last executing test programs: 19m42.625405691s ago: executing program 32 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) futex(0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b00000000001010100000000000000000a0008029c0001802c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001203000000006000340ffff00000c000280050001001100000035000280050001001100000006000340000200000c00"], 0xb0}, 0x1, 0x0, 0x0, 0x841}, 0x40890) vmsplice(r3, &(0x7f0000000200), 0x0, 0x2) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x400000000000000, 0x0, 0x4040011}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x88, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r6, 0x7, 0x8}, 0xc) 19m12.896012654s ago: executing program 33 (id=82): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) getpgrp(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r7, 0x2000, 0x0) 18m19.749532032s ago: executing program 34 (id=165): chdir(&(0x7f0000000400)='./file0\x00') getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095001800000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x5) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3) 17m17.606373447s ago: executing program 35 (id=256): mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x103) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) unshare(0x62000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv4_deladdr={0x18, 0x15, 0x115, 0x70bd26, 0x25dfdbfc, {0x2, 0x8, 0x80, 0xff, r5}}, 0x18}}, 0x4d884) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) r7 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r7}, &(0x7f0000044000)=0x0) timer_settime(r8, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r10, 0x0, r9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m22.400478104s ago: executing program 36 (id=340): mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x103) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) unshare(0x62000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) gettid() 11m37.999929094s ago: executing program 8 (id=886): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x1, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a000000", @ANYRES32=r2], 0x20}}, 0x4042) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x9, 0x201, 0x0, 0x3, r4}, &(0x7f0000000340)=0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 11m36.9353482s ago: executing program 8 (id=888): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40881) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = getpgid(r2) tgkill(r5, r2, 0x33) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r7, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 11m34.524957674s ago: executing program 8 (id=891): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0)='-0', 0x2) 11m32.134370447s ago: executing program 8 (id=894): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40881) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = getpgid(r2) tgkill(r5, r2, 0x33) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r7, 0x1, 0x20, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 11m30.451477513s ago: executing program 8 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES32=r1], 0x22c}}, 0x0) 11m29.978181971s ago: executing program 8 (id=901): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) getpgrp(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r7, 0x2000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9aed9e1fa74020a4f00b8ff"], 0x1, 0x246, &(0x7f00000002c0)="$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") 11m14.619293721s ago: executing program 37 (id=901): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) getpgrp(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r7, 0x2000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9aed9e1fa74020a4f00b8ff"], 0x1, 0x246, &(0x7f00000002c0)="$eJzs2s9rHGUYB/BnYqUxJd2Iv2hB+qIH9TI0OXkQSZAWxICijVAF6dRMdMm4G3aWwIrYeNGrf4Jn8ehNkIoXL7n4F3jwlkuOPYgj7aZtElbIInFD8/lc9mHf+cIzvMPLc3h3Xvv2s/W1Ol8r+jGVZTG1GFtxJ4u5mIr7tuKVl67/9vx71z94a2l5+cq7KV1duja/kFI6f+nnD7/44YXb/XPv/3j+p7OxPffRzu5Xf24/u31h5+9rn7br1K5Tp9tPRbrZ7faLm1WZVtv1ep7SO1VZ1GVqd+qyd2B9repubAxS0VmdndnolXWdis4grZeD1O+mfm+Qik+KdifleZ5mZ4L/YuX7O00Tu83jNyK7/9/sH9GK7MmUPbWYPXMje24ru7DbNK3JNsoxebD/TdM88V2cu23/T5V9h/p0RPXN5srmyvB3uL60Fu2ooozL0Yq/4u5nsmdYX31z+crldM9cfF3d2svf2lx57GB+PloxNzo/P8yng/mzMbM/vxCteHp0fmFkfjpefnFfPo9W/P5xdKOK1bibfZj/cj6lN95ePpS/eO85AIBHTZ4eGDm/5fm/rQ/zY8yHh+arM3HxzGTfnYh68Pl6UVVlTzFOcWnc1PTkez4FRZNFnIA2jlb8+svrr56ANvaKxcNHwaRPJv4PDzf9qInp420IAAAAAAAAAACAIznme4XZODfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0+mfAAAA//9X7c9V") 10m44.78914311s ago: executing program 9 (id=985): r0 = socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) shutdown(r1, 0x2) 10m43.897151402s ago: executing program 9 (id=989): openat$kvm(0xffffffffffffff9c, 0x0, 0x80e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6111471, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{0x0}], 0x1) 10m42.700498378s ago: executing program 9 (id=992): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 10m40.474554678s ago: executing program 9 (id=994): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getgroups(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) syncfs(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x714f, 0x0) syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x41050, &(0x7f0000000300)={[{@block={'block', 0x3d, 0x400}}, {@mode={'mode', 0x3d, 0x400000009}}, {@dmode={'dmode', 0x3d, 0x1000}}]}, 0x0, 0x1045, &(0x7f0000001140)="$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") 10m38.623719248s ago: executing program 9 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYRES32=r2], 0x22c}}, 0x0) 10m38.337024691s ago: executing program 9 (id=1000): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10m24.255729018s ago: executing program 3 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r4, 0x4b47, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x4f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1c) 10m21.838630373s ago: executing program 38 (id=1000): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10m20.362067542s ago: executing program 3 (id=1033): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, 0x0, 0x53) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x200100) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getgroups(0x0, &(0x7f0000000ac0)) 10m17.804770979s ago: executing program 3 (id=1039): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001"], 0x128}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) 10m14.527487843s ago: executing program 3 (id=1043): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fcntl$setlease(r0, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_gettime(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace(0x4207, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 10m5.619797162s ago: executing program 3 (id=1051): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 10m4.736914934s ago: executing program 3 (id=1054): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9m48.667570981s ago: executing program 39 (id=1054): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7m13.064235385s ago: executing program 6 (id=1275): pipe(0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0)='-0', 0x2) syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c7, 0x0, 0x1004, 0x5cc}, &(0x7f0000000300), 0x0) syz_clone(0x40ac8000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m10.533662428s ago: executing program 6 (id=1280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000200000004000000050000", @ANYRES32, @ANYBLOB="00000400040000001ebc992d9d6d09", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) chdir(0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 7m7.132615013s ago: executing program 6 (id=1289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000200000004000000050000", @ANYRES32, @ANYBLOB="00000400040000001ebc992d9d6d09", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 7m3.358787438s ago: executing program 6 (id=1295): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0xffffffff80800048, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0x2f0, {0x80, 0x1, 0x2}, 0x62, 0x0, 0x0, 0x5, 0x100000000, 0x75, 0x73e, 0xffffffff9e5b0f20, 0x100, 0xfffffffffffffff7, 0x9, 0x0, 0x7d9080c9, 0x7, 0x8, 0x81, 0x8, 0xcc}}, 0xa0) getdents64(r3, 0x0, 0x0) 7m1.387851367s ago: executing program 6 (id=1299): openat$kvm(0xffffffffffffff9c, 0x0, 0x80e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6111471, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 6m58.167062317s ago: executing program 6 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r4, 0x4b47, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x4f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1c) 6m43.082178715s ago: executing program 40 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r4, 0x4b47, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x4f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1c) 5m3.102645507s ago: executing program 2 (id=1501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) accept$unix(r2, &(0x7f0000000640), 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x0, 0x81000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m2.060300632s ago: executing program 2 (id=1505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000200000004000000050000", @ANYRES32, @ANYBLOB="00000400040000001ebc992d9d6d09", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) chdir(0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 4m58.935615204s ago: executing program 2 (id=1510): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") 4m56.338705503s ago: executing program 2 (id=1515): openat$kvm(0xffffffffffffff9c, 0x0, 0x80e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6111471, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 4m52.871668983s ago: executing program 2 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 4m51.80164154s ago: executing program 2 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, 0xff31}, 0x8800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x12) 4m36.69374165s ago: executing program 41 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, 0xff31}, 0x8800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x12) 12.396796639s ago: executing program 0 (id=2044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000003000)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000000), 0x5005) 10.656760469s ago: executing program 5 (id=2048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r5, 0x1, 0x20000000, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x0, 0xffffffff, 0x5}}}}, 0x30}}, 0x0) 10.647968049s ago: executing program 0 (id=2049): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") inotify_init() r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x5, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03) 8.652942031s ago: executing program 5 (id=2050): socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r4, 0x1, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f0000000440)="96", 0x1}]) ppoll(&(0x7f0000000100)=[{r2, 0x30e0}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 7.219101376s ago: executing program 1 (id=2054): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x5, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03) 6.466101397s ago: executing program 5 (id=2055): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000200000004000000050000", @ANYBLOB="00000400040000001ebc992d9d6d09", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 6.377058704s ago: executing program 4 (id=2057): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x11, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd1}]}}]}, 0x44}}, 0x4000000) 6.088012258s ago: executing program 0 (id=2060): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r5}}) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5ffff}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r7, 0x0, 0xfc) sendmsg$inet(r7, 0x0, 0x4000080) syz_clone3(&(0x7f0000000480)={0x100000000, &(0x7f00000000c0), &(0x7f0000000180), 0x0, {0x32}, &(0x7f00000003c0)=""/168, 0xa8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58) 5.272467814s ago: executing program 1 (id=2061): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2300, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 5.164130192s ago: executing program 4 (id=2062): r0 = inotify_init() r1 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat(r2, &(0x7f0000000180)='./file0\x00', 0x8000, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 4.20618501s ago: executing program 4 (id=2064): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}]}]}, 0x28}}, 0x4000) 4.088085539s ago: executing program 1 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = dup(r1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xb}}, 0xffe0) close_range(r0, 0xffffffffffffffff, 0x0) 3.997883437s ago: executing program 4 (id=2066): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x24081, 0x0) connect$pppl2tp(r3, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000402505a8a4412001020b010902"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000000203010200000000000000000100000008000340fffffffd08000100010000230914db6d325de094d395d25e7e08b62b0002000000000101000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 3.665430973s ago: executing program 1 (id=2067): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0xcc2}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x74, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x74}}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x19, &(0x7f000001f700)={@broadcast, @remote, @val={@val, {0x88a8}}, {@mpls_uc={0x88a8, {[], @llc={@llc={0x0, 0x0, "0e"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="c851bdb4bb5e9f7bc33502edd120f5fce2c621f77621aeb601a45b0a46aa372f707d13087dec83ff3cfa51c65e92bf893ed6015e8e21e854", 0x38}, {&(0x7f0000000540)="beeeeb7975e2095dc0290104ad84fb8168eac9cdcae4ddd1fd46854257207e1ae0c96ec7bd665283901a8fe4cd6dc5431a73346c147870d09711120ac53505e1eb2b20bad6384b49a425413d47ef6b7fa366d50998c2cc821ef1231057188a716b2c82a4a54b7dc41a783bbd5009dd343141396b71610739c5eaa211ca67b2b151399ab9c1965129e35d064d5b3533b1aa956f035c5f2adb20ed9b5b2b6246c95e7773b95c7895d87e4ee39f28f65278a2e7915af216ca4e15a553a807c0fb3abc847a6a3f5dbd3f06d685b620eb84eca4135cb59d30fd3f2d5dd012d97f976378cab8", 0xe3}, {&(0x7f0000000640)="cc123e78d3c4812e5515680f4aadf06c45d4c309fee26c87220a4772bf9dd258cc79ff856c54f1c6f3067a6e6bfe73f1bb1ffd94355d66d3e3228519d37a1ac65c13f683c4e81898fde2d1f942acb2d96c2a6261974d23f5b4b4c7438e30b9c9a338", 0x62}, {&(0x7f00000004c0)="c7d6f5ce5bb11bb9744ac6d8f18fdb4d8d00332cd6017e8f0070eadba0fa", 0x1e}, {&(0x7f00000006c0)="ea6517c2", 0x4}], 0x5, 0x0, 0x0, 0x1000}], 0x1, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.183344932s ago: executing program 5 (id=2068): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_usb_connect(0x0, 0x8e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa6, 0xa3, 0x5a, 0x8, 0xd46, 0x2012, 0x4d36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x94, 0x0, 0x1, 0x8, 0xca, 0x6d, 0x0, [], [{{0x9, 0x5, 0x7, 0x3, 0x10, 0x7, 0x2f, 0xc}}]}}]}}]}}, 0x0) 2.33998896s ago: executing program 0 (id=2069): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) sendto$packet(r1, &(0x7f0000000040)="b8", 0x1, 0xd0, 0x0, 0x0) 2.208541861s ago: executing program 0 (id=2071): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, 0x0, 0x62cd70a9c52c57e7) write$UHID_INPUT(r6, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$sndseq(r4, &(0x7f0000001a80)=[{0x9, 0xc8, 0xd, 0xd2, @time={0x7, 0x1}, {0x9, 0xe}, {0x10, 0x8}, @note={0x7f, 0x2, 0x1, 0x6, 0x80000}}], 0x1c) r7 = mq_open(0x0, 0x40, 0x1, 0x0) mq_timedreceive(r7, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) pwritev(r7, 0x0, 0x0, 0x80000000, 0x8) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000380)={0x4b6c, 0x0, &(0x7f00000002c0)="9c2485cc9aed1198348620c798c9e36bb2783e9fce5f24cf6ab3bf5a0024", &(0x7f0000000340)="1e13f50ce8486db2a375547cf2cd4bb66432db439fda439a8c2e87d33469e46d3f6ddfde28047e6dd2174fbf9592fb", 0x1e, 0x2f}) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x0, 0x5}) setsockopt$sock_void(r8, 0x1, 0x2d, 0x0, 0x0) ioctl$TIOCMGET(r8, 0x5415, &(0x7f0000000080)) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000001740)=""/4060, &(0x7f00000004c0)=0xfdc) 2.143991336s ago: executing program 7 (id=2072): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001180), 0x1, 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 2.055867623s ago: executing program 7 (id=2073): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0xf8, r1, 0x1, 0x9, 0x6, @remote}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002400000002"], 0x0) 1.862807059s ago: executing program 7 (id=2074): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x32) socket$nl_generic(0x10, 0x3, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x328000, 0xc00, 0xb, 0x1}, 0x20) write(r0, &(0x7f0000000080)="163210f9ff02d49e303bc990eedeb12d2b171e9e600ea4065ca7bc6fc1d7beffd0750331075fb5bca2ea6fa48e3c", 0x2e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) eventfd2(0x0, 0x0) 1.442680963s ago: executing program 0 (id=2075): socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 1.441939773s ago: executing program 1 (id=2076): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000b0500150000000000300000000000000b0002976dd311f4290f55df392f80000060a09040000000000000000020000000900020073797a32000000000900010173797a30000000008400048020000180070001006374000014000280080001400000000a080001006d61746368000000500002803400030055b0f1230a6a7db23b6d45fcd6c231e61562388840e6520b620f0c97ff4d151ff6840ec33256fa29356e769a2ad1711be4930e0001006d756c7469706f727400000008000240000000011400000011000100435ca2c9e0c8f7bd76d2d4d1d702695655175dd4b78f37af27a1d138fee298d843c1aa68da4f9bbbf71e5023aae21daacd3f38916bd16fc181b1461871f3b0baab03905e6d07437e08b591fbba2cbc21520afaac91cbd80757befbaff48de5a1bb0889513d9a"], 0xd8}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b4000000000901020000000000000000010000050c00048008000140000000005c0002002c00018014000300fc00000000000000000000000000000014000400fc0000000000000000000000000000012c00018014000300fe8000000000000000000000000000aa140004002001000000000000000000000000000220000200060003400001000006000340000300000c00028005000100210000000900010073797a31000000000900010073797a3100000000262ade00000000000006435e52"], 0xb4}, 0x1, 0x0, 0x0, 0x48891}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000003, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000003c0)={0x78, 0xffffffffffffffda, 0x0, {0x40, 0x7, 0x0, {0x0, 0x4, 0xa54, 0xa0, 0x3, 0x3, 0x80, 0x80000000, 0x3, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, 0x78) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 1.088692641s ago: executing program 5 (id=2077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000060ec970012301100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 896.041257ms ago: executing program 4 (id=2078): syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ff"]) 872.572829ms ago: executing program 5 (id=2079): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) syz_usb_connect(0x2, 0x3a, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) write$dsp(r2, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000040)={0x5, "1ecba770734ad99ec0ee51783b94f79f1e2b7ab21a5c49c680ec2331ed597888b37a2b3249d6b1354f726e47466a2880bd8e0b5f8f5de3e570b01db276053d15", {0x5, 0xfffffffffffffffc}}) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0x4) socket$nl_generic(0x10, 0x3, 0x10) 606.630811ms ago: executing program 7 (id=2080): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x14) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 479.986971ms ago: executing program 4 (id=2081): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 437.078454ms ago: executing program 1 (id=2082): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000000c0)=0x4, 0x4) unshare(0x22020600) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000200)=0x1ff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000002240)=""/26, &(0x7f0000000280)=0x1a) 368.43626ms ago: executing program 7 (id=2083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 0s ago: executing program 7 (id=2084): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043ef50d88e45fd0e8a7cd8d4994f588e258a6e81551d649b22b543274"], 0xf8) socket$kcm(0x29, 0x5, 0x0) kernel console output (not intermixed with test programs): 5] audit: type=1326 audit(1756576365.089:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.7.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 945.597013][T12506] loop7: detected capacity change from 0 to 1024 [ 946.032380][T12502] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 946.080220][T12506] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 946.089177][T12506] EXT4-fs (loop7): orphan cleanup on readonly fs [ 946.096096][T12506] Quota error (device loop7): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 946.106366][T12506] EXT4-fs warning (device loop7): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 946.121132][T12506] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 946.124317][T12502] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 946.136699][T12506] EXT4-fs error (device loop7): ext4_free_blocks:6218: comm syz.7.1446: Freeing blocks not in datazone - block = 0, count = 4096 [ 946.139773][ T25] audit: type=1326 audit(1756576365.089:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.7.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 946.173698][T12506] EXT4-fs (loop7): 1 orphan inode deleted [ 946.179560][T12506] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 946.222162][T12505] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.1446: iget: bad extended attribute block 6 [ 946.285423][T12502] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 946.333514][ T25] audit: type=1326 audit(1756576365.089:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.7.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 946.382339][ T25] audit: type=1326 audit(1756576365.089:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.7.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 946.576174][ T25] audit: type=1326 audit(1756576365.089:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.7.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 946.673055][T12514] loop2: detected capacity change from 0 to 1024 [ 946.695217][ T25] audit: type=1326 audit(1756576365.089:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.7.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 946.812558][ T25] audit: type=1326 audit(1756576365.089:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.7.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 946.885611][T12514] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 946.928319][ T25] audit: type=1326 audit(1756576365.089:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.7.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 946.956094][ T25] audit: type=1326 audit(1756576365.089:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.7.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 947.003732][T12517] loop7: detected capacity change from 0 to 4096 [ 947.116247][T12517] EXT4-fs (loop7): Test dummy encryption mode enabled [ 947.238408][T12517] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 947.376873][T12525] loop0: detected capacity change from 0 to 1024 [ 947.631554][T12525] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 947.644772][T12525] EXT4-fs (loop0): orphan cleanup on readonly fs [ 947.654952][T12525] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 947.669849][T12525] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 947.678969][T12525] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.1452: Freeing blocks not in datazone - block = 0, count = 4096 [ 947.696793][T12525] EXT4-fs (loop0): 1 orphan inode deleted [ 947.703128][T12525] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 947.795385][T12525] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.1452: iget: bad extended attribute block 6 [ 948.573323][T12540] loop0: detected capacity change from 0 to 512 [ 949.058454][T12551] loop5: detected capacity change from 0 to 1024 [ 950.283947][T12540] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 950.309125][T12540] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.364743][ T25] kauditd_printk_skb: 33 callbacks suppressed [ 950.364757][ T25] audit: type=1326 audit(1756576374.569:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ce909be9 code=0x7ffc0000 [ 950.548212][ T25] audit: type=1326 audit(1756576374.609:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f54ce909be9 code=0x7ffc0000 [ 950.621250][T12551] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 950.630278][T12551] EXT4-fs (loop5): orphan cleanup on readonly fs [ 950.657044][T12557] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 950.690211][T12551] Quota error (device loop5): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 950.701517][T12551] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 950.716223][T12551] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 950.723120][T12551] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.1455: Freeing blocks not in datazone - block = 0, count = 4096 [ 950.737244][T12551] EXT4-fs (loop5): 1 orphan inode deleted [ 950.743041][T12551] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 950.788987][T12550] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1455: iget: bad extended attribute block 6 [ 950.908229][ T25] audit: type=1326 audit(1756576374.609:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ce909be9 code=0x7ffc0000 [ 951.151769][T12557] loop2: detected capacity change from 0 to 1756 [ 951.203594][ T25] audit: type=1326 audit(1756576374.609:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54ce909be9 code=0x7ffc0000 [ 951.227542][ T25] audit: type=1326 audit(1756576374.609:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ce909be9 code=0x7ffc0000 [ 951.307571][ T25] audit: type=1326 audit(1756576374.609:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54ce909be9 code=0x7ffc0000 [ 951.347072][ T25] audit: type=1326 audit(1756576374.609:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ce909be9 code=0x7ffc0000 [ 951.440925][ T25] audit: type=1326 audit(1756576374.609:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f54ce909be9 code=0x7ffc0000 [ 951.466777][ T25] audit: type=1326 audit(1756576374.609:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ce909be9 code=0x7ffc0000 [ 954.214329][T12590] 9pnet: Insufficient options for proto=fd [ 954.304569][T12596] loop0: detected capacity change from 0 to 512 [ 954.448224][T12601] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 954.511975][T12606] loop1: detected capacity change from 0 to 512 [ 954.837773][T12596] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 954.939757][T12596] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.986173][T12627] device syzkaller0 entered promiscuous mode [ 959.511435][T12654] bridge0: port 3(gretap0) entered blocking state [ 959.518485][T12654] bridge0: port 3(gretap0) entered disabled state [ 959.548077][T12654] device gretap0 entered promiscuous mode [ 959.560582][T12654] bridge0: port 3(gretap0) entered blocking state [ 959.567055][T12654] bridge0: port 3(gretap0) entered forwarding state [ 961.212989][T12664] loop0: detected capacity change from 0 to 1024 [ 963.502860][T12674] loop5: detected capacity change from 0 to 1024 [ 964.060953][T12664] EXT4-fs: failed to create workqueue [ 964.066361][T12664] EXT4-fs (loop0): mount failed [ 964.107068][T12669] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 964.199936][T12674] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 964.208915][T12674] EXT4-fs (loop5): orphan cleanup on readonly fs [ 964.216240][T12674] __quota_error: 43 callbacks suppressed [ 964.216253][T12674] Quota error (device loop5): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 964.232202][T12674] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 964.246816][T12674] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 964.254425][T12674] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.1481: Freeing blocks not in datazone - block = 0, count = 4096 [ 964.268584][T12674] EXT4-fs (loop5): 1 orphan inode deleted [ 964.274410][T12674] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 964.329968][T12671] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1481: iget: bad extended attribute block 6 [ 964.505758][T12681] loop1: detected capacity change from 0 to 256 [ 964.520580][T12679] loop7: detected capacity change from 0 to 512 [ 964.624375][T12681] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 964.690793][T12681] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 964.758900][T12681] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 967.986520][T12695] process 'syz.2.1488' launched './file0' with NULL argv: empty string added [ 969.394247][ T25] audit: type=1326 audit(1756576393.599:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.7.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 969.872917][ T25] audit: type=1326 audit(1756576393.979:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.7.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 970.678237][ T25] audit: type=1326 audit(1756576394.729:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.7.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 971.983394][T12741] loop1: detected capacity change from 0 to 512 [ 972.009542][ T25] audit: type=1326 audit(1756576394.729:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.7.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 972.038134][T12738] tipc: Enabled bearer , priority 0 [ 972.071291][T12738] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 972.167606][T12741] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 972.182002][T12741] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.221201][T12742] tipc: Resetting bearer [ 972.381064][ T25] audit: type=1326 audit(1756576394.729:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.7.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 972.445575][T12737] tipc: Disabling bearer [ 973.478034][T12753] loop7: detected capacity change from 0 to 512 [ 973.694495][T12753] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 973.803394][T12753] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.596166][T12771] loop2: detected capacity change from 0 to 512 [ 974.635877][T12774] tipc: Enabled bearer , priority 0 [ 974.650817][T12774] device syzkaller0 entered promiscuous mode [ 974.685338][T12775] tipc: Enabled bearer , priority 0 [ 974.730083][T12781] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 974.745567][T12771] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 974.779566][T12771] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.796196][T12776] loop5: detected capacity change from 0 to 4096 [ 974.821805][T12775] tipc: Resetting bearer [ 974.930101][T12774] tipc: Resetting bearer [ 975.003894][T12776] EXT4-fs (loop5): Test dummy encryption mode enabled [ 975.072628][T12776] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 975.800273][T12768] tipc: Disabling bearer [ 975.814978][ T4591] tipc: Node number set to 2442110224 [ 975.850125][T12773] tipc: Resetting bearer [ 975.863368][T12773] tipc: Disabling bearer [ 976.876430][T12804] loop0: detected capacity change from 0 to 1024 [ 976.956430][T12804] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 976.965522][T12804] EXT4-fs (loop0): orphan cleanup on readonly fs [ 976.977205][T12804] Quota error (device loop0): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 976.987447][T12804] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 977.002092][T12804] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 977.009804][T12804] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.1507: Freeing blocks not in datazone - block = 0, count = 4096 [ 977.024515][T12804] EXT4-fs (loop0): 1 orphan inode deleted [ 977.030327][T12804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 977.052035][T12804] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.1507: iget: bad extended attribute block 6 [ 978.653716][T12821] loop2: detected capacity change from 0 to 256 [ 979.363110][T12821] FAT-fs (loop2): bogus number of FAT sectors [ 979.369221][T12821] FAT-fs (loop2): Can't find a valid FAT filesystem [ 979.428237][T12830] tipc: Enabled bearer , priority 0 [ 979.436453][T12830] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 979.446494][T12830] tipc: Resetting bearer [ 979.568721][T12829] tipc: Disabling bearer [ 980.318728][T12837] loop2: detected capacity change from 0 to 512 [ 982.202744][T12852] loop1: detected capacity change from 0 to 1024 [ 982.602702][T12854] loop5: detected capacity change from 0 to 1024 [ 983.767693][T12852] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 983.789729][T12854] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 983.833456][T12854] EXT4-fs (loop5): orphan cleanup on readonly fs [ 983.840591][T12852] EXT4-fs (loop1): orphan cleanup on readonly fs [ 983.878583][T12854] Quota error (device loop5): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 983.889556][T12854] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 983.904225][T12854] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 983.912467][T12854] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.1518: Freeing blocks not in datazone - block = 0, count = 4096 [ 983.929252][T12854] EXT4-fs (loop5): 1 orphan inode deleted [ 983.935081][T12854] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 983.940106][T12852] Quota error (device loop1): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 983.956940][T12852] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 983.971626][T12852] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 983.978494][T12852] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.1517: Freeing blocks not in datazone - block = 0, count = 4096 [ 984.016045][T12853] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1518: iget: bad extended attribute block 6 [ 984.804285][T12852] EXT4-fs (loop1): 1 orphan inode deleted [ 984.810201][T12852] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 986.210542][T12873] bridge0: port 3(gretap0) entered blocking state [ 986.217055][T12873] bridge0: port 3(gretap0) entered disabled state [ 986.225665][T12873] device gretap0 entered promiscuous mode [ 986.232279][T12873] bridge0: port 3(gretap0) entered blocking state [ 986.238762][T12873] bridge0: port 3(gretap0) entered forwarding state [ 987.313985][T12887] loop0: detected capacity change from 0 to 1024 [ 988.837251][T12887] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 988.846472][T12887] EXT4-fs (loop0): orphan cleanup on readonly fs [ 988.853407][T12887] Quota error (device loop0): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 988.864236][T12887] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 988.879364][T12887] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 988.886398][T12887] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.1524: Freeing blocks not in datazone - block = 0, count = 4096 [ 989.055071][T12887] EXT4-fs (loop0): 1 orphan inode deleted [ 989.060880][T12887] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 989.259690][T12884] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.1524: iget: bad extended attribute block 6 [ 990.734552][T12908] loop5: detected capacity change from 0 to 512 [ 991.285731][T12914] tipc: Enabled bearer , priority 0 [ 991.308973][T12914] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 991.373027][T12914] tipc: Resetting bearer [ 991.472407][T12912] tipc: Disabling bearer [ 992.781907][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.788219][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.683550][T12945] loop1: detected capacity change from 0 to 1024 [ 996.249295][T12945] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 996.265137][T12945] EXT4-fs (loop1): orphan cleanup on readonly fs [ 996.279555][T12945] Quota error (device loop1): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 996.290312][T12945] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 996.305004][T12945] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 996.317855][T12945] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.1536: Freeing blocks not in datazone - block = 0, count = 4096 [ 996.681835][T12945] EXT4-fs (loop1): 1 orphan inode deleted [ 996.687616][T12945] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 996.744115][T12943] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.1536: iget: bad extended attribute block 6 [ 999.467901][T12968] loop7: detected capacity change from 0 to 1024 [ 999.979493][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.306086][T12968] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1000.316730][T12968] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1000.323605][T12968] Quota error (device loop7): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 1000.333825][T12968] EXT4-fs warning (device loop7): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1000.348480][T12968] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1000.369981][T12968] EXT4-fs error (device loop7): ext4_free_blocks:6218: comm syz.7.1542: Freeing blocks not in datazone - block = 0, count = 4096 [ 1000.407877][T12968] EXT4-fs (loop7): 1 orphan inode deleted [ 1000.413760][T12968] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1001.281371][T12989] loop1: detected capacity change from 0 to 1024 [ 1001.624413][T12996] loop0: detected capacity change from 0 to 1024 [ 1001.896350][T12996] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1001.913773][T12996] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1001.927393][T12996] Quota error (device loop0): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 1001.938583][T12996] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1001.953401][T12996] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1001.966657][T12996] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.1547: Freeing blocks not in datazone - block = 0, count = 4096 [ 1001.993978][T12996] EXT4-fs (loop0): 1 orphan inode deleted [ 1001.999911][T12996] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1002.309627][T12995] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.1547: iget: bad extended attribute block 6 [ 1002.995915][T12989] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1003.274989][ T25] audit: type=1800 audit(1756576427.479:517): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1548" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1003.417576][T12989] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1548: Allocating blocks 449-513 which overlap fs metadata [ 1003.714150][T13016] loop5: detected capacity change from 0 to 1024 [ 1004.837778][T13016] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1004.967421][T13016] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1004.975603][T12987] EXT4-fs (loop1): pa ffff88805dfd1ee0: logic 48, phys. 177, len 21 [ 1004.983715][T12987] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1005.021732][T13016] Quota error (device loop5): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 1005.032181][T13016] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1005.047606][T13016] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1005.056007][T13016] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.1550: Freeing blocks not in datazone - block = 0, count = 4096 [ 1005.070118][T13016] EXT4-fs (loop5): 1 orphan inode deleted [ 1005.075867][T13016] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1005.131582][T13014] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1550: iget: bad extended attribute block 6 [ 1005.530938][T13019] loop0: detected capacity change from 0 to 4096 [ 1006.515992][T13019] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1006.663591][T13019] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1006.962748][T13036] loop5: detected capacity change from 0 to 256 [ 1007.139824][T13036] FAT-fs (loop5): bogus number of FAT sectors [ 1007.146025][T13036] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1007.259149][T13046] loop1: detected capacity change from 0 to 1024 [ 1007.562553][T13046] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1007.575728][T13046] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1007.588109][T13046] Quota error (device loop1): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 1007.598781][T13046] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1007.613994][T13046] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1007.626746][T13046] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.1554: Freeing blocks not in datazone - block = 0, count = 4096 [ 1007.648357][T13046] EXT4-fs (loop1): 1 orphan inode deleted [ 1007.654250][T13046] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1007.749047][T13044] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.1554: iget: bad extended attribute block 6 [ 1008.866398][ T4224] Bluetooth: hci1: command 0x0409 tx timeout [ 1011.703959][T13079] loop1: detected capacity change from 0 to 1024 [ 1011.895805][ T4971] Bluetooth: hci1: command 0x041b tx timeout [ 1011.931381][T13025] chnl_net:caif_netlink_parms(): no params data found [ 1012.046327][T13086] loop5: detected capacity change from 0 to 1024 [ 1012.196710][T13086] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1012.210061][T13086] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1012.219983][T13086] Quota error (device loop5): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 1012.230476][T13086] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1012.245193][T13086] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1012.254322][T13086] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.1562: Freeing blocks not in datazone - block = 0, count = 4096 [ 1012.271659][T13086] EXT4-fs (loop5): 1 orphan inode deleted [ 1012.277437][T13086] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1012.367947][T13086] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1562: iget: bad extended attribute block 6 [ 1012.579911][T13084] loop0: detected capacity change from 0 to 512 [ 1012.653981][T13079] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1012.775890][T13084] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1012.843300][T13084] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.911358][T13025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.913188][T13101] loop5: detected capacity change from 0 to 512 [ 1012.935984][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.987078][T13025] device bridge_slave_0 entered promiscuous mode [ 1012.996169][T13025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.003582][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.016117][T13025] device bridge_slave_1 entered promiscuous mode [ 1013.910832][ T25] audit: type=1326 audit(1756576438.119:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1013.945771][T13101] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1013.980287][ T4224] Bluetooth: hci1: command 0x040f tx timeout [ 1014.025426][T13025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.057142][ T25] audit: type=1326 audit(1756576438.139:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1014.094582][T13101] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.110614][T13025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.163861][ T25] audit: type=1326 audit(1756576438.139:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1014.198861][T13108] loop7: detected capacity change from 0 to 1756 [ 1014.235683][ T25] audit: type=1326 audit(1756576438.139:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1014.672297][T13025] team0: Port device team_slave_0 added [ 1014.688763][ T25] audit: type=1326 audit(1756576438.139:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1014.742545][T13025] team0: Port device team_slave_1 added [ 1014.858468][ T25] audit: type=1326 audit(1756576438.139:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1014.950147][T13128] loop1: detected capacity change from 0 to 256 [ 1015.017017][ T25] audit: type=1326 audit(1756576438.139:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1015.056723][T13025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.068768][T13128] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1015.121447][ T25] audit: type=1326 audit(1756576438.139:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1015.144510][T13128] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1015.254731][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.289735][ T25] audit: type=1326 audit(1756576438.179:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1015.366674][T13128] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1015.944116][ T25] audit: type=1326 audit(1756576438.179:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.7.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1016.034027][T13025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.088383][ T4224] Bluetooth: hci1: command 0x0419 tx timeout [ 1016.305616][T13025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.386097][T13147] loop5: detected capacity change from 0 to 512 [ 1016.396991][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.567924][T13147] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1016.619267][T13147] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.656289][T13025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.357237][T13025] device hsr_slave_0 entered promiscuous mode [ 1017.855817][T13025] device hsr_slave_1 entered promiscuous mode [ 1017.994008][T13025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.021828][T13025] Cannot create hsr debugfs directory [ 1018.059263][T13162] loop1: detected capacity change from 0 to 4096 [ 1018.110495][T13162] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1018.205179][T13162] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1018.842287][T13177] loop1: detected capacity change from 0 to 1024 [ 1018.914891][T13180] loop7: detected capacity change from 0 to 512 [ 1018.937919][T13177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1019.133695][T13180] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1019.255628][T13180] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.397325][T13203] loop1: detected capacity change from 0 to 256 [ 1020.283313][ T25] kauditd_printk_skb: 55 callbacks suppressed [ 1020.284394][ T25] audit: type=1326 audit(1756576444.459:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1020.730595][ T25] audit: type=1326 audit(1756576444.459:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1020.843885][T13203] FAT-fs (loop1): bogus number of FAT sectors [ 1020.865194][T13203] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1020.905984][ T25] audit: type=1326 audit(1756576444.459:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1020.953433][T13213] loop5: detected capacity change from 0 to 512 [ 1020.980868][T13025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1020.988254][ T25] audit: type=1326 audit(1756576444.459:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1020.996426][T13215] loop0: detected capacity change from 0 to 512 [ 1021.013945][T13025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1021.061543][T13025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1021.086780][T13213] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1021.110362][T13213] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.215560][T13025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1021.241981][ T25] audit: type=1326 audit(1756576444.459:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1021.605522][T13215] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1021.797064][T13215] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.003490][T13233] loop1: detected capacity change from 0 to 256 [ 1022.045235][T13233] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1022.057035][T13233] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1022.189473][ T25] audit: type=1326 audit(1756576444.459:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1023.337242][T13233] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1024.786183][T13245] loop0: detected capacity change from 0 to 1024 [ 1024.851729][T13245] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1024.860393][T13245] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1024.867559][T13245] Quota error (device loop0): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 1024.877861][T13245] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1024.892477][T13245] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1024.899786][T13245] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.1584: Freeing blocks not in datazone - block = 0, count = 4096 [ 1024.925143][ T25] audit: type=1326 audit(1756576444.459:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1024.948913][T13245] EXT4-fs (loop0): 1 orphan inode deleted [ 1024.954855][T13245] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1025.005843][T13244] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.1584: iget: bad extended attribute block 6 [ 1025.183769][T13025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.254876][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1025.350214][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1025.366262][T13025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.377697][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1025.384532][ T25] audit: type=1326 audit(1756576444.459:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1025.386823][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1025.487163][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.494316][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.499700][ T25] audit: type=1326 audit(1756576444.459:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1025.516828][T13258] loop5: detected capacity change from 0 to 1024 [ 1025.580674][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1025.618831][ T25] audit: type=1326 audit(1756576444.459:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1025.685388][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1025.730949][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1025.762044][ T25] audit: type=1326 audit(1756576444.459:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1025.776654][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.791483][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.824677][T13258] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1025.962654][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1025.971364][ T25] audit: type=1326 audit(1756576444.459:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1026.013435][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1026.030458][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1026.049001][ T25] audit: type=1326 audit(1756576444.459:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1026.074817][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1026.140963][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1026.203461][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.228073][ T25] audit: type=1326 audit(1756576444.459:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac3291be9 code=0x7ffc0000 [ 1026.296400][T13025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1026.379254][T13025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1026.451284][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1026.472367][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1026.522748][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.563013][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1026.602523][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.669639][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1026.757645][T13281] loop5: detected capacity change from 0 to 512 [ 1026.881526][T13281] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1026.905466][T13281] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.293804][T13295] loop1: detected capacity change from 0 to 1024 [ 1028.649278][T13295] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1028.664433][T13295] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1028.677946][T13295] Quota error (device loop1): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 1028.688663][T13295] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1028.704063][T13295] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1028.722049][T13295] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.1591: Freeing blocks not in datazone - block = 0, count = 4096 [ 1028.741096][T13295] EXT4-fs (loop1): 1 orphan inode deleted [ 1028.746941][T13295] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1028.851337][T13291] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.1591: iget: bad extended attribute block 6 [ 1029.052220][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1029.065329][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1029.126247][T13025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.530361][T13321] loop5: detected capacity change from 0 to 512 [ 1030.614847][ T25] audit: type=1326 audit(1756576454.799:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1030.971841][T13321] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1031.157562][T13321] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.168268][ T25] audit: type=1326 audit(1756576454.799:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1031.256142][T13325] loop7: detected capacity change from 0 to 4096 [ 1031.310017][ T25] audit: type=1326 audit(1756576454.799:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1031.337423][T13333] loop1: detected capacity change from 0 to 256 [ 1031.365786][T13325] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1031.373611][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1031.398206][ T25] audit: type=1326 audit(1756576454.799:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1031.410494][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1031.442731][ T25] audit: type=1326 audit(1756576454.799:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1031.466621][T13333] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1031.473880][T13325] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1031.520468][T13333] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1031.531839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1031.586322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1031.608426][T13333] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1031.661643][T13025] device veth0_vlan entered promiscuous mode [ 1031.677067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1031.696193][ T25] audit: type=1326 audit(1756576454.809:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1031.730234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1031.773371][T13025] device veth1_vlan entered promiscuous mode [ 1031.979683][ T25] audit: type=1326 audit(1756576454.809:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1031.989736][T13025] device veth0_macvtap entered promiscuous mode [ 1032.068773][T13340] loop0: detected capacity change from 0 to 512 [ 1032.075530][ T25] audit: type=1326 audit(1756576454.809:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1032.399696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1032.407981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1032.433664][ T25] audit: type=1326 audit(1756576454.809:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1032.480204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1032.530109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1032.609722][ T25] audit: type=1326 audit(1756576454.809:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3060be9 code=0x7ffc0000 [ 1032.633062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1032.676878][T13348] loop7: detected capacity change from 0 to 1024 [ 1032.705944][T13340] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1032.727871][T13340] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.922026][T13025] device veth1_macvtap entered promiscuous mode [ 1033.025154][T13356] loop5: detected capacity change from 0 to 512 [ 1034.105262][T13356] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1034.134314][T13356] EXT4-fs (loop5): invalid journal inode [ 1034.140453][T13356] EXT4-fs (loop5): can't get journal size [ 1034.211993][T13356] EXT4-fs (loop5): 1 truncate cleaned up [ 1034.217759][T13356] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 1034.832309][T13348] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1035.011216][T13348] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3871: comm syz.7.1599: Allocating blocks 449-513 which overlap fs metadata [ 1035.206237][T13348] EXT4-fs (loop7): pa ffff8880613292a0: logic 48, phys. 177, len 21 [ 1035.214421][T13348] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1035.656361][ T4326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.936713][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.038457][T13373] loop0: detected capacity change from 0 to 4096 [ 1036.085324][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.119017][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.273478][T13380] loop1: detected capacity change from 0 to 512 [ 1036.368315][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.467972][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.574199][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.682002][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.842680][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.058888][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.197378][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.383856][T13025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.615768][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.771332][T13380] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1037.783950][T13373] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1037.789570][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.794989][T13380] EXT4-fs (loop1): invalid journal inode [ 1037.806486][T13380] EXT4-fs (loop1): can't get journal size [ 1038.154083][T13380] EXT4-fs (loop1): 1 truncate cleaned up [ 1038.159897][T13380] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 1038.297836][T13373] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1038.770768][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.889509][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.932303][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.959547][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.989452][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.014528][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.039450][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.059455][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.121539][T13025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.307529][T13025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.334061][T13396] loop1: detected capacity change from 0 to 256 [ 1039.341384][T13025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.546837][T13025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.684855][T13025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.845599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1039.895779][T13396] FAT-fs (loop1): bogus number of FAT sectors [ 1040.037992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1040.109589][T13396] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1040.171061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1040.200450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1040.218367][T13401] loop0: detected capacity change from 0 to 4096 [ 1040.237343][T13383] tipc: Enabling of bearer rejected, failed to enable media [ 1040.282147][ T4326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.389735][T13401] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1040.453353][ T4326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.500102][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.508650][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.516447][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.525248][T13401] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1040.564283][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.601401][ T4326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.625938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1040.672999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1041.534963][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 1041.534977][ T25] audit: type=1326 audit(1756576465.739:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1041.653359][ T25] audit: type=1326 audit(1756576465.799:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1042.268226][ T25] audit: type=1326 audit(1756576465.799:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1042.526221][ T25] audit: type=1326 audit(1756576465.799:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1042.560921][ T25] audit: type=1326 audit(1756576465.799:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1042.591186][ T25] audit: type=1326 audit(1756576465.799:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1042.615427][T13433] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1042.649540][ T25] audit: type=1326 audit(1756576465.799:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1042.687193][ T25] audit: type=1326 audit(1756576465.799:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1042.792965][T13436] fuse: Bad value for 'group_id' [ 1043.037220][ T25] audit: type=1326 audit(1756576465.799:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1043.062386][T13434] loop4: detected capacity change from 0 to 1756 [ 1043.162168][T13441] loop0: detected capacity change from 0 to 1024 [ 1043.252898][ T25] audit: type=1326 audit(1756576465.799:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1043.284954][T13444] loop7: detected capacity change from 0 to 128 [ 1043.568205][T13444] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 1043.584112][T13452] tipc: Enabling of bearer rejected, failed to enable media [ 1043.744524][T13441] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1044.788834][T13472] loop1: detected capacity change from 0 to 512 [ 1045.851035][T13472] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1045.877007][T13472] EXT4-fs (loop1): invalid journal inode [ 1045.883098][T13472] EXT4-fs (loop1): can't get journal size [ 1046.749684][T13472] EXT4-fs: failed to create workqueue [ 1046.755106][T13472] EXT4-fs (loop1): mount failed [ 1046.849963][T13479] loop4: detected capacity change from 0 to 512 [ 1046.954506][T13485] loop7: detected capacity change from 0 to 256 [ 1047.005017][T13484] loop0: detected capacity change from 0 to 512 [ 1047.040490][T13479] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1047.143529][T13485] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1047.159598][T13479] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.228793][T13485] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1047.413039][T13485] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1047.462131][T13484] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1047.499701][T13484] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.549298][T13511] loop7: detected capacity change from 0 to 512 [ 1049.634859][T13511] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1049.644807][T13511] EXT4-fs (loop7): invalid journal inode [ 1049.650830][T13511] EXT4-fs (loop7): can't get journal size [ 1049.671632][T13511] EXT4-fs (loop7): 1 truncate cleaned up [ 1049.677341][T13511] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 1050.000616][ T4326] bridge0: port 3(gretap0) entered disabled state [ 1050.118120][ T4326] device gretap0 left promiscuous mode [ 1050.165889][ T4326] bridge0: port 3(gretap0) entered disabled state [ 1050.406829][T13530] loop7: detected capacity change from 0 to 4096 [ 1050.451691][T13530] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1050.481300][T13532] loop0: detected capacity change from 0 to 4096 [ 1050.552547][T13530] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1050.603371][T13532] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1050.713281][T13532] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1050.829447][T13540] fuse: Bad value for 'fd' [ 1053.174049][T13556] loop7: detected capacity change from 0 to 512 [ 1053.364461][T13556] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1053.390201][T13556] EXT4-fs (loop7): invalid journal inode [ 1053.396157][T13556] EXT4-fs (loop7): can't get journal size [ 1053.478112][T13556] EXT4-fs (loop7): 1 truncate cleaned up [ 1053.484376][T13556] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 1054.223160][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.229531][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.523271][T13582] loop4: detected capacity change from 0 to 512 [ 1056.531954][T13581] loop7: detected capacity change from 0 to 256 [ 1056.668793][T13581] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1056.734448][T13583] loop0: detected capacity change from 0 to 4096 [ 1056.753211][T13583] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1056.767021][T13582] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1056.785605][T13583] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1056.849703][T13581] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1056.873066][T13581] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1056.909635][T13582] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.909861][T13580] loop1: detected capacity change from 0 to 4096 [ 1056.967926][T13580] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1057.131324][T13580] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1057.168626][ T4326] device hsr_slave_0 left promiscuous mode [ 1057.249859][ T4326] device hsr_slave_1 left promiscuous mode [ 1057.278808][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.301619][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.360069][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.378033][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.648991][ T4326] device bridge_slave_1 left promiscuous mode [ 1057.812987][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.076053][ T4326] device bridge_slave_0 left promiscuous mode [ 1058.099713][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.150383][ T4326] device veth1_macvtap left promiscuous mode [ 1058.156448][ T4326] device veth0_macvtap left promiscuous mode [ 1058.198552][ T4326] device veth1_vlan left promiscuous mode [ 1058.207800][ T4326] device veth0_vlan left promiscuous mode [ 1058.816030][ T25] kauditd_printk_skb: 55 callbacks suppressed [ 1058.839487][ T25] audit: type=1326 audit(1756576482.839:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1058.988101][T13608] loop1: detected capacity change from 0 to 512 [ 1059.087927][T13608] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1059.284840][T13608] EXT4-fs (loop1): invalid journal inode [ 1059.290689][T13608] EXT4-fs (loop1): can't get journal size [ 1059.307539][T13608] EXT4-fs (loop1): 1 truncate cleaned up [ 1059.313338][T13608] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 1059.384073][ T25] audit: type=1326 audit(1756576482.839:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1059.407885][ T25] audit: type=1326 audit(1756576482.849:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1059.436463][ T25] audit: type=1326 audit(1756576482.849:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1059.487479][ T25] audit: type=1326 audit(1756576482.849:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1059.522557][ T25] audit: type=1326 audit(1756576482.849:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1059.625193][ T25] audit: type=1326 audit(1756576482.849:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1059.740702][ T25] audit: type=1326 audit(1756576482.849:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1059.808195][ T25] audit: type=1326 audit(1756576482.849:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1059.906447][T13617] fuse: Bad value for 'fd' [ 1060.047260][T13616] loop1: detected capacity change from 0 to 256 [ 1060.327348][T13616] FAT-fs (loop1): bogus number of FAT sectors [ 1060.347822][ T25] audit: type=1326 audit(1756576482.849:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbcc1abe9 code=0x7ffc0000 [ 1060.484378][T13616] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1060.901303][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 1060.980216][ T4326] team0 (unregistering): Port device team_slave_0 removed [ 1061.036935][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.129928][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.497604][ T4326] bond0 (unregistering): Released all slaves [ 1061.919680][T13622] loop4: detected capacity change from 0 to 512 [ 1062.158813][T13632] loop0: detected capacity change from 0 to 512 [ 1063.335629][T13622] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1063.401204][T13622] EXT4-fs (loop4): invalid journal inode [ 1063.406931][T13622] EXT4-fs (loop4): can't get journal size [ 1063.593041][T13622] EXT4-fs (loop4): 1 truncate cleaned up [ 1063.598724][T13622] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 1063.620719][T13632] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1064.599705][T13632] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.757387][T13654] loop1: detected capacity change from 0 to 512 [ 1065.757511][T13658] loop5: detected capacity change from 0 to 256 [ 1065.805886][T13654] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1065.827209][T13654] EXT4-fs (loop1): invalid journal inode [ 1065.833306][T13654] EXT4-fs (loop1): can't get journal size [ 1066.051613][T13654] EXT4-fs (loop1): 1 truncate cleaned up [ 1066.057396][T13654] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 1066.984002][T13657] loop7: detected capacity change from 0 to 1024 [ 1067.009316][T13658] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1067.089690][T13658] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1067.130954][T13657] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1067.139935][T13657] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1067.147198][T13657] __quota_error: 2 callbacks suppressed [ 1067.147213][T13657] Quota error (device loop7): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 1067.163234][T13657] EXT4-fs warning (device loop7): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1067.178081][T13657] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1067.181022][T13665] loop0: detected capacity change from 0 to 512 [ 1067.188625][T13657] EXT4-fs error (device loop7): ext4_free_blocks:6218: comm syz.7.1653: Freeing blocks not in datazone - block = 0, count = 4096 [ 1067.207485][T13657] EXT4-fs (loop7): 1 orphan inode deleted [ 1067.213732][T13657] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1067.234331][T13658] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1067.405945][T13657] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.1653: iget: bad extended attribute block 6 [ 1067.475088][T13665] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1067.492577][T13665] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.841732][T13685] fuse: Bad value for 'fd' [ 1072.490394][T13697] fuse: Bad value for 'user_id' [ 1075.027542][T13719] loop0: detected capacity change from 0 to 512 [ 1075.052548][T13721] loop4: detected capacity change from 0 to 512 [ 1075.449307][T13719] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1075.474223][T13739] loop5: detected capacity change from 0 to 512 [ 1075.480898][T13721] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1075.535530][T13719] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.546305][T13721] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.661035][T13739] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1075.751541][T13739] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.730949][T13751] loop7: detected capacity change from 0 to 512 [ 1078.580338][T13751] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1078.608760][T13751] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.710464][T13754] loop1: detected capacity change from 0 to 4096 [ 1078.842863][T13754] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1080.299490][T13754] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1081.717107][T13788] loop0: detected capacity change from 0 to 512 [ 1081.844987][T13795] loop7: detected capacity change from 0 to 512 [ 1082.073866][T13805] loop4: detected capacity change from 0 to 1024 [ 1082.498662][T13805] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1082.536897][T13805] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1082.553434][T13788] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1082.573456][T13805] Quota error (device loop4): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 1082.584012][T13805] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1082.598775][T13805] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1082.611056][T13805] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.1673: Freeing blocks not in datazone - block = 0, count = 4096 [ 1082.628039][T13805] EXT4-fs (loop4): 1 orphan inode deleted [ 1082.633855][T13805] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1082.648266][T13795] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1082.661999][T13795] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.699607][T13788] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.776633][T13803] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.1673: iget: bad extended attribute block 6 [ 1084.270855][ T25] audit: type=1326 audit(1756576508.449:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1084.659212][ T25] audit: type=1326 audit(1756576508.449:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1084.996164][ T25] audit: type=1326 audit(1756576508.459:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1085.094921][ T25] audit: type=1326 audit(1756576508.459:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1085.298553][ T25] audit: type=1326 audit(1756576508.459:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1086.135577][T13845] loop4: detected capacity change from 0 to 256 [ 1086.138797][ T25] audit: type=1326 audit(1756576508.459:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1086.239656][T13845] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1086.258958][T13849] loop5: detected capacity change from 0 to 512 [ 1086.304477][T13845] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1086.332080][T13845] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1086.395067][ T25] audit: type=1326 audit(1756576508.459:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1086.436893][ T25] audit: type=1326 audit(1756576508.469:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1086.699150][T13849] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1086.732307][T13849] EXT4-fs (loop5): invalid journal inode [ 1086.738547][T13849] EXT4-fs (loop5): can't get journal size [ 1087.054404][T13849] EXT4-fs (loop5): 1 truncate cleaned up [ 1087.060374][T13849] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 1087.386945][ T25] audit: type=1326 audit(1756576508.469:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a369e1be9 code=0x7ffc0000 [ 1087.409833][T13861] loop1: detected capacity change from 0 to 512 [ 1087.525435][T13861] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1087.634608][T13861] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.963992][T13914] bridge0: port 3(gretap0) entered blocking state [ 1090.970512][T13914] bridge0: port 3(gretap0) entered disabled state [ 1090.977941][T13914] device gretap0 entered promiscuous mode [ 1090.984136][T13914] bridge0: port 3(gretap0) entered blocking state [ 1090.990621][T13914] bridge0: port 3(gretap0) entered forwarding state [ 1094.349504][T13932] loop5: detected capacity change from 0 to 256 [ 1094.414277][T13935] loop0: detected capacity change from 0 to 512 [ 1094.495006][T13932] FAT-fs (loop5): bogus number of FAT sectors [ 1094.534796][T13932] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1095.527422][T13935] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1095.644780][T13935] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.741596][T13953] loop4: detected capacity change from 0 to 512 [ 1097.606308][T13953] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1097.700245][T13953] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.845938][T13973] loop5: detected capacity change from 0 to 512 [ 1098.367715][T13973] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1098.710534][T13973] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.986361][T13992] loop0: detected capacity change from 0 to 4096 [ 1101.056724][T13992] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1101.139075][T13992] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1101.240231][T14002] loop7: detected capacity change from 0 to 512 [ 1101.327195][T14008] loop0: detected capacity change from 0 to 512 [ 1101.352312][T14002] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1101.449758][T14002] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.486856][T14008] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1101.684126][T14008] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.941685][T14019] loop5: detected capacity change from 0 to 512 [ 1103.289881][T14019] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1103.372849][T14019] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.711135][T14029] loop0: detected capacity change from 0 to 512 [ 1104.438819][T14029] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1104.515926][T14029] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.443693][T14063] loop4: detected capacity change from 0 to 512 [ 1108.494078][T14068] loop5: detected capacity change from 0 to 512 [ 1108.697742][T14068] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1108.903916][T14063] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1109.204738][T14068] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.247275][T14063] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1110.049718][T14084] loop0: detected capacity change from 0 to 4096 [ 1110.847133][T14084] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1110.889697][T14084] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1110.978409][T14095] loop7: detected capacity change from 0 to 512 [ 1111.332504][T14095] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1111.478695][T14095] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.188383][T14127] loop5: detected capacity change from 0 to 256 [ 1114.333904][T14127] FAT-fs (loop5): bogus number of FAT sectors [ 1114.349892][T14127] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1114.492595][T14135] loop0: detected capacity change from 0 to 512 [ 1114.625477][T14142] loop5: detected capacity change from 0 to 512 [ 1114.648600][T14135] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1114.679962][T14135] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.904642][T14142] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1115.293937][T14142] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.713217][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.720232][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.781557][T14162] loop7: detected capacity change from 0 to 512 [ 1116.306164][T14162] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1116.433172][T14162] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1116.452605][T14160] loop1: detected capacity change from 0 to 256 [ 1116.496199][T14160] FAT-fs (loop1): bogus number of FAT sectors [ 1116.514475][T14160] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1119.141023][T14192] loop5: detected capacity change from 0 to 1024 [ 1119.353864][T14198] loop4: detected capacity change from 0 to 4096 [ 1119.438113][T14198] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1119.522461][T14192] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1119.546847][T14198] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1119.661208][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 1119.661222][ T25] audit: type=1800 audit(1756576543.869:703): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1744" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1121.702040][T14236] loop7: detected capacity change from 0 to 512 [ 1121.798394][T14236] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1121.834202][T14236] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.168318][T14254] loop4: detected capacity change from 0 to 512 [ 1123.321703][T14254] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1123.395714][T14254] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.676088][T14259] loop5: detected capacity change from 0 to 512 [ 1123.755555][T14259] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1123.938755][T14259] EXT4-fs (loop5): invalid journal inode [ 1124.115392][T14259] EXT4-fs (loop5): can't get journal size [ 1124.419205][T14259] EXT4-fs (loop5): 1 truncate cleaned up [ 1124.429545][T14259] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 1125.017310][T14286] loop0: detected capacity change from 0 to 512 [ 1125.056786][T14288] loop5: detected capacity change from 0 to 512 [ 1125.120632][T14286] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1125.149373][T14288] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1125.189780][T14288] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.200518][T14286] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.387816][T14307] loop7: detected capacity change from 0 to 512 [ 1127.473593][T14307] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1127.569676][T14307] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.053779][T14326] loop4: detected capacity change from 0 to 512 [ 1130.184615][T14326] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1130.201209][T14326] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.182061][T14356] syz.5.1775 uses obsolete (PF_INET,SOCK_PACKET) [ 1133.182355][ T4238] Bluetooth: hci1: command 0x0406 tx timeout [ 1133.303284][T14373] loop7: detected capacity change from 0 to 512 [ 1133.784640][T14373] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1134.089693][T14373] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.232068][T14383] loop4: detected capacity change from 0 to 512 [ 1134.243762][T14391] loop0: detected capacity change from 0 to 512 [ 1134.345725][T14383] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1134.369296][T14383] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.102279][T14391] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1136.307716][T14391] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.326871][T14430] loop7: detected capacity change from 0 to 512 [ 1138.348072][T14432] loop4: detected capacity change from 0 to 512 [ 1138.405576][T14432] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1138.466931][T14430] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1138.501051][T14432] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.520319][T14430] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.399383][T14460] loop0: detected capacity change from 0 to 512 [ 1140.626862][T14460] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1140.775845][T14460] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.545998][T14485] loop4: detected capacity change from 0 to 512 [ 1143.737810][T14490] loop5: detected capacity change from 0 to 512 [ 1143.765477][T14494] loop1: detected capacity change from 0 to 1024 [ 1143.786675][T14485] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1143.819616][T14485] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.976313][T14490] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1143.999743][T14490] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.042861][T14494] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1144.861708][ T25] audit: type=1800 audit(1756576569.069:704): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1801" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1144.990085][T14494] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1801: Allocating blocks 449-513 which overlap fs metadata [ 1145.039283][T14493] EXT4-fs (loop1): pa ffff888061329ee0: logic 48, phys. 177, len 21 [ 1145.047414][T14493] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1146.238548][T14524] loop0: detected capacity change from 0 to 512 [ 1146.322146][T14524] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1146.347574][T14524] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.378954][T14531] loop7: detected capacity change from 0 to 512 [ 1146.662453][T14531] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1146.740757][T14531] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.838639][T14556] loop5: detected capacity change from 0 to 512 [ 1147.843350][T14555] loop0: detected capacity change from 0 to 512 [ 1147.929909][T14556] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1148.038469][T14555] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1148.054562][T14556] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.129692][T14555] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1150.422182][T14575] loop1: detected capacity change from 0 to 512 [ 1152.383039][T14597] loop0: detected capacity change from 0 to 1024 [ 1152.673608][T14597] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1153.434304][T14607] block device autoloading is deprecated and will be removed. [ 1153.455457][ T25] audit: type=1800 audit(1756576577.659:705): pid=14597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1814" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1153.529615][T14597] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.1814: Allocating blocks 449-513 which overlap fs metadata [ 1153.536662][T14613] loop7: detected capacity change from 0 to 512 [ 1153.594681][T14595] EXT4-fs (loop0): pa ffff8880742d48c0: logic 48, phys. 177, len 21 [ 1153.602856][T14595] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1153.752917][T14619] loop4: detected capacity change from 0 to 512 [ 1153.818773][T14613] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1153.849255][T14613] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.984420][T14628] loop0: detected capacity change from 0 to 512 [ 1154.060013][T14619] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1154.090640][T14619] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.149838][T14634] loop1: detected capacity change from 0 to 512 [ 1154.218393][T14628] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1154.255075][T14639] loop7: detected capacity change from 0 to 512 [ 1154.272002][T14628] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.338078][T14634] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1154.399708][T14634] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.014507][T14639] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1155.293360][T14639] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.825749][T14665] loop0: detected capacity change from 0 to 512 [ 1157.061049][T14670] loop4: detected capacity change from 0 to 512 [ 1157.823750][T14670] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1157.885866][T14670] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.216531][T14677] block device autoloading is deprecated and will be removed. [ 1160.960792][T14699] loop1: detected capacity change from 0 to 1024 [ 1161.866491][T14707] loop0: detected capacity change from 0 to 512 [ 1161.990324][T14699] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1162.004799][T14709] loop5: detected capacity change from 0 to 256 [ 1162.018829][T14707] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1162.083296][T14716] loop7: detected capacity change from 0 to 256 [ 1162.091431][T14707] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.091448][ T25] audit: type=1800 audit(1756576586.299:706): pid=14699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1831" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1162.144607][T14709] FAT-fs (loop5): bogus number of FAT sectors [ 1162.193890][T14709] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1162.203569][T14699] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1831: Allocating blocks 449-513 which overlap fs metadata [ 1162.317295][T14699] EXT4-fs (loop1): pa ffff888061329000: logic 48, phys. 177, len 21 [ 1162.325645][T14699] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1162.384163][T14716] FAT-fs (loop7): bogus number of FAT sectors [ 1162.390796][T14716] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1162.718747][T14740] loop4: detected capacity change from 0 to 512 [ 1163.398045][T14740] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1163.658565][T14760] loop0: detected capacity change from 0 to 512 [ 1163.666941][T14740] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.951730][T14760] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1164.086531][T14760] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1164.970286][T14779] loop1: detected capacity change from 0 to 1024 [ 1165.401247][T14779] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1165.441499][ T25] audit: type=1800 audit(1756576589.649:707): pid=14779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1847" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1165.600750][T14779] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1847: Allocating blocks 449-513 which overlap fs metadata [ 1165.660310][T14779] EXT4-fs (loop1): pa ffff888061329540: logic 48, phys. 177, len 21 [ 1165.668356][T14779] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1166.230729][T14803] loop4: detected capacity change from 0 to 128 [ 1166.262457][T14806] loop1: detected capacity change from 0 to 512 [ 1166.330844][T14803] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1166.371899][T14803] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1166.390051][T14806] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1166.445171][T14806] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.547377][ T4332] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1167.592849][T14821] loop0: detected capacity change from 0 to 512 [ 1167.742252][T14821] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1167.846377][T14821] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.892267][T14868] loop5: detected capacity change from 0 to 1024 [ 1169.989007][T14868] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1170.080681][ T25] audit: type=1800 audit(1756576594.269:708): pid=14868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1860" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1170.083575][T14878] loop7: detected capacity change from 0 to 128 [ 1170.154214][T14878] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1170.177388][T14868] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.1860: Allocating blocks 449-513 which overlap fs metadata [ 1170.845477][T14881] loop1: detected capacity change from 0 to 512 [ 1170.865573][T14878] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1170.943629][T14868] EXT4-fs (loop5): pa ffff88805dfd1460: logic 48, phys. 177, len 21 [ 1170.951711][T14868] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1171.077517][T14881] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1171.213229][T14881] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.348315][T14890] loop0: detected capacity change from 0 to 512 [ 1171.916621][T14890] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1172.033373][T14890] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.237449][T14900] fuse: Bad value for 'fd' [ 1172.257021][T14902] loop4: detected capacity change from 0 to 128 [ 1172.311134][T14902] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1172.402043][T14902] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1172.502775][T14410] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1173.569735][T14924] loop0: detected capacity change from 0 to 256 [ 1173.703314][T14924] FAT-fs (loop0): bogus number of FAT sectors [ 1173.735760][T14924] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1173.741084][T14922] loop5: detected capacity change from 0 to 40427 [ 1173.807171][T14922] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 1173.820926][T14922] F2FS-fs (loop5): invalid crc value [ 1173.860986][T14922] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1173.938286][T14922] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1175.473770][ T144] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1178.339874][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.346212][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.492442][T14955] loop0: detected capacity change from 0 to 512 [ 1179.654579][T14961] block device autoloading is deprecated and will be removed. [ 1179.692961][T14959] md2: error: bitmap file must be a regular file [ 1179.727359][T14955] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1179.772563][T14955] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.792754][T14975] loop4: detected capacity change from 0 to 512 [ 1180.794879][T14978] loop5: detected capacity change from 0 to 512 [ 1180.886910][T14978] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1180.902657][T14975] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1180.919600][T14978] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.932031][T14984] loop7: detected capacity change from 0 to 128 [ 1180.961029][T14975] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1181.018516][T14989] loop1: detected capacity change from 0 to 128 [ 1181.026724][T14984] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1181.142485][T14984] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1184.830433][T15002] loop0: detected capacity change from 0 to 512 [ 1184.856990][T15000] loop4: detected capacity change from 0 to 512 [ 1185.054175][ T4317] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1185.113484][T15002] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1185.115664][T15016] loop5: detected capacity change from 0 to 128 [ 1185.133953][T15002] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.152204][T15000] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1185.161140][T15016] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1185.179718][T15000] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.090717][T15016] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1187.424953][T15032] loop0: detected capacity change from 0 to 128 [ 1189.106841][T15047] loop5: detected capacity change from 0 to 512 [ 1189.206235][T15050] loop0: detected capacity change from 0 to 512 [ 1189.303953][T15047] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1189.320851][T15047] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1189.443241][T15050] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1189.492025][T15050] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1191.549221][T15073] loop5: detected capacity change from 0 to 40427 [ 1191.600373][T15073] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 1191.614342][T15073] F2FS-fs (loop5): invalid crc value [ 1191.664925][T15073] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1191.711605][T15073] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1193.176090][T15089] loop7: detected capacity change from 0 to 512 [ 1193.318633][T15089] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1193.385348][T15089] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.553995][T15097] loop0: detected capacity change from 0 to 512 [ 1194.637347][T15100] loop4: detected capacity change from 0 to 512 [ 1194.648215][T15097] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1194.758727][T15100] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1194.782969][T15100] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.794014][T15097] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.857369][T15109] loop1: detected capacity change from 0 to 128 [ 1194.941040][T15109] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1195.055586][T15109] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1197.295878][T15130] loop1: detected capacity change from 0 to 512 [ 1197.408548][T15137] loop7: detected capacity change from 0 to 512 [ 1197.560723][T15130] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1197.861326][T15137] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1198.119255][T15130] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.219899][T15137] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.296878][T15151] loop5: detected capacity change from 0 to 512 [ 1201.063092][T15169] loop4: detected capacity change from 0 to 128 [ 1201.296199][T15171] loop5: detected capacity change from 0 to 256 [ 1201.491721][T15171] FAT-fs (loop5): bogus number of FAT sectors [ 1201.514766][T15171] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1201.530414][T15177] loop0: detected capacity change from 0 to 512 [ 1201.921797][T15177] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1201.962012][T15187] device syzkaller0 entered promiscuous mode [ 1202.004844][T15177] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.041557][T15187] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1202.076784][T15193] loop5: detected capacity change from 0 to 128 [ 1203.790656][T15219] loop1: detected capacity change from 0 to 512 [ 1203.872597][T15221] loop0: detected capacity change from 0 to 512 [ 1203.901450][T15219] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1203.919737][T15219] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1205.456656][T15235] loop7: detected capacity change from 0 to 128 [ 1206.679713][T15248] loop7: detected capacity change from 0 to 40427 [ 1207.355435][T15248] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1ffff [ 1207.374000][T15248] F2FS-fs (loop7): invalid crc value [ 1207.448253][T15248] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1207.522364][T15248] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1207.715358][T15263] loop1: detected capacity change from 0 to 128 [ 1209.991112][T15275] device syzkaller0 entered promiscuous mode [ 1210.075863][T15277] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1210.207578][T15279] loop1: detected capacity change from 0 to 4096 [ 1210.307976][T15279] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1210.378617][T15279] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1211.856054][T15308] loop5: detected capacity change from 0 to 512 [ 1212.077119][T15312] loop7: detected capacity change from 0 to 512 [ 1212.130983][T15308] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1212.316523][T15312] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1212.350274][T15308] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.469358][T15312] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.274849][T15331] loop1: detected capacity change from 0 to 128 [ 1215.491136][T15340] loop0: detected capacity change from 0 to 128 [ 1216.518079][T15353] loop5: detected capacity change from 0 to 4096 [ 1216.595803][T15353] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1216.671446][T15353] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1216.721664][T15360] loop0: detected capacity change from 0 to 512 [ 1216.876721][T15360] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1216.946952][T15363] loop7: detected capacity change from 0 to 40427 [ 1216.979673][T15360] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.936576][T15363] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1ffff [ 1217.946887][T15363] F2FS-fs (loop7): invalid crc value [ 1217.979732][T15363] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1218.043248][T15363] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1220.740348][T15402] loop4: detected capacity change from 0 to 128 [ 1222.253658][T15426] loop7: detected capacity change from 0 to 1024 [ 1222.387812][T15429] loop5: detected capacity change from 0 to 512 [ 1223.135487][T15426] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1223.175439][T15429] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1223.318028][T15429] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.338240][T15441] loop0: detected capacity change from 0 to 128 [ 1223.459578][ T25] audit: type=1800 audit(1756576647.639:709): pid=15426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1953" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1223.536006][T15443] ip6t_rpfilter: unknown options [ 1223.562029][T15449] block device autoloading is deprecated and will be removed. [ 1223.590698][T15441] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1223.617616][T15426] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3871: comm syz.7.1953: Allocating blocks 449-513 which overlap fs metadata [ 1223.672139][T15441] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1223.725477][T15426] EXT4-fs (loop7): pa ffff888061329460: logic 48, phys. 177, len 21 [ 1223.733712][T15426] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1224.258290][T15455] loop7: detected capacity change from 0 to 128 [ 1226.119599][T15483] md2: error: bitmap file must be a regular file [ 1226.434841][ T4403] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1227.502892][T15502] loop7: detected capacity change from 0 to 512 [ 1227.511852][T15504] loop5: detected capacity change from 0 to 128 [ 1227.577043][T15507] loop0: detected capacity change from 0 to 1024 [ 1227.633041][T15509] loop4: detected capacity change from 0 to 256 [ 1227.777601][T15502] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1227.812325][T15509] FAT-fs (loop4): bogus number of FAT sectors [ 1227.818436][T15509] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1227.836521][T15507] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1227.892329][T15502] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1228.601923][ T25] audit: type=1800 audit(1756576652.809:710): pid=15507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1971" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1228.782906][T15507] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.1971: Allocating blocks 449-513 which overlap fs metadata [ 1228.824996][T15506] EXT4-fs (loop0): pa ffff8880613299a0: logic 48, phys. 177, len 21 [ 1228.833276][T15506] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1230.333003][T15541] loop7: detected capacity change from 0 to 512 [ 1230.589092][T15541] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1231.239731][T15541] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1231.402638][T15558] loop5: detected capacity change from 0 to 128 [ 1234.545426][T15595] loop4: detected capacity change from 0 to 128 [ 1234.621355][T15585] loop7: detected capacity change from 0 to 512 [ 1234.771133][T15598] loop0: detected capacity change from 0 to 1024 [ 1235.492436][T15585] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1235.537178][T15598] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1235.539678][T15585] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1235.569119][T15615] block device autoloading is deprecated and will be removed. [ 1235.645382][ T25] audit: type=1800 audit(1756576659.849:711): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1988" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1235.694481][T15611] md2: error: bitmap file must be a regular file [ 1235.782186][T15598] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.1988: Allocating blocks 449-513 which overlap fs metadata [ 1235.941506][T15598] EXT4-fs (loop0): pa ffff8880742d4c40: logic 48, phys. 177, len 21 [ 1235.949620][T15598] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1237.776172][T15650] ip6t_rpfilter: unknown options [ 1238.543475][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.565271][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.731903][T15661] loop7: detected capacity change from 0 to 128 [ 1238.861842][T15666] loop1: detected capacity change from 0 to 512 [ 1240.256469][T15675] loop4: detected capacity change from 0 to 1024 [ 1241.149604][T15686] loop7: detected capacity change from 0 to 512 [ 1241.158118][T15675] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1241.183738][T15666] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1241.223668][T15692] loop0: detected capacity change from 0 to 128 [ 1241.239772][T15666] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1241.266308][ T25] audit: type=1800 audit(1756576665.469:712): pid=15675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2003" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1241.403338][T15675] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.2003: Allocating blocks 449-513 which overlap fs metadata [ 1241.480070][T15675] EXT4-fs (loop4): pa ffff888061329000: logic 48, phys. 177, len 21 [ 1241.488761][T15675] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 1241.504782][T15686] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1241.782477][T15686] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1242.665922][T15711] ip6t_rpfilter: unknown options [ 1243.211641][T15712] loop0: detected capacity change from 0 to 256 [ 1243.335531][T15715] loop5: detected capacity change from 0 to 128 [ 1243.342203][T15712] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1243.409490][T15712] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1243.450936][T15715] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1243.522470][T15712] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1243.625967][T15715] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1247.775006][T15736] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1252.416916][T15766] loop1: detected capacity change from 0 to 128 [ 1259.733482][T15845] loop5: detected capacity change from 0 to 128 [ 1262.782779][T15845] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1262.826190][T15845] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1262.877066][T15862] loop4: detected capacity change from 0 to 128 [ 1262.919083][T15862] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1263.028003][T15864] loop0: detected capacity change from 0 to 128 [ 1264.941711][T15876] loop7: detected capacity change from 0 to 128 [ 1266.131220][T15891] loop0: detected capacity change from 0 to 128 [ 1267.915562][T15891] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1268.029797][T15891] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1268.503602][T15916] ip6t_rpfilter: unknown options [ 1270.130939][T15924] loop1: detected capacity change from 0 to 128 [ 1270.201940][T15924] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1270.233795][T15924] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1270.404829][T15929] loop5: detected capacity change from 0 to 512 [ 1271.157914][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 1271.166850][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 1271.175780][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 1271.184653][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 1271.193613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 1271.202566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 1271.211516][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 1271.220471][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 1271.229437][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 1271.239446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 1271.277460][T15939] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1271.358130][ T4403] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1271.390146][T15929] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1271.404225][T15929] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.149588][ T4238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1273.593754][ T4238] usb 5-1: config 0 has no interfaces? [ 1273.789851][ T4238] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1273.817216][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1273.829531][ T4294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1273.857419][ T4238] usb 5-1: Product: syz [ 1273.870960][ T4238] usb 5-1: Manufacturer: syz [ 1273.875600][ T4238] usb 5-1: SerialNumber: syz [ 1273.958253][ T4238] usb 5-1: config 0 descriptor?? [ 1274.079600][ T4294] usb 6-1: Using ep0 maxpacket: 8 [ 1274.232402][ T4294] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 1274.268054][ T4294] usb 6-1: config 0 has no interface number 0 [ 1274.459883][ T4294] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 1274.468962][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.530228][ T4294] usb 6-1: Product: syz [ 1274.530284][ T4294] usb 6-1: Manufacturer: syz [ 1274.530300][ T4294] usb 6-1: SerialNumber: syz [ 1274.537666][ T4294] usb 6-1: config 0 descriptor?? [ 1274.572379][ T4294] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected [ 1274.584800][ T4294] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1274.848562][ T4294] usb 6-1: USB disconnect, device number 2 [ 1274.854914][ T4294] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1274.863456][ T4294] kobil_sct 6-1:0.148: device disconnected [ 1275.449557][ T4238] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1275.591681][ T5143] usb 5-1: USB disconnect, device number 2 [ 1275.709542][ T4238] usb 1-1: Using ep0 maxpacket: 16 [ 1275.829654][ T4238] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.862947][ T4238] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1276.139663][ T4238] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1276.148745][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.178555][ T4238] usb 1-1: Product: syz [ 1276.188841][ T4238] usb 1-1: Manufacturer: syz [ 1276.203901][ T4238] usb 1-1: SerialNumber: syz [ 1276.510906][ T4224] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1276.549768][ T4238] usb 1-1: 0:2 : does not exist [ 1276.570726][ T4187] ================================================================== [ 1276.579142][ T4187] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 1276.586963][ T4187] Read of size 1 at addr ffff88805607c406 by task kworker/u5:1/4187 [ 1276.594935][ T4187] [ 1276.597253][ T4187] CPU: 0 PID: 4187 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1276.604794][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1276.614850][ T4187] Workqueue: hci2 hci_rx_work [ 1276.619554][ T4187] Call Trace: [ 1276.622830][ T4187] [ 1276.625757][ T4187] dump_stack_lvl+0x168/0x230 [ 1276.630442][ T4187] ? show_regs_print_info+0x20/0x20 [ 1276.635646][ T4187] ? load_image+0x3b0/0x3b0 [ 1276.640147][ T4187] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1276.645539][ T4187] print_address_description+0x60/0x2d0 [ 1276.651090][ T4187] ? hci_le_meta_evt+0x12c0/0x3b80 [ 1276.656203][ T4187] kasan_report+0xdf/0x130 [ 1276.660617][ T4187] ? hci_le_meta_evt+0x12c0/0x3b80 [ 1276.665729][ T4187] hci_le_meta_evt+0x12c0/0x3b80 [ 1276.670665][ T4187] ? hci_event_packet+0x230/0x12f0 [ 1276.675784][ T4187] ? hci_remote_host_features_evt+0x280/0x280 [ 1276.681839][ T4187] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1276.687460][ T4187] ? mark_lock+0x94/0x320 [ 1276.691774][ T4187] ? mutex_unlock+0x10/0x10 [ 1276.696260][ T4187] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1276.702223][ T4187] ? lock_chain_count+0x20/0x20 [ 1276.707058][ T4187] ? __rwlock_init+0x140/0x140 [ 1276.711811][ T4187] hci_event_packet+0xe05/0x12f0 [ 1276.716746][ T4187] ? lockdep_hardirqs_on+0x94/0x140 [ 1276.721934][ T4187] ? rcu_lock_release+0x20/0x20 [ 1276.726773][ T4187] ? hci_send_to_monitor+0x9c/0x4a0 [ 1276.731956][ T4187] hci_rx_work+0x255/0xa10 [ 1276.736364][ T4187] process_one_work+0x863/0x1000 [ 1276.741296][ T4187] ? worker_detach_from_pool+0x240/0x240 [ 1276.746909][ T4187] ? lockdep_hardirqs_off+0x70/0x100 [ 1276.752184][ T4187] ? _raw_spin_lock_irq+0xab/0xe0 [ 1276.757190][ T4187] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1276.762547][ T4187] ? wq_worker_running+0x97/0x170 [ 1276.767552][ T4187] worker_thread+0xaa8/0x12a0 [ 1276.772231][ T4187] kthread+0x436/0x520 [ 1276.776283][ T4187] ? rcu_lock_release+0x20/0x20 [ 1276.781112][ T4187] ? kthread_blkcg+0xd0/0xd0 [ 1276.785685][ T4187] ret_from_fork+0x1f/0x30 [ 1276.790097][ T4187] [ 1276.793099][ T4187] [ 1276.795403][ T4187] Allocated by task 16122: [ 1276.799798][ T4187] __kasan_kmalloc+0xb5/0xf0 [ 1276.804368][ T4187] __alloc_skb+0x22c/0x750 [ 1276.808764][ T4187] vhci_write+0xbc/0x450 [ 1276.812985][ T4187] vfs_write+0x712/0xd00 [ 1276.817204][ T4187] ksys_write+0x14d/0x250 [ 1276.821513][ T4187] do_syscall_64+0x4c/0xa0 [ 1276.825909][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1276.831781][ T4187] [ 1276.834083][ T4187] The buggy address belongs to the object at ffff88805607c000 [ 1276.834083][ T4187] which belongs to the cache kmalloc-1k of size 1024 [ 1276.848113][ T4187] The buggy address is located 6 bytes to the right of [ 1276.848113][ T4187] 1024-byte region [ffff88805607c000, ffff88805607c400) [ 1276.861800][ T4187] The buggy address belongs to the page: [ 1276.867420][ T4187] page:ffffea0001581e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56078 [ 1276.877549][ T4187] head:ffffea0001581e00 order:3 compound_mapcount:0 compound_pincount:0 [ 1276.885851][ T4187] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1276.893812][ T4187] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016841dc0 [ 1276.902373][ T4187] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1276.910929][ T4187] page dumped because: kasan: bad access detected [ 1276.917324][ T4187] page_owner tracks the page as allocated [ 1276.923016][ T4187] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4326, ts 1264936751868, free_ts 1264921918842 [ 1276.941743][ T4187] get_page_from_freelist+0x1b77/0x1c60 [ 1276.947272][ T4187] __alloc_pages+0x1e1/0x470 [ 1276.951844][ T4187] new_slab+0xc0/0x4b0 [ 1276.955894][ T4187] ___slab_alloc+0x81e/0xdf0 [ 1276.960508][ T4187] __kmalloc+0x1cd/0x330 [ 1276.964728][ T4187] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 1276.970429][ T4187] ieee80211_bss_info_update+0x75d/0xaa0 [ 1276.976042][ T4187] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 1276.982177][ T4187] ieee80211_iface_work+0x70e/0xc60 [ 1276.987355][ T4187] process_one_work+0x863/0x1000 [ 1276.992271][ T4187] worker_thread+0xaa8/0x12a0 [ 1276.996924][ T4187] kthread+0x436/0x520 [ 1277.000971][ T4187] ret_from_fork+0x1f/0x30 [ 1277.005368][ T4187] page last free stack trace: [ 1277.010016][ T4187] free_unref_page_prepare+0x637/0x6c0 [ 1277.015453][ T4187] free_unref_page+0x94/0x280 [ 1277.020107][ T4187] __unfreeze_partials+0x1a5/0x200 [ 1277.025201][ T4187] put_cpu_partial+0x12d/0x190 [ 1277.029941][ T4187] qlist_free_all+0x35/0x90 [ 1277.034425][ T4187] kasan_quarantine_reduce+0x150/0x160 [ 1277.039862][ T4187] __kasan_slab_alloc+0x2f/0xd0 [ 1277.044691][ T4187] slab_post_alloc_hook+0x4c/0x380 [ 1277.049779][ T4187] kmem_cache_alloc+0x100/0x290 [ 1277.054610][ T4187] getname_flags+0xb5/0x500 [ 1277.059089][ T4187] do_sys_openat2+0xcf/0x4a0 [ 1277.063662][ T4187] __x64_sys_openat+0x135/0x160 [ 1277.068494][ T4187] do_syscall_64+0x4c/0xa0 [ 1277.072889][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1277.078773][ T4187] [ 1277.081088][ T4187] Memory state around the buggy address: [ 1277.086708][ T4187] ffff88805607c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1277.094757][ T4187] ffff88805607c380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1277.102997][ T4187] >ffff88805607c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1277.111036][ T4187] ^ [ 1277.115082][ T4187] ffff88805607c480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1277.123122][ T4187] ffff88805607c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1277.131158][ T4187] ================================================================== [ 1277.139324][ T4187] Disabling lock debugging due to kernel taint [ 1277.150903][ T4187] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1277.158122][ T4187] CPU: 0 PID: 4187 Comm: kworker/u5:1 Tainted: G B syzkaller #0 [ 1277.167055][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1277.177126][ T4187] Workqueue: hci2 hci_rx_work [ 1277.181823][ T4187] Call Trace: [ 1277.185101][ T4187] [ 1277.188040][ T4187] dump_stack_lvl+0x168/0x230 [ 1277.192728][ T4187] ? show_regs_print_info+0x20/0x20 [ 1277.197927][ T4187] ? load_image+0x3b0/0x3b0 [ 1277.202434][ T4187] panic+0x2c9/0x7f0 [ 1277.206483][ T4187] ? bpf_jit_dump+0xd0/0xd0 [ 1277.210992][ T4187] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 1277.216885][ T4187] ? _raw_spin_unlock+0x40/0x40 [ 1277.221745][ T4187] ? hci_le_meta_evt+0x12c0/0x3b80 [ 1277.226862][ T4187] check_panic_on_warn+0x80/0xa0 [ 1277.231803][ T4187] ? hci_le_meta_evt+0x12c0/0x3b80 [ 1277.236917][ T4187] end_report+0x6d/0xf0 [ 1277.241075][ T4187] kasan_report+0x102/0x130 [ 1277.245576][ T4187] ? hci_le_meta_evt+0x12c0/0x3b80 [ 1277.250687][ T4187] hci_le_meta_evt+0x12c0/0x3b80 [ 1277.255624][ T4187] ? hci_event_packet+0x230/0x12f0 [ 1277.260734][ T4187] ? hci_remote_host_features_evt+0x280/0x280 [ 1277.266802][ T4187] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1277.272437][ T4187] ? mark_lock+0x94/0x320 [ 1277.276773][ T4187] ? mutex_unlock+0x10/0x10 [ 1277.281286][ T4187] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1277.287267][ T4187] ? lock_chain_count+0x20/0x20 [ 1277.292121][ T4187] ? __rwlock_init+0x140/0x140 [ 1277.296884][ T4187] hci_event_packet+0xe05/0x12f0 [ 1277.301821][ T4187] ? lockdep_hardirqs_on+0x94/0x140 [ 1277.307022][ T4187] ? rcu_lock_release+0x20/0x20 [ 1277.311881][ T4187] ? hci_send_to_monitor+0x9c/0x4a0 [ 1277.317079][ T4187] hci_rx_work+0x255/0xa10 [ 1277.321497][ T4187] process_one_work+0x863/0x1000 [ 1277.326440][ T4187] ? worker_detach_from_pool+0x240/0x240 [ 1277.332075][ T4187] ? lockdep_hardirqs_off+0x70/0x100 [ 1277.337361][ T4187] ? _raw_spin_lock_irq+0xab/0xe0 [ 1277.342384][ T4187] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1277.347758][ T4187] ? wq_worker_running+0x97/0x170 [ 1277.352783][ T4187] worker_thread+0xaa8/0x12a0 [ 1277.357469][ T4187] kthread+0x436/0x520 [ 1277.361536][ T4187] ? rcu_lock_release+0x20/0x20 [ 1277.366386][ T4187] ? kthread_blkcg+0xd0/0xd0 [ 1277.370976][ T4187] ret_from_fork+0x1f/0x30 [ 1277.375395][ T4187] [ 1277.378614][ T4187] Kernel Offset: disabled [ 1277.382933][ T4187] Rebooting in 86400 seconds..