last executing test programs: 28m47.954792732s ago: executing program 1 (id=5554): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b76508", 0x14, 0x2c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x3b00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x8000}}}}}}}, 0x0) 28m47.341813441s ago: executing program 1 (id=5556): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x6080, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) faccessat2(0xffffffffffffffff, &(0x7f0000000180)='./mnt\x00', 0xa1, 0x200) fadvise64(r5, 0x8, 0xb098, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$UHID_INPUT(r1, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 28m42.278695307s ago: executing program 1 (id=5573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) 28m42.239843408s ago: executing program 1 (id=5577): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 28m41.675106796s ago: executing program 1 (id=5582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0xc, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 28m41.579445848s ago: executing program 1 (id=5585): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 28m41.579235678s ago: executing program 32 (id=5585): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 28m7.99372844s ago: executing program 0 (id=5781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_pidfd_open(r0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824698949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) r7 = dup(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000080)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f00000000c0)=r7}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r9, 0x0) 28m6.456956653s ago: executing program 0 (id=5793): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x810410, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x2, 0x1d6, &(0x7f0000000200)="$eJzsmb/P0kAYx7937Quvb4yJi4OLg68Ro5S2qGEhBhN3E/DXJpFK0AIGagIkDsTFxdHBxNV/wMHBycHNzVUHNTFxkNG55o5re7ZAwKmJz2c4vvfc3XPPHfAloSAI4r/l+7ffX59frbUuADiKQxRV/KeRzOHa/C8vH59/Ub/26s3n1x8Gx55cSedjAMJw+/2PAHjfMBBEnRSH6rUFHusb4Din9C0wnFH6LjhuKu2B4Y7SDzQ9jPbwPeve0O/c7/meLRpHNK5oqvr+JoDFnKEDYF+eLQyZNj6ezh62fd8bpcVeGO2TGdpVbLo/WV+Do676oj7xft1+9nQuKrZU3NbuzwGHo3QVDE2layjCsqzkSrTznzST/MY258+DOF7ORRkk8iVYOiK+0HHkxOLdx+yqH3kp/h+ENC4AmaFPB7vkEQ7wd6SgTGDlqsSfmAmc1fzJhBn7RyXoP6qMp7Nyr9/uel1v4LrVy/ZF277kVqQRLdsN/rcv/elAy7+XtUhJgRUwaQfByJkAwciJ++6y1Ry3+Xb4S67h0v84SqeXOcRHRR67uLqe6LeBSy16JWNt8QRBEARBEARBEARBEARBEDtxCkz+C6oeVIVrcK/L2X8CAAD//+lAY1E=") 28m5.780376963s ago: executing program 0 (id=5797): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 28m5.707791244s ago: executing program 0 (id=5798): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000300)={[{@auto_da_alloc_val}, {@test_dummy_encryption_v1}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x45c, &(0x7f00000003c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002680)='./file0\x00', 0x802014, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./bus\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x1809449, 0x0, 0xff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r3, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003fc0)=ANY=[], 0x1060}, 0x1, 0x0, 0x0, 0x4805}, 0x20000000) 28m4.947488296s ago: executing program 2 (id=5801): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}]}, 0x20}}, 0x0) 28m4.947112896s ago: executing program 2 (id=5802): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) 28m4.946760906s ago: executing program 2 (id=5803): syz_emit_ethernet(0x56, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000dc0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) lseek(r1, 0x1, 0x0) getdents(r1, 0x0, 0x58) 28m4.875586777s ago: executing program 0 (id=5806): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000000c0)=0xfffffc00, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, 0x0, 0x0) 28m4.788262298s ago: executing program 2 (id=5807): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0x0) 28m4.678954739s ago: executing program 0 (id=5810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c1000000da7ff40d5c0cf50000e69c", 0xf}, {&(0x7f0000000480)="f1fe5fe0", 0x4}], 0x2) 28m4.66922366s ago: executing program 33 (id=5810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c1000000da7ff40d5c0cf50000e69c", 0xf}, {&(0x7f0000000480)="f1fe5fe0", 0x4}], 0x2) 28m4.578036821s ago: executing program 2 (id=5817): syz_emit_ethernet(0x56, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000dc0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) lseek(r1, 0x1, 0x0) getdents(r1, 0x0, 0x58) 28m4.047466139s ago: executing program 2 (id=5822): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r2, 0x0, r0, 0x0, 0xfea8, 0xa) 28m4.00621855s ago: executing program 34 (id=5822): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r2, 0x0, r0, 0x0, 0xfea8, 0xa) 12m25.277441851s ago: executing program 5 (id=11738): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 12m25.222454302s ago: executing program 5 (id=11740): pipe(&(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") syz_mount_image$fuse(0x0, &(0x7f0000001f00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10805, 0x0, 0x3, 0x0, 0x0) chdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12m24.202271897s ago: executing program 5 (id=11745): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") r6 = syz_open_procfs(0x0, 0x0) pread64(r6, 0x0, 0x0, 0x66) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r7], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r8}, 0x4) syz_btf_id_by_name$bpf_lsm(0x0) signalfd4(r8, &(0x7f0000000480)={[0x8]}, 0x8, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(r8, 0x0, 0x118) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0xae44, 0x2) 12m19.2418516s ago: executing program 5 (id=11768): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) 12m18.147270057s ago: executing program 5 (id=11776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) readlink(0x0, 0x0, 0x0) 12m17.680740504s ago: executing program 5 (id=11777): pipe(&(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") syz_mount_image$fuse(0x0, &(0x7f0000001f00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10805, 0x0, 0x3, 0x0, 0x0) chdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12m17.646426024s ago: executing program 35 (id=11777): pipe(&(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001f00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10805, 0x0, 0x3, 0x0, 0x0) chdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 9m14.231304582s ago: executing program 3 (id=12799): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m13.333993675s ago: executing program 3 (id=12804): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 9m12.640708335s ago: executing program 3 (id=12806): bpf$PROG_LOAD(0x5, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x18, r6, 0x30d, 0x70bd2b, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) 9m10.523170796s ago: executing program 3 (id=12823): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) 9m9.65654374s ago: executing program 3 (id=12829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 9m9.388696353s ago: executing program 3 (id=12833): mlockall(0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 9m9.302182545s ago: executing program 36 (id=12833): mlockall(0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 4.363447379s ago: executing program 4 (id=15425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'gre0\x00', 0x400}) close(r0) 4.008335872s ago: executing program 4 (id=15429): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000040)='./file2\x00', 0x800094, &(0x7f0000000a00)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,rodir,uni_xlate=0,iocharset=macgaelic,shortname=lower,utf8=1,iocharset=iso8859-13,uni_xlate=1,rodir,shortname=win95,shortname=lower,codepage=874,shortname=lower,utf8=0,shortname=lower,uni_xlate=0,uni_xlate=0,nonumtail=0,short\b\x00\x00\x00\x00\x00\x00\x0095,rodir,uni_xlate=0,rodir,shortname=mixed,sFortname=lower,nnonumtail=1,showexec,\x00', @ANYRES8, @ANYRES16], 0x6, 0x2d2, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) 3.947444683s ago: executing program 6 (id=15430): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7151, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1) 3.930975443s ago: executing program 8 (id=15431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040050}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x2000000, 0x3}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xffff, 0x0, 0x483, 0x2}, 0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xf) socket$inet6_udp(0xa, 0x2, 0x0) 3.929138683s ago: executing program 4 (id=15432): r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x80) 3.452414987s ago: executing program 7 (id=15433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 3.12878618s ago: executing program 6 (id=15434): pipe(&(0x7f0000000140)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() wait4(r0, 0x0, 0x4, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3.090672221s ago: executing program 8 (id=15435): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) open_tree(0xffffffffffffff9c, 0x0, 0x100) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000006, &(0x7f00000004c0), 0x1, 0x569, &(0x7f0000001600)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000dc0)={'#! ', '', [{0x20, '\xbb\x93\xd9_\xc9\x05\xebG\xe5T2+A\x8c\xff\xdb\x83\xd2\xd0 F]\xc4\xb0\v.,dr\x14i\x98\n\xd9j\xcd\xf2\x1aL\x9d\x91\xeb\xce\xd5\x0e\xec\xf10\xbf\x82r\xa2\xdf\xc6M\xf4\xeb2\xa1 \xfb]w\x837\x04\x17B\x04p\xd0\x11\x14N\x96\xb8\xbb7\x83\xae\xd5{\'\xdcAo\xad\x8b\x86\x06\xab\xacKL\xe7\xa0j\x87\xa71U\xeeD\xda\xfcH==\xca\vmRN\x95p'}, {0x20, '\x04\x00\x00\x00\x00\x00\x00'}, {0x20, '\xbf'}, {0x20, 'nodiscard'}]}, 0x8c) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000ac0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}], [{@obj_type={'obj_type', 0x3d, 'n\xefauto_da_allob'}}, {@euid_gt}, {@fowner_lt}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x4009, 0x1}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x4, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x2, 0xc, 0x1, 0x8, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x10000000, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x6, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x401, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 3.090311881s ago: executing program 9 (id=15436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 3.002383741s ago: executing program 4 (id=15437): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000780)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d302c636f6465706167653d3836322c73686f72746e616d653d6d697865642c696f636861727365743d63703737352c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c726f6469722c757466383d312c756e695f786c6174653d312c00b571a3e3bf2ce9bf5c6406ff0da9714d33dcb456c741d7aa"], 0x41, 0x282, &(0x7f00000004c0)="$eJzs3bFqW1cYB/BPtlzJhiINBdNS6C1dOgnbxbtMcaFU0NKioZ1qYpsEyzHEYEgG25vJOySvkIxZAxlC1rxACAQnkCXO5CGgoFxZkRxJsZxIMuT3W/xxz/nrnnN8uBcPPvr/+82N1a3t9aOjw8jnM5EtRzmOM1GMiZiM1H50lel+GQC46I7r9XhVT417LADAaHj/A8CXp9/7P7PfuvbX6EcGAAzLJ/39PzGUIQEAQ/bPv//9sVSpLP+dJPmIzYOd6k41/Zm2L63HlajFWsxFId5E1FvS+rffK8tzScPzYuQ39ybS/N5OdbIzPx+FKHbPzyepqDZyJ/mpmGnmn8zEWixEIb7pnl/omv8qfv6p7f6lKMTjS7EVtViNRjbN5yJidz5Jfv2z0liApkY+964fAAAAAAAAAAAAAAAAAAAAAAAMQylpKXaen5Oe31Mq9WpP8+3nA033Ox+ovnfqfJ5sfJcd79wBAAAAAAAAAAAAAAAAAADgoti+fmNjpVZbu9avuProzoPDXBr4aOf+RaZ538FSB337TJ+eRT4iFiOib+rrH5/d6taUi9yZ1udkJudejalTI0yaH3j/h/Mv78iKh4eXv/1le3axranSvjci25662Zhqx+f02EjZs23IwYuXhYieffIDb8j24u5JUX79QZ9ca5NMj/sXN3u7vHJv9+mLs6b6PDTqk5/7MQQAAAAAAAAAAAAAAAAAAHT8f3vvPoujHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjMH77/8ftMhFx5V8z877454jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8DQAA//8mbYtA") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r4 = socket(0x2, 0x3, 0xff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0xfc}}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 2.981494892s ago: executing program 9 (id=15438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 2.013501971s ago: executing program 8 (id=15439): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp850,fmask=000000 0000000000000240,errors=remount-ro,iocharset=cp936,iocharset=iso8859-14,dmask=00000000000000000000000,gid=', @ANYRESOCT, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,iocharset=iso8859-2,\x00'], 0x1, 0x153a, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002140)=""/4096, 0x1000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4b6, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d3e2dbd7000000000511c"], 0x28}, 0x1, 0x0, 0x0, 0x40025}, 0x4024044) 2.012953951s ago: executing program 6 (id=15440): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000d97f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000080), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.012245221s ago: executing program 4 (id=15441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'gre0\x00', 0x400}) close(r0) 1.911526602s ago: executing program 6 (id=15442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="41000000000000001c0012800b0001006d616373656300000c00028005000f000000000008000500", @ANYRES32=r3], 0x44}}, 0x0) 1.879039253s ago: executing program 7 (id=15443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) 1.854718283s ago: executing program 7 (id=15444): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000bc0), 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB='r']) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.463356267s ago: executing program 9 (id=15445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000800000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 947.495441ms ago: executing program 9 (id=15446): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7151, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1) 817.026543ms ago: executing program 6 (id=15447): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) userfaultfd(0x801) 814.589453ms ago: executing program 4 (id=15448): r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x80) 648.265904ms ago: executing program 7 (id=15449): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x7, 0x0) 439.626666ms ago: executing program 7 (id=15450): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) open_tree(0xffffffffffffff9c, 0x0, 0x100) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000006, &(0x7f00000004c0), 0x1, 0x569, &(0x7f0000001600)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000dc0)={'#! ', '', [{0x20, '\xbb\x93\xd9_\xc9\x05\xebG\xe5T2+A\x8c\xff\xdb\x83\xd2\xd0 F]\xc4\xb0\v.,dr\x14i\x98\n\xd9j\xcd\xf2\x1aL\x9d\x91\xeb\xce\xd5\x0e\xec\xf10\xbf\x82r\xa2\xdf\xc6M\xf4\xeb2\xa1 \xfb]w\x837\x04\x17B\x04p\xd0\x11\x14N\x96\xb8\xbb7\x83\xae\xd5{\'\xdcAo\xad\x8b\x86\x06\xab\xacKL\xe7\xa0j\x87\xa71U\xeeD\xda\xfcH==\xca\vmRN\x95p'}, {0x20, '\x04\x00\x00\x00\x00\x00\x00'}, {0x20, '\xbf'}, {0x20, 'nodiscard'}]}, 0x8c) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000ac0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}], [{@obj_type={'obj_type', 0x3d, 'n\xefauto_da_allob'}}, {@euid_gt}, {@fowner_lt}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x4009, 0x1}, 0x50) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x4, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x2, 0xc, 0x1, 0x8, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x10000000, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x6, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x401, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 391.733707ms ago: executing program 7 (id=15451): pipe(&(0x7f0000000140)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() wait4(r0, 0x0, 0x4, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 339.603117ms ago: executing program 8 (id=15452): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) 224.344778ms ago: executing program 8 (id=15453): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f0000000280)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 186.758779ms ago: executing program 9 (id=15454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) 186.070089ms ago: executing program 8 (id=15455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 129.076089ms ago: executing program 9 (id=15456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "bc4c4244873398a4dbaf40fcee141d15bb69638f747e05bea3129ab81b02447352b404f793053d889e68b293719907746b342a8c2048fa4cda276a840c397fcd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r7 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, 0x0) unshare(0x62040200) 0s ago: executing program 6 (id=15457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "bc4c4244873398a4dbaf40fcee141d15bb69638f747e05bea3129ab81b02447352b404f793053d889e68b293719907746b342a8c2048fa4cda276a840c397fcd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r5 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) unshare(0x62040200) kernel console output (not intermixed with test programs): 0397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17032 comm="syz.7.14355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fedacc8d3df code=0x7ffc0000 [ 2686.973865][ T24] audit: type=1326 audit(1750862794.696:30398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17032 comm="syz.7.14355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fedacc8e9b7 code=0x7ffc0000 [ 2686.998043][ T9730] usb 10-1: Using ep0 maxpacket: 16 [ 2687.369169][ T24] audit: type=1326 audit(1750862794.696:30399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17032 comm="syz.7.14355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedacc8d290 code=0x7ffc0000 [ 2687.404939][ T24] audit: type=1326 audit(1750862794.696:30400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17032 comm="syz.7.14355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedacc8d58a code=0x7ffc0000 [ 2687.448630][ T24] audit: type=1326 audit(1750862794.696:30401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17032 comm="syz.7.14355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedacc8e929 code=0x7ffc0000 [ 2687.488461][ T9730] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2687.507108][ T9730] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2687.535171][ T9730] usb 10-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2687.553819][ T9730] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2687.591662][ T9730] usb 10-1: config 0 descriptor?? [ 2687.711659][T17048] FAT-fs (loop8): Unrecognized mount option "shorname=mixed" or missing value [ 2689.054843][ T9730] holtek 0003:1241:5015.001A: item fetching failed at offset 4/5 [ 2689.062923][ T9730] holtek 0003:1241:5015.001A: parse failed [ 2689.070152][ T9730] holtek: probe of 0003:1241:5015.001A failed with error -22 [ 2689.112308][ T9730] usb 10-1: USB disconnect, device number 4 [ 2689.501771][T17061] device pim6reg1 entered promiscuous mode [ 2690.019021][T17065] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2690.698705][T17081] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2690.809400][T17081] EXT4-fs (loop9): invalid journal inode [ 2690.831708][T17081] EXT4-fs (loop9): can't get journal size [ 2690.875746][T17081] EXT4-fs (loop9): 1 truncate cleaned up [ 2690.886680][T17081] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 2691.302081][T17090] FAT-fs (loop4): Unrecognized mount option "shorname=mixed" or missing value [ 2691.325491][T17093] incfs_lookup_dentry err:-5 [ 2691.330268][T17093] incfs: Can't find or create .index dir in ./file0 [ 2691.337223][T17093] incfs: mount failed -5 [ 2691.402902][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14372'. [ 2691.537670][ T24] kauditd_printk_skb: 113 callbacks suppressed [ 2691.537683][ T24] audit: type=1326 audit(1750862799.749:30515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2691.585041][ T24] audit: type=1326 audit(1750862799.749:30516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2691.747890][ T24] audit: type=1326 audit(1750862799.760:30517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2691.804502][ T24] audit: type=1326 audit(1750862799.760:30518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2691.857874][ T24] audit: type=1326 audit(1750862799.760:30519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2691.890024][ T24] audit: type=1326 audit(1750862799.760:30520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2693.502758][T17144] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 2693.525420][T17144] EXT4-fs (loop4): invalid journal inode [ 2693.543443][T17144] EXT4-fs (loop4): can't get journal size [ 2693.591696][T17149] device pim6reg1 entered promiscuous mode [ 2693.599689][T17144] EXT4-fs (loop4): 1 truncate cleaned up [ 2693.606386][T17144] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 2693.698049][T17151] fuse: Unknown parameter '00000000000000000008' [ 2693.840907][T17140] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 2693.893628][T17140] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2693.933150][T17140] F2FS-fs (loop9): invalid crc value [ 2693.957657][T17140] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2693.987924][T17163] EXT4-fs (loop6): Unrecognized mount option "smackfshat=" or missing value [ 2694.112702][T17140] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2694.119863][T17140] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2694.256203][ T49] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2694.265620][ T49] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2694.872682][T17188] netlink: 88 bytes leftover after parsing attributes in process `syz.9.14397'. [ 2697.865849][T17207] 9pnet: Insufficient options for proto=fd [ 2698.198200][T17207] 9pnet: Insufficient options for proto=fd [ 2698.233291][T17208] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2698.691284][ T9018] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2699.114172][T17243] device pim6reg1 entered promiscuous mode [ 2699.147976][ T9018] usb 10-1: Using ep0 maxpacket: 16 [ 2699.269256][ T9018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2699.280733][ T9018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2699.291146][ T9018] usb 10-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2699.300759][ T9018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2699.326002][ T9018] usb 10-1: config 0 descriptor?? [ 2700.736652][ T9018] holtek 0003:1241:5015.001B: item fetching failed at offset 4/5 [ 2700.811110][ T9018] holtek 0003:1241:5015.001B: parse failed [ 2700.975813][T17255] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 2701.039499][ T9018] holtek: probe of 0003:1241:5015.001B failed with error -22 [ 2701.216977][ T9018] usb 10-1: USB disconnect, device number 5 [ 2701.656802][T17270] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.14421: Invalid block bitmap block 0 in block_group 0 [ 2701.671423][T17270] Quota error (device loop4): write_blk: dquota write failed [ 2701.679188][T17270] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2701.689427][T17270] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.14421: Failed to acquire dquot type 0 [ 2701.705006][T17270] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.14421: Freeing blocks not in datazone - block = 0, count = 4096 [ 2701.719807][T17270] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.14421: Invalid inode bitmap blk 0 in block_group 0 [ 2701.733331][ T5399] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 2701.743944][T17270] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 2701.753536][T17270] EXT4-fs (loop4): 1 orphan inode deleted [ 2701.759451][T17270] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2701.950236][ T5399] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:15: Failed to release dquot type 0 [ 2702.399276][T17279] device pim6reg1 entered promiscuous mode [ 2703.058363][T17289] FAT-fs (loop4): Directory bread(block 64) failed [ 2703.076972][T17289] FAT-fs (loop4): Directory bread(block 65) failed [ 2703.109979][T17289] FAT-fs (loop4): Directory bread(block 66) failed [ 2703.132867][T17289] FAT-fs (loop4): Directory bread(block 67) failed [ 2703.153598][T17289] FAT-fs (loop4): Directory bread(block 68) failed [ 2703.193682][T17289] FAT-fs (loop4): Directory bread(block 69) failed [ 2703.200279][T17289] FAT-fs (loop4): Directory bread(block 70) failed [ 2703.221088][T17289] FAT-fs (loop4): Directory bread(block 71) failed [ 2703.239748][T17289] FAT-fs (loop4): Directory bread(block 72) failed [ 2703.246559][T17289] FAT-fs (loop4): Directory bread(block 73) failed [ 2703.477491][T17291] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 2703.529466][T17291] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2703.568387][T17291] F2FS-fs (loop8): invalid crc value [ 2703.585774][T17291] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2703.716290][T17291] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 2703.742403][T17291] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2704.602128][ T5399] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2704.626631][ T5399] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2705.269692][T17327] incfs_lookup_dentry err:-5 [ 2705.288256][T17327] incfs: Can't find or create .index dir in ./file0 [ 2705.314972][T17327] incfs: mount failed -5 [ 2705.519945][T17329] device pim6reg1 entered promiscuous mode [ 2706.145565][T17340] sch_fq: defrate 4294967295 ignored. [ 2706.420944][ T24] audit: type=1400 audit(1750862815.724:30521): avc: denied { mounton } for pid=17343 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2706.526120][T17343] bridge0: port 1(bridge_slave_0) entered blocking state [ 2706.533314][T17343] bridge0: port 1(bridge_slave_0) entered disabled state [ 2706.542017][T17343] device bridge_slave_0 entered promiscuous mode [ 2706.571649][T17343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2706.579163][T17343] bridge0: port 2(bridge_slave_1) entered disabled state [ 2706.591306][T17343] device bridge_slave_1 entered promiscuous mode [ 2706.986439][T17352] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2707.035460][T17352] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2707.126106][T26176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2707.253561][T26176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2707.316406][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2707.333126][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2707.341473][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 2707.348525][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2707.355984][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2707.366474][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2707.397485][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2707.404563][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2707.425445][ T7822] attempt to access beyond end of device [ 2707.425445][ T7822] loop8: rw=2049, want=45104, limit=40427 [ 2707.475635][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2707.501117][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2707.593513][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2707.634331][ T5399] device bridge_slave_1 left promiscuous mode [ 2707.654505][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 2707.785990][ T5399] device bridge_slave_0 left promiscuous mode [ 2707.814415][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 2707.883829][ T5399] device veth0_vlan left promiscuous mode [ 2708.084366][T17369] F2FS-fs (loop6): invalid crc value [ 2708.097303][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2708.121312][T17343] device veth0_vlan entered promiscuous mode [ 2708.137502][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2708.151088][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2708.160072][T17369] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2708.177446][T17377] device pim6reg1 entered promiscuous mode [ 2708.192268][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2708.208118][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2708.224277][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2708.242485][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2708.251841][T17369] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 2708.267524][T17369] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 2708.283287][T17343] device veth1_macvtap entered promiscuous mode [ 2708.295076][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2708.341329][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2708.421726][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2708.449533][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2708.481276][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2708.523488][T17388] attempt to access beyond end of device [ 2708.523488][T17388] loop6: rw=2049, want=45104, limit=40427 [ 2708.549738][ T24] audit: type=1400 audit(1750862817.999:30522): avc: denied { mounton } for pid=17343 comm="syz-executor" path="/root/syzkaller.05RKdc/syz-tmp" dev="sda1" ino=2109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2708.719780][ T24] audit: type=1400 audit(1750862818.031:30523): avc: denied { mount } for pid=17343 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2708.755071][ T24] audit: type=1400 audit(1750862818.053:30524): avc: denied { mount } for pid=17343 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2708.778656][ T24] audit: type=1400 audit(1750862818.224:30525): avc: denied { mounton } for pid=17343 comm="syz-executor" path="/root/syzkaller.05RKdc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2708.806008][ T24] audit: type=1400 audit(1750862818.224:30526): avc: denied { mounton } for pid=17343 comm="syz-executor" path="/root/syzkaller.05RKdc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=166503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2708.858930][ T24] audit: type=1400 audit(1750862818.321:30527): avc: denied { mounton } for pid=17343 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2708.883286][ T24] audit: type=1400 audit(1750862818.321:30528): avc: denied { mounton } for pid=17343 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2709.206271][T17395] futex_wake_op: syz.7.14441 tries to shift op by -1; fix this program [ 2709.469406][ T24] audit: type=1400 audit(1750862818.965:30529): avc: denied { read } for pid=17394 comm="syz.7.14441" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2709.700490][ T24] audit: type=1400 audit(1750862818.965:30530): avc: denied { open } for pid=17394 comm="syz.7.14441" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2709.971057][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14460'. [ 2710.354080][T17404] F2FS-fs (loop4): fault_injection options not supported [ 2710.428759][T17404] F2FS-fs (loop4): invalid crc value [ 2710.437642][T17404] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2710.475871][T17404] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2710.498551][T17430] incfs_lookup_dentry err:-5 [ 2710.503431][T17430] incfs: Can't find or create .index dir in ./file0 [ 2710.510543][T17430] incfs: mount failed -5 [ 2711.323493][T11022] attempt to access beyond end of device [ 2711.323493][T11022] loop4: rw=2049, want=45104, limit=40427 [ 2712.352842][T17442] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2713.491042][T17471] netlink: 72 bytes leftover after parsing attributes in process `syz.7.14469'. [ 2714.028907][T17475] incfs: Backing dir is not set, filesystem can't be mounted. [ 2714.061696][T17475] incfs: mount failed -2 [ 2714.609871][T17484] netlink: 88 bytes leftover after parsing attributes in process `syz.7.14476'. [ 2714.696467][T17488] F2FS-fs (loop8): fault_injection options not supported [ 2714.704972][T17488] F2FS-fs (loop8): invalid crc value [ 2714.713035][T17488] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2714.753993][T17488] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2714.987271][ T7822] attempt to access beyond end of device [ 2714.987271][ T7822] loop8: rw=2049, want=45104, limit=40427 [ 2715.234535][T17500] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 2716.232083][T17520] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 2716.300087][T17520] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2716.341960][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 2716.341974][ T24] audit: type=1400 audit(1750862826.361:30532): avc: denied { getopt } for pid=17527 comm="syz.4.14488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2716.548277][T17534] syz.7.14490[17534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2716.548346][T17534] syz.7.14490[17534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2717.298709][T17540] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2717.673559][T17551] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2717.687190][T17547] F2FS-fs (loop8): fault_injection options not supported [ 2717.696051][T17547] F2FS-fs (loop8): invalid crc value [ 2717.782587][T17547] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2717.865851][T17547] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2718.011714][ T7822] attempt to access beyond end of device [ 2718.011714][ T7822] loop8: rw=2049, want=45104, limit=40427 [ 2718.498340][T17565] EXT4-fs (loop9): 1 orphan inode deleted [ 2718.504144][T17565] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 2718.513327][T17565] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2718.601794][T17576] 9pnet: Insufficient options for proto=fd [ 2718.722232][T17576] 9pnet: Insufficient options for proto=fd [ 2720.319365][T17606] F2FS-fs (loop4): fault_injection options not supported [ 2720.328136][T17606] F2FS-fs (loop4): invalid crc value [ 2720.349268][T17606] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2720.610580][T17606] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2721.865439][T17619] device ip6gretap0 entered promiscuous mode [ 2721.996181][T11022] attempt to access beyond end of device [ 2721.996181][T11022] loop4: rw=2049, want=45104, limit=40427 [ 2722.080380][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14513'. [ 2722.090440][T17628] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2722.742655][T17640] EXT4-fs (loop4): Ignoring removed orlov option [ 2722.776921][T17640] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2722.798194][T17640] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.14516: bg 0: block 248: padding at end of block bitmap is not set [ 2722.823329][T17640] Quota error (device loop4): write_blk: dquota write failed [ 2722.830820][T17640] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2722.841195][T17640] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.14516: Failed to acquire dquot type 1 [ 2722.860319][T17640] EXT4-fs (loop4): 1 truncate cleaned up [ 2722.870172][T17640] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,journal_dev=0x0000000000000008,nombcache,stripe=0x0000000000000010,,errors=continue [ 2722.953376][ T24] audit: type=1400 audit(1750862833.463:30533): avc: denied { remount } for pid=17639 comm="syz.4.14516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2722.973462][T17640] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 2723.042361][T17640] EXT4-fs (loop4): re-mounted. Opts: [ 2723.047980][T17640] ext4 filesystem being remounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2723.515495][T17658] device ip6gretap0 entered promiscuous mode [ 2724.098797][T17670] incfs_lookup_dentry err:-5 [ 2724.103511][T17670] incfs: Can't find or create .index dir in ./file0 [ 2724.110623][T17670] incfs: mount failed -5 [ 2724.499448][T17631] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2724.545258][T17631] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b [ 2724.578192][T17683] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2724.853038][T17690] FAT-fs (loop8): Unrecognized mount option "shorname=mixed" or missing value [ 2725.593992][T17702] incfs: Can't find or create .index dir in ./file0 [ 2725.601465][T17702] incfs: mount failed -14 [ 2725.921257][T17706] EXT4-fs (loop6): Ignoring removed bh option [ 2725.927625][T17706] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2726.109659][T17706] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2727.705822][T17742] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14550'. [ 2728.036467][T17740] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2728.081946][T17740] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2728.195418][T17738] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2728.386951][T11594] attempt to access beyond end of device [ 2728.386951][T11594] loop9: rw=2049, want=45104, limit=40427 [ 2729.050020][T17760] netlink: 88 bytes leftover after parsing attributes in process `syz.6.14554'. [ 2729.442491][T17766] EXT4-fs (loop8): Ignoring removed bh option [ 2729.448863][T17766] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2729.541965][T17766] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2729.772210][T17773] exfat: Deprecated parameter 'utf8' [ 2729.848039][T17773] exfat: Deprecated parameter 'utf8' [ 2729.983759][T17773] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 2730.249020][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14553'. [ 2731.834063][T17803] xt_bpf: check failed: parse error [ 2731.897143][T17799] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2731.963740][T17799] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2731.988558][ T24] audit: type=1326 audit(1750862843.151:30534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.6.14567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2732.037016][ T24] audit: type=1326 audit(1750862843.184:30535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.6.14567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2732.063156][ T24] audit: type=1326 audit(1750862843.184:30536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.6.14567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2732.144690][T17343] attempt to access beyond end of device [ 2732.144690][T17343] loop7: rw=2049, want=45104, limit=40427 [ 2733.063907][T17829] EXT4-fs (loop8): Ignoring removed bh option [ 2733.070717][T17829] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2734.352400][T17829] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2736.448722][T17859] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.14579: Invalid block bitmap block 0 in block_group 0 [ 2736.463724][T17859] Quota error (device loop6): write_blk: dquota write failed [ 2736.471761][T17859] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 2736.481981][T17859] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.14579: Failed to acquire dquot type 0 [ 2736.497036][T17859] EXT4-fs error (device loop6): ext4_free_blocks:5685: comm syz.6.14579: Freeing blocks not in datazone - block = 0, count = 4096 [ 2736.512252][T17859] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.14579: Invalid inode bitmap blk 0 in block_group 0 [ 2736.526033][T26176] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 2736.537264][T17859] EXT4-fs error (device loop6) in ext4_free_inode:360: Corrupt filesystem [ 2736.547125][T17859] EXT4-fs (loop6): 1 orphan inode deleted [ 2736.553224][T17859] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2736.739677][T26176] EXT4-fs error (device loop6): ext4_release_dquot:6262: comm kworker/u4:8: Failed to release dquot type 0 [ 2736.919791][T17863] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2737.418338][T17868] EXT4-fs (loop4): Unrecognized mount option "smackfshat=" or missing value [ 2737.588130][T17872] netlink: 140 bytes leftover after parsing attributes in process `syz.6.14582'. [ 2738.049575][T17884] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2738.287267][T17889] EXT4-fs (loop6): Ignoring removed bh option [ 2738.293536][T17889] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2738.336233][T17889] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2738.611164][T10075] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2739.421224][T17903] futex_wake_op: syz.8.14590 tries to shift op by -1; fix this program [ 2739.830942][T17879] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2739.869928][T17879] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2739.925873][T10075] usb 5-1: Using ep0 maxpacket: 16 [ 2740.037172][T10075] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2740.047799][T10075] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2740.057308][T10075] usb 5-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2740.071739][T17918] F2FS-fs (loop6): invalid crc value [ 2740.088680][T10075] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2740.095757][T10075] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2740.104863][T10075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2740.114110][T17918] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2740.167483][T17918] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 2740.174670][T10075] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 2740.257825][T17918] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 2740.286791][T17932] netlink: 140 bytes leftover after parsing attributes in process `syz.9.14595'. [ 2740.363928][T17912] usb 5-1: USB disconnect, device number 41 [ 2740.380659][T17934] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2740.515946][T17939] attempt to access beyond end of device [ 2740.515946][T17939] loop6: rw=2049, want=45104, limit=40427 [ 2741.043806][ T24] audit: type=1400 audit(1750862852.732:30537): avc: denied { ioctl } for pid=17929 comm="syz.8.14596" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=167413 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2741.272852][ T24] audit: type=1400 audit(1750862852.732:30538): avc: denied { read } for pid=17929 comm="syz.8.14596" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=167413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2741.353085][T17944] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2742.351813][T17953] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:476: comm syz.9.14601: Invalid block bitmap block 0 in block_group 0 [ 2742.366313][T17953] Quota error (device loop9): write_blk: dquota write failed [ 2742.373828][T17953] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2742.383946][T17953] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.14601: Failed to acquire dquot type 0 [ 2742.397698][T17953] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz.9.14601: Freeing blocks not in datazone - block = 0, count = 4096 [ 2742.412532][T17953] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.14601: Invalid inode bitmap blk 0 in block_group 0 [ 2742.426025][T17866] Quota error (device loop9): remove_tree: Getting block too big (0 >= 9) [ 2742.436147][T17953] EXT4-fs error (device loop9) in ext4_free_inode:360: Corrupt filesystem [ 2742.445294][T17953] EXT4-fs (loop9): 1 orphan inode deleted [ 2742.451060][T17953] EXT4-fs (loop9): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2742.621975][T17866] EXT4-fs error (device loop9): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 2742.918357][T17966] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14607'. [ 2743.821750][T17973] EXT4-fs (loop7): 1 orphan inode deleted [ 2743.827664][T17973] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2743.836676][T17973] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2743.911822][T17981] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2743.927542][T17981] EXT4-fs (loop9): invalid journal inode [ 2743.957511][T17959] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2743.986078][T17981] EXT4-fs (loop9): can't get journal size [ 2744.024718][T17981] EXT4-fs (loop9): 1 truncate cleaned up [ 2744.068956][T17981] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 2744.083982][T17970] F2FS-fs (loop4): invalid crc value [ 2744.093726][T17970] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2744.113749][T17959] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2744.130617][T17998] overlayfs: overlapping lowerdir path [ 2744.148497][T17998] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2744.152823][T17970] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2744.183674][T17970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 2744.256401][T18004] attempt to access beyond end of device [ 2744.256401][T18004] loop8: rw=2049, want=81920, limit=40427 [ 2744.319259][T18004] attempt to access beyond end of device [ 2744.319259][T18004] loop8: rw=2049, want=53248, limit=40427 [ 2744.325857][T18001] exfat: Bad value for 'fmask' [ 2744.394669][T18006] attempt to access beyond end of device [ 2744.394669][T18006] loop4: rw=2049, want=45104, limit=40427 [ 2744.607250][T18007] attempt to access beyond end of device [ 2744.607250][T18007] loop8: rw=524288, want=78080, limit=40427 [ 2744.645640][T18004] attempt to access beyond end of device [ 2744.645640][T18004] loop8: rw=2049, want=61552, limit=40427 [ 2744.648857][T18007] attempt to access beyond end of device [ 2744.648857][T18007] loop8: rw=0, want=77832, limit=40427 [ 2744.668056][T18007] attempt to access beyond end of device [ 2744.668056][T18007] loop8: rw=0, want=77832, limit=40427 [ 2744.679126][T18007] attempt to access beyond end of device [ 2744.679126][T18007] loop8: rw=0, want=77832, limit=40427 [ 2744.690684][T18007] attempt to access beyond end of device [ 2744.690684][T18007] loop8: rw=0, want=77832, limit=40427 [ 2745.388421][T18023] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14619'. [ 2745.492205][T18024] device ip6gretap0 entered promiscuous mode [ 2746.371023][T18040] EXT4-fs (loop9): 1 orphan inode deleted [ 2746.376896][T18040] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 2746.386310][T18040] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2746.853264][T18051] input: syz1 as /devices/virtual/input/input82 [ 2747.472573][T18057] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2747.541441][T18057] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2747.634914][T18058] EXT4-fs (loop7): Ignoring removed bh option [ 2747.641138][T18058] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2747.662844][T18052] netlink: 292 bytes leftover after parsing attributes in process `syz.8.14625'. [ 2748.061514][T18058] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2748.439878][ T7822] handle_bad_sector: 1866 callbacks suppressed [ 2748.439890][ T7822] attempt to access beyond end of device [ 2748.439890][ T7822] loop8: rw=2049, want=45104, limit=40427 [ 2748.567142][T18076] netlink: 140 bytes leftover after parsing attributes in process `syz.7.14630'. [ 2748.640702][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14627'. [ 2748.742662][ T407] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2748.856502][T18080] EXT4-fs (loop6): Unrecognized mount option "smackfshat=" or missing value [ 2748.970941][T18086] overlayfs: overlapping lowerdir path [ 2748.981598][T18086] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2749.488165][ T407] usb 5-1: Using ep0 maxpacket: 16 [ 2749.601521][T18090] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2749.714592][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2749.725850][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2749.839719][ T407] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2750.348732][ T407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2750.402309][ T407] usb 5-1: config 0 descriptor?? [ 2750.578391][T18115] input: syz1 as /devices/virtual/input/input83 [ 2750.914310][ T407] usbhid 5-1:0.0: can't add hid device: -71 [ 2750.920413][ T407] usbhid: probe of 5-1:0.0 failed with error -71 [ 2750.943803][ T407] usb 5-1: USB disconnect, device number 42 [ 2751.092779][T18122] F2FS-fs (loop9): invalid crc value [ 2751.153804][T18122] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2751.389004][T18122] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 2751.399128][T18122] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 2751.539129][T18137] EXT4-fs (loop4): Unrecognized mount option "smackfshat=" or missing value [ 2751.824443][T18140] attempt to access beyond end of device [ 2751.824443][T18140] loop9: rw=2049, want=45104, limit=40427 [ 2751.993905][T18144] futex_wake_op: syz.7.14651 tries to shift op by -1; fix this program [ 2752.236037][T18149] overlayfs: overlapping lowerdir path [ 2753.324762][T18168] input: syz1 as /devices/virtual/input/input84 [ 2754.301730][T18189] EXT4-fs (loop6): Ignoring removed bh option [ 2754.308073][T18189] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2754.474215][T18189] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2755.106096][T18200] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 2755.131364][T18200] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2755.227629][T18187] F2FS-fs (loop9): invalid crc value [ 2755.251261][T18187] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2755.344496][T18187] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 2755.364582][T18187] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 2755.601651][T18220] input: syz1 as /devices/virtual/input/input85 [ 2755.627352][T18221] attempt to access beyond end of device [ 2755.627352][T18221] loop9: rw=2049, want=45104, limit=40427 [ 2756.478420][T18255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=18255 comm=syz.9.14673 [ 2756.655621][ T297] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2756.966465][ T297] usb 5-1: Using ep0 maxpacket: 16 [ 2757.084805][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2757.115741][T18264] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2757.215112][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2757.225191][ T297] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2757.234424][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.635128][ T297] usb 5-1: config 0 descriptor?? [ 2757.797744][T18273] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.14685: Invalid block bitmap block 0 in block_group 0 [ 2757.812482][T18273] Quota error (device loop8): write_blk: dquota write failed [ 2757.819990][T18273] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 2757.830092][T18273] EXT4-fs error (device loop8): ext4_acquire_dquot:6226: comm syz.8.14685: Failed to acquire dquot type 0 [ 2757.844446][T18273] EXT4-fs error (device loop8): ext4_free_blocks:5685: comm syz.8.14685: Freeing blocks not in datazone - block = 0, count = 4096 [ 2757.859176][T18273] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.14685: Invalid inode bitmap blk 0 in block_group 0 [ 2757.878321][ T3847] Quota error (device loop8): remove_tree: Getting block too big (0 >= 9) [ 2757.888322][T18273] EXT4-fs error (device loop8) in ext4_free_inode:360: Corrupt filesystem [ 2757.897804][T18273] EXT4-fs (loop8): 1 orphan inode deleted [ 2757.903597][T18273] EXT4-fs (loop8): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2758.164258][ T3847] EXT4-fs error (device loop8): ext4_release_dquot:6262: comm kworker/u4:11: Failed to release dquot type 0 [ 2758.407667][T18278] input: syz1 as /devices/virtual/input/input87 [ 2758.491328][ T297] usbhid 5-1:0.0: can't add hid device: -71 [ 2758.540497][ T297] usbhid: probe of 5-1:0.0 failed with error -71 [ 2759.017769][T18291] exfat: Bad value for 'fmask' [ 2759.630268][ T297] usb 5-1: USB disconnect, device number 43 [ 2759.754792][T18294] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2760.049520][T18294] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2762.936753][T18331] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 2763.234307][T18332] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.14699: Invalid block bitmap block 0 in block_group 0 [ 2763.449602][T18332] Quota error (device loop7): write_blk: dquota write failed [ 2763.457151][T18332] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 2763.467300][T18332] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.14699: Failed to acquire dquot type 0 [ 2763.480088][T18332] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz.7.14699: Freeing blocks not in datazone - block = 0, count = 4096 [ 2763.494300][T18332] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.14699: Invalid inode bitmap blk 0 in block_group 0 [ 2763.507714][T18332] EXT4-fs error (device loop7) in ext4_free_inode:360: Corrupt filesystem [ 2763.516813][T18332] EXT4-fs (loop7): 1 orphan inode deleted [ 2763.522612][T18332] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2763.558531][ T3847] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 2763.641891][ T3847] EXT4-fs error (device loop7): ext4_release_dquot:6262: comm kworker/u4:11: Failed to release dquot type 0 [ 2763.760210][T18340] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14698'. [ 2763.786480][T18340] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14698'. [ 2764.019157][ T535] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2764.657280][T18355] input: syz1 as /devices/virtual/input/input89 [ 2764.765869][T18354] exfat: Bad value for 'fmask' [ 2765.673112][T18380] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2766.808466][T18390] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2766.909254][T18390] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2766.972862][T18390] netlink: 292 bytes leftover after parsing attributes in process `syz.4.14714'. [ 2767.593427][T18389] EXT4-fs (loop7): 1 orphan inode deleted [ 2767.599236][T18389] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2767.608296][T18389] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2767.627791][T11022] attempt to access beyond end of device [ 2767.627791][T11022] loop4: rw=2049, want=45104, limit=40427 [ 2767.688332][T18406] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2768.147379][T18427] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2768.689348][T18435] EXT4-fs (loop7): orphan cleanup on readonly fs [ 2768.697879][T18435] Quota error (device loop7): find_tree_dqentry: Getting block too big (196613 >= 6) [ 2768.707584][T18435] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 2768.717036][T18435] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.14727: Failed to acquire dquot type 1 [ 2768.730859][T18435] EXT4-fs (loop7): 1 truncate cleaned up [ 2768.737092][T18435] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 2769.057539][T18443] overlayfs: failed to resolve './file0': -2 [ 2771.673263][T18449] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2771.701431][T18449] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2771.734453][T18446] netlink: 292 bytes leftover after parsing attributes in process `syz.4.14731'. [ 2771.833822][T18468] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2771.969340][T18463] EXT4-fs (loop6): 1 orphan inode deleted [ 2771.975395][T18463] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2771.984473][T18463] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2772.082868][T11022] attempt to access beyond end of device [ 2772.082868][T11022] loop4: rw=2049, want=45104, limit=40427 [ 2772.291735][T18482] xt_TCPMSS: Only works on TCP SYN packets [ 2772.465554][T18486] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2773.035866][T18498] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 2773.049074][T18498] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2774.128789][T18530] fuse: Unknown parameter '00000000000000000008' [ 2774.947088][T18529] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2775.086175][T18529] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2775.556027][T18506] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2775.785596][T11594] attempt to access beyond end of device [ 2775.785596][T11594] loop9: rw=2049, want=45104, limit=40427 [ 2775.800336][T18506] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2776.326303][T18539] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 2776.342721][T18539] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2776.365532][T18539] F2FS-fs (loop6): invalid crc value [ 2776.399627][T18539] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2776.407256][T18554] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 2776.439582][T18554] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2776.559282][T18539] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 2776.566489][T18539] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2776.826134][T18561] erofs: (device loop4): mounted with root inode @ nid 36. [ 2776.894435][ T5399] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2776.903696][ T5399] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2776.930137][T18570] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2776.966566][T18570] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 2776.984236][T18570] ext4 filesystem being mounted at /373/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2779.838318][T18592] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:476: comm syz.9.14769: Invalid block bitmap block 0 in block_group 0 [ 2779.853068][T18592] Quota error (device loop9): write_blk: dquota write failed [ 2779.860752][T18592] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2779.870903][T18592] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.14769: Failed to acquire dquot type 0 [ 2779.883641][T18592] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz.9.14769: Freeing blocks not in datazone - block = 0, count = 4096 [ 2779.898397][T18592] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.14769: Invalid inode bitmap blk 0 in block_group 0 [ 2779.911839][T18592] EXT4-fs error (device loop9) in ext4_free_inode:360: Corrupt filesystem [ 2779.920864][T18592] EXT4-fs (loop9): 1 orphan inode deleted [ 2779.926633][T18592] EXT4-fs (loop9): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2779.948669][ T5399] Quota error (device loop9): remove_tree: Getting block too big (0 >= 9) [ 2779.962799][ T5399] EXT4-fs error (device loop9): ext4_release_dquot:6262: comm kworker/u4:15: Failed to release dquot type 0 [ 2780.199414][T18598] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2780.521026][T18598] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2780.866517][T18611] 9pnet: Insufficient options for proto=fd [ 2780.924018][ T7822] attempt to access beyond end of device [ 2780.924018][ T7822] loop8: rw=2049, want=45104, limit=40427 [ 2781.115821][ T24] audit: type=1326 audit(1750862895.863:30539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18617 comm="syz.7.14777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2781.148181][ T24] audit: type=1326 audit(1750862895.895:30540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18617 comm="syz.7.14777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2781.174970][ T24] audit: type=1326 audit(1750862895.927:30541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18617 comm="syz.7.14777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2781.226221][T18621] xt_bpf: check failed: parse error [ 2781.253503][T18623] erofs: (device loop9): mounted with root inode @ nid 36. [ 2781.295422][T18630] futex_wake_op: syz.6.14781 tries to shift op by -1; fix this program [ 2782.205368][T18644] exfat: Bad value for 'fmask' [ 2783.794686][T18659] 9pnet: Insufficient options for proto=fd [ 2783.818994][T18651] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2783.862897][T18651] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2783.953915][T18638] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2783.979810][T18638] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2783.995785][ T24] audit: type=1326 audit(1750862898.953:30542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18667 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2784.080848][T18638] F2FS-fs (loop4): invalid crc value [ 2784.086573][ T24] audit: type=1326 audit(1750862898.974:30543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18667 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2784.110401][ T24] audit: type=1326 audit(1750862898.985:30544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18667 comm="syz.6.14790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2784.163691][T17343] attempt to access beyond end of device [ 2784.163691][T17343] loop7: rw=2049, want=45104, limit=40427 [ 2784.237709][T18638] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2784.631824][T18678] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2784.642558][T18678] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 2784.661355][T18678] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 2784.787726][T18638] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2784.883045][T18638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2785.683574][T18684] erofs: (device loop6): mounted with root inode @ nid 36. [ 2786.871025][T18698] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2786.971635][T18698] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2787.031269][T18698] netlink: 292 bytes leftover after parsing attributes in process `syz.4.14794'. [ 2787.463576][T18708] xt_bpf: check failed: parse error [ 2788.672204][T11022] attempt to access beyond end of device [ 2788.672204][T11022] loop4: rw=2049, want=45104, limit=40427 [ 2788.950425][T18715] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2789.008006][T18715] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2789.215054][ T9340] attempt to access beyond end of device [ 2789.215054][ T9340] loop6: rw=2049, want=45104, limit=40427 [ 2789.462304][T18724] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 2789.530660][T18724] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2789.722348][T18727] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2789.780224][T18736] 9pnet: Insufficient options for proto=fd [ 2790.528458][T18743] erofs: (device loop9): mounted with root inode @ nid 36. [ 2794.556273][T18754] EXT4-fs warning (device loop7): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop7. [ 2794.637015][T18762] 9pnet: Insufficient options for proto=fd [ 2794.644054][T18761] overlayfs: failed to resolve './file0': -2 [ 2795.271959][T18772] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2795.425339][T18784] 9pnet: Insufficient options for proto=fd [ 2795.605964][T18790] erofs: (device loop9): mounted with root inode @ nid 36. [ 2795.746465][T18791] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2796.087132][T18797] EXT4-fs (loop8): 1 orphan inode deleted [ 2796.097143][T18797] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 2796.133040][T18797] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2797.270475][T18810] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2797.364634][T18810] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2797.423055][T18810] netlink: 292 bytes leftover after parsing attributes in process `syz.9.14825'. [ 2798.147740][T11594] attempt to access beyond end of device [ 2798.147740][T11594] loop9: rw=2049, want=45104, limit=40427 [ 2798.270310][T18819] 9pnet: Insufficient options for proto=fd [ 2798.363787][T18823] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2798.507411][T18828] incfs: Can't find or create .index dir in ./file0 [ 2798.522483][T18828] incfs: mount failed -14 [ 2799.419463][T18839] 9pnet: Insufficient options for proto=fd [ 2800.107606][T18843] erofs: (device loop7): mounted with root inode @ nid 36. [ 2800.388695][T18855] EXT4-fs (loop9): Ignoring removed bh option [ 2800.395609][T18855] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2801.070837][T18855] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2801.186750][T18863] 9pnet: Insufficient options for proto=fd [ 2801.409756][T18870] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2804.442558][T18897] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2804.452761][T18897] Quota error (device loop8): find_tree_dqentry: Getting block too big (196613 >= 6) [ 2804.462510][T18897] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 2804.471998][T18897] EXT4-fs error (device loop8): ext4_acquire_dquot:6226: comm syz.8.14848: Failed to acquire dquot type 1 [ 2804.487038][T18897] EXT4-fs (loop8): 1 truncate cleaned up [ 2804.493205][T18897] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 2805.076043][T18903] erofs: (device loop4): mounted with root inode @ nid 36. [ 2805.133260][T18907] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 2805.147808][T18907] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2806.653164][T18944] futex_wake_op: syz.7.14862 tries to shift op by -1; fix this program [ 2808.348600][T18948] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2808.358269][T18948] ext4 filesystem being mounted at /537/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2808.425333][T18954] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2808.488848][T18954] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2809.039568][T18968] incfs: Backing dir is not set, filesystem can't be mounted. [ 2809.047421][T18968] incfs: mount failed -2 [ 2809.131357][ T7822] attempt to access beyond end of device [ 2809.131357][ T7822] loop8: rw=2049, want=45104, limit=40427 [ 2809.497906][T18970] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 2809.537062][T18970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 2809.545438][T18970] System zones: 1-12 [ 2809.649275][T18970] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.14865: corrupted in-inode xattr [ 2809.662570][T18970] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.14865: couldn't read orphan inode 15 (err -117) [ 2809.675879][T18970] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 2810.538104][ T535] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2810.578919][T18984] fuse: Unknown parameter '00000000000000000008' [ 2810.836025][ T535] usb 7-1: Using ep0 maxpacket: 16 [ 2810.994804][ T535] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2811.535228][ T535] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2811.641500][ T535] usb 7-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2811.749963][ T535] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2811.756641][ T535] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2811.777863][ T535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2811.902679][ T535] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 2812.072878][ T535] usb 7-1: USB disconnect, device number 17 [ 2813.931142][T19019] EXT4-fs (loop4): Unrecognized mount option "smackfshat=" or missing value [ 2813.960909][T19016] EXT4-fs (loop6): 1 orphan inode deleted [ 2813.966692][T19016] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2814.021336][T19016] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2814.077929][T19023] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2814.691901][T19027] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2814.739743][T19027] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2814.769769][T19027] F2FS-fs (loop4): invalid crc value [ 2814.817388][T19027] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2814.855190][T19041] xt_bpf: check failed: parse error [ 2814.942280][T19027] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2814.952696][T19027] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2815.011052][T19045] loop7: p1 < > p3 [ 2815.016593][T19045] loop7: p3 size 134217728 extends beyond EOD, truncated [ 2815.040955][ T3847] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2815.058110][ T3847] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2815.154723][T19051] fuse: Unknown parameter '00000000000000000008' [ 2815.297523][T19053] usb usb8: usbfs: process 19053 (syz.9.14885) did not claim interface 0 before use [ 2815.490501][T19058] device pim6reg1 entered promiscuous mode [ 2815.604019][T19060] overlayfs: missing 'lowerdir' [ 2816.633567][T19070] bridge0: port 1(bridge_slave_0) entered blocking state [ 2816.651549][T19070] bridge0: port 1(bridge_slave_0) entered disabled state [ 2816.671371][T19070] device bridge_slave_0 entered promiscuous mode [ 2816.690253][T19070] bridge0: port 2(bridge_slave_1) entered blocking state [ 2816.697408][T19070] bridge0: port 2(bridge_slave_1) entered disabled state [ 2816.715426][T19070] device bridge_slave_1 entered promiscuous mode [ 2816.912630][T19068] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2816.913930][T19070] bridge0: port 2(bridge_slave_1) entered blocking state [ 2816.926000][T19070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2816.933393][T19070] bridge0: port 1(bridge_slave_0) entered blocking state [ 2816.940445][T19070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2817.796345][T19068] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2817.829623][T26176] bridge0: port 1(bridge_slave_0) entered disabled state [ 2817.841615][T26176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2818.021581][T19090] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2818.114513][T19090] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2818.170981][T19090] netlink: 292 bytes leftover after parsing attributes in process `syz.4.14896'. [ 2818.717196][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2818.730980][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2818.770575][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2818.789854][T19102] attempt to access beyond end of device [ 2818.789854][T19102] loop6: rw=2049, want=81856, limit=40427 [ 2818.798222][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2818.810078][T17866] bridge0: port 1(bridge_slave_0) entered blocking state [ 2818.814666][T11022] attempt to access beyond end of device [ 2818.814666][T11022] loop4: rw=2049, want=45104, limit=40427 [ 2818.817254][T17866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2818.836893][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2818.845679][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2818.854275][T17866] bridge0: port 2(bridge_slave_1) entered blocking state [ 2818.861352][T17866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2818.870015][T19102] attempt to access beyond end of device [ 2818.870015][T19102] loop6: rw=2049, want=81920, limit=40427 [ 2818.891034][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2818.917104][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2818.932276][T19102] attempt to access beyond end of device [ 2818.932276][T19102] loop6: rw=2049, want=51920, limit=40427 [ 2818.942459][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2818.952317][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2818.971646][T19070] device veth0_vlan entered promiscuous mode [ 2818.980894][T19104] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2819.009985][T19070] device veth1_macvtap entered promiscuous mode [ 2819.064581][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2819.083642][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2819.092596][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2819.100776][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2819.109317][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2819.117733][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2819.132555][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2819.142179][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2819.152127][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2819.163190][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2819.222743][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2819.257600][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2819.328605][ T9340] attempt to access beyond end of device [ 2819.328605][ T9340] loop6: rw=2049, want=45104, limit=40427 [ 2819.352985][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2819.459729][ T3847] device bridge_slave_1 left promiscuous mode [ 2819.465900][ T3847] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.490283][ T3847] device bridge_slave_0 left promiscuous mode [ 2819.498412][T19112] overlayfs: missing 'lowerdir' [ 2819.503302][ T3847] bridge0: port 1(bridge_slave_0) entered disabled state [ 2819.511903][ T3847] device veth0_vlan left promiscuous mode [ 2819.677348][T19117] device pim6reg1 entered promiscuous mode [ 2819.819632][T19123] futex_wake_op: syz.4.14905 tries to shift op by -1; fix this program [ 2819.957995][T19119] fuse: Unknown parameter 'grou00000000000000000000' [ 2822.097381][T19138] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:476: comm syz.9.14908: Invalid block bitmap block 0 in block_group 0 [ 2822.117642][T19138] Quota error (device loop9): write_blk: dquota write failed [ 2822.125278][T19138] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2822.135385][T19138] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.14908: Failed to acquire dquot type 0 [ 2822.147849][T19138] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz.9.14908: Freeing blocks not in datazone - block = 0, count = 4096 [ 2822.161654][T19138] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.14908: Invalid inode bitmap blk 0 in block_group 0 [ 2822.176925][T19138] EXT4-fs error (device loop9) in ext4_free_inode:360: Corrupt filesystem [ 2822.185633][T17866] Quota error (device loop9): remove_tree: Getting block too big (0 >= 9) [ 2822.194273][T19138] EXT4-fs (loop9): 1 orphan inode deleted [ 2822.200056][T19138] EXT4-fs (loop9): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2822.251777][T17866] EXT4-fs error (device loop9): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 2822.469104][T19157] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2822.485861][T19157] EXT4-fs error (device loop6): __ext4_iget:5007: inode #11: block 1: comm syz.6.14914: invalid block [ 2822.561454][T19157] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.14914: couldn't read orphan inode 11 (err -117) [ 2822.589439][T19157] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 2822.663917][T19148] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2822.679817][T19169] netlink: 88 bytes leftover after parsing attributes in process `syz.9.14916'. [ 2823.116958][T19148] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2823.126535][T19172] overlayfs: missing 'lowerdir' [ 2823.216376][T19175] futex_wake_op: syz.4.14918 tries to shift op by -1; fix this program [ 2823.357116][T19148] attempt to access beyond end of device [ 2823.357116][T19148] loop7: rw=2049, want=79872, limit=40427 [ 2823.374578][T19148] attempt to access beyond end of device [ 2823.374578][T19148] loop7: rw=2049, want=81920, limit=40427 [ 2823.484909][T19148] attempt to access beyond end of device [ 2823.484909][T19148] loop7: rw=2049, want=53232, limit=40427 [ 2823.543351][T19148] attempt to access beyond end of device [ 2823.543351][T19148] loop7: rw=2049, want=53248, limit=40427 [ 2823.572442][T19148] attempt to access beyond end of device [ 2823.572442][T19148] loop7: rw=2049, want=62544, limit=40427 [ 2823.646853][T19182] xt_TCPMSS: Only works on TCP SYN packets [ 2823.726170][T19183] attempt to access beyond end of device [ 2823.726170][T19183] loop7: rw=524288, want=78080, limit=40427 [ 2823.762795][T19148] attempt to access beyond end of device [ 2823.762795][T19148] loop7: rw=2049, want=65736, limit=40427 [ 2823.860282][T19185] futex_wake_op: syz.8.14920 tries to shift op by -1; fix this program [ 2823.931252][T19183] attempt to access beyond end of device [ 2823.931252][T19183] loop7: rw=0, want=77832, limit=40427 [ 2823.948063][T19183] attempt to access beyond end of device [ 2823.948063][T19183] loop7: rw=0, want=77832, limit=40427 [ 2823.998894][T17343] attempt to access beyond end of device [ 2823.998894][T17343] loop7: rw=2049, want=45104, limit=40427 [ 2826.279643][T19205] xt_bpf: check failed: parse error [ 2826.342200][T19198] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2826.437001][T19198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2826.489984][T19198] netlink: 292 bytes leftover after parsing attributes in process `syz.4.14923'. [ 2827.079511][T11022] attempt to access beyond end of device [ 2827.079511][T11022] loop4: rw=2049, want=45104, limit=40427 [ 2827.190005][T19219] netlink: 88 bytes leftover after parsing attributes in process `syz.9.14929'. [ 2827.645674][T19221] EXT4-fs (loop6): 1 orphan inode deleted [ 2827.651558][T19221] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2827.660974][T19221] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2829.068186][T19250] futex_wake_op: syz.6.14938 tries to shift op by -1; fix this program [ 2829.862994][T19258] xt_bpf: check failed: parse error [ 2829.941048][T19255] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2829.959779][ T24] audit: type=1326 audit(1750862948.263:30545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19263 comm="syz.4.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2830.883522][ T24] audit: type=1326 audit(1750862948.296:30546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19263 comm="syz.4.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2831.894796][T19269] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2831.976473][T19269] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2832.026029][T19269] netlink: 292 bytes leftover after parsing attributes in process `syz.6.14942'. [ 2832.101086][ T24] audit: type=1326 audit(1750862948.296:30547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19263 comm="syz.4.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2832.126229][ T24] audit: type=1326 audit(1750862948.296:30548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19263 comm="syz.4.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2832.152061][ T24] audit: type=1326 audit(1750862948.296:30549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19263 comm="syz.4.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2832.183277][ T24] audit: type=1326 audit(1750862948.296:30550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19263 comm="syz.4.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2832.207538][ T24] audit: type=1326 audit(1750862948.296:30551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19263 comm="syz.4.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2832.231862][ T24] audit: type=1326 audit(1750862948.296:30552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19263 comm="syz.4.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2832.256220][ T24] audit: type=1326 audit(1750862948.296:30553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19263 comm="syz.4.14943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100333b929 code=0x7ffc0000 [ 2832.320319][ T9340] attempt to access beyond end of device [ 2832.320319][ T9340] loop6: rw=2049, want=45104, limit=40427 [ 2832.353056][T19278] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2833.041134][ T24] audit: type=1400 audit(1750862951.386:30554): avc: denied { name_bind } for pid=19293 comm="syz.7.14950" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2833.228362][T19300] EXT4-fs (loop9): Ignoring removed bh option [ 2833.234920][T19300] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2833.446324][T19300] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2836.118979][T19314] futex_wake_op: syz.8.14953 tries to shift op by -1; fix this program [ 2836.303649][T19310] EXT4-fs (loop6): 1 orphan inode deleted [ 2836.309496][T19310] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2836.318529][T19310] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2837.373645][T19327] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:476: comm syz.9.14954: Invalid block bitmap block 0 in block_group 0 [ 2837.387502][T19327] Quota error (device loop9): write_blk: dquota write failed [ 2837.394949][T19327] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2837.405015][T19327] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.14954: Failed to acquire dquot type 0 [ 2837.417434][T19327] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz.9.14954: Freeing blocks not in datazone - block = 0, count = 4096 [ 2837.431976][T19327] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.14954: Invalid inode bitmap blk 0 in block_group 0 [ 2837.444974][T19327] EXT4-fs error (device loop9) in ext4_free_inode:360: Corrupt filesystem [ 2837.453798][T19327] EXT4-fs (loop9): 1 orphan inode deleted [ 2837.459792][T19327] EXT4-fs (loop9): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2837.495860][T17866] Quota error (device loop9): remove_tree: Getting block too big (0 >= 9) [ 2837.514942][T17866] EXT4-fs error (device loop9): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 2838.574783][T19359] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2838.616538][T19359] Quota error (device loop6): find_tree_dqentry: Getting block too big (196613 >= 6) [ 2838.626245][T19359] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 2838.635712][T19359] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.14964: Failed to acquire dquot type 1 [ 2838.648826][T19359] EXT4-fs (loop6): 1 truncate cleaned up [ 2838.654866][T19359] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 2838.986145][T19354] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2847.082827][T19397] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.14973: Invalid block bitmap block 0 in block_group 0 [ 2847.103954][T19397] Quota error (device loop7): write_blk: dquota write failed [ 2847.111392][T19397] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 2847.121393][T19397] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.14973: Failed to acquire dquot type 0 [ 2847.133162][T19397] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz.7.14973: Freeing blocks not in datazone - block = 0, count = 4096 [ 2847.147234][T19397] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.14973: Invalid inode bitmap blk 0 in block_group 0 [ 2847.160579][T26176] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 2847.169268][T19397] EXT4-fs error (device loop7) in ext4_free_inode:360: Corrupt filesystem [ 2847.177981][T19397] EXT4-fs (loop7): 1 orphan inode deleted [ 2847.183734][T19397] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2847.219634][T26176] EXT4-fs error (device loop7): ext4_release_dquot:6262: comm kworker/u4:8: Failed to release dquot type 0 [ 2847.310511][T19387] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 2847.369280][T19406] usb usb8: usbfs: process 19406 (syz.4.14974) did not claim interface 0 before use [ 2847.398817][T19387] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2847.463762][T19387] F2FS-fs (loop8): invalid crc value [ 2847.478037][T19387] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2847.508748][T19387] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 2847.515999][T19387] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2847.544339][T26176] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2847.553395][T26176] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2847.827825][T19417] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 2847.866182][ T24] audit: type=1400 audit(1750862967.468:30555): avc: denied { read } for pid=19416 comm="syz.8.14978" name="file3" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2848.193571][ T24] audit: type=1400 audit(1750862967.661:30556): avc: denied { open } for pid=19416 comm="syz.8.14978" path="/18/file1/file3" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2848.256566][T19432] device macsec0 entered promiscuous mode [ 2848.278785][T19421] xt_TCPMSS: Only works on TCP SYN packets [ 2850.106241][T19457] incfs: Can't find or create .index dir in ./file0 [ 2850.117772][T19457] incfs: mount failed -14 [ 2850.341769][T19473] usb usb8: usbfs: process 19473 (syz.9.14990) did not claim interface 0 before use [ 2851.730011][T19486] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2852.247332][T19481] F2FS-fs (loop4): invalid crc value [ 2852.307159][T19481] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2852.369303][T19506] incfs: Can't find or create .index dir in ./file0 [ 2852.385993][T19506] incfs: mount failed -14 [ 2852.415724][T19507] xt_TCPMSS: Only works on TCP SYN packets [ 2852.440165][T19481] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2852.487791][T19481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 2852.609645][T19512] netlink: 88 bytes leftover after parsing attributes in process `syz.8.15006'. [ 2852.773289][T19515] attempt to access beyond end of device [ 2852.773289][T19515] loop4: rw=2049, want=45104, limit=40427 [ 2852.923262][T19517] usb usb1: usbfs: process 19517 (syz.9.15007) did not claim interface 0 before use [ 2853.666911][T19535] EXT4-fs (loop8): Ignoring removed bh option [ 2853.673124][T19535] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2853.795527][T19535] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2855.581470][T19545] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2855.802800][T19557] exfat: Bad value for 'fmask' [ 2856.459902][T19559] F2FS-fs (loop8): invalid crc value [ 2856.498214][T19559] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2856.576723][T19559] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 2856.600534][T19559] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 2856.676689][T19579] xt_TCPMSS: Only works on TCP SYN packets [ 2856.806007][T19592] attempt to access beyond end of device [ 2856.806007][T19592] loop8: rw=2049, want=45104, limit=40427 [ 2856.909835][T19587] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 2857.042670][T19587] EXT4-fs (loop6): Unrecognized mount option "obj_type=nauto_da_allob" or missing value [ 2857.422950][T19602] netlink: 88 bytes leftover after parsing attributes in process `syz.8.15029'. [ 2858.041079][T19603] EXT4-fs (loop7): 1 orphan inode deleted [ 2858.047082][T19603] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2858.097792][T19603] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2858.342597][ T24] audit: type=1326 audit(1750862978.691:30557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.6.15032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2858.419578][T19614] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2858.437341][ T24] audit: type=1326 audit(1750862978.691:30558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.6.15032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2858.461060][ T24] audit: type=1326 audit(1750862978.691:30559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.6.15032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2858.486696][ T24] audit: type=1326 audit(1750862978.691:30560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.6.15032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2858.605224][ T24] audit: type=1326 audit(1750862978.691:30561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.6.15032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2858.691345][ T24] audit: type=1326 audit(1750862978.691:30562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.6.15032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2858.818998][ T24] audit: type=1326 audit(1750862978.691:30563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.6.15032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58d9ef929 code=0x7ffc0000 [ 2858.844865][T19621] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.15035: Invalid block bitmap block 0 in block_group 0 [ 2858.860633][T19621] Quota error (device loop8): write_blk: dquota write failed [ 2858.868293][T19621] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 2858.878885][T19621] EXT4-fs error (device loop8): ext4_acquire_dquot:6226: comm syz.8.15035: Failed to acquire dquot type 0 [ 2858.892534][T19621] EXT4-fs error (device loop8): ext4_free_blocks:5685: comm syz.8.15035: Freeing blocks not in datazone - block = 0, count = 4096 [ 2858.932814][T19621] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.15035: Invalid inode bitmap blk 0 in block_group 0 [ 2858.947643][T19621] EXT4-fs error (device loop8) in ext4_free_inode:360: Corrupt filesystem [ 2858.957718][T19621] EXT4-fs (loop8): 1 orphan inode deleted [ 2858.963906][T19621] EXT4-fs (loop8): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2858.982891][ T5399] Quota error (device loop8): remove_tree: Getting block too big (0 >= 9) [ 2859.087845][ T5399] EXT4-fs error (device loop8): ext4_release_dquot:6262: comm kworker/u4:15: Failed to release dquot type 0 [ 2859.357285][T19632] exfat: Bad value for 'fmask' [ 2860.414614][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15043'. [ 2860.729094][T19663] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2860.738844][T19663] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.15047: Failed to acquire dquot type 1 [ 2860.752490][T19663] EXT4-fs (loop9): 1 truncate cleaned up [ 2860.758669][T19663] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 2861.183366][T19667] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2861.907815][T19683] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2862.634359][T19686] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2863.078605][T19698] incfs: Can't find or create .index dir in ./file0 [ 2863.086873][T19698] incfs: mount failed -14 [ 2863.576157][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15059'. [ 2864.215179][T19721] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2864.225394][T19721] EXT4-fs (loop6): invalid journal inode [ 2864.306570][T19721] EXT4-fs (loop6): can't get journal size [ 2864.340424][T19721] EXT4-fs (loop6): 1 truncate cleaned up [ 2864.346265][T19721] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 2864.489925][T19733] FAT-fs (loop9): Unrecognized mount option "shorname=mixed" or missing value [ 2864.860075][T19738] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.15065: Invalid block bitmap block 0 in block_group 0 [ 2864.874144][T19738] __quota_error: 15 callbacks suppressed [ 2864.874154][T19738] Quota error (device loop8): write_blk: dquota write failed [ 2864.887601][T19738] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 2864.897661][T19738] EXT4-fs error (device loop8): ext4_acquire_dquot:6226: comm syz.8.15065: Failed to acquire dquot type 0 [ 2864.909801][T19738] EXT4-fs error (device loop8): ext4_free_blocks:5685: comm syz.8.15065: Freeing blocks not in datazone - block = 0, count = 4096 [ 2864.923709][T19738] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.15065: Invalid inode bitmap blk 0 in block_group 0 [ 2864.937490][T19738] EXT4-fs error (device loop8) in ext4_free_inode:360: Corrupt filesystem [ 2864.946313][T19738] EXT4-fs (loop8): 1 orphan inode deleted [ 2864.952091][T19738] EXT4-fs (loop8): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2864.965782][T23509] Quota error (device loop8): remove_tree: Getting block too big (0 >= 9) [ 2864.977209][T19739] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2864.992399][T23509] EXT4-fs error (device loop8): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 2866.381260][T19759] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2866.651018][T19766] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2866.661775][T19766] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 2866.680341][T19766] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 2866.827685][T19769] futex_wake_op: syz.6.15075 tries to shift op by -1; fix this program [ 2867.304784][T19773] futex_wake_op: syz.9.15076 tries to shift op by -1; fix this program [ 2868.739585][T19792] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2869.294143][T19803] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2869.520494][T19805] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.15083: Invalid block bitmap block 0 in block_group 0 [ 2869.539998][T19805] Quota error (device loop7): write_blk: dquota write failed [ 2869.547641][T19805] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 2869.558148][T19805] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.15083: Failed to acquire dquot type 0 [ 2869.573323][T19805] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz.7.15083: Freeing blocks not in datazone - block = 0, count = 4096 [ 2869.590704][T19805] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.15083: Invalid inode bitmap blk 0 in block_group 0 [ 2869.604200][T17866] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 2869.616108][T19805] EXT4-fs error (device loop7) in ext4_free_inode:360: Corrupt filesystem [ 2869.625831][T19805] EXT4-fs (loop7): 1 orphan inode deleted [ 2869.631705][T19805] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2869.962314][T17866] EXT4-fs error (device loop7): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 2870.342707][T19810] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 2870.367846][T19818] incfs: Can't find or create .index dir in ./file0 [ 2870.406726][T19818] incfs: mount failed -14 [ 2872.397570][T19840] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2872.468712][T19840] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2873.192108][T11022] attempt to access beyond end of device [ 2873.192108][T11022] loop4: rw=2049, want=45104, limit=40427 [ 2873.206770][T19849] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 2873.230749][T19849] EXT4-fs (loop6): Unrecognized mount option "obj_type=nauto_da_allob" or missing value [ 2874.247927][T19866] incfs: Can't find or create .index dir in ./file0 [ 2874.254768][T19866] incfs: mount failed -14 [ 2874.292610][T19869] device pim6reg1 entered promiscuous mode [ 2874.998932][T19894] fuse: Bad value for 'fd' [ 2875.322021][T19890] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2875.440668][T19895] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2875.603325][T19895] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2875.621811][T19890] EXT4-fs (loop6): invalid journal inode [ 2875.646533][T19890] EXT4-fs (loop6): can't get journal size [ 2875.958291][T19906] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 2876.143445][T19906] EXT4-fs (loop9): Unrecognized mount option "obj_type=nauto_da_allob" or missing value [ 2876.203937][T19890] EXT4-fs (loop6): 1 truncate cleaned up [ 2876.210281][T19890] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 2876.350396][T19070] attempt to access beyond end of device [ 2876.350396][T19070] loop8: rw=2049, want=45104, limit=40427 [ 2876.883521][T19924] incfs: Can't find or create .index dir in ./file0 [ 2876.890366][T19924] incfs: mount failed -14 [ 2877.008083][T19933] device pim6reg1 entered promiscuous mode [ 2877.283034][T19946] fuse: Unknown parameter '00000000000000000008' [ 2877.330067][T19948] fuse: Bad value for 'fd' [ 2877.446248][T19949] xt_TCPMSS: Only works on TCP SYN packets [ 2878.911686][T19959] overlayfs: failed to resolve './file1': -2 [ 2879.232404][T19962] EXT4-fs (loop9): 1 orphan inode deleted [ 2879.238213][T19962] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 2879.247641][T19962] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2879.718429][T19973] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 2879.737242][T19973] EXT4-fs (loop6): Unrecognized mount option "obj_type=nauto_da_allob" or missing value [ 2879.780046][T19978] device pim6reg1 entered promiscuous mode [ 2880.648709][T20001] fuse: Unknown parameter '00000000000000000005' [ 2881.356415][T20009] overlayfs: failed to resolve './file1': -2 [ 2882.482559][T20017] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2882.570885][T20017] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2882.619590][T20017] netlink: 292 bytes leftover after parsing attributes in process `syz.4.15143'. [ 2882.892400][T20028] xt_bpf: check failed: parse error [ 2883.334133][T11022] attempt to access beyond end of device [ 2883.334133][T11022] loop4: rw=2049, want=45104, limit=40427 [ 2885.065614][T20048] EXT4-fs error (device loop9): ext4_orphan_get:1395: inode #15: comm syz.9.15150: casefold flag without casefold feature [ 2885.079167][T20048] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.15150: couldn't read orphan inode 15 (err -117) [ 2885.092853][T20048] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 2885.145793][T20048] incfs: Options parsing error. -22 [ 2885.151297][T20048] incfs: mount failed -22 [ 2885.161220][T20048] overlayfs: failed to resolve './file1': -2 [ 2885.167449][ T24] audit: type=1400 audit(1750863007.498:30577): avc: denied { mounton } for pid=20038 comm="syz.9.15150" path="/450/file0/bus" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2885.398171][T20053] device veth1_macvtap left promiscuous mode [ 2885.458985][T20056] serio: Serial port ttyS3 [ 2885.733780][T20058] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2886.141863][T20070] xt_bpf: check failed: parse error [ 2886.156864][T20074] device pim6reg1 entered promiscuous mode [ 2886.587740][T20081] device macsec0 entered promiscuous mode [ 2887.134799][ T24] audit: type=1400 audit(1750863009.419:30578): avc: denied { read write } for pid=20083 comm="syz.8.15165" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2887.783076][T20089] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 2888.213743][ T24] audit: type=1400 audit(1750863009.419:30579): avc: denied { open } for pid=20083 comm="syz.8.15165" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2890.954247][T20125] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.15170: Invalid block bitmap block 0 in block_group 0 [ 2890.968991][T20125] Quota error (device loop7): write_blk: dquota write failed [ 2890.976505][T20125] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 2890.986489][T20125] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.15170: Failed to acquire dquot type 0 [ 2891.008833][T20125] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz.7.15170: Freeing blocks not in datazone - block = 0, count = 4096 [ 2891.022659][T20125] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.15170: Invalid inode bitmap blk 0 in block_group 0 [ 2891.035556][T20125] EXT4-fs error (device loop7) in ext4_free_inode:360: Corrupt filesystem [ 2891.044382][T20125] EXT4-fs (loop7): 1 orphan inode deleted [ 2891.050165][T20125] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2891.090941][T23509] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 2891.127077][T20126] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2891.134178][T20126] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 2891.143751][T20126] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 2891.153280][T20126] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.15172: Failed to acquire dquot type 1 [ 2891.165774][T20126] EXT4-fs (loop4): 1 truncate cleaned up [ 2891.176727][T23509] EXT4-fs error (device loop7): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 2891.270290][T20133] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2891.318924][T20126] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 2891.425931][T20136] bridge0: port 1(bridge_slave_0) entered blocking state [ 2891.435370][T20136] bridge0: port 1(bridge_slave_0) entered disabled state [ 2891.443968][T20136] device bridge_slave_0 entered promiscuous mode [ 2891.461513][T20136] bridge0: port 2(bridge_slave_1) entered blocking state [ 2891.508379][T20136] bridge0: port 2(bridge_slave_1) entered disabled state [ 2891.517917][T20136] device bridge_slave_1 entered promiscuous mode [ 2891.652091][T20136] bridge0: port 2(bridge_slave_1) entered blocking state [ 2891.659191][T20136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2891.666520][T20136] bridge0: port 1(bridge_slave_0) entered blocking state [ 2891.673562][T20136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2891.708070][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2891.716843][ T3847] bridge0: port 1(bridge_slave_0) entered disabled state [ 2891.748109][ T3847] bridge0: port 2(bridge_slave_1) entered disabled state [ 2891.759083][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2891.776203][ T3847] bridge0: port 1(bridge_slave_0) entered blocking state [ 2891.783290][ T3847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2891.811832][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2891.831670][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state [ 2891.838780][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2891.869079][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2891.913250][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2891.930468][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2891.964686][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2891.981641][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2891.999850][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2892.008894][T20136] device veth0_vlan entered promiscuous mode [ 2892.050611][T23509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2892.066962][T20136] device veth1_macvtap entered promiscuous mode [ 2892.088602][T23509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2892.112102][T23509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2892.659264][T20158] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 2893.284579][T20162] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 2893.328014][T20173] EXT4-fs (loop7): Unrecognized mount option "smackfshat=" or missing value [ 2893.352865][T20162] EXT4-fs (loop8): invalid journal inode [ 2893.453643][T20162] EXT4-fs (loop8): can't get journal size [ 2893.497606][T20162] EXT4-fs (loop8): 1 truncate cleaned up [ 2893.508392][T20162] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 2893.544210][T20169] xt_TCPMSS: Only works on TCP SYN packets [ 2893.704602][ T5399] device bridge_slave_1 left promiscuous mode [ 2893.714027][T20182] EXT4-fs (loop9): Ignoring removed bh option [ 2893.720288][T20182] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2893.772507][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 2893.902689][T20182] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2893.941370][ T5399] device bridge_slave_0 left promiscuous mode [ 2894.172092][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 2894.859973][T20197] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2894.871830][T20204] device ip6gretap0 entered promiscuous mode [ 2894.964830][ T24] audit: type=1400 audit(1750863018.002:30580): avc: denied { bind } for pid=20189 comm="syz.6.15187" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2895.246672][ T24] audit: type=1400 audit(1750863018.002:30581): avc: denied { node_bind } for pid=20189 comm="syz.6.15187" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2895.766260][T20217] xt_bpf: check failed: parse error [ 2895.853770][T20200] F2FS-fs (loop4): invalid crc value [ 2895.880274][T20200] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2895.892994][T20226] device veth1_macvtap left promiscuous mode [ 2895.910864][T20226] device macsec0 entered promiscuous mode [ 2895.927862][T20200] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2895.934970][T20200] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 2896.044888][T20228] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 2896.057714][T20228] EXT4-fs (loop7): Unrecognized mount option "obj_type=nauto_da_allob" or missing value [ 2896.291057][T20234] attempt to access beyond end of device [ 2896.291057][T20234] loop4: rw=2049, want=45104, limit=40427 [ 2896.746224][T20236] EXT4-fs (loop6): 1 orphan inode deleted [ 2896.752061][T20236] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2896.761647][T20236] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2897.178624][T20245] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2897.192406][T20245] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 2897.214125][T20245] ext4 filesystem being mounted at /462/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2897.644920][T20223] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2897.698760][T20223] F2FS-fs (loop8): Mounted with checkpoint version = 753bd00b [ 2898.515253][T20257] EXT4-fs (loop4): Ignoring removed orlov option [ 2898.559199][T20257] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2898.596664][T20257] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.15198: bg 0: block 248: padding at end of block bitmap is not set [ 2898.614836][T20257] Quota error (device loop4): write_blk: dquota write failed [ 2898.854161][T20257] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2898.890805][T20257] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.15198: Failed to acquire dquot type 1 [ 2898.909459][T20274] EXT4-fs (loop9): Unrecognized mount option "smackfshat=" or missing value [ 2898.938025][T20257] EXT4-fs (loop4): 1 truncate cleaned up [ 2898.957237][T20257] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue [ 2899.008267][T20257] EXT4-fs (loop4): Ignoring removed orlov option [ 2899.014918][T20257] EXT4-fs error (device loop4): ext4_remount:5878: Abort forced by user [ 2899.471621][T20289] usb usb8: usbfs: process 20289 (syz.4.15211) did not claim interface 0 before use [ 2899.644124][T20293] xt_bpf: check failed: parse error [ 2899.766207][T20296] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2899.770691][T20287] F2FS-fs (loop6): invalid crc value [ 2899.784875][T20296] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 2899.796995][T20296] ext4 filesystem being mounted at /517/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2899.854044][T20287] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2899.897539][T20287] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 2899.905316][T20287] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 2899.913575][T20306] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 2899.923809][T20306] EXT4-fs (loop9): Unrecognized mount option "obj_type=nauto_da_allob" or missing value [ 2900.153533][T20313] attempt to access beyond end of device [ 2900.153533][T20313] loop6: rw=2049, want=45104, limit=40427 [ 2901.990807][T20339] device pim6reg1 entered promiscuous mode [ 2902.036844][T20340] usb usb8: usbfs: process 20340 (syz.7.15223) did not claim interface 0 before use [ 2902.312509][T20334] F2FS-fs (loop9): fault_injection options not supported [ 2902.404395][T20334] F2FS-fs (loop9): invalid crc value [ 2902.439274][T20350] fuse: Bad value for 'rootmode' [ 2902.444985][T20334] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2902.539517][T20334] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2902.620550][T20341] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2902.638733][T20346] F2FS-fs (loop4): invalid crc value [ 2902.670152][T20346] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2902.710541][T20346] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2902.717778][T20346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 2902.717796][T20341] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 2903.440909][T20368] attempt to access beyond end of device [ 2903.440909][T20368] loop4: rw=2049, want=45104, limit=40427 [ 2904.038372][T20377] FAT-fs (loop7): Unrecognized mount option "shorname=mixed" or missing value [ 2905.045065][T20390] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2905.051964][T20390] Quota error (device loop8): find_tree_dqentry: Getting block too big (196613 >= 6) [ 2905.061541][T20390] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 2905.071316][T20390] EXT4-fs error (device loop8): ext4_acquire_dquot:6226: comm syz.8.15237: Failed to acquire dquot type 1 [ 2905.083547][T20390] EXT4-fs (loop8): 1 truncate cleaned up [ 2905.089388][T20390] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 2905.403190][T20399] usb usb8: usbfs: process 20399 (syz.8.15239) did not claim interface 0 before use [ 2905.596438][T11594] attempt to access beyond end of device [ 2905.596438][T11594] loop9: rw=2049, want=45104, limit=40427 [ 2906.263205][T20414] fuse: Unknown parameter 'use00000000000000000000' [ 2906.721193][T20420] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2906.958358][T20404] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2907.039902][T20404] F2FS-fs (loop8): Mounted with checkpoint version = 753bd00b [ 2907.873664][T20442] usb usb8: usbfs: process 20442 (syz.7.15251) did not claim interface 0 before use [ 2908.101742][T20451] netlink: 88 bytes leftover after parsing attributes in process `syz.9.15254'. [ 2908.379048][T20462] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.15256: Invalid block bitmap block 0 in block_group 0 [ 2908.395063][T20462] Quota error (device loop7): write_blk: dquota write failed [ 2908.427886][T20462] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 2908.463674][T20462] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.15256: Failed to acquire dquot type 0 [ 2908.477396][T20462] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz.7.15256: Freeing blocks not in datazone - block = 0, count = 4096 [ 2908.492084][T20462] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.15256: Invalid inode bitmap blk 0 in block_group 0 [ 2908.505757][ T3847] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 2908.506440][T20462] EXT4-fs error (device loop7) in ext4_free_inode:360: Corrupt filesystem [ 2908.524865][ T3847] EXT4-fs error (device loop7): ext4_release_dquot:6262: comm kworker/u4:11: Failed to release dquot type 0 [ 2908.537791][T20462] EXT4-fs (loop7): 1 orphan inode deleted [ 2908.544683][T20462] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2908.795814][T20474] xt_bpf: check failed: parse error [ 2908.826041][T20472] fuse: Unknown parameter 'use00000000000000000000' [ 2909.842562][T20490] EXT4-fs (loop4): 1 orphan inode deleted [ 2909.848513][T20490] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2909.857540][T20490] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2910.249412][T20498] usb usb8: usbfs: process 20498 (syz.9.15266) did not claim interface 0 before use [ 2910.361011][T20501] exfat: Bad value for 'fmask' [ 2911.318251][T20509] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.15268: casefold flag without casefold feature [ 2911.332656][T20509] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.15268: couldn't read orphan inode 15 (err -117) [ 2911.347022][T20509] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2911.374579][T20509] incfs: Options parsing error. -22 [ 2911.380097][T20509] incfs: mount failed -22 [ 2911.659595][T20504] xt_TCPMSS: Only works on TCP SYN packets [ 2911.877809][T20524] netlink: 88 bytes leftover after parsing attributes in process `syz.8.15270'. [ 2912.181566][T20532] fuse: Unknown parameter 'use00000000000000000000' [ 2912.255552][T20536] EXT4-fs (loop6): Ignoring removed bh option [ 2912.261721][T20536] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2912.848278][T20536] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2915.820416][T20557] futex_wake_op: syz.8.15284 tries to shift op by -1; fix this program [ 2916.082133][ T24] audit: type=1326 audit(1750863040.662:30582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20566 comm="syz.6.15288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2916.152446][ T24] audit: type=1326 audit(1750863040.662:30583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20566 comm="syz.6.15288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2916.188641][ T24] audit: type=1326 audit(1750863040.694:30584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20566 comm="syz.6.15288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2916.220084][ T24] audit: type=1326 audit(1750863040.694:30585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20566 comm="syz.6.15288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2916.280727][ T24] audit: type=1326 audit(1750863040.694:30586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20566 comm="syz.6.15288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2916.337305][T20572] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.15289: Invalid block bitmap block 0 in block_group 0 [ 2916.402588][T20572] Quota error (device loop6): write_blk: dquota write failed [ 2916.419414][T20572] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 2916.433775][T20572] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.15289: Failed to acquire dquot type 0 [ 2916.452697][ T24] audit: type=1326 audit(1750863040.694:30587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20566 comm="syz.6.15288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2916.484950][T20572] EXT4-fs error (device loop6): ext4_free_blocks:5685: comm syz.6.15289: Freeing blocks not in datazone - block = 0, count = 4096 [ 2916.526564][T20572] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.15289: Invalid inode bitmap blk 0 in block_group 0 [ 2916.549587][T17866] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 2916.558157][T17866] EXT4-fs error (device loop6): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 2916.573112][ T24] audit: type=1326 audit(1750863040.694:30588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20566 comm="syz.6.15288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2916.607834][T20572] EXT4-fs error (device loop6) in ext4_free_inode:360: Corrupt filesystem [ 2916.624499][T20572] EXT4-fs (loop6): 1 orphan inode deleted [ 2916.650556][T20572] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2916.758344][T20578] fuse: Unknown parameter 'user_i00000000000000000000' [ 2917.080802][T20584] EXT4-fs (loop7): 1 orphan inode deleted [ 2917.170510][T20584] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2917.312684][T20584] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2917.960436][T20603] EXT4-fs (loop9): Ignoring removed bh option [ 2917.966709][T20603] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2918.106840][T20603] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2918.861000][T20624] fuse: Unknown parameter 'user_i00000000000000000000' [ 2920.607777][T20662] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2920.629619][T20662] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.15314: Failed to acquire dquot type 1 [ 2920.653314][T20673] fuse: Unknown parameter 'user_i00000000000000000000' [ 2920.697446][T20662] EXT4-fs (loop9): 1 truncate cleaned up [ 2920.705124][T20662] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 2921.568208][T20690] EXT4-fs (loop4): Ignoring removed bh option [ 2921.574642][T20690] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2921.742986][T20690] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2922.843301][T20693] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 2924.175908][T20717] F2FS-fs (loop7): invalid crc value [ 2924.183453][T20717] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 2924.226732][T20717] F2FS-fs (loop7): Start checkpoint disabled! [ 2924.234239][T20717] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 2924.362330][T20732] F2FS-fs (loop9): invalid crc value [ 2924.372377][T20736] EXT4-fs (loop4): 1 orphan inode deleted [ 2924.392488][T20736] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2924.739355][T17866] attempt to access beyond end of device [ 2924.739355][T17866] loop7: rw=2049, want=45104, limit=40427 [ 2924.751381][T20736] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2924.771720][T20732] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2924.896434][T20732] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 2924.904942][T20732] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 2925.367880][T20756] EXT4-fs (loop8): 1 orphan inode deleted [ 2925.373696][T20756] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 2925.383129][T20756] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2925.848538][T20764] attempt to access beyond end of device [ 2925.848538][T20764] loop9: rw=2049, want=45104, limit=40427 [ 2926.648010][T20769] EXT4-fs (loop8): Ignoring removed bh option [ 2926.654299][T20769] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2926.776756][T20769] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2927.427317][T20777] netlink: 88 bytes leftover after parsing attributes in process `syz.9.15343'. [ 2928.248174][T20794] xt_bpf: check failed: parse error [ 2928.290146][T20800] device ip6gretap0 entered promiscuous mode [ 2928.318563][T20803] futex_wake_op: syz.6.15354 tries to shift op by -1; fix this program [ 2928.840700][T20816] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2928.895381][T20816] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2928.933375][T20816] attempt to access beyond end of device [ 2928.933375][T20816] loop4: rw=2049, want=45104, limit=40427 [ 2928.967439][T11022] attempt to access beyond end of device [ 2928.967439][T11022] loop4: rw=2049, want=45112, limit=40427 [ 2930.695836][T20840] F2FS-fs (loop7): invalid crc value [ 2930.712165][T20840] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2930.751866][T20840] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 2930.759135][T20840] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 2930.851399][T20851] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2931.213477][T20857] attempt to access beyond end of device [ 2931.213477][T20857] loop7: rw=2049, want=45104, limit=40427 [ 2931.739426][T20870] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 2931.761068][T20870] EXT4-fs (loop9): Unrecognized mount option "obj_type=nauto_da_allob" or missing value [ 2932.216584][T20886] xt_bpf: check failed: parse error [ 2934.096671][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 2934.096687][ T24] audit: type=1326 audit(1750863059.995:30596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399854a929 code=0x7ffc0000 [ 2934.129615][ T24] audit: type=1326 audit(1750863059.995:30597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f399854a929 code=0x7ffc0000 [ 2934.153755][ T24] audit: type=1326 audit(1750863059.995:30598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399854a929 code=0x7ffc0000 [ 2934.177793][ T24] audit: type=1326 audit(1750863059.995:30599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f399854a929 code=0x7ffc0000 [ 2934.239904][ T24] audit: type=1326 audit(1750863060.156:30600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.15384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399854a929 code=0x7ffc0000 [ 2934.575800][T20911] EXT4-fs (loop6): Ignoring removed bh option [ 2934.582516][T20911] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2935.052561][T20911] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 2936.376963][ T24] audit: type=1326 audit(1750863062.441:30601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.6.15396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2936.755783][ T24] audit: type=1326 audit(1750863062.667:30602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.6.15396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2936.786405][ T24] audit: type=1326 audit(1750863062.667:30603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.6.15396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2936.824222][ T24] audit: type=1326 audit(1750863062.678:30604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.6.15396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2936.851423][ T24] audit: type=1326 audit(1750863062.688:30605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.6.15396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8ea8929 code=0x7ffc0000 [ 2937.059532][T20952] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2937.198514][T20952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2937.575419][T20969] attempt to access beyond end of device [ 2937.575419][T20969] loop4: rw=2049, want=45104, limit=40427 [ 2937.865722][T11022] attempt to access beyond end of device [ 2937.865722][T11022] loop4: rw=2049, want=45112, limit=40427 [ 2938.518303][T20986] overlayfs: missing 'lowerdir' [ 2940.056591][T21003] xt_bpf: check failed: parse error [ 2940.177547][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 2940.177563][ T24] audit: type=1326 audit(1750863066.486:30610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2940.232379][ T24] audit: type=1326 audit(1750863066.486:30611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2940.256569][ T24] audit: type=1326 audit(1750863066.486:30612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2940.280505][ T24] audit: type=1326 audit(1750863066.486:30613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2940.304499][ T24] audit: type=1326 audit(1750863066.486:30614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2940.328502][ T24] audit: type=1326 audit(1750863066.497:30615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2940.354054][ T24] audit: type=1326 audit(1750863066.497:30616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2940.377990][ T24] audit: type=1326 audit(1750863066.497:30617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2940.402284][ T24] audit: type=1326 audit(1750863066.497:30618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2940.426948][T21015] 9pnet: Insufficient options for proto=fd [ 2940.427392][ T24] audit: type=1326 audit(1750863066.497:30619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.7.15411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe703dff929 code=0x7ffc0000 [ 2941.529385][T21006] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2941.577911][T21006] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2942.662813][T21043] overlayfs: missing 'lowerdir' [ 2943.684974][T21071] futex_wake_op: syz.7.15433 tries to shift op by -1; fix this program [ 2944.167609][T21078] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 2945.844749][T21104] EXT4-fs error (device loop7): ext4_orphan_get:1395: inode #15: comm syz.7.15444: casefold flag without casefold feature [ 2945.858695][T21104] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.15444: couldn't read orphan inode 15 (err -117) [ 2945.872873][T21104] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2945.900218][T21104] incfs: Options parsing error. -22 [ 2945.905722][T21104] incfs: mount failed -22 [ 2945.916030][T21104] overlayfs: failed to resolve './file1': -2 [ 2946.180584][T21110] exfat: Bad value for 'fmask' [ 2946.678635][T21127] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2946.888854][T21132] device macsec0 left promiscuous mode [ 2946.917613][T21137] incfs: Can't find or create .index dir in ./file0 [ 2946.924352][T21137] incfs: mount failed -14 [ 2947.248295][T21148] blk_update_request: I/O error, dev loop16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2947.259604][T21148] F2FS-fs (loop16): Unable to read 1th superblock [ 2947.266772][T21148] blk_update_request: I/O error, dev loop16, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2947.277964][T21148] F2FS-fs (loop16): Unable to read 2th superblock [ 2947.373994][ T3847] ================================================================== [ 2947.382213][ T3847] BUG: KASAN: use-after-free in down_read_trylock+0x83/0x150 [ 2947.389600][ T3847] Write of size 8 at addr ffff888112805070 by task kworker/u4:11/3847 [ 2947.397765][ T3847] [ 2947.400124][ T3847] CPU: 1 PID: 3847 Comm: kworker/u4:11 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 2947.410275][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2947.420353][ T3847] Workqueue: writeback wb_workfn (flush-7:9) [ 2947.426369][ T3847] Call Trace: [ 2947.429670][ T3847] __dump_stack+0x21/0x24 [ 2947.434013][ T3847] dump_stack_lvl+0x169/0x1d8 [ 2947.438707][ T3847] ? show_regs_print_info+0x18/0x18 [ 2947.443914][ T3847] ? thaw_kernel_threads+0x220/0x220 [ 2947.449223][ T3847] ? __kasan_check_write+0x14/0x20 [ 2947.454440][ T3847] print_address_description+0x7f/0x2c0 [ 2947.460005][ T3847] ? down_read_trylock+0x83/0x150 [ 2947.465043][ T3847] kasan_report+0xe2/0x130 [ 2947.469473][ T3847] ? down_read_trylock+0x83/0x150 [ 2947.474511][ T3847] kasan_check_range+0x280/0x290 [ 2947.479461][ T3847] __kasan_check_write+0x14/0x20 [ 2947.484416][ T3847] down_read_trylock+0x83/0x150 [ 2947.489285][ T3847] ? __init_rwsem+0x1c0/0x1c0 [ 2947.494062][ T3847] ? __kasan_check_read+0x11/0x20 [ 2947.499102][ T3847] trylock_super+0x1f/0xf0 [ 2947.503549][ T3847] wb_writeback+0x485/0xb90 [ 2947.508166][ T3847] ? wb_io_lists_depopulated+0x180/0x180 [ 2947.513812][ T3847] ? cpumask_next+0x25/0x30 [ 2947.518319][ T3847] wb_workfn+0xa28/0xe20 [ 2947.522574][ T3847] ? inode_wait_for_writeback+0x200/0x200 [ 2947.528301][ T3847] ? __switch_to_asm+0x34/0x60 [ 2947.533067][ T3847] ? __schedule+0xb4f/0x1310 [ 2947.537655][ T3847] ? __kasan_check_read+0x11/0x20 [ 2947.542679][ T3847] ? read_word_at_a_time+0x12/0x20 [ 2947.547787][ T3847] ? strscpy+0x9b/0x290 [ 2947.551938][ T3847] process_one_work+0x6e1/0xba0 [ 2947.556784][ T3847] worker_thread+0xa6a/0x13b0 [ 2947.561466][ T3847] kthread+0x346/0x3d0 [ 2947.565525][ T3847] ? worker_clr_flags+0x190/0x190 [ 2947.570665][ T3847] ? kthread_blkcg+0xd0/0xd0 [ 2947.575263][ T3847] ret_from_fork+0x1f/0x30 [ 2947.579672][ T3847] [ 2947.582000][ T3847] Allocated by task 20732: [ 2947.586408][ T3847] __kasan_kmalloc+0xda/0x110 [ 2947.591081][ T3847] kmem_cache_alloc_trace+0x184/0x2e0 [ 2947.596449][ T3847] alloc_super+0x5e/0x7a0 [ 2947.600774][ T3847] sget+0x1e4/0x4c0 [ 2947.604577][ T3847] mount_bdev+0xf6/0x3a0 [ 2947.608842][ T3847] f2fs_mount+0x34/0x40 [ 2947.612990][ T3847] legacy_get_tree+0xed/0x190 [ 2947.617658][ T3847] vfs_get_tree+0x89/0x260 [ 2947.622089][ T3847] do_new_mount+0x25a/0xa20 [ 2947.626675][ T3847] path_mount+0x572/0xc80 [ 2947.631003][ T3847] __se_sys_mount+0x318/0x380 [ 2947.635673][ T3847] __x64_sys_mount+0xbf/0xd0 [ 2947.640253][ T3847] do_syscall_64+0x31/0x40 [ 2947.644668][ T3847] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2947.650718][ T3847] [ 2947.653049][ T3847] Freed by task 535: [ 2947.656939][ T3847] kasan_set_track+0x4a/0x70 [ 2947.661552][ T3847] kasan_set_free_info+0x23/0x40 [ 2947.666478][ T3847] ____kasan_slab_free+0x125/0x160 [ 2947.671579][ T3847] __kasan_slab_free+0x11/0x20 [ 2947.676332][ T3847] slab_free_freelist_hook+0xc5/0x190 [ 2947.681694][ T3847] kfree+0xc0/0x270 [ 2947.685494][ T3847] destroy_super_work+0x40/0x50 [ 2947.690334][ T3847] process_one_work+0x6e1/0xba0 [ 2947.695177][ T3847] worker_thread+0xa6a/0x13b0 [ 2947.699848][ T3847] kthread+0x346/0x3d0 [ 2947.703908][ T3847] ret_from_fork+0x1f/0x30 [ 2947.708306][ T3847] [ 2947.710623][ T3847] Last potentially related work creation: [ 2947.716337][ T3847] kasan_save_stack+0x3a/0x60 [ 2947.721021][ T3847] __kasan_record_aux_stack+0xd2/0x100 [ 2947.726482][ T3847] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2947.732277][ T3847] insert_work+0x52/0x310 [ 2947.736610][ T3847] __queue_work+0x923/0xca0 [ 2947.741198][ T3847] queue_work_on+0xd5/0x130 [ 2947.745699][ T3847] destroy_super_rcu+0xd1/0xe0 [ 2947.750457][ T3847] rcu_do_batch+0x4df/0xa80 [ 2947.754976][ T3847] rcu_core+0x55f/0xd60 [ 2947.759124][ T3847] rcu_core_si+0x9/0x10 [ 2947.763272][ T3847] __do_softirq+0x255/0x563 [ 2947.767762][ T3847] [ 2947.770079][ T3847] Second to last potentially related work creation: [ 2947.776681][ T3847] kasan_save_stack+0x3a/0x60 [ 2947.781372][ T3847] __kasan_record_aux_stack+0xd2/0x100 [ 2947.787021][ T3847] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2947.792834][ T3847] call_rcu+0x105/0x1040 [ 2947.797078][ T3847] __put_super+0x254/0x2b0 [ 2947.801494][ T3847] deactivate_locked_super+0xd4/0x100 [ 2947.806864][ T3847] deactivate_super+0xaf/0xe0 [ 2947.811555][ T3847] cleanup_mnt+0x446/0x500 [ 2947.815973][ T3847] __cleanup_mnt+0x19/0x20 [ 2947.820386][ T3847] task_work_run+0x127/0x190 [ 2947.824968][ T3847] exit_to_user_mode_loop+0xcb/0xe0 [ 2947.830179][ T3847] syscall_exit_to_user_mode+0x68/0x90 [ 2947.835630][ T3847] do_syscall_64+0x3d/0x40 [ 2947.840050][ T3847] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2947.846049][ T3847] [ 2947.848377][ T3847] The buggy address belongs to the object at ffff888112805000 [ 2947.848377][ T3847] which belongs to the cache kmalloc-2k of size 2048 [ 2947.862425][ T3847] The buggy address is located 112 bytes inside of [ 2947.862425][ T3847] 2048-byte region [ffff888112805000, ffff888112805800) [ 2947.875790][ T3847] The buggy address belongs to the page: [ 2947.881422][ T3847] page:ffffea00044a0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112800 [ 2947.891660][ T3847] head:ffffea00044a0000 order:3 compound_mapcount:0 compound_pincount:0 [ 2947.900064][ T3847] flags: 0x4000000000010200(slab|head) [ 2947.905522][ T3847] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 2947.914105][ T3847] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 2947.922682][ T3847] page dumped because: kasan: bad access detected [ 2947.929195][ T3847] page_owner tracks the page as allocated [ 2947.934920][ T3847] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9340, ts 2563142201641, free_ts 2563042797408 [ 2947.955740][ T3847] prep_new_page+0x179/0x180 [ 2947.960339][ T3847] get_page_from_freelist+0x2235/0x23d0 [ 2947.965979][ T3847] __alloc_pages_nodemask+0x268/0x5f0 [ 2947.971474][ T3847] new_slab+0x84/0x3f0 [ 2947.975540][ T3847] ___slab_alloc+0x2a6/0x450 [ 2947.980129][ T3847] __slab_alloc+0x63/0xa0 [ 2947.984456][ T3847] __kmalloc+0x201/0x330 [ 2947.988699][ T3847] kvmalloc_node+0x88/0x130 [ 2947.993197][ T3847] xt_alloc_table_info+0x3b/0xa0 [ 2947.998133][ T3847] do_ip6t_set_ctl+0x86a/0xcf0 [ 2948.002890][ T3847] nf_setsockopt+0x272/0x2a0 [ 2948.007481][ T3847] ipv6_setsockopt+0x2551/0x3860 [ 2948.012436][ T3847] tcp_setsockopt+0x1f8/0x1c30 [ 2948.017193][ T3847] sock_common_setsockopt+0xa0/0xb0 [ 2948.022393][ T3847] __sys_setsockopt+0x2ed/0x460 [ 2948.027257][ T3847] __x64_sys_setsockopt+0xbf/0xd0 [ 2948.032386][ T3847] page last free stack trace: [ 2948.037070][ T3847] __free_pages_ok+0x7fc/0x820 [ 2948.041837][ T3847] __free_pages+0xdd/0x380 [ 2948.046244][ T3847] __free_slab+0xcf/0x190 [ 2948.050574][ T3847] unfreeze_partials+0x15f/0x190 [ 2948.055509][ T3847] put_cpu_partial+0xc1/0x180 [ 2948.060355][ T3847] __slab_free+0x2c9/0x3a0 [ 2948.064794][ T3847] ___cache_free+0x111/0x130 [ 2948.069384][ T3847] qlink_free+0x50/0x90 [ 2948.073540][ T3847] qlist_free_all+0x5f/0xb0 [ 2948.078044][ T3847] kasan_quarantine_reduce+0x14a/0x160 [ 2948.083497][ T3847] __kasan_slab_alloc+0x2f/0xf0 [ 2948.088348][ T3847] slab_post_alloc_hook+0x5d/0x2f0 [ 2948.093457][ T3847] kmem_cache_alloc+0x165/0x2e0 [ 2948.098301][ T3847] __alloc_skb+0x9e/0x520 [ 2948.102636][ T3847] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 2948.107914][ T3847] rtmsg_ifinfo+0x7a/0x130 [ 2948.112325][ T3847] [ 2948.114641][ T3847] Memory state around the buggy address: [ 2948.120265][ T3847] ffff888112804f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2948.128426][ T3847] ffff888112804f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2948.136478][ T3847] >ffff888112805000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2948.144528][ T3847] ^ [ 2948.152235][ T3847] ffff888112805080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2948.160393][ T3847] ffff888112805100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2948.168443][ T3847] ================================================================== [ 2948.176502][ T3847] Disabling lock debugging due to kernel taint [ 2948.304903][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 2948.304916][ T24] audit: type=1400 audit(1750863075.241:30624): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2948.334811][T21147] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:476: comm syz.9.15456: Invalid block bitmap block 0 in block_group 0 [ 2948.349269][T21147] Quota error (device loop9): write_blk: dquota write failed [ 2948.357405][T21147] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2948.367519][T21147] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.15456: Failed to acquire dquot type 0 [ 2948.378884][ T24] audit: type=1400 audit(1750863075.241:30625): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2948.400579][T21147] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz.9.15456: Freeing blocks not in datazone - block = 0, count = 4096 [ 2948.414898][T21147] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.15456: Invalid inode bitmap blk 0 in block_group 0 [ 2948.427929][T21147] EXT4-fs error (device loop9) in ext4_free_inode:360: Corrupt filesystem [ 2948.436840][T21147] EXT4-fs (loop9): 1 orphan inode deleted [ 2948.442627][T21147] EXT4-fs (loop9): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 2948.442638][T23509] Quota error (device loop9): remove_tree: Getting block too big (0 >= 9) [ 2948.442659][T23509] EXT4-fs error (device loop9): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 2948.466633][ T24] audit: type=1400 audit(1750863075.241:30626): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2948.498798][ T24] audit: type=1400 audit(1750863075.241:30627): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2948.543613][ T24] audit: type=1400 audit(1750863075.241:30628): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1