810][T18908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.585531][T21122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1407.588696][T18908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.604549][T18908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1407.612707][T18908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1407.623369][T18908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.625873][T21125] EXT4-fs: Ignoring removed bh option [ 1407.630223][T18908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.642620][T18908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1407.650523][T18908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1407.669251][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1407.676712][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1407.688847][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1407.710899][T21104] device veth0_vlan entered promiscuous mode [ 1407.719193][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1407.727569][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1407.739095][T21125] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.4354: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 1407.775795][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1407.783492][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1407.831958][T21104] device veth1_macvtap entered promiscuous mode [ 1407.862300][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1407.870585][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1407.892583][T21125] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.4354: couldn't read orphan inode 16 (err -117) [ 1407.916421][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1407.946434][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1407.954503][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1407.975802][T21125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1407.994657][T21125] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038 (0x7fffffff) [ 1408.004825][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1408.016012][T21134] loop2: detected capacity change from 0 to 2048 [ 1408.029487][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1408.088097][T21121] device wireguard0 entered promiscuous mode [ 1408.094486][T21134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1408.299379][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 1408.299439][ T28] audit: type=1326 audit(2000000728.849:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d57def9 code=0x7ffc0000 [ 1408.379043][T21143] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 1408.448421][T21144] netlink: 'syz.1.4354': attribute type 2 has an invalid length. [ 1408.515543][ T28] audit: type=1326 audit(2000000728.849:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d57def9 code=0x7ffc0000 [ 1408.571534][ T28] audit: type=1326 audit(2000000728.859:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f742d57def9 code=0x7ffc0000 [ 1408.616082][T20617] EXT4-fs (loop4): unmounting filesystem. [ 1408.639120][ T28] audit: type=1326 audit(2000000728.859:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f742d57df33 code=0x7ffc0000 [ 1408.691456][ T28] audit: type=1326 audit(2000000728.869:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f742d57c9df code=0x7ffc0000 [ 1408.755532][ T28] audit: type=1326 audit(2000000728.869:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f742d57df87 code=0x7ffc0000 [ 1409.333528][T21152] loop4: detected capacity change from 0 to 128 [ 1409.443555][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1409.488025][ T28] audit: type=1326 audit(2000000728.879:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f742d57c890 code=0x7ffc0000 [ 1409.512830][ T28] audit: type=1326 audit(2000000728.879:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742d57dafb code=0x7ffc0000 [ 1409.512975][T20709] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1409.536674][ T28] audit: type=1326 audit(2000000728.879:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742d57dafb code=0x7ffc0000 [ 1409.604906][ T28] audit: type=1326 audit(2000000728.879:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21133 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f742d5affe5 code=0x7ffc0000 [ 1409.659338][T20709] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1409.749650][T20709] EXT4-fs (loop1): unmounting filesystem. [ 1409.885614][ T29] INFO: task syz.0.3520:17320 blocked for more than 232 seconds. [ 1409.902485][ T29] Not tainted 6.1.93-syzkaller-00101-g04212acc42d4 #0 [ 1409.913992][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1409.922518][ T29] task:syz.0.3520 state:D stack:26608 pid:17320 ppid:16375 flags:0x00004004 [ 1409.931558][ T29] Call Trace: [ 1409.934625][ T29] [ 1409.937424][ T29] __schedule+0xcb5/0x1560 [ 1409.941653][ T29] ? putname+0xfa/0x150 [ 1409.945672][ T29] ? release_firmware_map_entry+0x191/0x191 [ 1409.951375][ T29] ? __kasan_check_write+0x14/0x20 [ 1409.956406][ T29] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1409.961297][ T29] ? _raw_spin_lock_irqsave+0x210/0x210 [ 1409.966708][ T29] schedule+0xc3/0x180 [ 1409.970595][ T29] schedule_preempt_disabled+0x13/0x20 [ 1409.975915][ T29] down_read+0xe37/0x1aa0 [ 1409.980031][ T29] ? __down_common+0x690/0x690 [ 1409.984886][ T29] ? kasan_quarantine_put+0x34/0x1a0 [ 1409.990102][ T29] ? __kasan_check_write+0x14/0x20 [ 1409.994951][ T29] ? _raw_spin_lock+0xa4/0x1b0 [ 1409.999634][ T29] ? __kasan_slab_free+0x11/0x20 [ 1410.004353][ T29] ? kmem_cache_free+0x291/0x510 [ 1410.009181][ T29] ? putname+0xfa/0x150 [ 1410.013124][ T29] user_get_super+0x128/0x260 [ 1410.017669][ T29] __se_sys_quotactl+0x490/0x760 [ 1410.022406][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 1410.027823][ T29] ? __x64_sys_quotactl+0xb0/0xb0 [ 1410.032654][ T29] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 1410.038416][ T29] ? save_fpregs_to_fpstate+0x220/0x220 [ 1410.043775][ T29] ? __x64_sys_futex+0x100/0x100 [ 1410.048571][ T29] ? fpregs_restore_userregs+0x130/0x290 [ 1410.054011][ T29] __x64_sys_quotactl+0x9b/0xb0 [ 1410.058750][ T29] x64_sys_call+0x4ea/0x9a0 [ 1410.063047][ T29] do_syscall_64+0x3b/0xb0 [ 1410.067295][ T29] ? clear_bhb_loop+0x55/0xb0 [ 1410.071814][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1410.077543][ T29] RIP: 0033:0x7fbdf5b7def9 [ 1410.081786][ T29] RSP: 002b:00007fbdf6980038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1410.090010][ T29] RAX: ffffffffffffffda RBX: 00007fbdf5d36130 RCX: 00007fbdf5b7def9 [ 1410.097817][ T29] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffff80000800 [ 1410.105619][ T29] RBP: 00007fbdf5bf09f6 R08: 0000000000000000 R09: 0000000000000000 [ 1410.113418][ T29] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 1410.121250][ T29] R13: 0000000000000000 R14: 00007fbdf5d36130 R15: 00007ffd39e9bbe8 [ 1410.129186][ T29] [ 1410.136444][T21165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.154074][T21165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.167436][ T29] INFO: task syz.1.3648:18031 blocked for more than 192 seconds. [ 1410.188266][T21165] device bridge_slave_0 entered promiscuous mode [ 1410.194486][ T29] Not tainted 6.1.93-syzkaller-00101-g04212acc42d4 #0 [ 1410.202341][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1410.210879][ T29] task:syz.1.3648 state:D stack:25528 pid:18031 ppid:17955 flags:0x00004004 [ 1410.219872][ T29] Call Trace: [ 1410.222968][ T29] [ 1410.225847][ T29] __schedule+0xcb5/0x1560 [ 1410.230096][ T29] ? release_firmware_map_entry+0x191/0x191 [ 1410.235827][ T29] schedule+0xc3/0x180 [ 1410.239720][ T29] schedule_preempt_disabled+0x13/0x20 [ 1410.245011][ T29] down_read+0xe37/0x1aa0 [ 1410.249198][ T29] ? __down_common+0x690/0x690 [ 1410.253778][ T29] ? preempt_schedule+0xd9/0xe0 [ 1410.258487][ T29] ? try_to_writeback_inodes_sb+0xc0/0xc0 [ 1410.264020][ T29] ? preempt_schedule+0xd9/0xe0 [ 1410.268722][ T29] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1410.274177][ T29] ? __kasan_check_write+0x14/0x20 [ 1410.279134][ T29] ? _raw_spin_lock+0xa4/0x1b0 [ 1410.283725][ T29] ? __put_super+0x54/0x2d0 [ 1410.288157][ T29] iterate_supers+0xb3/0x1f0 [ 1410.292490][ T29] ? ksys_sync+0x1c0/0x1c0 [ 1410.296763][ T29] ksys_sync+0xb9/0x1c0 [ 1410.300735][ T29] ? sync_filesystem+0x250/0x250 [ 1410.305522][ T29] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 1410.310976][ T29] __do_sys_sync+0xe/0x20 [ 1410.315140][ T29] x64_sys_call+0x488/0x9a0 [ 1410.319610][ T29] do_syscall_64+0x3b/0xb0 [ 1410.323819][ T29] ? clear_bhb_loop+0x55/0xb0 [ 1410.328354][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1410.334066][ T29] RIP: 0033:0x7f4fc1b7def9 [ 1410.338326][ T29] RSP: 002b:00007f4fc2933038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1410.346575][ T29] RAX: ffffffffffffffda RBX: 00007f4fc1d36130 RCX: 00007f4fc1b7def9 [ 1410.354371][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1410.362195][ T29] RBP: 00007f4fc1bf09f6 R08: 0000000000000000 R09: 0000000000000000 [ 1410.370018][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.377828][ T29] R13: 0000000000000000 R14: 00007f4fc1d36130 R15: 00007ffd74e7fff8 [ 1410.385650][ T29] [ 1410.393141][T21165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.405554][ T29] NMI backtrace for cpu 1 [ 1410.407755][T21165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.409724][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.1.93-syzkaller-00101-g04212acc42d4 #0 [ 1410.409743][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1410.431615][T21165] device bridge_slave_1 entered promiscuous mode [ 1410.435913][ T29] Call Trace: [ 1410.435920][ T29] [ 1410.435927][ T29] dump_stack_lvl+0x151/0x1b7 [ 1410.452586][ T29] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1410.457884][ T29] dump_stack+0x15/0x1c [ 1410.462047][ T29] nmi_cpu_backtrace+0x2e4/0x2f0 [ 1410.466821][ T29] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 1410.472808][ T29] ? sched_show_task+0x3d8/0x620 [ 1410.477583][ T29] ? nmi_trigger_cpumask_backtrace+0x114/0x3c0 [ 1410.483574][ T29] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1410.489472][ T29] nmi_trigger_cpumask_backtrace+0x19b/0x3c0 [ 1410.495288][ T29] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1410.501191][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1410.506921][ T29] watchdog+0xdb0/0xf20 [ 1410.510910][ T29] ? __kasan_check_write+0x14/0x20 [ 1410.515862][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1410.520765][ T29] ? __kasan_check_read+0x11/0x20 [ 1410.525581][ T29] ? __kthread_parkme+0x12d/0x180 [ 1410.530441][ T29] kthread+0x26d/0x300 [ 1410.534351][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1410.539206][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1410.543631][ T29] ret_from_fork+0x1f/0x30 [ 1410.547891][ T29] [ 1410.551222][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1410.556325][ C0] NMI backtrace for cpu 0 [ 1410.556336][ C0] CPU: 0 PID: 313 Comm: kworker/0:4 Not tainted 6.1.93-syzkaller-00101-g04212acc42d4 #0 [ 1410.556356][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1410.556368][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 1410.556394][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 1410.556418][ C0] Code: 48 8b 3d 24 e8 1c 06 48 89 de e8 44 70 46 00 5b 5d c3 cc 55 48 89 e5 48 8b 45 08 65 48 8b 0d 60 c8 8c 7e 65 8b 15 61 c8 8c 7e c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 6c 0b 00 00 [ 1410.556433][ C0] RSP: 0018:ffffc90000007758 EFLAGS: 00000283 [ 1410.556447][ C0] RAX: ffffffff81bceb8c RBX: 00000000000000ae RCX: ffff88810d462880 [ 1410.556461][ C0] RDX: 0000000080000101 RSI: 00000000000000ae RDI: 00000000000000ae [ 1410.556472][ C0] RBP: ffffc90000007758 R08: ffffffff81bceb76 R09: fffffbfff0f786a3 [ 1410.556486][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f716ed5d [ 1410.556499][ C0] R13: 00000000000000ae R14: 1ffffffff0f7623d R15: ffff8881f716f000 [ 1410.556512][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1410.556527][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1410.556540][ C0] CR2: 00007fbad5665000 CR3: 000000000700f000 CR4: 00000000003506b0 [ 1410.556555][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1410.556566][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1410.556577][ C0] Call Trace: [ 1410.556583][ C0] [ 1410.556589][ C0] ? show_regs+0x58/0x60 [ 1410.556607][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 1410.556629][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 1410.556652][ C0] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 1410.556670][ C0] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 1410.556689][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1410.556709][ C0] ? nmi_handle+0xa7/0x280 [ 1410.556728][ C0] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 1410.556746][ C0] ? preempt_count_sub+0x6/0x160 [ 1410.556766][ C0] ? default_do_nmi+0x69/0x160 [ 1410.556785][ C0] ? exc_nmi+0xad/0x100 [ 1410.556802][ C0] ? end_repeat_nmi+0x16/0x31 [ 1410.556823][ C0] ? kfence_guarded_free+0x3a6/0x7b0 [ 1410.556845][ C0] ? kfence_guarded_free+0x3bc/0x7b0 [ 1410.556864][ C0] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 1410.556883][ C0] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 1410.556902][ C0] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 1410.556920][ C0] [ 1410.556926][ C0] [ 1410.556932][ C0] kfence_guarded_free+0x3bc/0x7b0 [ 1410.556951][ C0] __kfence_free+0x104/0x160 [ 1410.556969][ C0] __slab_free+0x44/0x280 [ 1410.556990][ C0] kmem_cache_free+0x449/0x510 [ 1410.557007][ C0] ? skb_release_data+0x616/0x840 [ 1410.557029][ C0] ? kfree_skbmem+0x104/0x170 [ 1410.557051][ C0] kfree_skbmem+0x104/0x170 [ 1410.557072][ C0] ? ip6_mc_input+0x533/0x710 [ 1410.557088][ C0] kfree_skb_reason+0xdb/0x250 [ 1410.557108][ C0] ? ip6_mc_input+0x524/0x710 [ 1410.557130][ C0] ip6_mc_input+0x533/0x710 [ 1410.557148][ C0] ? ip6_input_finish+0x1b0/0x1b0 [ 1410.557165][ C0] ? ip6_rcv_core+0xd96/0x13e0 [ 1410.557183][ C0] ip6_rcv_finish+0x186/0x350 [ 1410.557199][ C0] ipv6_rcv+0xeb/0x270 [ 1410.557215][ C0] ? ip6_rcv_finish+0x350/0x350 [ 1410.557231][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 1410.557248][ C0] ? enqueue_task_fair+0xe88/0x2260 [ 1410.557269][ C0] ? ip6_rcv_finish+0x350/0x350 [ 1410.557285][ C0] __netif_receive_skb+0x1c6/0x530 [ 1410.557309][ C0] ? __netif_receive_skb_list_core+0x890/0x890 [ 1410.557332][ C0] ? __kasan_check_write+0x14/0x20 [ 1410.557348][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1410.557364][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 1410.557383][ C0] process_backlog+0x32c/0x630 [ 1410.557408][ C0] __napi_poll+0xbe/0x5c0 [ 1410.557430][ C0] net_rx_action+0x595/0xdd0 [ 1410.557455][ C0] ? net_tx_action+0x560/0x560 [ 1410.557477][ C0] ? sched_clock+0x9/0x10 [ 1410.557502][ C0] ? irqtime_account_irq+0x79/0x260 [ 1410.557528][ C0] handle_softirqs+0x1db/0x650 [ 1410.557551][ C0] __do_softirq+0xb/0xd [ 1410.557570][ C0] do_softirq+0xf6/0x150 [ 1410.557589][ C0] [ 1410.557594][ C0] [ 1410.557599][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 1410.557618][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1410.557634][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1410.557651][ C0] __local_bh_enable_ip+0x75/0x80 [ 1410.557670][ C0] _raw_spin_unlock_bh+0x50/0x60 [ 1410.557686][ C0] wg_packet_encrypt_worker+0x2cb/0x1580 [ 1410.557708][ C0] ? ip_output+0x3e1/0x420 [ 1410.557728][ C0] ? ip_output+0x1d6/0x420 [ 1410.557750][ C0] ? wg_packet_tx_worker+0x520/0x520 [ 1410.557770][ C0] ? cpudl_cleanup+0x40/0x40 [ 1410.557796][ C0] ? cpudl_cleanup+0x40/0x40 [ 1410.557819][ C0] ? update_load_avg+0x513/0x1530 [ 1410.557840][ C0] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 1410.557867][ C0] ? __kasan_check_write+0x14/0x20 [ 1410.557884][ C0] ? __kasan_check_write+0x14/0x20 [ 1410.557900][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1410.557916][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 1410.557934][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1410.557951][ C0] ? try_to_wake_up+0x670/0x1220 [ 1410.557973][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 1410.557989][ C0] ? cpu_curr_snapshot+0x90/0x90 [ 1410.558011][ C0] ? __kasan_check_read+0x11/0x20 [ 1410.558027][ C0] ? read_word_at_a_time+0x12/0x20 [ 1410.558051][ C0] ? strscpy+0x9c/0x260 [ 1410.558074][ C0] process_one_work+0x73d/0xcb0 [ 1410.558101][ C0] worker_thread+0xa60/0x1260 [ 1410.558133][ C0] kthread+0x26d/0x300 [ 1410.558151][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1410.558173][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1410.558192][ C0] ret_from_fork+0x1f/0x30 [ 1410.558215][ C0] [ 1411.933592][T21192] 9pnet_fd: p9_fd_create_tcp (21192): problem connecting socket to 127.0.0.1 [ 1411.976976][T21192] loop2: detected capacity change from 0 to 256 [ 1411.984369][T21192] exfat: Bad value for 'gid' [ 1412.095614][ T988] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1412.241088][T21198] binder: 21189:21198 ioctl 4018620d 0 returned -22 [ 1412.441157][T21179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.469646][T21179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.477028][T21179] device bridge_slave_0 entered promiscuous mode [ 1412.501324][T21179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.511432][T21179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.527234][T21179] device bridge_slave_1 entered promiscuous mode [ 1412.634278][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1412.642220][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1412.651286][T21201] loop2: detected capacity change from 0 to 2048 [ 1412.655767][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1412.658184][T21203] xt_hashlimit: size too large, truncated to 1048576 [ 1412.666141][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1412.723396][ T535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.730287][ T535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.736371][T21201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1412.745756][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1412.764060][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1412.794252][ T535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.801130][ T535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.874394][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1413.075696][T21211] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 1413.141462][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1413.149378][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1413.157197][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1413.165099][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1413.223166][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1413.231705][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1413.249930][T21165] device veth0_vlan entered promiscuous mode [ 1413.265778][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1413.273515][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1413.288633][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1413.296534][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1413.341159][T21165] device veth1_macvtap entered promiscuous mode [ 1413.347884][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1413.356334][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1413.364356][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1413.406870][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1413.414991][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1413.436113][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1413.444206][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1413.486070][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1413.499940][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1413.516416][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1413.529561][T20965] device bridge_slave_1 left promiscuous mode [ 1413.538433][T20965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.563824][T20965] device bridge_slave_0 left promiscuous mode [ 1413.576814][T21220] xt_hashlimit: size too large, truncated to 1048576 [ 1413.635603][T20965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.645275][T20965] device veth1_macvtap left promiscuous mode [ 1413.664742][T20965] device veth0_vlan left promiscuous mode [ 1413.815533][ T605] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1413.825694][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1413.834065][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1413.845744][T20527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.852602][T20527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.873894][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1413.885836][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1413.903987][T20527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.910850][T20527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.935901][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1413.943462][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1413.951160][ T535] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1413.966462][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1413.984755][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1413.994526][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1414.013369][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1414.020664][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1414.035816][T21179] device veth0_vlan entered promiscuous mode [ 1414.051908][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1414.060796][T21179] device veth1_macvtap entered promiscuous mode [ 1414.091271][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1414.099883][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1414.125649][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1414.142508][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1414.215603][ T605] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.228847][ T605] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1414.251933][ T605] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1414.273416][ T605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.326710][T21228] incfs: Backing dir is not set, filesystem can't be mounted. [ 1414.334314][T21228] incfs: mount failed -2 [ 1414.394207][ T605] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1414.515602][ T535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.535543][ T535] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1414.544394][ T535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.554364][ T535] usb 1-1: config 0 descriptor?? [ 1414.754117][T21230] loop2: detected capacity change from 0 to 16 [ 1414.763024][T21230] erofs: (device loop2): mounted with root inode @ nid 36. [ 1414.774950][T21230] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1414.785019][T21230] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1414.800212][T21230] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1415.015340][T21233] loop1: detected capacity change from 0 to 256 [ 1415.032096][T21233] FAT-fs (loop1): Unrecognized mount option "nOnumtail=0" or missing value [ 1415.092115][T21233] loop1: detected capacity change from 0 to 1024 [ 1415.110120][T21233] EXT4-fs: Ignoring removed orlov option [ 1415.126720][ T535] keytouch 0003:0926:3333.006F: fixing up Keytouch IEC report descriptor [ 1415.143171][ T535] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.006F/input/input202 [ 1415.161768][T21233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1415.240616][ T535] keytouch 0003:0926:3333.006F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1415.344808][T21220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.355995][T21220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.057470][ T535] usb 1-1: USB disconnect, device number 69 [ 1416.212406][T21179] EXT4-fs (loop1): unmounting filesystem. [ 1417.071598][ T605] usb 3-1: USB disconnect, device number 74 [ 1417.149636][T21259] loop1: detected capacity change from 0 to 256 [ 1417.157183][T21259] exfat: Bad value for 'gid' [ 1417.284941][T21257] 9pnet_fd: p9_fd_create_tcp (21257): problem connecting socket to 127.0.0.1 [ 1417.464938][T21268] loop4: detected capacity change from 0 to 1024 [ 1417.539557][T21273] binder: 21261:21273 ioctl 4018620d 0 returned -22 [ 1417.667101][T21273] loop2: detected capacity change from 0 to 1024 [ 1417.866092][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 1417.866127][ T28] audit: type=1326 audit(2000000738.439:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914017def9 code=0x7ffc0000 [ 1417.907073][T21268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1418.022319][ T28] audit: type=1326 audit(2000000738.439:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914017def9 code=0x7ffc0000 [ 1418.103754][ T28] audit: type=1326 audit(2000000738.439:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f914017def9 code=0x7ffc0000 [ 1418.139445][ T28] audit: type=1326 audit(2000000738.439:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f914017df33 code=0x7ffc0000 [ 1418.209589][ T28] audit: type=1326 audit(2000000738.439:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f914017c9df code=0x7ffc0000 [ 1418.567368][ T28] audit: type=1326 audit(2000000738.439:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f914017df87 code=0x7ffc0000 [ 1418.571795][ T2875] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1418.599335][ T28] audit: type=1326 audit(2000000738.449:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f914017c890 code=0x7ffc0000 [ 1418.625219][ T28] audit: type=1326 audit(2000000738.449:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f914017dafb code=0x7ffc0000 [ 1419.093208][ T28] audit: type=1326 audit(2000000738.449:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f914017dafb code=0x7ffc0000 [ 1419.124678][ T28] audit: type=1326 audit(2000000738.449:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91401affe5 code=0x7ffc0000 [ 1419.132505][T20617] EXT4-fs (loop4): unmounting filesystem. [ 1419.299868][T21294] loop4: detected capacity change from 0 to 512 [ 1419.326626][T21294] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1419.476120][T21294] EXT4-fs error (device loop4): ext4_find_extent:936: inode #4: comm syz.4.4385: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 1419.525902][ T2875] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1419.556179][ T2875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.564349][T21294] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1419.585568][T21294] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1419.595663][T21294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1419.615069][ T2875] usb 3-1: config 0 descriptor?? [ 1419.825589][ T605] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1420.024832][T21280] loop2: detected capacity change from 0 to 512 [ 1420.045755][T21280] ext2: Unknown parameter 'subj_user' [ 1420.072271][T21280] loop2: detected capacity change from 0 to 1024 [ 1420.100684][T21280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1420.173029][T20617] EXT4-fs (loop4): unmounting filesystem. [ 1420.195596][ T605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.216439][T21312] loop4: detected capacity change from 0 to 16 [ 1420.225616][ T605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.261066][T21312] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 1420.271507][ T605] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1420.291666][T21312] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 1420.304697][ T605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.326156][ T605] usb 2-1: config 0 descriptor?? [ 1420.337525][T21312] erofs: (device loop4): mounted with root inode @ nid 36. [ 1420.413902][T21312] syz.4.4388: attempt to access beyond end of device [ 1420.413902][T21312] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1420.450561][T21312] syz.4.4388: attempt to access beyond end of device [ 1420.450561][T21312] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1420.473454][T21312] syz.4.4388: attempt to access beyond end of device [ 1420.473454][T21312] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1420.542036][T21320] binder: 21313:21320 ioctl 4018620d 0 returned -22 [ 1420.775310][T21318] syz.4.4388: attempt to access beyond end of device [ 1420.775310][T21318] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1420.970906][T21324] netlink: 'syz.0.4390': attribute type 2 has an invalid length. [ 1421.697918][T21333] 9pnet_fd: p9_fd_create_tcp (21333): problem connecting socket to 127.0.0.1 [ 1421.735231][T21333] loop4: detected capacity change from 0 to 256 [ 1421.742792][T21333] exfat: Bad value for 'gid' [ 1421.809343][T21330] usb 3-1: USB disconnect, device number 75 [ 1421.835096][T21280] EXT4-fs (loop2): unmounting filesystem. [ 1423.210478][ T605] usbhid 2-1:0.0: can't add hid device: -71 [ 1423.393150][T21357] loop2: detected capacity change from 0 to 1024 [ 1423.406562][ T605] usbhid: probe of 2-1:0.0 failed with error -71 [ 1423.462609][ T605] usb 2-1: USB disconnect, device number 70 [ 1423.469512][T21357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1423.485401][T21360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4400'. [ 1423.555318][T21356] loop4: detected capacity change from 0 to 8192 [ 1423.575902][T21360] device bridge_slave_1 left promiscuous mode [ 1423.625870][T21356] loop4: p2 p3 p4 [ 1423.629552][T21356] loop4: p2 start 452985600 is beyond EOD, truncated [ 1423.638510][T21360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.645863][T21356] loop4: p3 size 33554432 extends beyond EOD, truncated [ 1423.658736][T21356] loop4: p4 start 8388607 is beyond EOD, truncated [ 1423.915762][T21360] device bridge_slave_0 left promiscuous mode [ 1423.921837][T21360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.160215][T21376] binder: 21373:21376 ioctl 4018620d 0 returned -22 [ 1424.209482][T21376] loop4: detected capacity change from 0 to 1024 [ 1424.446966][ T988] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1424.591986][T21383] can0: slcan on ptm1. [ 1424.611834][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1424.706792][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 1424.706814][ T28] audit: type=1400 audit(2000000745.289:6826): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1424.864804][T21391] loop4: detected capacity change from 0 to 512 [ 1424.914919][T21391] EXT4-fs: Ignoring removed bh option [ 1424.927097][T21392] binder: 21387:21392 ioctl 4018620d 0 returned -22 [ 1424.969461][T21392] loop2: detected capacity change from 0 to 1024 [ 1425.100386][ T28] audit: type=1400 audit(2000000745.319:6827): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.128682][ T28] audit: type=1400 audit(2000000745.319:6828): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=43979 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1425.164214][T21391] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz.4.4405: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 1425.174849][ T28] audit: type=1400 audit(2000000745.319:6829): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=43979 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1425.209779][T21391] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.4405: couldn't read orphan inode 16 (err -117) [ 1425.236055][T21377] can0 (unregistered): slcan off ptm1. [ 1425.256864][T21391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1425.269589][ T28] audit: type=1400 audit(2000000745.319:6830): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=43979 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1425.285059][T21391] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038 (0x7fffffff) [ 1425.312129][ T28] audit: type=1400 audit(2000000745.789:6831): avc: denied { read } for pid=21396 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=300 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.312657][T21402] tipc: Can't bind to reserved service type 0 [ 1425.371809][ T28] audit: type=1400 audit(2000000745.789:6832): avc: denied { open } for pid=21396 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=300 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.436621][ T28] audit: type=1400 audit(2000000745.789:6833): avc: denied { getattr } for pid=21396 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=300 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.746300][ T28] audit: type=1400 audit(2000000745.979:6834): avc: denied { listen } for pid=21401 comm="syz.3.4406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1425.805569][ T28] audit: type=1400 audit(2000000745.979:6835): avc: denied { read } for pid=21401 comm="syz.3.4406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1425.857421][T21411] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1425.905542][T17626] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1426.051287][T21422] netlink: 'syz.4.4405': attribute type 2 has an invalid length. [ 1426.145648][T17626] usb 2-1: Using ep0 maxpacket: 16 [ 1426.265853][T17626] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.316730][T17626] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1426.556492][T17626] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1426.565357][T17626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.597072][T17626] usb 2-1: Product: syz [ 1426.638419][T17626] usb 2-1: Manufacturer: syz [ 1426.646808][T17626] usb 2-1: SerialNumber: syz [ 1426.711521][T17626] usb 2-1: config 0 descriptor?? [ 1426.766059][T17626] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1426.799634][T20617] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1426.834828][T21446] loop2: detected capacity change from 0 to 256 [ 1427.021152][T20617] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1427.097830][T20617] EXT4-fs (loop4): unmounting filesystem. [ 1427.381402][T21449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.391648][T21449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.402104][T21449] device bridge_slave_0 entered promiscuous mode [ 1427.414042][T21449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.425105][T21449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.439120][T21449] device bridge_slave_1 entered promiscuous mode [ 1427.601042][ T8] device veth1_macvtap left promiscuous mode [ 1427.607990][ T8] device veth0_vlan left promiscuous mode [ 1427.772996][T21449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.779882][T21449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.786975][T21449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.793756][T21449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.871215][T17626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1427.880605][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.891916][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.913912][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1427.924117][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.930990][T12115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.946415][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1427.957535][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.964399][T12115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.984530][T17626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1427.992470][T17626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1428.011059][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1428.019341][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1428.030379][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1428.039893][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1428.051395][T21449] device veth0_vlan entered promiscuous mode [ 1428.067689][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1428.078934][T21449] device veth1_macvtap entered promiscuous mode [ 1428.096983][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1428.111361][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1428.170685][T21464] loop4: detected capacity change from 0 to 2048 [ 1428.216711][T21464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1428.856747][T18500] usb 2-1: USB disconnect, device number 71 [ 1428.871917][T21468] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 1429.282496][T21449] EXT4-fs (loop4): unmounting filesystem. [ 1429.325407][T21472] device wireguard0 entered promiscuous mode [ 1429.346144][T21473] loop1: detected capacity change from 0 to 512 [ 1429.352481][T21473] ext4: Unknown parameter 'uid>00000000000000000000' [ 1429.454686][ T988] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1429.545691][T21481] binder: 21475:21481 ioctl 4018620d 0 returned -22 [ 1429.589065][T21481] loop2: detected capacity change from 0 to 1024 [ 1429.717098][T21482] loop4: detected capacity change from 0 to 1024 [ 1429.724094][T21482] EXT4-fs: Ignoring removed orlov option [ 1429.776708][T21482] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1429.881275][T21482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1430.152320][T21488] binder: 21484:21488 ioctl 4018620d 0 returned -22 [ 1430.201076][T21488] loop1: detected capacity change from 0 to 1024 [ 1430.413988][T21449] EXT4-fs (loop4): unmounting filesystem. [ 1430.418924][T21490] loop2: detected capacity change from 0 to 256 [ 1430.437848][T21490] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 1430.478492][T21492] loop4: detected capacity change from 0 to 512 [ 1430.508974][T21492] EXT4-fs: Ignoring removed bh option [ 1430.586830][T21492] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz.4.4420: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 1430.622782][T21492] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.4420: couldn't read orphan inode 16 (err -117) [ 1430.760839][T21492] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1430.916572][T21492] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 1430.939465][T21498] loop1: detected capacity change from 0 to 256 [ 1431.404120][T21506] loop2: detected capacity change from 0 to 512 [ 1431.415908][T21503] netlink: 'syz.4.4420': attribute type 2 has an invalid length. [ 1431.495274][T21506] EXT4-fs (loop2): 1 truncate cleaned up [ 1431.505531][T18500] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1431.537162][T21506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1431.612657][T21511] binder: 21507:21511 ioctl 4018620d 0 returned -22 [ 1432.046185][T18500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.065558][T18500] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1432.074504][T18500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.117595][T18500] usb 2-1: config 0 descriptor?? [ 1432.469757][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1432.598538][T18500] keytouch 0003:0926:3333.0070: fixing up Keytouch IEC report descriptor [ 1432.626326][T21449] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1432.644639][T18500] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0070/input/input203 [ 1432.825253][T21449] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1432.876490][T18500] keytouch 0003:0926:3333.0070: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1432.957979][T21449] EXT4-fs (loop4): unmounting filesystem. [ 1433.064977][T21524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.082581][T21524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.096643][T21524] device bridge_slave_0 entered promiscuous mode [ 1433.123359][T21524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.148669][T21524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.196020][T21524] device bridge_slave_1 entered promiscuous mode [ 1433.445305][T21524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.452201][T21524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.459315][T21524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.466159][T21524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.522615][T21531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.529692][T21531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.537015][T21531] device bridge_slave_0 entered promiscuous mode [ 1433.644414][T21531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.700849][T21531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.714550][T21531] device bridge_slave_1 entered promiscuous mode [ 1433.792775][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1433.803059][T20527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.818252][T20527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.836144][T10505] device bridge_slave_1 left promiscuous mode [ 1433.844185][T10505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.857738][T10505] device bridge_slave_0 left promiscuous mode [ 1433.869820][T10505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.886234][T10505] device veth1_macvtap left promiscuous mode [ 1433.898236][T10505] device veth0_vlan left promiscuous mode [ 1433.967915][T18500] usb 2-1: USB disconnect, device number 72 [ 1434.026938][T21544] loop1: detected capacity change from 0 to 2048 [ 1434.058505][T21544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1434.185942][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1434.199277][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1434.293936][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 1434.293978][ T28] audit: type=1326 audit(2000000003.529:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad497def9 code=0x7ffc0000 [ 1434.367101][T21549] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 1434.426276][T12525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.433154][T12525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.440956][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1434.455819][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1434.463790][T12525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.470667][T12525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.495524][ T28] audit: type=1326 audit(2000000003.529:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad497def9 code=0x7ffc0000 [ 1434.529616][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1434.537694][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1434.545452][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1434.565540][ T28] audit: type=1326 audit(2000000003.529:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbad497def9 code=0x7ffc0000 [ 1434.589270][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1434.608341][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1434.626415][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1434.648839][T21524] device veth0_vlan entered promiscuous mode [ 1434.657094][ T28] audit: type=1326 audit(2000000003.529:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbad497df33 code=0x7ffc0000 [ 1434.689947][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1434.699911][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1434.743627][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1434.754036][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1434.770599][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1434.780498][ T28] audit: type=1326 audit(2000000003.549:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbad497c9df code=0x7ffc0000 [ 1434.810071][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1434.847801][T21179] EXT4-fs (loop1): unmounting filesystem. [ 1434.856342][T21524] device veth1_macvtap entered promiscuous mode [ 1434.890543][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1434.898810][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1434.915563][ T28] audit: type=1326 audit(2000000003.549:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbad497df87 code=0x7ffc0000 [ 1434.916595][T12525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1435.020000][ T28] audit: type=1326 audit(2000000003.549:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbad497c890 code=0x7ffc0000 [ 1435.056961][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1435.429013][T21558] binder: 21554:21558 ioctl 4018620d 0 returned -22 [ 1435.553894][T21558] loop1: detected capacity change from 0 to 1024 [ 1435.967107][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1435.975678][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1435.983048][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1435.989934][ T28] audit: type=1326 audit(2000000003.549:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbad497dafb code=0x7ffc0000 [ 1435.990340][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1436.042860][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1436.055934][T20527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.062817][T20527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.127366][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1436.134942][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1436.172462][ T28] audit: type=1326 audit(2000000003.549:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbad497dafb code=0x7ffc0000 [ 1436.195872][ T28] audit: type=1326 audit(2000000003.549:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21543 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbad49affe5 code=0x7ffc0000 [ 1436.225523][T21568] binder: 21563:21568 ioctl 4018620d 0 returned -22 [ 1436.271134][T21568] loop1: detected capacity change from 0 to 1024 [ 1436.341542][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1436.355930][T14009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.362803][T14009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.395636][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1436.403625][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1436.425766][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1436.436737][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1436.441056][T21573] loop2: detected capacity change from 0 to 512 [ 1436.457518][T21531] device veth0_vlan entered promiscuous mode [ 1436.474540][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1436.482820][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1436.491666][T21573] EXT4-fs error (device loop2): __ext4_iget:5046: inode #15: block 1803188595: comm syz.2.4438: invalid block [ 1436.495849][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1436.511203][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1436.513756][T21573] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.4438: couldn't read orphan inode 15 (err -117) [ 1436.520604][T21531] device veth1_macvtap entered promiscuous mode [ 1436.537877][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1436.545405][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1436.552701][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1436.572059][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1436.573462][T21573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1436.580765][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1436.604028][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1436.615247][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1436.694713][T21577] loop4: detected capacity change from 0 to 2048 [ 1436.710250][T21573] input: syz0 as /devices/virtual/input/input204 [ 1436.745913][T21577] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1436.853217][T21582] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4438: invalid indirect mapped block 234881024 (level 0) [ 1437.011783][T21585] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 1437.455961][T21588] netlink: 'syz.3.4437': attribute type 2 has an invalid length. [ 1437.475534][ T605] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1437.525279][T21531] EXT4-fs (loop4): unmounting filesystem. [ 1437.785544][ T605] usb 2-1: Using ep0 maxpacket: 32 [ 1437.905860][ T605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.021921][ T605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.124388][ T605] usb 2-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 1438.150579][ T605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.171888][ T605] usb 2-1: config 0 descriptor?? [ 1438.542937][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1438.568189][T21603] loop2: detected capacity change from 0 to 1024 [ 1438.595952][T21601] overlayfs: failed to resolve './file0': -2 [ 1438.624614][T21603] EXT4-fs: Ignoring removed orlov option [ 1438.634274][T21603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1438.667667][ T605] wacom 0003:056A:00E3.0071: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.1-1/input0 [ 1438.702057][T21603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1439.166138][T17627] Bluetooth: hci0: Frame reassembly failed (-84) [ 1439.214179][T17627] Bluetooth: hci0: Frame reassembly failed (-84) [ 1439.265834][ T605] usb 2-1: USB disconnect, device number 73 [ 1439.482871][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1440.008627][T21614] binder: 21612:21614 ioctl 4018620d 0 returned -22 [ 1440.021088][T21614] loop2: detected capacity change from 0 to 1024 [ 1440.066960][ T988] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1440.161144][T21619] netlink: 'syz.4.4444': attribute type 16 has an invalid length. [ 1440.168872][T21619] netlink: 55946 bytes leftover after parsing attributes in process `syz.4.4444'. [ 1441.189910][ T3670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1441.318185][T21638] 9pnet_fd: p9_fd_create_tcp (21638): problem connecting socket to 127.0.0.1 [ 1441.952401][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 1441.995614][ T28] audit: type=1326 audit(2000000011.209:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b0d7def9 code=0x7ffc0000 [ 1442.220329][ T28] audit: type=1326 audit(2000000011.209:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b0d7def9 code=0x7ffc0000 [ 1442.285835][ T28] audit: type=1326 audit(2000000011.209:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe3b0d7def9 code=0x7ffc0000 [ 1442.333018][ T28] audit: type=1326 audit(2000000011.209:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3b0d7df33 code=0x7ffc0000 [ 1442.374585][ T28] audit: type=1326 audit(2000000011.209:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe3b0d7c9df code=0x7ffc0000 [ 1442.480727][T21662] loop4: detected capacity change from 0 to 128 [ 1442.531183][T21662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1442.569132][ T28] audit: type=1326 audit(2000000011.209:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe3b0d7df87 code=0x7ffc0000 [ 1442.580200][T21662] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1442.691168][ T28] audit: type=1326 audit(2000000011.209:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3b0d7c890 code=0x7ffc0000 [ 1442.905853][ T28] audit: type=1326 audit(2000000011.209:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3b0d7dafb code=0x7ffc0000 [ 1442.932801][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1442.986020][ T28] audit: type=1326 audit(2000000011.209:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3b0d7dafb code=0x7ffc0000 [ 1443.257761][ T28] audit: type=1326 audit(2000000011.209:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.0.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe3b0daffe5 code=0x7ffc0000 [ 1443.354268][T21531] EXT4-fs (loop4): unmounting filesystem. [ 1443.658331][T18500] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1443.774646][T21682] binder: 21679:21682 ioctl 4018620d 0 returned -22 [ 1443.905805][T21682] loop2: detected capacity change from 0 to 1024 [ 1444.071097][ T988] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1444.130404][T21676] loop4: detected capacity change from 0 to 40427 [ 1444.144976][T21676] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1444.155597][T18500] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1444.159129][T21676] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1444.172841][T18500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.189011][T21676] F2FS-fs (loop4): invalid crc value [ 1444.189068][T18500] usb 4-1: config 0 descriptor?? [ 1444.213316][T21676] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1444.280272][T21676] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1444.297435][T21676] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1444.911887][T21694] loop2: detected capacity change from 0 to 512 [ 1444.930606][T21694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1445.018046][T21694] EXT4-fs (loop2): 1 orphan inode deleted [ 1445.023660][T21694] EXT4-fs (loop2): 1 truncate cleaned up [ 1445.029142][T21694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1445.069677][ T5791] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1445.089055][ T5791] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1445.460270][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1445.510449][T21702] loop4: detected capacity change from 0 to 512 [ 1445.519415][T21702] ext4: Unknown parameter 'uid>00000000000000000000' [ 1445.589789][T21699] device wireguard0 entered promiscuous mode [ 1445.716046][T21705] loop2: detected capacity change from 0 to 512 [ 1445.756879][T21705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1445.769012][T21705] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 1446.022307][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4461'. [ 1446.821071][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1446.859739][T21719] loop2: detected capacity change from 0 to 2048 [ 1446.906872][T21719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1446.921981][T21611] usb 4-1: USB disconnect, device number 80 [ 1447.251734][T21727] binder: 21722:21727 ioctl 4018620d 0 returned -22 [ 1447.458921][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1447.476053][ T28] audit: type=1326 audit(2000000016.409:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d57def9 code=0x7ffc0000 [ 1447.500058][T21726] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 1447.675739][ T28] audit: type=1326 audit(2000000016.409:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d57def9 code=0x7ffc0000 [ 1447.769472][T21731] loop4: detected capacity change from 0 to 256 [ 1447.787216][T21731] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1447.872353][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1448.071529][ T28] audit: type=1326 audit(2000000016.409:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f742d57def9 code=0x7ffc0000 [ 1448.119320][T21735] loop2: detected capacity change from 0 to 128 [ 1448.136055][T21735] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1448.144961][ T28] audit: type=1326 audit(2000000016.409:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f742d57df33 code=0x7ffc0000 [ 1448.168517][ T28] audit: type=1326 audit(2000000016.419:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f742d57c9df code=0x7ffc0000 [ 1448.193838][ T28] audit: type=1326 audit(2000000016.439:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f742d57df87 code=0x7ffc0000 [ 1448.222378][ T28] audit: type=1326 audit(2000000016.449:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f742d57c890 code=0x7ffc0000 [ 1448.264121][ T28] audit: type=1326 audit(2000000016.449:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742d57dafb code=0x7ffc0000 [ 1448.311248][ T28] audit: type=1326 audit(2000000016.449:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742d57dafb code=0x7ffc0000 [ 1448.712144][T21741] loop4: detected capacity change from 0 to 1024 [ 1448.746290][ T28] audit: type=1326 audit(2000000016.449:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f742d5affe5 code=0x7ffc0000 [ 1448.795773][T21741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1448.930439][T21746] bridge0: port 3(vlan2) entered blocking state [ 1448.936568][T21746] bridge0: port 3(vlan2) entered disabled state [ 1449.105131][T21531] EXT4-fs (loop4): unmounting filesystem. [ 1449.272201][T21753] overlayfs: failed to resolve './file1': -2 [ 1451.849676][T21767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.865361][T21772] loop4: detected capacity change from 0 to 512 [ 1451.880994][T21767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.907299][T21767] device bridge_slave_0 entered promiscuous mode [ 1451.914792][T21772] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.4474: corrupted in-inode xattr [ 1451.934477][T21767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.951635][T21772] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.4474: couldn't read orphan inode 15 (err -117) [ 1451.977756][T21767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.144398][T21772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1452.157376][T21767] device bridge_slave_1 entered promiscuous mode [ 1452.199806][T21776] loop2: detected capacity change from 0 to 512 [ 1452.206240][T21776] ext4: Unknown parameter 'uid>00000000000000000000' [ 1452.220121][T21777] device wireguard0 entered promiscuous mode [ 1452.288489][ T988] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1452.747854][T21531] EXT4-fs (loop4): unmounting filesystem. [ 1452.758193][T21767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.765038][T21767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.772163][T21767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.778939][T21767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.804269][T21791] loop4: detected capacity change from 0 to 512 [ 1452.847587][T21791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1452.866317][T21791] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 1452.983998][T21798] loop2: detected capacity change from 0 to 1024 [ 1453.229933][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.246237][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.336330][T10505] Bluetooth: hci0: Frame reassembly failed (-84) [ 1453.458037][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1453.467415][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1453.512796][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1453.526531][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1453.548814][T12465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.555683][T12465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1453.643893][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1453.662300][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1453.689315][T12465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.696194][T12465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1453.809090][T21812] loop2: detected capacity change from 0 to 256 [ 1453.854042][T21812] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1453.959242][T21796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.986174][T21796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.993517][T21796] device bridge_slave_0 entered promiscuous mode [ 1454.015472][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1454.027701][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1454.072333][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1454.092501][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1454.380046][T21767] device veth0_vlan entered promiscuous mode [ 1454.401978][T21796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.415571][T21796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.422995][T21796] device bridge_slave_1 entered promiscuous mode [ 1454.436609][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1454.444903][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1454.465836][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1454.515856][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1454.517298][T21819] loop2: detected capacity change from 0 to 512 [ 1454.529465][T21767] device veth1_macvtap entered promiscuous mode [ 1454.554235][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1454.564246][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1454.580258][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1454.595912][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1454.599133][T21819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1454.603971][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1454.627905][T21819] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 1454.635888][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1454.645800][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1454.654010][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1454.662195][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1454.985070][ T5791] device bridge_slave_1 left promiscuous mode [ 1454.994246][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.008887][T21104] __quota_error: 32 callbacks suppressed [ 1455.008904][T21104] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1455.035705][ T5791] device bridge_slave_0 left promiscuous mode [ 1455.044803][T21104] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1455.055635][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.068708][ T5791] device veth1_macvtap left promiscuous mode [ 1455.075702][T21104] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz-executor: Failed to acquire dquot type 0 [ 1455.090105][ T5791] device veth0_vlan left promiscuous mode [ 1455.253049][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1455.265851][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1455.277674][T21104] EXT4-fs (loop2): unmounting filesystem. [ 1455.287069][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1455.296264][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1455.309377][T19078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.316338][T19078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1455.331729][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1455.345182][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1455.358337][T19078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.365200][T19078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1455.396313][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1455.415093][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1455.422999][T17250] Bluetooth: hci0: command 0x1003 tx timeout [ 1455.428949][ T3670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1455.436233][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1455.453346][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1455.464248][T21796] device veth0_vlan entered promiscuous mode [ 1455.471274][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1455.479290][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1455.522616][T21796] device veth1_macvtap entered promiscuous mode [ 1455.592456][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1455.602338][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1455.637248][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1455.677819][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1455.694722][T21531] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1455.706288][T21531] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1455.735599][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1455.745258][T21531] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz-executor: Failed to acquire dquot type 0 [ 1455.776350][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1455.790102][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1455.826553][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1455.894504][T21836] binder: 21833:21836 ioctl 4018620d 0 returned -22 [ 1455.939977][T21836] loop1: detected capacity change from 0 to 1024 [ 1456.086789][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1456.157458][T21531] EXT4-fs (loop4): unmounting filesystem. [ 1456.408012][T21839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.425681][T21839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.432982][T21839] device bridge_slave_0 entered promiscuous mode [ 1456.446542][T21839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.453386][T21839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.486264][T21839] device bridge_slave_1 entered promiscuous mode [ 1456.576567][T21850] loop1: detected capacity change from 0 to 512 [ 1456.616497][T21850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1456.625317][T21850] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 1456.730520][T21847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.747727][T21847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.755098][T21857] netlink: 'syz.3.4491': attribute type 2 has an invalid length. [ 1456.911375][T21847] device bridge_slave_0 entered promiscuous mode [ 1457.025847][ T5791] device bridge_slave_1 left promiscuous mode [ 1457.031802][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.046152][ T5791] device bridge_slave_0 left promiscuous mode [ 1457.052098][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.085907][ T5791] device veth1_macvtap left promiscuous mode [ 1457.091774][ T5791] device veth0_vlan left promiscuous mode [ 1457.218396][T21847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.229431][T21847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.256087][T21847] device bridge_slave_1 entered promiscuous mode [ 1457.307498][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1457.314785][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1457.349766][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1457.358346][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1457.367072][T19078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.373936][T19078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.381230][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1457.389621][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1457.400794][T19078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.407671][T19078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.448801][T21767] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1457.465563][T21767] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1457.485812][T21767] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz-executor: Failed to acquire dquot type 0 [ 1457.556602][T21861] overlayfs: missing 'lowerdir' [ 1457.764189][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1457.772067][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1457.781723][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1457.856693][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1457.867000][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1457.885314][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1457.894615][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1457.903879][T21767] EXT4-fs (loop1): unmounting filesystem. [ 1457.916247][T21839] device veth0_vlan entered promiscuous mode [ 1457.951232][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1457.981399][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1458.005436][T21839] device veth1_macvtap entered promiscuous mode [ 1458.305750][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1458.313766][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1458.323075][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1458.340638][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1458.353887][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1458.400257][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1458.410484][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1458.459066][T21871] loop2: detected capacity change from 0 to 512 [ 1458.465273][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1458.484421][T21871] ext3: Unknown parameter 'nouser_xattr' [ 1459.845179][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1459.853322][T21891] xt_hashlimit: size too large, truncated to 1048576 [ 1459.860155][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1459.867481][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1459.876104][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1459.884067][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.890923][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.899280][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1459.907870][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1459.923079][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.930043][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.978269][T21869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.991290][T21869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.006607][T21869] device bridge_slave_0 entered promiscuous mode [ 1460.014892][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1460.022819][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1460.030919][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1460.042006][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1460.053011][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1460.066897][T21869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.075199][T21869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.085698][T21869] device bridge_slave_1 entered promiscuous mode [ 1460.112819][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1460.123131][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1460.147029][T21847] device veth0_vlan entered promiscuous mode [ 1460.159656][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1460.169527][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1460.186732][ T5791] device bridge_slave_1 left promiscuous mode [ 1460.194749][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.212162][ T5791] device bridge_slave_0 left promiscuous mode [ 1460.235657][ T313] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1460.243184][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.252137][ T5791] device bridge_slave_1 left promiscuous mode [ 1460.265306][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.282880][ T5791] device bridge_slave_0 left promiscuous mode [ 1460.298954][T21886] loop2: detected capacity change from 0 to 40427 [ 1460.305283][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.317996][T21886] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1460.333871][ T5791] device veth1_macvtap left promiscuous mode [ 1460.335555][T21886] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1460.349949][ T5791] device veth0_vlan left promiscuous mode [ 1460.356446][T21886] F2FS-fs (loop2): invalid crc value [ 1460.364804][ T5791] device veth1_macvtap left promiscuous mode [ 1460.375577][ T5791] device veth0_vlan left promiscuous mode [ 1460.382700][T21886] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1460.452818][T21886] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1460.459726][T21886] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1460.645575][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.927044][ T313] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1460.936052][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.987226][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1460.987602][ T313] usb 4-1: config 0 descriptor?? [ 1461.017293][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1461.030276][T21847] device veth1_macvtap entered promiscuous mode [ 1461.052958][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1461.060507][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1461.075855][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1461.083845][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1461.106936][T21881] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1461.137186][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1461.149020][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1461.165865][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1461.173962][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1461.334238][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1462.174721][T21916] loop4: detected capacity change from 0 to 256 [ 1462.202185][T21913] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1462.323314][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1462.373090][ T313] keytouch 0003:0926:3333.0072: fixing up Keytouch IEC report descriptor [ 1462.383670][ T313] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0072/input/input208 [ 1462.411951][T21891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.457892][ T313] keytouch 0003:0926:3333.0072: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1462.496492][T21923] loop2: detected capacity change from 0 to 512 [ 1462.505459][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1462.514027][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1462.522511][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.529390][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.534747][T21923] EXT4-fs: Ignoring removed bh option [ 1462.559081][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1462.619554][T21925] loop4: detected capacity change from 0 to 1024 [ 1462.678689][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1462.748592][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.755457][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.766637][T21923] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz.2.4504: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 1462.795951][T21891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.815623][T21923] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.4504: couldn't read orphan inode 16 (err -117) [ 1462.827445][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1462.860154][T21869] device veth0_vlan entered promiscuous mode [ 1462.866987][ T351] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1462.875921][T21923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1462.895872][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1462.903360][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1462.926174][T21923] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 1462.936242][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1462.944019][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1462.985254][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1463.013316][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1463.028354][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1463.050583][T21869] device veth1_macvtap entered promiscuous mode [ 1463.063935][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1463.074462][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1463.093073][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1463.167445][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1463.183745][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1463.222837][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1463.405602][ T28] audit: type=1326 audit(2000000032.549:7054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5c57def9 code=0x7ffc0000 [ 1463.484494][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1463.497317][ T28] audit: type=1326 audit(2000000032.549:7055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5c57def9 code=0x7ffc0000 [ 1463.519822][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1463.520897][ T28] audit: type=1326 audit(2000000032.549:7056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2d5c57def9 code=0x7ffc0000 [ 1463.555834][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1463.608020][ T28] audit: type=1326 audit(2000000032.549:7057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d5c57df33 code=0x7ffc0000 [ 1463.612387][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4506'. [ 1463.644864][T21939] netlink: 'syz.2.4504': attribute type 2 has an invalid length. [ 1463.668614][T19078] usb 4-1: USB disconnect, device number 81 [ 1463.680517][ T28] audit: type=1326 audit(2000000032.559:7058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2d5c57c9df code=0x7ffc0000 [ 1463.741291][T21937] device bridge_slave_1 left promiscuous mode [ 1463.750398][ T28] audit: type=1326 audit(2000000032.559:7059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2d5c57df87 code=0x7ffc0000 [ 1463.774019][T21937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.789463][T21937] device bridge_slave_0 left promiscuous mode [ 1463.800893][T21937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.810321][ T28] audit: type=1326 audit(2000000032.559:7060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d5c57c890 code=0x7ffc0000 [ 1463.854432][T21943] loop1: detected capacity change from 0 to 2048 [ 1463.880925][ T28] audit: type=1326 audit(2000000032.559:7061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d5c57dafb code=0x7ffc0000 [ 1463.912209][ T28] audit: type=1326 audit(2000000032.559:7062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d5c57dafb code=0x7ffc0000 [ 1463.949748][ T28] audit: type=1326 audit(2000000032.559:7063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.0.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d5c5affe5 code=0x7ffc0000 [ 1463.976483][T21943] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1465.203714][T21938] tmpfs: Unknown parameter 'hugealways' [ 1465.304461][T21956] xt_hashlimit: size too large, truncated to 1048576 [ 1465.382823][T21839] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1465.414845][T21839] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 1465.427675][T21869] EXT4-fs (loop1): unmounting filesystem. [ 1465.522937][T21839] EXT4-fs (loop2): unmounting filesystem. [ 1465.640695][T21968] loop1: detected capacity change from 0 to 256 [ 1465.659334][T21968] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1465.830095][T19078] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1466.089186][T10505] device bridge_slave_1 left promiscuous mode [ 1466.095136][T10505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.125893][T10505] device bridge_slave_0 left promiscuous mode [ 1466.131989][T10505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.148156][T10505] device veth1_macvtap left promiscuous mode [ 1466.163239][T10505] device veth0_vlan left promiscuous mode [ 1466.207153][T19078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.232310][T19078] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1466.256895][T19078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.576251][T19078] usb 1-1: config 0 descriptor?? [ 1466.797470][T21970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.809458][T21970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.850563][T21970] device bridge_slave_0 entered promiscuous mode [ 1466.906094][T21970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.935615][T21970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.956904][T21970] device bridge_slave_1 entered promiscuous mode [ 1467.789199][T19078] keytouch 0003:0926:3333.0073: fixing up Keytouch IEC report descriptor [ 1467.809067][T19078] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0073/input/input209 [ 1467.846159][T21977] loop1: detected capacity change from 0 to 40427 [ 1467.855572][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4519'. [ 1467.868698][T21977] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1467.913906][T21977] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1467.930359][T19078] keytouch 0003:0926:3333.0073: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1467.934183][T21977] F2FS-fs (loop1): invalid crc value [ 1467.980845][T21977] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1468.012651][T21956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.044990][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1468.056644][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1468.064661][T21956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.087043][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1468.095161][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1468.095743][T21977] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1468.112164][T19078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.119037][T19078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.126772][T21977] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1468.141779][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1468.161808][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1468.170266][T19078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.177223][T19078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.184748][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1468.193419][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1468.226854][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1468.235104][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1468.243433][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1468.251941][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1468.259458][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1468.677511][T21970] device veth0_vlan entered promiscuous mode [ 1468.842321][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1468.852834][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1468.856939][ T535] usb 1-1: USB disconnect, device number 70 [ 1468.910418][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1468.918706][T19078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1468.947083][T21970] device veth1_macvtap entered promiscuous mode [ 1468.974882][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1468.987622][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1469.015922][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1469.024219][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1469.052580][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1469.233601][T22010] loop1: detected capacity change from 0 to 1024 [ 1469.994137][T22019] 9pnet_fd: p9_fd_create_tcp (22019): problem connecting socket to 127.0.0.1 [ 1470.221641][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1470.272907][T22021] device bridge_slave_1 left promiscuous mode [ 1470.289039][T22021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.309315][T22021] device bridge_slave_0 left promiscuous mode [ 1470.315271][T22021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.140655][T22037] loop1: detected capacity change from 0 to 256 [ 1471.824405][T22037] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1472.060786][T18620] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1472.276494][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 1472.276538][ T28] audit: type=1326 audit(2000000041.519:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c477def9 code=0x7ffc0000 [ 1472.431856][ T28] audit: type=1326 audit(2000000041.519:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c477def9 code=0x7ffc0000 [ 1472.510285][ T28] audit: type=1326 audit(2000000041.519:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd5c477def9 code=0x7ffc0000 [ 1472.533956][T18620] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.554171][T18620] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1472.575540][T18620] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1472.594606][ T28] audit: type=1326 audit(2000000041.519:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5c477df33 code=0x7ffc0000 [ 1472.618685][T18620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.645660][ T28] audit: type=1326 audit(2000000041.529:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd5c477c9df code=0x7ffc0000 [ 1472.671957][T18620] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1472.759410][ T28] audit: type=1326 audit(2000000041.529:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd5c477df87 code=0x7ffc0000 [ 1472.783482][ T28] audit: type=1326 audit(2000000041.529:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5c477c890 code=0x7ffc0000 [ 1472.818933][ T28] audit: type=1326 audit(2000000041.529:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5c477dafb code=0x7ffc0000 [ 1473.045576][ T28] audit: type=1326 audit(2000000041.539:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5c477dafb code=0x7ffc0000 [ 1473.300261][ T28] audit: type=1326 audit(2000000041.539:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22031 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5c47affe5 code=0x7ffc0000 [ 1473.379388][T22069] loop1: detected capacity change from 0 to 512 [ 1473.407166][T22069] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.4533: casefold flag without casefold feature [ 1473.433111][T22069] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.4533: missing EA_INODE flag [ 1473.444947][T22069] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4533: error while reading EA inode 12 err=-117 [ 1473.463394][T22069] EXT4-fs (loop1): 1 orphan inode deleted [ 1473.469177][T22069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1473.559759][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4534'. [ 1473.967330][T22077] loop2: detected capacity change from 0 to 2048 [ 1474.006024][T22077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1474.284819][T22086] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 1474.301029][T21869] EXT4-fs (loop1): unmounting filesystem. [ 1474.477569][ T292] usb 1-1: USB disconnect, device number 71 [ 1474.506655][T22091] loop1: detected capacity change from 0 to 512 [ 1474.517079][T22092] overlayfs: failed to resolve './file0': -2 [ 1474.616527][T22091] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1474.625611][T22091] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 1474.776035][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 1474.900661][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 1474.908264][T21970] EXT4-fs (loop2): unmounting filesystem. [ 1474.978925][T22099] loop2: detected capacity change from 0 to 512 [ 1475.038700][T22099] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.4540: corrupted inode contents [ 1475.070969][T22099] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.4540: mark_inode_dirty error [ 1475.107267][T22099] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.4540: corrupted inode contents [ 1475.131334][T22099] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.4540: mark_inode_dirty error [ 1475.136237][T10505] Bluetooth: hci1: Frame reassembly failed (-84) [ 1475.151589][T22099] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.4540: Failed to acquire dquot type 0 [ 1475.164559][T22099] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.4540: corrupted inode contents [ 1475.208482][T22099] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.4540: mark_inode_dirty error [ 1475.225254][T22099] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.4540: corrupted inode contents [ 1475.241570][T22099] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.4540: mark_inode_dirty error [ 1475.255701][T22099] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.4540: corrupted inode contents [ 1475.449791][T22099] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1475.469644][T22099] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.4540: corrupted inode contents [ 1475.486415][T22099] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.4540: mark_inode_dirty error [ 1475.689283][T22099] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1475.755220][T22099] EXT4-fs (loop2): 1 truncate cleaned up [ 1475.809405][T22099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1475.876392][T22099] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 1476.750251][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1476.776115][ T3670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1476.951986][T21970] EXT4-fs (loop2): unmounting filesystem. [ 1477.116298][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4544'. [ 1477.135866][T22118] device bridge_slave_1 left promiscuous mode [ 1477.354008][ T4018] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1477.392890][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 1477.392927][ T28] audit: type=1326 audit(2000000046.609:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22111 comm="syz.3.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c477def9 code=0x7ffc0000 [ 1477.447956][T16235] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN [ 1477.459497][T16235] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 1477.467739][T16235] CPU: 1 PID: 16235 Comm: syz.0.3268 Not tainted 6.1.93-syzkaller-00101-g04212acc42d4 #0 [ 1477.477372][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1477.484885][ T3670] Bluetooth: hci1: command 0x1003 tx timeout [ 1477.487263][T16235] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 1477.487294][T16235] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ce 0b d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 b1 0b d0 ff 4c 8b 23 4d 85 e4 4c [ 1477.487308][T16235] RSP: 0018:ffffc9000107f380 EFLAGS: 00010202 [ 1477.487323][T16235] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000 [ 1477.487334][T16235] RDX: ffffc90001c69000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1477.487345][T16235] RBP: ffffc9000107f450 R08: ffff888136856930 R09: 0000000000000001 [ 1477.487356][T16235] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200020fe98 [ 1477.487367][T16235] R13: dffffc0000000000 R14: ffff888136856930 R15: 0000000000000001 [ 1477.493273][ T28] audit: type=1326 audit(2000000046.609:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22111 comm="syz.3.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c477def9 code=0x7ffc0000 [ 1477.499759][T16235] FS: 00007fccfed5e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1477.499792][T16235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1477.499804][T16235] CR2: 0000001b2dd0eff8 CR3: 0000000115819000 CR4: 00000000003506a0 [ 1477.610428][T16235] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1477.618237][T16235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1477.626049][T16235] Call Trace: [ 1477.629171][T16235] [ 1477.631957][T16235] ? __die_body+0x62/0xb0 [ 1477.636117][T16235] ? die_addr+0x9f/0xd0 [ 1477.640120][T16235] ? exc_general_protection+0x317/0x4c0 [ 1477.645495][T16235] ? asm_exc_general_protection+0x27/0x30 [ 1477.651045][T16235] ? __ext4_journal_get_write_access+0xb0/0x690 [ 1477.657117][T16235] ? __kasan_check_write+0x14/0x20 [ 1477.662066][T16235] ? __ext4_journal_ensure_credits+0x470/0x470 [ 1477.668056][T16235] ext4_orphan_del+0x877/0xc50 [ 1477.672655][T16235] ? lock_buffer+0x70/0x70 [ 1477.676908][T16235] ? ext4_evict_inode+0xc03/0x1550 [ 1477.681854][T16235] ? ext4_evict_inode+0xc29/0x1550 [ 1477.686811][T16235] ext4_evict_inode+0xf50/0x1550 [ 1477.691576][T16235] ? _raw_spin_unlock+0x4c/0x70 [ 1477.696268][T16235] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 1477.701992][T16235] ? __kasan_check_write+0x14/0x20 [ 1477.706937][T16235] ? _raw_spin_lock+0xa4/0x1b0 [ 1477.711538][T16235] ? _raw_spin_trylock_bh+0x190/0x190 [ 1477.716746][T16235] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 1477.722562][T16235] evict+0x2a3/0x630 [ 1477.726297][T16235] iput+0x616/0x690 [ 1477.729941][T16235] ext4_process_orphan+0x290/0x2f0 [ 1477.734890][T16235] ext4_orphan_cleanup+0xa50/0x11b0 [ 1477.739923][T16235] ? ext4_orphan_del+0xc50/0xc50 [ 1477.744695][T16235] ? errseq_check_and_advance+0x64/0x130 [ 1477.750161][T16235] ext4_fill_super+0x7d46/0x8460 [ 1477.754947][T16235] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1477.761012][T16235] ? snprintf+0xd6/0x120 [ 1477.765094][T16235] ? set_blocksize+0x1cb/0x360 [ 1477.769691][T16235] ? sb_set_blocksize+0xa8/0xf0 [ 1477.774377][T16235] get_tree_bdev+0x440/0x680 [ 1477.778804][T16235] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1477.784879][T16235] ext4_get_tree+0x1c/0x20 [ 1477.789136][T16235] vfs_get_tree+0x88/0x290 [ 1477.793385][T16235] do_new_mount+0x2ba/0xb30 [ 1477.797727][T16235] ? do_move_mount_old+0x160/0x160 [ 1477.802671][T16235] ? security_capable+0x87/0xb0 [ 1477.807358][T16235] ? ns_capable+0x89/0xe0 [ 1477.811523][T16235] path_mount+0x671/0x1070 [ 1477.815775][T16235] ? user_path_at_empty+0x14e/0x1a0 [ 1477.820813][T16235] __se_sys_mount+0x2c4/0x3b0 [ 1477.825326][T16235] ? __x64_sys_mount+0xd0/0xd0 [ 1477.829923][T16235] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1477.835827][T16235] __x64_sys_mount+0xbf/0xd0 [ 1477.840254][T16235] x64_sys_call+0x49d/0x9a0 [ 1477.844592][T16235] do_syscall_64+0x3b/0xb0 [ 1477.848846][T16235] ? clear_bhb_loop+0x55/0xb0 [ 1477.853360][T16235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.859086][T16235] RIP: 0033:0x7fccfdf7f69a [ 1477.863341][T16235] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1477.882784][T16235] RSP: 002b:00007fccfed5de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1477.891031][T16235] RAX: ffffffffffffffda RBX: 00007fccfed5def0 RCX: 00007fccfdf7f69a [ 1477.898924][T16235] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 00007fccfed5deb0 [ 1477.906736][T16235] RBP: 0000000020000180 R08: 00007fccfed5def0 R09: 0000000000800714 [ 1477.914637][T16235] R10: 0000000000800714 R11: 0000000000000246 R12: 00000000200000c0 [ 1477.922446][T16235] R13: 00007fccfed5deb0 R14: 0000000000000442 R15: 0000000020000740 [ 1477.930263][T16235] [ 1477.933132][T16235] Modules linked in: [ 1477.969349][T22118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.969482][T16235] ---[ end trace 0000000000000000 ]--- [ 1477.981615][T16235] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 1477.988447][T16235] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ce 0b d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 b1 0b d0 ff 4c 8b 23 4d 85 e4 4c [ 1478.025436][T22118] device bridge_slave_0 left promiscuous mode [ 1478.032242][T16235] RSP: 0018:ffffc9000107f380 EFLAGS: 00010202 [ 1478.038253][ T28] audit: type=1326 audit(2000000046.609:7252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22111 comm="syz.3.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd5c477def9 code=0x7ffc0000 [ 1478.048502][T16235] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000 [ 1478.061582][ T28] audit: type=1326 audit(2000000046.609:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22111 comm="syz.3.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5c477df33 code=0x7ffc0000 [ 1478.075917][T22118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.092667][ T28] audit: type=1326 audit(2000000046.609:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22111 comm="syz.3.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd5c477c9df code=0x7ffc0000 [ 1478.122409][T16235] RDX: ffffc90001c69000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1478.122682][T21869] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1478.130188][ T28] audit: type=1326 audit(2000000046.609:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22111 comm="syz.3.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd5c477df87 code=0x7ffc0000 [ 1478.130250][ T28] audit: type=1326 audit(2000000046.609:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22111 comm="syz.3.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5c477c890 code=0x7ffc0000 [ 1478.130272][ T28] audit: type=1326 audit(2000000046.609:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22111 comm="syz.3.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5c477dafb code=0x7ffc0000 [ 1478.130291][ T28] audit: type=1326 audit(2000000046.609:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22111 comm="syz.3.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5c477dafb code=0x7ffc0000 [ 1478.173900][T21869] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz-executor: Failed to acquire dquot type 0 [ 1478.191138][T16235] RBP: ffffc9000107f450 R08: ffff888136856930 R09: 0000000000000001 [ 1478.257062][T16235] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200020fe98 [ 1478.264871][T16235] R13: dffffc0000000000 R14: ffff888136856930 R15: 0000000000000001 [ 1478.272791][T16235] FS: 00007fccfed5e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1478.281481][T16235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1478.288103][T16235] CR2: 0000001b3111dff8 CR3: 0000000115819000 CR4: 00000000003506b0 [ 1478.295926][T16235] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1478.303707][T16235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1478.311549][T16235] Kernel panic - not syncing: Fatal exception [ 1478.317654][T16235] Kernel Offset: disabled [ 1478.321774][T16235] Rebooting in 86400 seconds..