last executing test programs: 21m44.055567835s ago: executing program 0 (id=1958): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1000) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x4c, [0x9, 0x8, 0x8b8, 0xc9d, 0x8, 0x9], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)=""/76}, &(0x7f0000000140)=0x78) ioctl$RTC_AIE_ON(r3, 0x7001) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000180), &(0x7f00000004c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) setgid(0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x20) statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x0, 0x13, 0x0, 0x17, 0x0, 0xa9}) 21m41.018477785s ago: executing program 0 (id=1968): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x101002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) 21m40.082279141s ago: executing program 0 (id=1971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) (fail_nth: 4) 21m39.747518802s ago: executing program 0 (id=1973): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="b800000000000000", @ANYRES64=0x0, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000900000000001009000000000000007472616e733d66642c00000000000000"], 0xb8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffb5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c0000170d000000ff0f00000600000004000000", @ANYRES32=r1, @ANYBLOB="0f00"/20, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="01000000000000000200"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0xfd) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x2, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x581, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/184, 0xb8}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='ext4_fc_commit_start\x00', r8, 0x0, 0x1}, 0x18) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="10000000125008010029bd7000000000"], 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet(0x2, 0x2, 0x8) ptrace$pokeuser(0x6, r3, 0x9, 0x1) 21m38.406096686s ago: executing program 0 (id=1979): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1000) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x4c, [0x9, 0x8, 0x8b8, 0xc9d, 0x8, 0x9], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)=""/76}, &(0x7f0000000140)=0x78) ioctl$RTC_AIE_ON(r3, 0x7001) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000180), &(0x7f00000004c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) setgid(0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x20) statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x0, 0x13, 0x0, 0x17, 0x0, 0xa9}) 21m35.086129322s ago: executing program 0 (id=1998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x14) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) (async) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220a000000c1"], 0x0}, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000640), 0x6, 0x800) (async) syz_usb_control_io$hid(r7, &(0x7f0000000380)={0x24, &(0x7f0000000240)={0x40, 0xe, 0x4f, {0x4f, 0x22, "efe088acebdfdccd6d563b26f87c7474d9864232a3e48a040a0dedb780983cf09e49c83acbe0c371761cb7c4e95ea83bbce1faa22fe17b78e533f67c6de5c16a0054f0f8217a31ebad8221e952"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000300)={0x0, 0x22, 0x10, {[@local=@item_012={0x0, 0x2, 0x5}, @main=@item_012={0x0, 0x0, 0xb}, @global, @global=@item_012={0x2, 0x1, 0x5, "c960"}, @global=@item_4={0x3, 0x1, 0x2, "227fd99d"}, @main=@item_4={0x3, 0x0, 0x8, "978907a0"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd923, 0x5, 0x1, {0x22, 0xef4}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x40, 0x12, 0xd7, "b9b4c6dff779b242c35ddb88e5d49f0a393690ba7186854a5be622c97225aa8ff4beed1ce60ff3928531e15f613aa364eca2148006405cfe62dc8c860e86a6ab85ada2c04ff9345f905df87a37367c763d461f8b10f71a75d290a814a2b5f93c91d3207a6d494411e6fb45bdff2a43f46a68e147d054694b6474ec6cd99cab5fe25bf5ac6bf5f79e0acb08d0ce30c82fb3347ae7d611632fb4aeec6260aa5b06a5330fb75dc8fd7a17ce79d8dabca016c6cb05dc6ec20c5a0acedf0227382dc8988dcfe1c1e5d0ea61298721aa718f75eaafa4411230f9"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x1, 0xd, "5cbd64685868df9d976b9323da"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xfb}}) 5.371531517s ago: executing program 3 (id=6440): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) r12 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r12}}) 4.934856417s ago: executing program 2 (id=6442): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./control\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x40c2, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$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") signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x800]}, 0x8) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file2\x00', 0x28020, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="2c72a786414a6f64653d30303030303030303030303030303030303132303030", @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,default_permissions,blksize=0x0000000000001800,default_permissions,default_permyssions,max_read=0x0000000000000054,blksize=0x0000000000001200,max_read=0x0000000000000004,allow_other,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f61707072616973652c00e43f3923306303ed63ac238e13c86aca2910897ef132a689ddd39ec8e74bf58684e6a7d49aed8c8cd2565f424bbc73f7c7b2f9c730381509aa59ccf6dc"], 0x1, 0x0, &(0x7f0000000a40)="df935ddadf0a2960fcb89b924b1c88ef3a3f9c8474f725ded6ea04245f67a661289c63b3f946895fc7ba21c7f02f7fbb8402ab29533fbab98fc5d306fa9dbcbbb8708a86144c0fe6057a0e6826023c45399c7f1e2cf1fe") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6d, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x18) bind$can_raw(r7, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000001500000818110000", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.811221088s ago: executing program 1 (id=6444): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000400"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xf3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) 4.352292471s ago: executing program 3 (id=6445): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x36) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="a6bea8a120e5f8320c30e45086dd", 0x5b2, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000fc0)={'syztnl0\x00', &(0x7f0000000ec0)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x5, 0x74752141, {{0x2f, 0x4, 0x3, 0x1, 0xbc, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@generic={0x82, 0xb, "8bf4372fd7c5484ba7"}, @noop, @lsrr={0x83, 0x17, 0x6b, [@local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, @local, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xf6, 0x3, 0x5, [{@local, 0x74c035c8}, {@empty, 0x80}]}, @timestamp_prespec={0x44, 0x44, 0xc6, 0x3, 0x7, [{@loopback, 0x3}, {@rand_addr=0x64010101, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@empty, 0x9}, {@multicast2, 0x8}, {@multicast2, 0x2}, {@remote, 0x80000000}, {@rand_addr=0x64010102, 0x6}]}, @rr={0x7, 0x27, 0xde, [@remote, @rand_addr=0x64010100, @rand_addr=0x64010100, @multicast1, @remote, @loopback, @private=0xa010102, @local, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="ac020000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fddbdf25150000000c00018008000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2c00018008000300060000000800030002000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002000000000000000000000000000000000014000200697036746e6c300000000000000000005000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d61637365633000000000000000000060000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f300000140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000500000014000200766c616e30000000000000000000000028000180080003000200000008000300010000001400020067656e6576653100000000000000000020000180140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="8400018008000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e30000000000000000000000014000200767863616e310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d300000000000000000000000140002006272696467655f736c6176655f3100000800030001000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9c00018008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e310000000000000000e2261fe38e5fb2902cfdb0000000140002006d6163766c616e3000", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020073797a5f74756e0000000000000000001400020076657468305f746f5f627269646765001400020069705f7674693000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="140002006e657464657673696d30000000000000"], 0x2ac}, 0x1, 0x0, 0x0, 0x20008000}, 0x84) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r4, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_misc(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, 0x0, 0x25, 0x0, @void}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4003, &(0x7f00000000c0)={[{@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xfe, 0x47e, &(0x7f00000004c0)="$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") 3.863648115s ago: executing program 2 (id=6447): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000040600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000079000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r6}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @private}, &(0x7f0000000640)=0xc) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r11, @ANYBLOB="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"], 0xec}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d80)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000700)={0x0, @private, @dev}, &(0x7f0000000740)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x20, 0x80, 0x4, 0x4, {{0x1e, 0x4, 0x2, 0x7, 0x78, 0x64, 0x0, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xf3, 0x1, 0x0, [{@local, 0x7ff}, {@multicast1, 0x8}, {@broadcast, 0x1}, {@empty, 0x80000000}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xe9, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x80}, {@private=0xa010100, 0x6}, {@private=0xa010101, 0x8001}, {@loopback, 0x2}]}, @timestamp={0x44, 0x18, 0x80, 0x0, 0x9, [0x51635bd6, 0x73d, 0x5, 0x4, 0x4f85]}]}}}}}) r18 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r20 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r20, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070c0080ebffffffff1d07000000", @ANYRES32=r19, @ANYBLOB="000000000a000200aaaaaaaaaabb0000"], 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r0, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000940)={'gretap0\x00', 0x0, 0x700, 0x871e, 0x800, 0x7ff, {{0x2c, 0x4, 0x3, 0x9, 0xb0, 0x66, 0x0, 0x3, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, {[@rr={0x7, 0x17, 0x72, [@rand_addr=0x64010102, @rand_addr=0x64010100, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x23, 0x7a, [@remote, @loopback, @multicast2, @private=0xa010101, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @rand_addr=0x64010100]}, @timestamp={0x44, 0x8, 0x8e, 0x0, 0xa, [0x0]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4c, 0x1, [{0x1, 0x4, "c7a7"}, {0x6, 0xf, "70f67e4d4801a94ca7eadd06b9"}, {0x1, 0xf, "38b7346009593b770e1ed40dcc"}, {0x0, 0x2}, {0x6, 0x10, "bb75c7fd87e5a925a322426cdbfa"}, {0x1, 0x12, "d2fb1e85c64c91dabef3109c7ef1d967"}]}, @lsrr={0x83, 0x7, 0x14, [@loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc010000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250200000058000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300020000001400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="600001801400020076657468305f746f5f626f6e640000001400020076657468315f766c616e0000000000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="3000018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020076657468310000000000000000000000080003000300000050000180080003000300000008000300020000001400020076657468305f746f5f62617461647600080003000300000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r17, @ANYBLOB="080003000200000014000200697036677265746170300000000000000c00018008000100", @ANYRES32=r19, @ANYBLOB="2400018008000100", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="0800030000000000080003000100000018000180140002006272696467655f736c6176655f300000"], 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x4, 0xc6, 0x3}) 3.853935256s ago: executing program 1 (id=6448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./control\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x40c2, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$eJzs3c1rXFUfB/DfvZNJ0pfnSSqlWhEccFFBnTS19W3VVlGoIqLiukM6LaXTpiQRTOwidelCBAWX6n9RcNONa8FF1a2uFIpUu6koI3demiGZSWKYzEXv5wN3cs49k5zzzSU5984d5gRQWJXsIY04HBFnk4ipzv4kIsqt0ljEyfbz7t25NvfHnWtzSTSbb/2atJ6T7Yue78ns61QmI+Lb00k8UNrY7+LyyqVao1Ff6NRnli5fnVlcXnnq4uXahfqF+pVjx0/MPnviuWeOPz+sqKVDZ558/dAHL976qvnmKy99c2I1yYKNtRt7cwxLJSr3fye9si5fHnZnOSl18vTmTMZyHBD/SNpzDA/FVJRi7eBNxdff5To4AGBXNEsRTQCgYBLzPwAUTPd1gHt3rs11t3xfkRit26eidaNyY/6xONn6OtUsR8Te35O1OyOV9v2u6SH0X4mIG3ffuZVtsUv3ITezej0iHuqXv3V3NKZbd3HX5e/cMzo6hP4r6+r/pvwnh9B/3vkBKKabp9oT2cb5L+3Mb/3nv8k+c9dO5D3/DT7/W8tf6pM/O/97Y5t9fPHRIw8Oaus9/8u2rP/uueAo3L4e8fDY4POfLH8yIP/ZbfZx4+f3a4Pa8s7f/DLiSN/rn7V3tCWbvz9x5vzFRv1o+7FvH5/MnPlwUP9558+O/94B+bc6/le32cdfB388Paht6/zpL+PJ263SeGfPe7WlpYXZiPHktY37j20+lu5zuj8jy//4Y5v//ffLn10Trm4z/+ev/vbZzvPvriz/uR0e/4+32cef8z9NDmrLOz8AAAAAAAAAAAAAAAAAAAAAAAAAjEIaEfsjSav3y2larbbX8D4Ye9PG/OLSE+fn371yLmuLmI5y2v2ky6l2Pcnqs53Pw+/Wj62rPx0RByLi04k9rXp1br5xLu/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCxb936/3cn2uv/AwD/cZN5DwAAGDnzPwAUj/kfAIrH/A8AxWP+B4DiMf8DQPGY/wEAAAAAAAAAAAAAAAAAAAAAYKQOPHrzhyQiVl/Y09oy4522cq4jA3ZbmvcAgNyU8h4AkJuxvAcA5MY1PpBs0T7wI8JXXUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAcRw5b/x+Kyvr/UFxW74Tisv4/FJdrfMD6/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsLX9rS1Jq521wPdHmlarEf+LiOkoJ+cvNupHI+L/EfH9RHkiq8/mPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGLLF5ZVLtUajvqCgoKBwv5D3fyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYvbVFv/MeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHlaXF65VGs06gu7WMg7IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAw/R0AAP//8lssMw==") signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x800]}, 0x8) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f00000003c0)='./file2\x00', 0x28020, &(0x7f0000000c80)=ANY=[@ANYRESHEX, @ANYBLOB="2c72a786414a6f64653d30303030303030303030303030303030303132303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,default_permissions,blksize=0x0000000000001800,default_permissions,default_permyssions,max_read=0x0000000000000054,blksize=0x0000000000001200,max_read=0x0000000000000004,allow_other,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f61707072616973652c00e43f3923306303ed63ac238e13c86aca2910897ef132a689ddd39ec8e74bf58684e6a7d49aed8c8cd2565f424bbc73f7c7b2f9c730381509aa59ccf6dc"], 0x1, 0x0, &(0x7f0000000a40)="df935ddadf0a2960fcb89b924b1c88ef3a3f9c8474f725ded6ea04245f67a661289c63b3f946895fc7ba21c7f02f7fbb8402ab29533fbab98fc5d306fa9dbcbbb8708a86144c0fe6057a0e6826023c45399c7f1e2cf1fe") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6d, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x18) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) 3.677267993s ago: executing program 2 (id=6449): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='track_foreign_dirty\x00', r3}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="050000000000000000006b000000080003009326dbb733a15ca8da3c3807a26b92ac58fd16cf0cbd59549b8d7a49dd833e98b552c977b5737fd04380faaae2f29f2ec8c5f33c85564b7b05ecfa72c0fb94cdf2f2b7fb7854a05e6bf1485fa75a3710836a1e298afa14f4bfb1f2986be8febec91a846de955174367c27af402f5afefac462bacb47afdc49546d2ebbdfaf18841fa31", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="640600005fbbd56e827fee7c2e5ada116abc1f750d4580927daa626c31d62c4b033af04e34f857cf175a3f151e5e66bda857287561e9eeb0d254bbfa446d5bcc20e5a1d2dc2f7cf032edd76737337531e9e830163d767779c424668f4745cd14c8168fa645d10a81dcbb634c2792627d67cb0d41bb310bfae39f", @ANYRES16=r7, @ANYBLOB="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"], 0x664}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f00000001c0)) 3.26761563s ago: executing program 4 (id=6450): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0}) 3.233593853s ago: executing program 3 (id=6451): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}}) 3.042640911s ago: executing program 4 (id=6452): io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000006b113200000000008510000002000000850000000500000095003300000000009500a505000000006e6433de69e899e4cff17a25e2aa421a0e8d81586c3afa73709cbcd7ab4a2158d04db8b9930c2ac2fbaf5dd5b8abf11cc68b381bcb5b605cc2f5608f0a93cba8ed86157668d0befff81c7bd164a03eefc9d1ae5d30798fb936a3ef453789fe4fe1d86af2f06173f62441f8135276d1849a285747e9df7584f83aea8c8189d61b6150bc8e5065719f73a97728abb717848cbb91431b22a51e4b66da20a98bcb5498747f7f6c2bc1e3afbbae240816086fe672aed0876c4e8c15731400"/248], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2.980900076s ago: executing program 1 (id=6453): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x51e, &(0x7f0000000100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='sched_switch\x00', r5}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) 2.857765727s ago: executing program 2 (id=6454): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x6c}, 0x1, 0xba01}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) r12 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r12}}) 2.196036619s ago: executing program 3 (id=6455): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYRES64=r2], &(0x7f0000001200)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000080)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 2.155187072s ago: executing program 4 (id=6456): getgroups(0xfffffeb5, 0xfffffffffffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f0000000340)={[{@nombcache}, {@stripe}]}, 0x1, 0x799, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r2, 0x1, 0x2a, 0x0, &(0x7f00000000c0)) keyctl$session_to_parent(0x12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$session_to_parent(0x12) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="9b43a409aa810180c200000008004500001c000000000001907800000000ffffffff110090780026a100"], 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7, 0x3, 0x44484, r1, 0x200, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0xc, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b70800000d4000007b8af8ff00000000bfa200000000000007022000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00'}, 0x10) 1.975598059s ago: executing program 2 (id=6457): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./control\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x40c2, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$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") signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x800]}, 0x8) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file2\x00', 0x28020, &(0x7f0000000c80)=ANY=[@ANYBLOB="66643d5e81080ae4aa773a2ba2760e809c6259b2b739c7cc2bb2e0706d01c26315a41d3dd1864677421d5161ba16ba86a5079e692e4124a62d45fc6fa7e4aeabce1bdbc7a996a3dfd7ddf82fdda6d1a98a0b0cd54a0328cb631b8041d508a33fa40cd75b8c98a73448483674c9d48da05e2e5fbc4e8a2ab22bd70531e93ccd032ab986dce36a711100112840c7555e7207d8388026cde96c45304db50e6b1f055d708d6e73795ab688c0ea5c80e6ead419c328b29c7e43100109f0217461b922735a59a3c61ae0845ea33b6484641ef7992811667f17e27b2d9468a44da5e1dfec38aa3c133da74f7cf8062e8615463e9e68ffae2632e4ece5c3855e2262fe2cbb39368b51e72e2286ff470372472299a83293bc5a75a6f6bf385b4b42daec2d", @ANYRESHEX, @ANYBLOB="2c72a786414a6f64653d30303030303030303030303030303030303132303030", @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,default_permissions,blksize=0x0000000000001800,default_permissions,default_permyssions,max_read=0x0000000000000054,blksize=0x0000000000001200,max_read=0x0000000000000004,allow_other,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f61707072616973652c00e43f3923306303ed63ac238e13c86aca2910897ef132a689ddd39ec8e74bf58684e6a7d49aed8c8cd2565f424bbc73f7c7b2f9c730381509aa59ccf6dc"], 0x1, 0x0, &(0x7f0000000a40)="df935ddadf0a2960fcb89b924b1c88ef3a3f9c8474f725ded6ea04245f67a661289c63b3f946895fc7ba21c7f02f7fbb8402ab29533fbab98fc5d306fa9dbcbbb8708a86144c0fe6057a0e6826023c45399c7f1e2cf1fe") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6d, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x18) bind$can_raw(r7, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000001500000818110000", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.95647305s ago: executing program 4 (id=6458): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x2000480, &(0x7f0000001900), 0x2, 0x762, &(0x7f0000001180)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2Ch4oHESwU9GxdNttQs8mW7KY0IaAighdBxYOgl579UW/exB9X/S88SEvVtFjxIJHZzKbbZrfJpkmWup8PTPt9M7N5892Zee/tzrATQM8aTf/JRRyOiA+TiOFsfhIRA/WoP+Lk2no3V5aL6ZTE6uqrfyT1dW6sLBej6TWpg1nh0Yj48b2II7mN9VYXl2YK5XJpPiuP12bPj1cXl46emy1Ml6ZLc8cnJiePnXjmxPGdy/WvX5YOXf3opSe/PvnPu49c/uCnJE7GoWxZcx47ZTRGs/dkIH0Lb/PiTlfWZUm3N4BtSU/NvrWzPA7HcPTVIwDg/+ytiFgFAHpMov8HgB7T+B7gxspysTF19xuJvXXthYjYv5Z/4/rm2pL+7Jrd/vp10KEbyW1XRpKIGNmB+kcj4vNvX/8ynWKXrkMCtPL2d1mwof1PNtyz0KmntrDO6B1l7R/sne/T8c+zrcZ/ufXxT7QY/wy2OHe3Y/PzP3dlB6ppKx3/Pd90b9vNpvwzI31Z6YH6mG8gOXuuXErbtgcjYiwGBtPyxF3qGLv+7/V2y5rHf39+/OYXaf3p/7fWyF3pH7z9NVOFWuFecm527Z2Ix/pb5Z+s7/+kzfj39BbrePm59z9rtyzNP823MW3Mf3etXop4ouX+v3VHW3LX+xPH64fDeOOgaOGbXz8dald/8/5Pp7T+xmeBvZDu/6G75z+SNN+vWe28jp8vDf/Qbtnm+bc+/vclr9Xjfdm8i4VabX4iYl/yysb5x269tlFurJ/mP/Z4Pf8D2Sob2r9Wx3/6mfCNzRLPNqL/6u9fbT//3ZXmP9XR/u88uHxzpq9d/Vvb/5P1aCybs5X2b6sbeC/vHQAAAAAAAAAAAAAAAAAAAAAAAABsVS4iDkWSy6/HuVw+v/YM74djKFeuVGtHzlYW5qai/qzskRjINX7qcrjp91Anst/Db5SP3VF+OiIeiohPBg/Uy/lipTzV7eQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHOwzfP/U78NdnvrAIBds7/bGwAA7Dn9PwD0nk77f+MFALj/6c8BoPfo/wGg9+j/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2GWnT51Kp9W/V5aLaXnqwuLCTOXC0alSdSY/u1DMFyvz5/PTlcp0uZQvVmY3+3vlSuX8ZMwtXByvlaq18eri0pnZysJc7cy52cJ06UxpYE+yAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDOVBeXZgrlcmleIBAI1oNut0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA94f/AgAA///tuiN0") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x84182, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0x18, 0x4) preadv2(r2, 0x0, 0x0, 0x10000, 0x0, 0x1d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = open(&(0x7f0000000000)='./file0\x00', 0x8100, 0x42) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000b00)={'wg1\x00'}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.922695414s ago: executing program 1 (id=6459): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32, @ANYBLOB="08000500", @ANYRES32], 0x6c}, 0x1, 0xba01}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r10}}) 922.991755ms ago: executing program 2 (id=6460): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 921.851625ms ago: executing program 4 (id=6461): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0}) 920.856765ms ago: executing program 1 (id=6462): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./control\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x40c2, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$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") signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x800]}, 0x8) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f00000003c0)='./file2\x00', 0x28020, &(0x7f0000000c80)=ANY=[@ANYRESHEX, @ANYBLOB="2c72a786414a6f64653d30303030303030303030303030303030303132303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,default_permissions,blksize=0x0000000000001800,default_permissions,default_permyssions,max_read=0x0000000000000054,blksize=0x0000000000001200,max_read=0x0000000000000004,allow_other,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f61707072616973652c00e43f3923306303ed63ac238e13c86aca2910897ef132a689ddd39ec8e74bf58684e6a7d49aed8c8cd2565f424bbc73f7c7b2f9c730381509aa59ccf6dc"], 0x1, 0x0, &(0x7f0000000a40)="df935ddadf0a2960fcb89b924b1c88ef3a3f9c8474f725ded6ea04245f67a661289c63b3f946895fc7ba21c7f02f7fbb8402ab29533fbab98fc5d306fa9dbcbbb8708a86144c0fe6057a0e6826023c45399c7f1e2cf1fe") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6d, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x18) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) 909.995807ms ago: executing program 3 (id=6463): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='track_foreign_dirty\x00', r3}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="050000000000000000006b000000080003009326dbb733a15ca8da3c3807a26b92ac58fd16cf0cbd59549b8d7a49dd833e98b552c977b5737fd04380faaae2f29f2ec8c5f33c85564b7b05ecfa72c0fb94cdf2f2b7fb7854a05e6bf1485fa75a3710836a1e298afa14f4bfb1f2986be8febec91a846de955174367c27af402f5afefac462bacb47afdc49546d2ebbdfaf18841fa31", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="640600005fbbd56e827fee7c2e5ada116abc1f750d4580927daa626c31d62c4b033af04e34f857cf175a3f151e5e66bda857287561e9eeb0d254bbfa446d5bcc20e5a1d2dc2f7cf032edd76737337531e9e830163d767779c424668f4745cd14c8168fa645d10a81dcbb634c2792627d67cb0d41bb310bfae39f", @ANYRES16=r7, @ANYBLOB], 0x664}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f00000001c0)) 52.758555ms ago: executing program 1 (id=6464): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x20}, {0xfffffffffffffffe}, {}, 0x4, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4000, &(0x7f0000000300)={[{@test_dummy_encryption}, {@grpquota}, {@nombcache}, {@user_xattr}, {@nomblk_io_submit}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000d000000ed52afd00c86e1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600001785000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=@base={0x2, 0x4, 0x4, 0x67, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, 0x0, 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, 0x0, &(0x7f0000000000)=""/57}, 0x20) fsopen(0x0, 0x0) 52.495355ms ago: executing program 4 (id=6465): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}}) 0s ago: executing program 3 (id=6466): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x6c}, 0x1, 0xba01}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) r12 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r12}}) kernel console output (not intermixed with test programs): d wMaxPacketSize 0 [ 1779.708008][T18240] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1779.716838][T18240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.725117][T18240] usb 3-1: config 0 descriptor?? [ 1779.946238][T15981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.956988][T15981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.966601][T15981] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1779.977826][T15981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.986403][T15981] usb 4-1: config 0 descriptor?? [ 1780.001860][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1780.041717][T25842] loop1: detected capacity change from 0 to 2048 [ 1780.057059][T25842] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.6213: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1780.075070][T25842] EXT4-fs (loop1): get root inode failed [ 1780.080556][T25842] EXT4-fs (loop1): mount failed [ 1780.120495][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1780.130690][T25842] loop1: detected capacity change from 0 to 512 [ 1780.142816][T25842] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6213: bad orphan inode 17 [ 1780.152833][T25842] ext4_test_bit(bit=16, block=4) = 1 [ 1780.158234][T25842] is_bad_inode(inode)=0 [ 1780.162182][T25842] NEXT_ORPHAN(inode)=0 [ 1780.166088][T25842] max_ino=32 [ 1780.169170][T25842] i_nlink=1 [ 1780.172104][T25842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1780.186328][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1780.466784][T18240] usb 3-1: string descriptor 0 read error: -22 [ 1780.607091][T25813] netlink: 'syz.2.6208': attribute type 1 has an invalid length. [ 1780.614664][T25813] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6208'. [ 1780.624838][T25813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.633105][T25813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.646200][T18240] uclogic 0003:256C:006D.00F6: failed retrieving string descriptor #200: -71 [ 1780.654849][T18240] uclogic 0003:256C:006D.00F6: failed retrieving pen parameters: -71 [ 1780.662745][T18240] uclogic 0003:256C:006D.00F6: failed probing pen v2 parameters: -71 [ 1780.670818][T18240] uclogic 0003:256C:006D.00F6: failed probing parameters: -71 [ 1780.678119][T18240] uclogic: probe of 0003:256C:006D.00F6 failed with error -71 [ 1780.686374][T18240] usb 3-1: USB disconnect, device number 107 [ 1780.706289][T15981] usb 4-1: string descriptor 0 read error: -22 [ 1780.907553][T25829] device tunl0 entered promiscuous mode [ 1780.913503][T25829] netlink: 'syz.3.6210': attribute type 1 has an invalid length. [ 1780.921145][T25829] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6210'. [ 1780.932430][T25829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.940754][T25829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.976267][T15981] uclogic 0003:256C:006D.00F7: failed retrieving string descriptor #200: -71 [ 1780.984905][T15981] uclogic 0003:256C:006D.00F7: failed retrieving pen parameters: -71 [ 1780.993616][T15981] uclogic 0003:256C:006D.00F7: failed probing pen v2 parameters: -71 [ 1781.000163][T25854] loop4: detected capacity change from 0 to 512 [ 1781.001878][T15981] uclogic 0003:256C:006D.00F7: failed probing parameters: -71 [ 1781.016620][T15981] uclogic: probe of 0003:256C:006D.00F7 failed with error -71 [ 1781.035648][T15981] usb 4-1: USB disconnect, device number 104 [ 1781.629561][T25865] loop3: detected capacity change from 0 to 4096 [ 1781.668268][T25865] EXT4-fs: Ignoring removed oldalloc option [ 1781.682734][T25865] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1781.739011][T25865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1781.966272][T25868] kvm: vcpu 0: requested 34 ns lapic timer period limited to 200000 ns [ 1781.982415][T25860] loop2: detected capacity change from 0 to 40427 [ 1781.988843][T25868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536871168 (1073742336 ns) > initial count (200000 ns). Using initial count to start timer. [ 1782.014246][T25860] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1782.022051][T25860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1782.032509][T25860] F2FS-fs (loop2): invalid crc value [ 1782.041611][T25868] kvm: pic: non byte write [ 1782.041628][T25872] bridge0: port 3(vlan2) entered blocking state [ 1782.052586][T25872] bridge0: port 3(vlan2) entered disabled state [ 1782.126664][T25860] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1782.166084][T25860] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1782.195193][T25860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1782.352264][ T8163] udevd[8163]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 1782.707289][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1782.734784][T25886] loop3: detected capacity change from 0 to 4096 [ 1782.741748][T25886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1782.749072][T25886] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1782.757861][T25886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1782.836185][ T9078] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1783.190223][T25893] loop4: detected capacity change from 0 to 2048 [ 1783.208368][T25893] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.6223: casefold flag without casefold feature [ 1783.221389][T25893] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1783.231925][T25893] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1783.239982][T25893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1783.476421][ T9078] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1783.510009][ T9078] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1783.626368][ T9078] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1783.643114][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1783.681932][T25903] loop3: detected capacity change from 0 to 128 [ 1783.796256][ T9078] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1783.805941][ T9078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.815685][ T9078] usb 3-1: Product: syz [ 1783.819769][ T9078] usb 3-1: Manufacturer: 䠊 [ 1783.828745][ T9078] usb 3-1: SerialNumber: syz [ 1783.845084][T25906] loop1: detected capacity change from 0 to 4096 [ 1783.851726][T25906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1783.858828][T25906] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1783.867396][T25906] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1784.415076][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1784.686853][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1784.705306][T25918] loop1: detected capacity change from 0 to 512 [ 1784.716771][T25918] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1784.724576][T25918] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1784.732545][T25918] System zones: 0-1, 15-15, 18-18, 34-34 [ 1784.738645][T25918] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1784.744825][T25918] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1784.754082][T25918] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1784.768624][T25918] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1784.775229][T25918] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6229: bad orphan inode 16 [ 1784.785197][T25918] ext4_test_bit(bit=15, block=18) = 1 [ 1784.790462][T25918] is_bad_inode(inode)=0 [ 1784.794388][T25918] NEXT_ORPHAN(inode)=0 [ 1784.798322][T25918] max_ino=32 [ 1784.801313][T25918] i_nlink=2 [ 1784.804291][T25918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1784.886184][T15981] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1784.978467][T22979] Bluetooth: hci0: Frame reassembly failed (-84) [ 1785.256210][T15981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.266929][T15981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.280713][T15981] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1785.289781][T15981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.301468][T15981] usb 4-1: config 0 descriptor?? [ 1786.026224][T15981] usb 4-1: string descriptor 0 read error: -22 [ 1786.135679][T25929] bridge0: port 3(vlan2) entered blocking state [ 1786.141814][T25929] bridge0: port 3(vlan2) entered disabled state [ 1786.227057][T25916] netlink: 'syz.3.6228': attribute type 1 has an invalid length. [ 1786.234658][T25916] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6228'. [ 1786.246993][T15981] uclogic 0003:256C:006D.00F8: failed retrieving string descriptor #200: -71 [ 1786.255594][T15981] uclogic 0003:256C:006D.00F8: failed retrieving pen parameters: -71 [ 1786.263541][T15981] uclogic 0003:256C:006D.00F8: failed probing pen v2 parameters: -71 [ 1786.271637][T15981] uclogic 0003:256C:006D.00F8: failed probing parameters: -71 [ 1786.278900][T15981] uclogic: probe of 0003:256C:006D.00F8 failed with error -71 [ 1786.287139][T15981] usb 4-1: USB disconnect, device number 105 [ 1787.006222][T25150] Bluetooth: hci0: command 0x1003 tx timeout [ 1787.038448][ T5437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1787.070400][T25939] loop4: detected capacity change from 0 to 512 [ 1787.096982][T25939] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1787.104904][T25939] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1787.112817][T25939] System zones: 0-1, 15-15, 18-18, 34-34 [ 1787.118971][T25939] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1787.125181][T25939] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1787.134313][T25939] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1787.148605][T25939] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1787.148970][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1787.155157][T25939] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.6233: bad orphan inode 16 [ 1787.170549][T25939] ext4_test_bit(bit=15, block=18) = 1 [ 1787.178457][T25939] is_bad_inode(inode)=0 [ 1787.182877][T25939] NEXT_ORPHAN(inode)=0 [ 1787.186844][T25939] max_ino=32 [ 1787.190104][T25939] i_nlink=2 [ 1787.193094][T25939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1787.546298][ T791] Bluetooth: hci0: Frame reassembly failed (-84) [ 1787.596627][ T9078] usb 3-1: 0:2 : does not exist [ 1787.611722][ T9078] usb 3-1: USB disconnect, device number 108 [ 1787.718674][T25951] loop3: detected capacity change from 0 to 4096 [ 1787.757104][T25951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1787.764273][T25951] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1787.772684][T25951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1788.135390][T25957] loop1: detected capacity change from 0 to 2048 [ 1788.142759][T25957] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.6236: casefold flag without casefold feature [ 1788.155679][T25957] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1788.165521][T25957] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1788.173050][T25957] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1788.482777][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1788.505482][T25964] loop3: detected capacity change from 0 to 2048 [ 1788.513394][T25964] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.6237: casefold flag without casefold feature [ 1788.526548][T25964] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1788.536452][T25964] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1788.543886][T25964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1788.989727][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1789.005491][T25970] loop1: detected capacity change from 0 to 128 [ 1789.358043][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1789.566207][T25150] Bluetooth: hci0: command 0x1003 tx timeout [ 1789.566268][ T5437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1789.662519][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1789.681614][T25978] loop4: detected capacity change from 0 to 512 [ 1789.697260][T25978] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1789.705089][T25978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1789.713076][T25978] System zones: 0-1, 15-15, 18-18, 34-34 [ 1789.719082][T25978] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1789.725306][T25978] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1789.734400][T25978] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1789.748683][T25978] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1789.755255][T25978] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.6240: bad orphan inode 16 [ 1789.765296][T25978] ext4_test_bit(bit=15, block=18) = 1 [ 1789.770526][T25978] is_bad_inode(inode)=0 [ 1789.774468][T25978] NEXT_ORPHAN(inode)=0 [ 1789.778404][T25978] max_ino=32 [ 1789.781413][T25978] i_nlink=2 [ 1789.784395][T25978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1789.970733][ T791] Bluetooth: hci0: Frame reassembly failed (-84) [ 1790.312236][T25988] loop3: detected capacity change from 0 to 4096 [ 1790.318864][T25988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1790.325957][T25988] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1790.334240][T25988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1790.829483][T25994] bridge0: port 3(vlan2) entered blocking state [ 1790.835568][T25994] bridge0: port 3(vlan2) entered disabled state [ 1791.161532][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1791.172884][T24202] syz-executor: attempt to access beyond end of device [ 1791.172884][T24202] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1791.227176][T25999] loop3: detected capacity change from 0 to 2048 [ 1791.268687][T25999] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.6245: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1791.290155][T25999] EXT4-fs (loop3): get root inode failed [ 1791.295639][T25999] EXT4-fs (loop3): mount failed [ 1791.301503][T26000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.308512][T26000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.315659][T26000] device bridge_slave_0 entered promiscuous mode [ 1791.324158][T26000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.331064][T26000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.338396][T26000] device bridge_slave_1 entered promiscuous mode [ 1791.371373][T25999] loop3: detected capacity change from 0 to 512 [ 1791.382321][T25999] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6245: bad orphan inode 17 [ 1791.405479][T25999] ext4_test_bit(bit=16, block=4) = 1 [ 1791.410743][T25999] is_bad_inode(inode)=0 [ 1791.414711][T25999] NEXT_ORPHAN(inode)=0 [ 1791.418643][T25999] max_ino=32 [ 1791.421656][T25999] i_nlink=1 [ 1791.424634][T25999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1791.441096][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1791.443680][T26000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.453506][T26000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.460607][T26000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.467397][T26000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.490555][T15981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1791.498183][T15981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.505252][T15981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.513880][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1791.521846][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.528691][T17961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.539339][T15981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1791.547365][T15981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.554196][T15981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.571807][T26000] device veth0_vlan entered promiscuous mode [ 1791.579647][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1791.588732][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1791.596693][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1791.603947][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1791.611330][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1791.619139][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1791.631120][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1791.640178][T26000] device veth1_macvtap entered promiscuous mode [ 1791.648904][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1791.659431][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1791.966465][ T9078] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1792.066244][ T5437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1792.072290][T25150] Bluetooth: hci0: command 0x1003 tx timeout [ 1792.097007][ T791] device bridge_slave_1 left promiscuous mode [ 1792.103714][ T791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.111164][ T791] device bridge_slave_0 left promiscuous mode [ 1792.117504][ T791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.125370][ T791] device veth1_macvtap left promiscuous mode [ 1792.131598][ T791] device veth0_vlan left promiscuous mode [ 1792.199976][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1792.566760][T26025] loop3: detected capacity change from 0 to 512 [ 1792.576334][ T9078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.590940][ T9078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1792.600038][T26027] loop2: detected capacity change from 0 to 512 [ 1792.606481][ T9078] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1792.615958][ T9078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.624344][T26025] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1792.626855][T26027] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1792.632823][ T9078] usb 2-1: config 0 descriptor?? [ 1792.640882][T26027] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1792.644658][T26025] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1792.653059][T26027] System zones: 0-1, 15-15, 18-18, 34-34 [ 1792.661211][T26025] System zones: 0-1, 15-15, 18-18, 34-34 [ 1792.666822][T26027] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1792.671847][T26025] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1792.678191][T26027] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1792.683812][T26025] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1792.693182][T26027] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1792.702117][T26025] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1792.716662][T26027] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1792.731507][T26025] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1792.737537][T26027] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.6250: bad orphan inode 16 [ 1792.743815][T26025] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6249: bad orphan inode 16 [ 1792.753866][T26027] ext4_test_bit(bit=15, block=18) = 1 [ 1792.763555][T26025] ext4_test_bit(bit=15, block=18) = 1 [ 1792.769743][T26027] is_bad_inode(inode)=0 [ 1792.773768][T26025] is_bad_inode(inode)=0 [ 1792.777866][T26027] NEXT_ORPHAN(inode)=0 [ 1792.782050][T26025] NEXT_ORPHAN(inode)=0 [ 1792.785747][T26027] max_ino=32 [ 1792.789720][T26025] max_ino=32 [ 1792.792569][T26027] i_nlink=2 [ 1792.795578][T26025] i_nlink=2 [ 1792.795617][T26025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1792.798659][T26027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1792.998138][ T791] Bluetooth: hci0: Frame reassembly failed (-84) [ 1793.022734][T22979] Bluetooth: hci1: Frame reassembly failed (-84) [ 1793.030080][T22979] Bluetooth: hci1: Frame reassembly failed (-84) [ 1793.356324][ T9078] usb 2-1: string descriptor 0 read error: -22 [ 1793.563676][T26011] netlink: 'syz.1.6246': attribute type 1 has an invalid length. [ 1793.571374][T26011] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6246'. [ 1793.582165][T26011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.590426][T26011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.616244][ T9078] uclogic 0003:256C:006D.00F9: failed retrieving string descriptor #200: -71 [ 1793.624871][ T9078] uclogic 0003:256C:006D.00F9: failed retrieving pen parameters: -71 [ 1793.632836][ T9078] uclogic 0003:256C:006D.00F9: failed probing pen v2 parameters: -71 [ 1793.640665][ T9078] uclogic 0003:256C:006D.00F9: failed probing parameters: -71 [ 1793.647981][ T9078] uclogic: probe of 0003:256C:006D.00F9 failed with error -71 [ 1793.656740][ T9078] usb 2-1: USB disconnect, device number 3 [ 1794.267921][T26045] loop1: detected capacity change from 0 to 512 [ 1794.287163][T26045] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1794.294935][T26045] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1794.302966][T26045] System zones: 0-1, 15-15, 18-18, 34-34 [ 1794.308844][T26045] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1794.315057][T26045] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1794.324399][T26045] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1794.338981][T26045] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1794.345568][T26045] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6253: bad orphan inode 16 [ 1794.355582][T26045] ext4_test_bit(bit=15, block=18) = 1 [ 1794.360837][T26045] is_bad_inode(inode)=0 [ 1794.364786][T26045] NEXT_ORPHAN(inode)=0 [ 1794.368740][T26045] max_ino=32 [ 1794.371735][T26045] i_nlink=2 [ 1794.374703][T26045] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1794.552009][T22979] Bluetooth: hci2: Frame reassembly failed (-84) [ 1795.006189][ T5437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1795.006189][T23711] Bluetooth: hci0: command 0x1003 tx timeout [ 1795.086192][T26051] Bluetooth: hci1: command 0x1003 tx timeout [ 1795.086216][T25150] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1795.105362][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1795.163943][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1795.336639][T22979] device bridge_slave_1 left promiscuous mode [ 1795.342569][T22979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.349920][T22979] device bridge_slave_0 left promiscuous mode [ 1795.355830][T22979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.363524][T22979] device veth1_macvtap left promiscuous mode [ 1795.369367][T22979] device veth0_vlan left promiscuous mode [ 1796.606236][T25150] Bluetooth: hci2: command 0x1003 tx timeout [ 1796.606325][T24559] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1796.721989][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1796.917696][T26062] loop1: detected capacity change from 0 to 2048 [ 1796.966091][T26060] bridge0: port 3(vlan2) entered blocking state [ 1796.972315][T26060] bridge0: port 3(vlan2) entered disabled state [ 1796.986911][T26062] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.6255: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1797.004859][T26062] EXT4-fs (loop1): get root inode failed [ 1797.005239][T26063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.010810][T26062] EXT4-fs (loop1): mount failed [ 1797.028976][T26063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.257339][ T399] udevd[399]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 1797.384008][T26063] device bridge_slave_0 entered promiscuous mode [ 1797.423625][T26063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.525872][T26063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.533211][T26063] device bridge_slave_1 entered promiscuous mode [ 1797.534454][T26062] loop1: detected capacity change from 0 to 512 [ 1797.565494][T26062] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6255: bad orphan inode 17 [ 1797.576450][T26062] ext4_test_bit(bit=16, block=4) = 1 [ 1797.581623][T26062] is_bad_inode(inode)=0 [ 1797.585605][T26062] NEXT_ORPHAN(inode)=0 [ 1797.589553][T26062] max_ino=32 [ 1797.592541][T26062] i_nlink=1 [ 1797.595537][T26062] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1797.698865][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1797.805808][T26084] loop1: detected capacity change from 0 to 512 [ 1797.834636][T26063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.841517][T26063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1797.848629][T26063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.849606][T26089] loop4: detected capacity change from 0 to 4096 [ 1797.855382][T26063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1797.869256][T26089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1797.882738][T26084] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1797.890740][T26084] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1797.890829][T26089] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1797.890852][T17961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.912101][T26084] System zones: 0-1, 15-15, 18-18, 34-34 [ 1797.918187][T26084] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1797.924371][T26084] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1797.934104][T26084] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1797.935623][T26089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1797.957591][T26084] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1797.969686][T26084] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6258: bad orphan inode 16 [ 1797.987257][T17961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.994354][T26084] ext4_test_bit(bit=15, block=18) = 1 [ 1798.047314][T26084] is_bad_inode(inode)=0 [ 1798.055628][T26084] NEXT_ORPHAN(inode)=0 [ 1798.069754][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1798.077252][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1798.082660][T26084] max_ino=32 [ 1798.092082][T26084] i_nlink=2 [ 1798.095913][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1798.103884][T26084] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1798.112921][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.119787][T17961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.181921][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1798.193326][T17961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.200204][T17961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.210426][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1798.219510][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1798.227990][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1798.236510][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1798.267902][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1798.291016][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1798.337047][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1798.368553][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1798.380179][T26051] Bluetooth: hci0: sending frame failed (-49) [ 1798.386566][T24559] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1798.411856][T26063] device veth0_vlan entered promiscuous mode [ 1798.419261][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1798.437349][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1798.481558][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1798.497563][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1798.545521][T26063] device veth1_macvtap entered promiscuous mode [ 1798.634307][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1798.649680][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1798.732987][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1798.759210][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1798.796795][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1798.824849][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1798.882923][T26104] loop2: detected capacity change from 0 to 512 [ 1798.920067][T26106] loop4: detected capacity change from 0 to 512 [ 1798.976592][T26106] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1798.988531][T26106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1799.020689][T26106] System zones: 0-1, 15-15, 18-18, 34-34 [ 1799.027030][T26106] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1799.033324][T26106] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1799.042629][T26106] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1799.057343][ T28] audit: type=1400 audit(1728156298.790:753): avc: denied { append } for pid=26109 comm="syz.3.6265" name="vsock" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1799.057563][T26106] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1799.089093][T26106] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.6264: bad orphan inode 16 [ 1799.099409][T26106] ext4_test_bit(bit=15, block=18) = 1 [ 1799.104786][T26106] is_bad_inode(inode)=0 [ 1799.108826][T26106] NEXT_ORPHAN(inode)=0 [ 1799.112747][T26106] max_ino=32 [ 1799.115784][T26106] i_nlink=2 [ 1799.119091][T26106] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1799.187233][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1799.311502][ T9959] Bluetooth: hci0: Frame reassembly failed (-84) [ 1799.361145][T26118] loop1: detected capacity change from 0 to 512 [ 1799.413855][T26118] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1799.425030][T26118] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1799.441862][T26118] System zones: 0-1, 15-15, 18-18, 34-34 [ 1799.453330][T26118] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1799.467276][T26118] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1799.487314][T26118] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1799.506228][T26118] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1799.513594][T26118] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6266: bad orphan inode 16 [ 1799.551173][T26118] ext4_test_bit(bit=15, block=18) = 1 [ 1799.561875][T26118] is_bad_inode(inode)=0 [ 1799.570223][T26118] NEXT_ORPHAN(inode)=0 [ 1799.576190][T26118] max_ino=32 [ 1799.579598][T26118] i_nlink=2 [ 1799.582723][T26118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1799.765117][ T9959] Bluetooth: hci1: Frame reassembly failed (-84) [ 1800.164767][T26132] loop3: detected capacity change from 0 to 4096 [ 1800.171257][T26132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1800.178539][T26132] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1800.186837][T26132] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1800.623821][T26137] bridge0: port 3(vlan2) entered blocking state [ 1800.629935][T26137] bridge0: port 3(vlan2) entered disabled state [ 1801.240436][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1801.326426][T25150] Bluetooth: hci0: command 0x1003 tx timeout [ 1801.356304][T26051] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1801.583419][ T399] udevd[399]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 1801.723492][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1801.758862][T26153] loop4: detected capacity change from 0 to 512 [ 1801.786868][T26153] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1801.794664][T26153] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1801.802829][T26153] System zones: 0-1, 15-15, 18-18, 34-34 [ 1801.809616][T26153] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1801.815939][T26153] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1801.816191][T24559] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1801.825155][T26051] Bluetooth: hci1: command 0x1003 tx timeout [ 1801.831216][T26153] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1801.851124][T26153] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1801.857704][T26153] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.6274: bad orphan inode 16 [ 1801.867725][T26153] ext4_test_bit(bit=15, block=18) = 1 [ 1801.872923][T26153] is_bad_inode(inode)=0 [ 1801.876932][T26153] NEXT_ORPHAN(inode)=0 [ 1801.880829][T26153] max_ino=32 [ 1801.883873][T26153] i_nlink=2 [ 1801.887094][T26153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1801.949480][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1802.054030][T26160] 9pnet_fd: Insufficient options for proto=fd [ 1802.860863][T26178] loop1: detected capacity change from 0 to 2048 [ 1802.878576][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1802.891851][T26178] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.6280: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1802.908694][T26181] loop4: detected capacity change from 0 to 4096 [ 1802.910084][T26178] EXT4-fs (loop1): get root inode failed [ 1802.919626][T26181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1802.921388][T26178] EXT4-fs (loop1): mount failed [ 1802.933192][T26181] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1802.941283][T26181] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1802.977990][T26178] loop1: detected capacity change from 0 to 512 [ 1802.999653][T26178] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6280: bad orphan inode 17 [ 1803.009748][T26178] ext4_test_bit(bit=16, block=4) = 1 [ 1803.014886][T26178] is_bad_inode(inode)=0 [ 1803.018931][T26178] NEXT_ORPHAN(inode)=0 [ 1803.022808][T26178] max_ino=32 [ 1803.025815][T26178] i_nlink=1 [ 1803.028868][T26178] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1803.044319][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1803.061164][T26187] loop1: detected capacity change from 0 to 1024 [ 1803.067939][T26187] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1803.079462][T26187] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1804.054737][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1804.160713][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1804.465491][ T388] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1804.484717][T26203] loop4: detected capacity change from 0 to 128 [ 1804.836279][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.847726][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.857348][ T388] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1804.866273][ T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.874747][ T388] usb 4-1: config 0 descriptor?? [ 1805.236954][T26219] 9pnet_fd: Insufficient options for proto=fd [ 1805.576256][ T388] usb 4-1: string descriptor 0 read error: -22 [ 1805.777701][T26196] netlink: 'syz.3.6284': attribute type 1 has an invalid length. [ 1805.785305][T26196] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6284'. [ 1805.816225][ T388] uclogic 0003:256C:006D.00FA: failed retrieving string descriptor #200: -71 [ 1805.822119][T26221] loop2: detected capacity change from 0 to 512 [ 1805.824864][ T388] uclogic 0003:256C:006D.00FA: failed retrieving pen parameters: -71 [ 1805.840311][ T388] uclogic 0003:256C:006D.00FA: failed probing pen v2 parameters: -71 [ 1805.848332][ T388] uclogic 0003:256C:006D.00FA: failed probing parameters: -71 [ 1805.855793][ T388] uclogic: probe of 0003:256C:006D.00FA failed with error -71 [ 1805.864805][ T388] usb 4-1: USB disconnect, device number 106 [ 1805.870983][T26221] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1805.879459][T26221] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1805.887397][T26221] System zones: 0-1, 15-15, 18-18, 34-34 [ 1805.893471][T26221] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1805.907018][T26221] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1805.921125][T26221] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1805.935626][T26221] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1805.942289][T26221] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.6290: bad orphan inode 16 [ 1805.952601][T26221] ext4_test_bit(bit=15, block=18) = 1 [ 1805.957884][T26221] is_bad_inode(inode)=0 [ 1805.961894][T26221] NEXT_ORPHAN(inode)=0 [ 1805.965786][T26221] max_ino=32 [ 1805.968891][T26221] i_nlink=2 [ 1805.971800][T26221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1806.628767][T26238] loop3: detected capacity change from 0 to 2048 [ 1806.675936][T26238] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.6293: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1806.694214][T26238] EXT4-fs (loop3): get root inode failed [ 1806.700346][T26238] EXT4-fs (loop3): mount failed [ 1806.756519][T26238] loop3: detected capacity change from 0 to 512 [ 1806.774539][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1806.779191][T26238] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6293: bad orphan inode 17 [ 1806.790144][T26238] ext4_test_bit(bit=16, block=4) = 1 [ 1806.795289][T26238] is_bad_inode(inode)=0 [ 1806.799338][T26238] NEXT_ORPHAN(inode)=0 [ 1806.803238][T26238] max_ino=32 [ 1806.806228][T26238] i_nlink=1 [ 1806.809192][T26238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1806.823437][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1806.836013][T26247] loop2: detected capacity change from 0 to 2048 [ 1806.867335][T26247] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.6295: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1806.885252][T26247] EXT4-fs (loop2): get root inode failed [ 1806.891149][T26247] EXT4-fs (loop2): mount failed [ 1806.945781][T26247] loop2: detected capacity change from 0 to 512 [ 1806.961613][T26247] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.6295: bad orphan inode 17 [ 1806.972048][T26247] ext4_test_bit(bit=16, block=4) = 1 [ 1806.977464][T26247] is_bad_inode(inode)=0 [ 1806.981471][T26247] NEXT_ORPHAN(inode)=0 [ 1806.985439][T26247] max_ino=32 [ 1806.988770][T26247] i_nlink=1 [ 1807.034371][T26256] bridge0: port 3(vlan2) entered blocking state [ 1807.040793][T26256] bridge0: port 3(vlan2) entered disabled state [ 1807.061614][T26254] loop3: detected capacity change from 0 to 256 [ 1807.074624][T26254] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1807.117506][T26258] loop2: detected capacity change from 0 to 4096 [ 1807.138404][T26258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1807.145246][T26258] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1807.619966][T26266] loop1: detected capacity change from 0 to 2048 [ 1807.635663][T26266] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.6299: casefold flag without casefold feature [ 1807.648818][T26266] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1807.661535][T26266] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1807.669383][T26266] EXT4-fs mount: 3 callbacks suppressed [ 1807.669396][T26266] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1808.090687][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1808.427873][ T9078] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1808.451931][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1808.798332][T26286] loop3: detected capacity change from 0 to 512 [ 1808.807414][T26286] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1808.815228][T26286] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1808.823293][T26286] System zones: 0-1, 15-15, 18-18, 34-34 [ 1808.829280][T26286] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1808.835499][T26286] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1808.844619][T26286] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1808.859219][T26286] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1808.865895][T26286] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6304: bad orphan inode 16 [ 1808.876014][T26286] ext4_test_bit(bit=15, block=18) = 1 [ 1808.881311][T26286] is_bad_inode(inode)=0 [ 1808.885311][T26286] NEXT_ORPHAN(inode)=0 [ 1808.889284][T26286] max_ino=32 [ 1808.892254][T26286] i_nlink=2 [ 1808.895223][T26286] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1808.938221][ T9078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.949215][ T9078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.958830][ T9078] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1808.967745][ T9078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.976426][ T9078] usb 5-1: config 0 descriptor?? [ 1808.989521][T26290] loop2: detected capacity change from 0 to 2048 [ 1809.006976][T26290] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.6305: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1809.024865][T26290] EXT4-fs (loop2): get root inode failed [ 1809.033952][T26290] EXT4-fs (loop2): mount failed [ 1809.121059][T26290] loop2: detected capacity change from 0 to 512 [ 1809.152771][T26290] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.6305: bad orphan inode 17 [ 1809.163204][T26290] ext4_test_bit(bit=16, block=4) = 1 [ 1809.168602][T26290] is_bad_inode(inode)=0 [ 1809.172666][T26290] NEXT_ORPHAN(inode)=0 [ 1809.176670][T26290] max_ino=32 [ 1809.179628][T26290] i_nlink=1 [ 1809.182717][T26290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1809.221055][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1809.244282][T26298] loop2: detected capacity change from 0 to 4096 [ 1809.252366][T26298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1809.259577][T26298] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1809.267947][T26298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1809.706287][ T9078] usb 5-1: string descriptor 0 read error: -22 [ 1809.724967][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1809.739665][T26308] loop3: detected capacity change from 0 to 512 [ 1809.756830][T26308] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1809.764587][T26308] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1809.772636][T26308] System zones: 0-1, 15-15, 18-18, 34-34 [ 1809.778593][T26308] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1809.785235][T26308] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1809.794553][T26308] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1809.809035][T26308] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1809.815547][T26308] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6309: bad orphan inode 16 [ 1809.825571][T26308] ext4_test_bit(bit=15, block=18) = 1 [ 1809.830779][T26308] is_bad_inode(inode)=0 [ 1809.834752][T26308] NEXT_ORPHAN(inode)=0 [ 1809.838692][T26308] max_ino=32 [ 1809.841689][T26308] i_nlink=2 [ 1809.844668][T26308] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1809.913665][T26278] device tunl0 entered promiscuous mode [ 1809.919748][T26278] netlink: 'syz.4.6302': attribute type 1 has an invalid length. [ 1809.927360][T26278] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6302'. [ 1809.946221][ T9078] uclogic 0003:256C:006D.00FB: failed retrieving string descriptor #200: -71 [ 1809.955183][ T9078] uclogic 0003:256C:006D.00FB: failed retrieving pen parameters: -71 [ 1809.963165][ T9078] uclogic 0003:256C:006D.00FB: failed probing pen v2 parameters: -71 [ 1809.971912][ T9078] uclogic 0003:256C:006D.00FB: failed probing parameters: -71 [ 1809.979270][ T9078] uclogic: probe of 0003:256C:006D.00FB failed with error -71 [ 1809.988875][ T9078] usb 5-1: USB disconnect, device number 2 [ 1810.010557][ T791] Bluetooth: hci0: Frame reassembly failed (-84) [ 1810.110422][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1810.188538][T26314] loop2: detected capacity change from 0 to 2048 [ 1810.201404][T26314] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.6310: casefold flag without casefold feature [ 1810.214331][T26314] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1810.220747][T26317] loop1: detected capacity change from 0 to 4096 [ 1810.225447][T26314] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1810.233653][T26317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1810.237701][T26314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1810.263511][T26317] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1810.271996][T26317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1810.828471][T26325] loop4: detected capacity change from 0 to 2048 [ 1810.837389][T26325] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.6312: casefold flag without casefold feature [ 1810.850330][T26325] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1810.860338][T26325] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1810.867770][T26325] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1811.212813][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1811.222117][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1811.506182][ T313] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1811.616599][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1811.634603][T26336] loop4: detected capacity change from 0 to 1024 [ 1811.641440][T26336] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1811.651277][T26336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1812.046217][T24559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1812.046231][T26051] Bluetooth: hci0: command 0x1003 tx timeout [ 1812.117423][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.128597][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.139109][ T313] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1812.148115][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.159247][ T313] usb 3-1: config 0 descriptor?? [ 1812.164436][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1812.187098][T26343] loop3: detected capacity change from 0 to 4096 [ 1812.194881][T26343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1812.436959][T26343] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1812.447598][T26343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1812.608497][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1812.626445][T26350] loop4: detected capacity change from 0 to 512 [ 1812.636988][T26350] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1812.644739][T26350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1812.652795][T26350] System zones: 0-1, 15-15, 18-18, 34-34 [ 1812.658676][T26350] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1812.664922][T26350] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1812.674087][T26350] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1812.688648][T26350] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1812.695677][T26350] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.6318: bad orphan inode 16 [ 1812.706057][T26350] ext4_test_bit(bit=15, block=18) = 1 [ 1812.711459][T26350] is_bad_inode(inode)=0 [ 1812.715589][T26350] NEXT_ORPHAN(inode)=0 [ 1812.719547][T26350] max_ino=32 [ 1812.722559][T26350] i_nlink=2 [ 1812.725584][T26350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1813.042410][T26356] loop1: detected capacity change from 0 to 512 [ 1813.116264][ T313] usb 3-1: string descriptor 0 read error: -22 [ 1813.128597][ T399] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1813.143970][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1813.195802][T11472] Bluetooth: hci0: Frame reassembly failed (-84) [ 1813.321757][T26333] device tunl0 entered promiscuous mode [ 1813.331741][T26333] netlink: 'syz.2.6313': attribute type 1 has an invalid length. [ 1813.373879][T26333] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6313'. [ 1813.416258][ T313] uclogic 0003:256C:006D.00FC: failed retrieving string descriptor #200: -71 [ 1813.424920][ T313] uclogic 0003:256C:006D.00FC: failed retrieving pen parameters: -71 [ 1813.432788][ T313] uclogic 0003:256C:006D.00FC: failed probing pen v2 parameters: -71 [ 1813.440731][ T313] uclogic 0003:256C:006D.00FC: failed probing parameters: -71 [ 1813.447992][ T313] uclogic: probe of 0003:256C:006D.00FC failed with error -71 [ 1813.457454][ T313] usb 3-1: USB disconnect, device number 109 [ 1813.910395][T26371] loop2: detected capacity change from 0 to 128 [ 1814.152352][T26375] loop3: detected capacity change from 0 to 2048 [ 1814.160030][T26375] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.6323: casefold flag without casefold feature [ 1814.173079][T26375] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1814.183435][T26375] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1814.190952][T26375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1814.722158][T26384] loop1: detected capacity change from 0 to 512 [ 1814.737219][T26384] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1814.745165][T26384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1814.753509][T26384] System zones: 0-1, 15-15, 18-18, 34-34 [ 1814.759872][T26384] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1814.766087][T26384] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1814.775270][T26384] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1814.789656][T26384] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1814.796245][T26384] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6324: bad orphan inode 16 [ 1814.806315][T26384] ext4_test_bit(bit=15, block=18) = 1 [ 1814.811522][T26384] is_bad_inode(inode)=0 [ 1814.815503][T26384] NEXT_ORPHAN(inode)=0 [ 1814.819508][T26384] max_ino=32 [ 1814.822448][T26384] i_nlink=2 [ 1814.825424][T26384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1814.901245][T26388] loop2: detected capacity change from 0 to 4096 [ 1814.908305][T26388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1814.915618][T26388] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1814.923641][T26388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1815.017441][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1815.246189][T24559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1815.384062][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1815.407245][T26398] loop4: detected capacity change from 0 to 4096 [ 1815.413724][T26398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1815.421529][T26398] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1815.429735][T26398] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1815.742126][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1815.760270][ T791] Bluetooth: hci0: Frame reassembly failed (-84) [ 1815.792802][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1816.416936][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1816.445135][T26414] loop4: detected capacity change from 0 to 2048 [ 1816.452763][T26414] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.6330: casefold flag without casefold feature [ 1816.465713][T26414] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1816.475717][T26414] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1816.483167][T26414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1817.299394][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1817.306430][T15981] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1817.606243][T17961] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1817.666215][T15981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.676971][T15981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.686462][T15981] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1817.695380][T15981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.704584][T15981] usb 2-1: config 0 descriptor?? [ 1817.806223][T25150] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1817.806222][T24559] Bluetooth: hci0: command 0x1003 tx timeout [ 1817.834681][T26434] loop2: detected capacity change from 0 to 512 [ 1817.856794][T26434] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1817.864521][T26434] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1817.873071][T26434] System zones: 0-1, 15-15, 18-18, 34-34 [ 1817.879355][T26434] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1817.885780][T26434] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1817.896304][T26434] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1817.910746][T26434] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1817.917401][T26434] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.6336: bad orphan inode 16 [ 1817.927762][T26434] ext4_test_bit(bit=15, block=18) = 1 [ 1817.932958][T26434] is_bad_inode(inode)=0 [ 1817.936964][T26434] NEXT_ORPHAN(inode)=0 [ 1817.940897][T26434] max_ino=32 [ 1817.943892][T26434] i_nlink=2 [ 1817.946898][T26434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1818.026213][T17961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.036936][T17961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1818.047691][T17961] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1818.057327][T17961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.068449][T17961] usb 5-1: config 0 descriptor?? [ 1818.103893][T11472] Bluetooth: hci0: Frame reassembly failed (-84) [ 1818.406228][T15981] usb 2-1: string descriptor 0 read error: -22 [ 1818.583541][T26442] FAULT_INJECTION: forcing a failure. [ 1818.583541][T26442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.596477][T26442] CPU: 1 PID: 26442 Comm: syz.3.6337 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 1818.606015][T26442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1818.615914][T26442] Call Trace: [ 1818.619035][T26442] [ 1818.621812][T26442] dump_stack_lvl+0x151/0x1b7 [ 1818.626325][T26442] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1818.631620][T26442] ? kstrtouint+0xf6/0x180 [ 1818.635870][T26442] ? _kstrtol+0x150/0x150 [ 1818.640038][T26442] dump_stack+0x15/0x1c [ 1818.644029][T26442] should_fail_ex+0x3d0/0x520 [ 1818.648543][T26442] should_fail+0xb/0x10 [ 1818.652535][T26442] should_fail_usercopy+0x1a/0x20 [ 1818.657395][T26442] _copy_from_user+0x1e/0xc0 [ 1818.661822][T26442] copy_msghdr_from_user+0xaa/0x670 [ 1818.666860][T26442] ? sendmsg_copy_msghdr+0x70/0x70 [ 1818.671803][T26442] __sys_sendmsg+0x236/0x390 [ 1818.676228][T26442] ? ____sys_sendmsg+0x9a0/0x9a0 [ 1818.681006][T26442] ? __kasan_check_write+0x14/0x20 [ 1818.685948][T26442] ? mutex_unlock+0xb2/0x260 [ 1818.690465][T26442] ? __kasan_check_write+0x14/0x20 [ 1818.695440][T26442] ? __ia32_sys_read+0x90/0x90 [ 1818.700013][T26442] ? debug_smp_processor_id+0x17/0x20 [ 1818.705215][T26442] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1818.711119][T26442] __x64_sys_sendmsg+0x7f/0x90 [ 1818.715723][T26442] x64_sys_call+0x16a/0x9a0 [ 1818.720060][T26442] do_syscall_64+0x3b/0xb0 [ 1818.724311][T26442] ? clear_bhb_loop+0x55/0xb0 [ 1818.728826][T26442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1818.734553][T26442] RIP: 0033:0x7ff3c397dff9 [ 1818.738222][T26443] netlink: 'syz.1.6332': attribute type 1 has an invalid length. [ 1818.738807][T26442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1818.746403][T26443] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6332'. [ 1818.765801][T26442] RSP: 002b:00007ff3c46fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1818.765827][T26442] RAX: ffffffffffffffda RBX: 00007ff3c3b35f80 RCX: 00007ff3c397dff9 [ 1818.765838][T26442] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 1818.765847][T26442] RBP: 00007ff3c46fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.765856][T26442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.765864][T26442] R13: 0000000000000000 R14: 00007ff3c3b35f80 R15: 00007ffeac4790d8 [ 1818.765879][T26442] [ 1818.782523][T26445] loop3: detected capacity change from 0 to 512 [ 1818.806230][T15981] uclogic 0003:256C:006D.00FD: failed retrieving string descriptor #200: -71 [ 1818.806349][T17961] usb 5-1: string descriptor 0 read error: -22 [ 1818.814238][T15981] uclogic 0003:256C:006D.00FD: failed retrieving pen parameters: -71 [ 1818.847018][T26445] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1818.853716][T15981] uclogic 0003:256C:006D.00FD: failed probing pen v2 parameters: -71 [ 1818.862175][T26445] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1818.869658][T15981] uclogic 0003:256C:006D.00FD: failed probing parameters: -71 [ 1818.877694][T26445] System zones: 0-1, 15-15, 18-18, 34-34 [ 1818.885067][T15981] uclogic: probe of 0003:256C:006D.00FD failed with error -71 [ 1818.891005][T26445] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1818.903881][T26445] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1818.907884][T15981] usb 2-1: USB disconnect, device number 4 [ 1818.913057][T26445] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1818.933238][T26445] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1818.939862][T26445] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6339: bad orphan inode 16 [ 1818.949830][T26445] ext4_test_bit(bit=15, block=18) = 1 [ 1818.954998][T26445] is_bad_inode(inode)=0 [ 1818.959039][T26445] NEXT_ORPHAN(inode)=0 [ 1818.962996][T26445] max_ino=32 [ 1818.966020][T26445] i_nlink=2 [ 1818.969041][T26445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1818.997120][T26428] netlink: 'syz.4.6334': attribute type 1 has an invalid length. [ 1819.016420][T26428] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6334'. [ 1819.046252][T17961] uclogic 0003:256C:006D.00FE: failed retrieving string descriptor #200: -71 [ 1819.054867][T17961] uclogic 0003:256C:006D.00FE: failed retrieving pen parameters: -71 [ 1819.062763][T17961] uclogic 0003:256C:006D.00FE: failed probing pen v2 parameters: -71 [ 1819.070681][T17961] uclogic 0003:256C:006D.00FE: failed probing parameters: -71 [ 1819.077955][T17961] uclogic: probe of 0003:256C:006D.00FE failed with error -71 [ 1819.087653][T17961] usb 5-1: USB disconnect, device number 3 [ 1819.375530][T26451] loop1: detected capacity change from 0 to 2048 [ 1819.383049][T26451] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.6340: casefold flag without casefold feature [ 1819.396096][T26451] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1819.406473][T26451] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1819.413839][T26451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1819.842049][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1820.021614][ T399] udevd[399]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 1820.126193][T24559] Bluetooth: hci0: command 0x1003 tx timeout [ 1820.126278][T25150] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1820.233498][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1820.239586][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1820.275627][T26467] loop2: detected capacity change from 0 to 4096 [ 1820.282382][T26467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1820.289946][T26467] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1820.298074][T26467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1820.627383][T15981] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1820.906259][ T9078] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1820.986226][T15981] usb 2-1: config 0 has no interfaces? [ 1820.991659][T15981] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1821.001407][T15981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.023384][T15981] usb 2-1: config 0 descriptor?? [ 1821.174783][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1821.217794][T26480] loop3: detected capacity change from 0 to 40427 [ 1821.241580][T26480] F2FS-fs (loop3): fault_injection options not supported [ 1821.249319][T26480] F2FS-fs (loop3): invalid crc value [ 1821.255605][T26480] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1821.279899][T26480] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1821.300184][T26480] syz.3.6347: attempt to access beyond end of device [ 1821.300184][T26480] loop3: rw=2049, sector=77824, nr_sectors = 256 limit=40427 [ 1821.318946][T25304] syz-executor: attempt to access beyond end of device [ 1821.318946][T25304] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1821.376228][ T9078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1821.576237][ T9078] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1821.585147][ T9078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.593030][ T9078] usb 5-1: Product: syz [ 1821.597028][ T9078] usb 5-1: Manufacturer: syz [ 1821.601420][ T9078] usb 5-1: SerialNumber: syz [ 1821.606856][ T9078] usb 5-1: config 0 descriptor?? [ 1821.847028][ T28] audit: type=1400 audit(1728156321.580:754): avc: denied { mount } for pid=26477 comm="syz.4.6346" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1821.871840][T26478] loop4: detected capacity change from 0 to 16 [ 1821.878211][T26478] erofs: Unknown parameter '18446744073709551615n&*4c N3iVEl?lѾνB^'׃juL]CJ(Hyt pdNGn+'X [ 1821.878211][T26478] ' [ 1821.938360][ T9078] usb 5-1: USB disconnect, device number 4 [ 1822.156789][ T399] udevd[399]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1822.651467][T26502] loop4: detected capacity change from 0 to 2048 [ 1822.666902][T26502] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.6352: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1822.685015][T26502] EXT4-fs (loop4): get root inode failed [ 1822.690723][T26502] EXT4-fs (loop4): mount failed [ 1822.742315][T26502] loop4: detected capacity change from 0 to 512 [ 1822.750508][T26502] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.6352: bad orphan inode 17 [ 1822.760544][T26502] ext4_test_bit(bit=16, block=4) = 1 [ 1822.765700][T26502] is_bad_inode(inode)=0 [ 1822.769678][T26502] NEXT_ORPHAN(inode)=0 [ 1822.773548][T26502] max_ino=32 [ 1822.776607][T26502] i_nlink=1 [ 1822.779554][T26502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1822.793371][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1822.810881][T26507] loop4: detected capacity change from 0 to 2048 [ 1822.818119][T26507] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.6353: casefold flag without casefold feature [ 1822.830955][T26507] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1822.840239][T25111] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1822.841039][T26507] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1822.855113][T26507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1822.932197][T26510] loop2: detected capacity change from 0 to 512 [ 1822.947496][T26510] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1822.955244][T26510] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1822.963083][T26510] System zones: 0-1, 15-15, 18-18, 34-34 [ 1822.970843][T26510] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1822.978587][T26510] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1822.988985][T26510] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1823.004606][T26510] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1823.012755][T26510] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.6354: bad orphan inode 16 [ 1823.042629][T26510] ext4_test_bit(bit=15, block=18) = 1 [ 1823.048709][T26510] is_bad_inode(inode)=0 [ 1823.053142][T26510] NEXT_ORPHAN(inode)=0 [ 1823.058280][T26510] max_ino=32 [ 1823.061493][T26510] i_nlink=2 [ 1823.064900][T26510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1823.293596][ T9078] usb 2-1: USB disconnect, device number 5 [ 1823.308761][ T2015] Bluetooth: hci0: Frame reassembly failed (-84) [ 1823.315997][ T2015] Bluetooth: hci0: Frame reassembly failed (-84) [ 1823.338705][T26518] loop1: detected capacity change from 0 to 512 [ 1823.368069][T26518] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1823.375842][T26518] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1823.383757][T25111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.394504][T26518] System zones: 0-1, 15-15, 18-18, 34-34 [ 1823.400064][T25111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1823.400676][T26518] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1823.419853][T25111] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1823.419966][T26518] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1823.438046][T26518] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1823.438405][T25111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.452452][T26518] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1823.467483][T26518] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6355: bad orphan inode 16 [ 1823.493363][T25111] usb 4-1: config 0 descriptor?? [ 1823.494899][T26518] ext4_test_bit(bit=15, block=18) = 1 [ 1823.503482][T26518] is_bad_inode(inode)=0 [ 1823.507486][T26518] NEXT_ORPHAN(inode)=0 [ 1823.511454][T26518] max_ino=32 [ 1823.514412][T26518] i_nlink=2 [ 1823.517520][T26518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1823.660572][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1823.669956][ T2015] Bluetooth: hci1: Frame reassembly failed (-84) [ 1824.186238][T25111] usb 4-1: string descriptor 0 read error: -22 [ 1824.387229][T26500] netlink: 'syz.3.6351': attribute type 1 has an invalid length. [ 1824.394989][T26500] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6351'. [ 1824.416225][T25111] uclogic 0003:256C:006D.00FF: failed retrieving string descriptor #200: -71 [ 1824.424858][T25111] uclogic 0003:256C:006D.00FF: failed retrieving pen parameters: -71 [ 1824.432744][T25111] uclogic 0003:256C:006D.00FF: failed probing pen v2 parameters: -71 [ 1824.440656][T25111] uclogic 0003:256C:006D.00FF: failed probing parameters: -71 [ 1824.448501][T25111] uclogic: probe of 0003:256C:006D.00FF failed with error -71 [ 1824.459286][T25111] usb 4-1: USB disconnect, device number 107 [ 1824.537616][T26528] FAULT_INJECTION: forcing a failure. [ 1824.537616][T26528] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.550119][T26528] CPU: 1 PID: 26528 Comm: syz.4.6357 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 1824.559647][T26528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1824.569542][T26528] Call Trace: [ 1824.572663][T26528] [ 1824.575442][T26528] dump_stack_lvl+0x151/0x1b7 [ 1824.579957][T26528] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1824.585251][T26528] ? vm_area_alloc+0x24/0x1b0 [ 1824.589767][T26528] dump_stack+0x15/0x1c [ 1824.593755][T26528] should_fail_ex+0x3d0/0x520 [ 1824.598269][T26528] ? vm_area_alloc+0xea/0x1b0 [ 1824.602782][T26528] __should_failslab+0xaf/0xf0 [ 1824.607386][T26528] should_failslab+0x9/0x20 [ 1824.611725][T26528] kmem_cache_alloc+0x3b/0x2c0 [ 1824.616325][T26528] vm_area_alloc+0xea/0x1b0 [ 1824.620659][T26528] mmap_region+0xf01/0x23a0 [ 1824.625004][T26528] ? file_mmap_ok+0x150/0x150 [ 1824.629514][T26528] ? cap_mmap_addr+0x169/0x2e0 [ 1824.634112][T26528] ? __kasan_check_read+0x11/0x20 [ 1824.638976][T26528] ? shmem_get_unmapped_area+0x2e3/0x710 [ 1824.644757][T26528] ? arch_get_unmapped_area+0x780/0x780 [ 1824.650139][T26528] ? get_unmapped_area+0x31d/0x380 [ 1824.655086][T26528] do_mmap+0x853/0xe30 [ 1824.658994][T26528] ? mlock_future_check+0x110/0x110 [ 1824.664022][T26528] vm_mmap_pgoff+0x208/0x430 [ 1824.668450][T26528] ? account_locked_vm+0x250/0x250 [ 1824.673394][T26528] ? ksys_write+0x260/0x2c0 [ 1824.677740][T26528] ksys_mmap_pgoff+0xed/0x1e0 [ 1824.682248][T26528] ? debug_smp_processor_id+0x17/0x20 [ 1824.687600][T26528] __x64_sys_mmap+0x103/0x120 [ 1824.692109][T26528] x64_sys_call+0x67/0x9a0 [ 1824.696362][T26528] do_syscall_64+0x3b/0xb0 [ 1824.700613][T26528] ? clear_bhb_loop+0x55/0xb0 [ 1824.705126][T26528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.710865][T26528] RIP: 0033:0x7f568b57dff9 [ 1824.715119][T26528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1824.734637][T26528] RSP: 002b:00007f568b3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1824.742880][T26528] RAX: ffffffffffffffda RBX: 00007f568b735f80 RCX: 00007f568b57dff9 [ 1824.750703][T26528] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 1824.758510][T26528] RBP: 00007f568b3ff090 R08: ffffffffffffffff R09: 0000000000000000 [ 1824.766313][T26528] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 1824.774126][T26528] R13: 0000000000000000 R14: 00007f568b735f80 R15: 00007ffd9bde7ba8 [ 1824.781944][T26528] [ 1825.326191][T25150] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1825.326201][T24559] Bluetooth: hci0: command 0x1003 tx timeout [ 1825.422750][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1825.444684][T26545] loop2: detected capacity change from 0 to 4096 [ 1825.451242][T26545] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1825.726208][T25150] Bluetooth: hci1: command 0x1003 tx timeout [ 1825.726263][T26051] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1826.081900][T26553] loop3: detected capacity change from 0 to 2048 [ 1826.097020][T26553] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.6363: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1826.114979][T26553] EXT4-fs (loop3): get root inode failed [ 1826.115088][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1826.120714][T26553] EXT4-fs (loop3): mount failed [ 1826.193682][T26553] loop3: detected capacity change from 0 to 512 [ 1826.201964][T26553] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6363: bad orphan inode 17 [ 1826.211993][T26553] ext4_test_bit(bit=16, block=4) = 1 [ 1826.217170][T26553] is_bad_inode(inode)=0 [ 1826.221145][T26553] NEXT_ORPHAN(inode)=0 [ 1826.225021][T26553] max_ino=32 [ 1826.228262][T26553] i_nlink=1 [ 1826.231347][T26553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1826.245612][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1826.268165][T26563] loop3: detected capacity change from 0 to 4096 [ 1826.274708][T26563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1826.281841][T26563] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1826.290216][T26563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1826.823958][T26574] loop4: detected capacity change from 0 to 256 [ 1826.833201][T26574] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1827.266596][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1827.331020][ T399] udevd[399]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 1827.372665][T26580] loop3: detected capacity change from 0 to 512 [ 1827.385470][T26582] loop2: detected capacity change from 0 to 512 [ 1827.393873][T26580] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1827.402391][T26580] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1827.410982][T26582] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1827.428258][T26582] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1827.436111][T26582] System zones: [ 1827.437849][T26580] System zones: 0-1, 15-15, 18-18, 34-34 [ 1827.448034][T26582] 0-1, 15-15, 18-18, 34-34 [ 1827.452871][T26582] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1827.457294][T26580] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1827.459368][T26582] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1827.465201][T26580] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1827.474588][T26582] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1827.498000][T26580] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1827.512591][T26582] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1827.516396][T26580] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1827.519431][T26582] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.6370: bad orphan inode 16 [ 1827.535871][T26580] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6369: bad orphan inode 16 [ 1827.546070][T26582] ext4_test_bit(bit=15, block=18) = 1 [ 1827.551465][T26580] ext4_test_bit(bit=15, block=18) = 1 [ 1827.551527][T26582] is_bad_inode(inode)=0 [ 1827.557119][T26580] is_bad_inode(inode)=0 [ 1827.561690][T26582] NEXT_ORPHAN(inode)=0 [ 1827.564670][T26580] NEXT_ORPHAN(inode)=0 [ 1827.570587][T26582] max_ino=32 [ 1827.575782][T26582] i_nlink=2 [ 1827.579005][T26582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1827.579969][T26580] max_ino=32 [ 1827.593050][T26580] i_nlink=2 [ 1827.596041][T26580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1827.916876][T26594] loop4: detected capacity change from 0 to 2048 [ 1827.931808][ T28] audit: type=1326 audit(1728156327.500:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.431820][T22979] Bluetooth: hci0: Frame reassembly failed (-84) [ 1828.461630][ T28] audit: type=1326 audit(1728156327.510:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.485190][ T28] audit: type=1326 audit(1728156327.510:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.510408][ T28] audit: type=1326 audit(1728156327.510:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.533775][ T28] audit: type=1326 audit(1728156327.510:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.549182][T22979] Bluetooth: hci1: Frame reassembly failed (-84) [ 1828.557423][ T28] audit: type=1326 audit(1728156327.510:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.586611][ T28] audit: type=1326 audit(1728156327.510:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.610353][ T28] audit: type=1326 audit(1728156327.510:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.635097][ T28] audit: type=1326 audit(1728156327.510:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.658719][ T28] audit: type=1326 audit(1728156327.510:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.659438][T26594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1828.686883][ T28] audit: type=1326 audit(1728156327.510:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.4.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568b57dff9 code=0x7ffc0000 [ 1828.750433][T26604] FAULT_INJECTION: forcing a failure. [ 1828.750433][T26604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1828.763283][T26604] CPU: 1 PID: 26604 Comm: syz.1.6373 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 1828.772912][T26604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1828.782905][T26604] Call Trace: [ 1828.786028][T26604] [ 1828.788804][T26604] dump_stack_lvl+0x151/0x1b7 [ 1828.793318][T26604] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1828.798612][T26604] ? search_extable+0xaf/0xf0 [ 1828.803126][T26604] ? strncpy_from_user+0x1e6/0x2b0 [ 1828.808069][T26604] ? trim_init_extable+0x3d0/0x3d0 [ 1828.813017][T26604] ? strncpy_from_user+0x1e6/0x2b0 [ 1828.818137][T26604] dump_stack+0x15/0x1c [ 1828.822129][T26604] should_fail_ex+0x3d0/0x520 [ 1828.826643][T26604] should_fail+0xb/0x10 [ 1828.830633][T26604] should_fail_usercopy+0x1a/0x20 [ 1828.835495][T26604] strncpy_from_user+0x24/0x2b0 [ 1828.840180][T26604] ? longest_prefix_match+0x4b8/0x650 [ 1828.846171][T26604] strncpy_from_user_nofault+0x73/0x150 [ 1828.851551][T26604] bpf_probe_read_compat_str+0xec/0x180 [ 1828.856932][T26604] bpf_prog_c1796171ffc7efef+0x35/0x37 [ 1828.862312][T26604] bpf_trace_run4+0x18d/0x2f0 [ 1828.866827][T26604] ? bpf_trace_run3+0x2e0/0x2e0 [ 1828.871512][T26604] ? __this_cpu_preempt_check+0x13/0x20 [ 1828.876897][T26604] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 1828.883401][T26604] ? probe_sched_switch+0x60/0x80 [ 1828.888350][T26604] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 1828.894513][T26604] __bpf_trace_sched_switch+0xe/0x10 [ 1828.899632][T26604] __traceiter_sched_switch+0x91/0xc0 [ 1828.904841][T26604] __schedule+0x1313/0x1560 [ 1828.909180][T26604] ? release_firmware_map_entry+0x191/0x191 [ 1828.914911][T26604] ? get_push_task+0x180/0x180 [ 1828.919510][T26604] preempt_schedule_irq+0xc7/0x140 [ 1828.924454][T26604] ? preempt_schedule_notrace+0x140/0x140 [ 1828.930010][T26604] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1828.935740][T26604] irqentry_exit+0x30/0x40 [ 1828.939989][T26604] sysvec_reschedule_ipi+0x80/0x160 [ 1828.945026][T26604] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1828.950318][T26604] RIP: 0010:kernel_text_address+0x0/0xe0 [ 1828.955788][T26604] Code: 30 9a 87 48 39 cb 0f 93 c1 48 c7 c2 c3 a6 a8 87 48 39 d3 0f 92 c2 20 ca 08 c2 0f b6 c2 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 41 57 41 56 53 48 89 fb 48 c7 c0 00 00 00 81 41 be 01 [ 1828.975316][T26604] RSP: 0018:ffffc9000b1e7678 EFLAGS: 00000246 [ 1828.981217][T26604] RAX: 0000000000000000 RBX: ffffffff8165c423 RCX: 1ffff9200163cedf [ 1828.989028][T26604] RDX: 1ffff9200163ceda RSI: ffffc9000b1e7750 RDI: ffffffff8165c423 [ 1828.996839][T26604] RBP: ffffc9000b1e7688 R08: dffffc0000000001 R09: ffffc9000b1e76c0 [ 1829.004657][T26604] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88812d793cc0 [ 1829.012462][T26604] R13: ffffffff8165c4d0 R14: dffffc0000000000 R15: 1ffff9200163cee1 [ 1829.020274][T26604] ? stack_trace_save+0x1c0/0x1c0 [ 1829.025132][T26604] ? stack_trace_save+0x113/0x1c0 [ 1829.029994][T26604] ? stack_trace_save+0x113/0x1c0 [ 1829.034942][T26604] ? __kernel_text_address+0xd/0x40 [ 1829.039974][T26604] unwind_get_return_address+0x4d/0x90 [ 1829.045446][T26604] arch_stack_walk+0xf3/0x140 [ 1829.049958][T26604] ? stack_trace_save+0x113/0x1c0 [ 1829.054822][T26604] stack_trace_save+0x113/0x1c0 [ 1829.059503][T26604] ? stack_trace_snprint+0xf0/0xf0 [ 1829.064574][T26604] ? preempt_schedule_irq+0xe7/0x140 [ 1829.069657][T26604] ? bad_area_nosemaphore+0x2d/0x40 [ 1829.074692][T26604] ? binder_get_thread+0x1cb/0x830 [ 1829.079638][T26604] ? binder_get_thread+0x1cb/0x830 [ 1829.084585][T26604] kasan_set_track+0x4b/0x70 [ 1829.089019][T26604] kasan_save_alloc_info+0x1f/0x30 [ 1829.093958][T26604] __kasan_kmalloc+0x9c/0xb0 [ 1829.098385][T26604] kmalloc_trace+0x44/0xa0 [ 1829.102639][T26604] binder_get_thread+0x1cb/0x830 [ 1829.107411][T26604] binder_ioctl+0x240/0x22d0 [ 1829.111839][T26604] ? ioctl_has_perm+0x3f0/0x560 [ 1829.116525][T26604] ? binder_poll+0x2c0/0x2c0 [ 1829.120952][T26604] ? has_cap_mac_admin+0x3c0/0x3c0 [ 1829.125900][T26604] ? rcu_read_unlock_special+0xdb/0x4e0 [ 1829.131278][T26604] ? selinux_file_ioctl+0x3cc/0x540 [ 1829.136314][T26604] ? selinux_file_alloc_security+0x120/0x120 [ 1829.142127][T26604] ? __rcu_read_unlock+0x7e/0xd0 [ 1829.146909][T26604] ? __fget_files+0x2cb/0x330 [ 1829.151416][T26604] ? security_file_ioctl+0x84/0xb0 [ 1829.156363][T26604] ? binder_poll+0x2c0/0x2c0 [ 1829.160789][T26604] __se_sys_ioctl+0x114/0x190 [ 1829.165302][T26604] __x64_sys_ioctl+0x7b/0x90 [ 1829.169729][T26604] x64_sys_call+0x98/0x9a0 [ 1829.173981][T26604] do_syscall_64+0x3b/0xb0 [ 1829.178232][T26604] ? clear_bhb_loop+0x55/0xb0 [ 1829.182759][T26604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1829.188475][T26604] RIP: 0033:0x7ffaadb7dff9 [ 1829.192730][T26604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1829.212258][T26604] RSP: 002b:00007ffaae973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.220501][T26604] RAX: ffffffffffffffda RBX: 00007ffaadd36130 RCX: 00007ffaadb7dff9 [ 1829.228315][T26604] RDX: 0000000020000300 RSI: 000000004018620d RDI: 0000000000000007 [ 1829.236123][T26604] RBP: 00007ffaae973090 R08: 0000000000000000 R09: 0000000000000000 [ 1829.243934][T26604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.251746][T26604] R13: 0000000000000000 R14: 00007ffaadd36130 R15: 00007ffc9c0c8838 [ 1829.259560][T26604] [ 1829.449085][T26606] loop1: detected capacity change from 0 to 512 [ 1829.457007][T26606] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1829.464767][T26606] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1829.472636][T26606] System zones: 0-1, 15-15, 18-18, 34-34 [ 1829.478671][T26606] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1829.485170][T26606] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1829.500822][T26606] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1829.507715][T26606] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6374: bad orphan inode 16 [ 1829.517932][T26606] ext4_test_bit(bit=15, block=18) = 1 [ 1829.518125][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1829.523119][T26606] is_bad_inode(inode)=0 [ 1829.532813][T26606] NEXT_ORPHAN(inode)=0 [ 1829.536766][T26606] max_ino=32 [ 1829.539746][T26606] i_nlink=2 [ 1829.542702][T26606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1829.752465][T22979] Bluetooth: hci2: Frame reassembly failed (-84) [ 1829.896202][ T388] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1830.136200][ T388] usb 5-1: Using ep0 maxpacket: 32 [ 1830.256270][ T388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.267026][ T388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.276556][ T388] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1830.289140][ T388] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1830.297975][ T388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.306221][ T388] usb 5-1: config 0 descriptor?? [ 1830.446195][T26051] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1830.446236][T24559] Bluetooth: hci0: command 0x1003 tx timeout [ 1830.552231][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1830.606244][T26051] Bluetooth: hci1: command 0x1003 tx timeout [ 1830.606284][T25150] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1830.892232][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1830.991924][ T388] ntrig 0003:1B96:000A.0100: unknown main item tag 0x0 [ 1830.998706][ T388] ntrig 0003:1B96:000A.0100: unknown main item tag 0x0 [ 1831.005742][ T388] ntrig 0003:1B96:000A.0100: unknown main item tag 0x0 [ 1831.012500][ T388] ntrig 0003:1B96:000A.0100: unknown main item tag 0x0 [ 1831.019146][ T388] ntrig 0003:1B96:000A.0100: unknown main item tag 0x0 [ 1831.026357][ T388] ntrig 0003:1B96:000A.0100: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 1831.083311][ T388] usb 5-1: USB disconnect, device number 5 [ 1831.430779][T26624] loop3: detected capacity change from 0 to 4096 [ 1831.437311][T26624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1831.444407][T26624] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1831.452882][T26624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1831.806225][T25150] Bluetooth: hci2: command 0x1003 tx timeout [ 1831.806257][ T45] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1831.922445][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1831.952451][T26642] loop2: detected capacity change from 0 to 512 [ 1831.969746][T26642] EXT4-fs: Ignoring removed oldalloc option [ 1831.975565][T26642] EXT4-fs: quotafile must be on filesystem root [ 1832.317519][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1832.344682][T26646] loop3: detected capacity change from 0 to 512 [ 1832.528069][T26646] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.6383: corrupted inode contents [ 1832.539955][T26646] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #3: comm syz.3.6383: mark_inode_dirty error [ 1832.551710][T26646] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.6383: corrupted inode contents [ 1832.563637][T26646] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.6383: mark_inode_dirty error [ 1832.575428][T26646] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.6383: Failed to acquire dquot type 0 [ 1832.586597][T18240] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1832.594553][T26646] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.6383: corrupted inode contents [ 1832.606715][T26646] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.6383: mark_inode_dirty error [ 1832.618166][T26646] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.6383: corrupted inode contents [ 1832.630147][T26646] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.6383: mark_inode_dirty error [ 1832.641487][T26646] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.6383: corrupted inode contents [ 1832.653611][T26646] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 1832.662298][T26646] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.6383: corrupted inode contents [ 1832.674286][T26646] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz.3.6383: mark_inode_dirty error [ 1832.685493][T26646] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 1832.694828][T26646] EXT4-fs (loop3): 1 truncate cleaned up [ 1832.700489][T26646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1832.703722][T26651] loop4: detected capacity change from 0 to 40427 [ 1832.709423][T26646] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038 (0x7fffffff) [ 1832.723352][T26651] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1832.732802][T26651] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1832.741786][T26651] F2FS-fs (loop4): invalid crc value [ 1832.748205][T26651] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1832.772665][T26651] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1832.784755][T26651] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1832.876345][T18240] usb 3-1: Using ep0 maxpacket: 32 [ 1832.949744][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6384'. [ 1832.958815][T26662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6384'. [ 1833.006264][T18240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.017077][T18240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.026709][T18240] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1833.035506][T18240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.044296][T18240] usb 3-1: config 0 descriptor?? [ 1833.088351][T18240] hub 3-1:0.0: USB hub found [ 1833.336269][T18240] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1833.466239][T25111] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1833.718637][T26670] loop1: detected capacity change from 0 to 512 [ 1833.737031][T26670] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1833.744820][T26670] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1833.753054][T26670] System zones: 0-1, 15-15, 18-18, 34-34 [ 1833.759600][T26670] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1833.765937][T26670] __quota_error: 23 callbacks suppressed [ 1833.765959][T26670] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1833.780635][T26670] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1833.794974][T26670] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1833.801832][T26670] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6388: bad orphan inode 16 [ 1833.811881][T26670] ext4_test_bit(bit=15, block=18) = 1 [ 1833.817241][T26670] is_bad_inode(inode)=0 [ 1833.821228][T26670] NEXT_ORPHAN(inode)=0 [ 1833.825116][T26670] max_ino=32 [ 1833.828712][T26670] i_nlink=2 [ 1833.896281][T25111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.907087][T25111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.916681][T25111] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1833.925605][T25111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.937442][T25111] usb 4-1: config 0 descriptor?? [ 1833.997876][T11472] Bluetooth: hci0: Frame reassembly failed (-84) [ 1834.616270][T25111] usb 4-1: string descriptor 0 read error: -22 [ 1834.817102][T26664] netlink: 'syz.3.6386': attribute type 1 has an invalid length. [ 1834.824733][T26664] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1834.836404][T25111] uclogic 0003:256C:006D.0101: failed retrieving string descriptor #200: -71 [ 1834.845211][T25111] uclogic 0003:256C:006D.0101: failed retrieving pen parameters: -71 [ 1834.853504][T25111] uclogic 0003:256C:006D.0101: failed probing pen v2 parameters: -71 [ 1834.861479][T25111] uclogic 0003:256C:006D.0101: failed probing parameters: -71 [ 1834.868857][T25111] uclogic: probe of 0003:256C:006D.0101 failed with error -71 [ 1834.878091][T25111] usb 4-1: USB disconnect, device number 108 [ 1835.279410][T18240] usbhid 3-1:0.0: can't add hid device: -71 [ 1835.287201][T18240] usbhid: probe of 3-1:0.0 failed with error -71 [ 1835.305527][T26685] loop4: detected capacity change from 0 to 512 [ 1835.326814][T18240] usb 3-1: USB disconnect, device number 110 [ 1835.327612][T26685] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1835.340507][T26685] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1835.348338][T26685] System zones: 0-1, 15-15, 18-18, 34-34 [ 1835.354156][T26685] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1835.360355][T26685] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1835.369473][T26685] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1835.383800][T26685] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1835.390468][T26685] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.6391: bad orphan inode 16 [ 1835.400477][T26685] ext4_test_bit(bit=15, block=18) = 1 [ 1835.405655][T26685] is_bad_inode(inode)=0 [ 1835.409733][T26685] NEXT_ORPHAN(inode)=0 [ 1835.413609][T26685] max_ino=32 [ 1835.416642][T26685] i_nlink=2 [ 1835.495648][T26689] loop3: detected capacity change from 0 to 2048 [ 1835.503051][T26689] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.6392: casefold flag without casefold feature [ 1835.516370][T26689] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1835.529084][T26689] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1835.582949][ T2015] Bluetooth: hci1: Frame reassembly failed (-84) [ 1835.957783][T26699] loop2: detected capacity change from 0 to 4096 [ 1835.964556][T26699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1835.979279][T26699] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1836.046192][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1836.400373][T26707] loop3: detected capacity change from 0 to 512 [ 1836.416789][T26707] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1836.424513][T26707] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1836.432799][T26707] System zones: 0-1, 15-15, 18-18, 34-34 [ 1836.438656][T26707] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1836.445078][T26707] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1836.454421][T26707] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1836.470332][T26707] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1836.478320][T26707] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6395: bad orphan inode 16 [ 1836.489913][T26707] ext4_test_bit(bit=15, block=18) = 1 [ 1836.495245][T26707] is_bad_inode(inode)=0 [ 1836.508702][T26707] NEXT_ORPHAN(inode)=0 [ 1836.512728][T26707] max_ino=32 [ 1836.515811][T26707] i_nlink=2 [ 1836.826542][T26716] loop2: detected capacity change from 0 to 128 [ 1837.197831][T26720] syz.1.6397[26720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1837.197880][T26720] syz.1.6397[26720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1837.212425][T26720] loop1: detected capacity change from 0 to 512 [ 1837.248291][T26720] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.6397: corrupted inode contents [ 1837.260188][T26720] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #3: comm syz.1.6397: mark_inode_dirty error [ 1837.271723][T26720] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.6397: corrupted inode contents [ 1837.283718][T26720] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.6397: mark_inode_dirty error [ 1837.295166][T26720] Quota error (device loop1): write_blk: dquota write failed [ 1837.302480][T26720] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1837.312302][T26720] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.6397: Failed to acquire dquot type 0 [ 1837.323971][T26720] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.6397: corrupted inode contents [ 1837.336323][T26720] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #16: comm syz.1.6397: mark_inode_dirty error [ 1837.347845][T26720] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.6397: corrupted inode contents [ 1837.359758][T26720] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.6397: mark_inode_dirty error [ 1837.371059][T26720] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.6397: corrupted inode contents [ 1837.388865][T26720] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 1837.397483][T26720] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.6397: corrupted inode contents [ 1837.409554][T26720] EXT4-fs error (device loop1): ext4_truncate:4302: inode #16: comm syz.1.6397: mark_inode_dirty error [ 1837.420654][T26720] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 1837.430293][T26720] EXT4-fs (loop1): 1 truncate cleaned up [ 1837.435786][T26720] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038 (0x7fffffff) [ 1837.646217][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 1837.706250][T25150] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1838.068052][T24674] EXT4-fs unmount: 11 callbacks suppressed [ 1838.068073][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1838.111039][T26730] loop4: detected capacity change from 0 to 4096 [ 1838.118135][T26730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1838.125000][T26730] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1838.133410][T26730] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1838.759127][T26739] loop3: detected capacity change from 0 to 2048 [ 1838.769520][T26739] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.6401: casefold flag without casefold feature [ 1838.782830][T26739] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1838.794644][T26739] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1838.802130][T26739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1839.743098][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1840.132441][T26753] loop2: detected capacity change from 0 to 512 [ 1840.144176][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1840.166934][T26753] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1840.189003][T26753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1840.210090][T26753] System zones: 0-1, 15-15, 18-18, 34-34 [ 1840.216382][T26753] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1840.222639][T26753] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1840.237333][T26753] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1840.252013][T26753] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1840.258628][T26753] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.6404: bad orphan inode 16 [ 1840.259144][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1840.321034][T26753] ext4_test_bit(bit=15, block=18) = 1 [ 1840.324602][T26763] tipc: Failed to remove unknown binding: 66,1,1/0:1831245393/1831245395 [ 1840.334610][T26753] is_bad_inode(inode)=0 [ 1840.338727][T26763] tipc: Failed to remove unknown binding: 66,1,1/0:1831245393/1831245395 [ 1840.338753][T26763] tipc: Failed to remove unknown binding: 66,1,1/0:1831245393/1831245395 [ 1840.378736][T26764] loop1: detected capacity change from 0 to 2048 [ 1840.386189][T26753] NEXT_ORPHAN(inode)=0 [ 1840.397546][T26753] max_ino=32 [ 1840.403997][T26753] i_nlink=2 [ 1840.408982][T26764] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.6406: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1840.410286][T26753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1840.446320][T26764] EXT4-fs (loop1): get root inode failed [ 1840.451838][T26764] EXT4-fs (loop1): mount failed [ 1840.539813][T26764] loop1: detected capacity change from 0 to 512 [ 1840.566849][T26764] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6406: bad orphan inode 17 [ 1840.591737][T26764] ext4_test_bit(bit=16, block=4) = 1 [ 1840.597181][T26764] is_bad_inode(inode)=0 [ 1840.601177][T26764] NEXT_ORPHAN(inode)=0 [ 1840.609429][T26764] max_ino=32 [ 1840.612325][T26770] loop4: detected capacity change from 0 to 512 [ 1840.618621][T26764] i_nlink=1 [ 1840.618777][T26764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1840.692177][T26770] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1840.774256][T26770] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1840.841084][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1840.842498][T26770] System zones: 0-1, 15-15, 18-18, 34-34 [ 1840.867367][T26770] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1840.908824][T26770] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1840.925155][T26770] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1840.939855][T26770] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1840.962034][T26770] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.6407: bad orphan inode 16 [ 1840.972135][T26770] ext4_test_bit(bit=15, block=18) = 1 [ 1840.977461][T26770] is_bad_inode(inode)=0 [ 1840.981471][T26770] NEXT_ORPHAN(inode)=0 [ 1840.985350][T26770] max_ino=32 [ 1840.988408][T26770] i_nlink=2 [ 1840.991339][T26770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1841.287480][T26781] loop3: detected capacity change from 0 to 512 [ 1841.299483][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1841.336891][T26781] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1841.340227][T26783] loop2: detected capacity change from 0 to 2048 [ 1841.346703][T26781] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1841.360071][T26781] System zones: 0-1, 15-15, 18-18, 34-34 [ 1841.366070][T26783] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.6410: casefold flag without casefold feature [ 1841.366617][T26781] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1841.385084][T26781] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1841.398905][T26783] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1841.410030][T11472] Bluetooth: hci0: Frame reassembly failed (-84) [ 1841.416397][T26781] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1841.432279][T26783] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1841.439922][T26783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1841.448806][T26781] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1841.467982][T26781] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6409: bad orphan inode 16 [ 1841.479531][T26781] ext4_test_bit(bit=15, block=18) = 1 [ 1841.484833][T26781] is_bad_inode(inode)=0 [ 1841.489105][T26781] NEXT_ORPHAN(inode)=0 [ 1841.493038][T26781] max_ino=32 [ 1841.496061][T26781] i_nlink=2 [ 1841.500169][T26781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1841.973501][T11472] Bluetooth: hci1: Frame reassembly failed (-84) [ 1842.014010][T26798] loop1: detected capacity change from 0 to 2048 [ 1842.078837][T26798] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.6411: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1842.097439][T26798] EXT4-fs (loop1): get root inode failed [ 1842.102974][T26798] EXT4-fs (loop1): mount failed [ 1842.171431][T26798] loop1: detected capacity change from 0 to 512 [ 1842.196677][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1842.217970][T26798] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6411: bad orphan inode 17 [ 1842.240192][T26798] ext4_test_bit(bit=16, block=4) = 1 [ 1842.246519][T26803] loop2: detected capacity change from 0 to 512 [ 1842.247468][T26798] is_bad_inode(inode)=0 [ 1842.257569][T26798] NEXT_ORPHAN(inode)=0 [ 1842.261490][T26798] max_ino=32 [ 1842.264515][T26798] i_nlink=1 [ 1842.267698][T26798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1842.268592][T26803] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1842.283851][T26803] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1842.292347][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1842.293147][T26803] System zones: 0-1, 15-15, 18-18, 34-34 [ 1842.303748][T26803] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1842.310040][T26803] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1842.319193][T26803] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1842.333627][T26803] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1842.340309][T26803] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.6412: bad orphan inode 16 [ 1842.350388][T26803] ext4_test_bit(bit=15, block=18) = 1 [ 1842.351070][T26808] loop1: detected capacity change from 0 to 4096 [ 1842.355572][T26803] is_bad_inode(inode)=0 [ 1842.355581][T26803] NEXT_ORPHAN(inode)=0 [ 1842.355588][T26803] max_ino=32 [ 1842.355594][T26803] i_nlink=2 [ 1842.365490][T26808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1842.379151][T26803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1842.391476][T26808] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1842.403293][T26808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1843.177858][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1843.195939][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1843.486202][T25150] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1843.486273][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 1843.574123][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1843.600980][T26823] loop4: detected capacity change from 0 to 4096 [ 1843.607939][T26823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1843.615605][T26823] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1843.623651][T26823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1844.046215][T25150] Bluetooth: hci1: command 0x1003 tx timeout [ 1844.056988][T24559] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1844.084436][T26830] loop1: detected capacity change from 0 to 2048 [ 1844.099523][T26830] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.6418: casefold flag without casefold feature [ 1844.112393][T26830] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1844.122841][T26830] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1844.130469][T26830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1844.201768][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1844.478528][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1844.769447][T25111] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1844.942002][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1844.963990][T26848] loop1: detected capacity change from 0 to 2048 [ 1844.971426][T26848] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.6422: casefold flag without casefold feature [ 1844.984283][T26848] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1844.997440][T26848] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1845.004843][T26848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1845.092863][T26851] tipc: Failed to remove unknown binding: 66,1,1/0:1699474046/1699474048 [ 1845.101814][T26851] tipc: Failed to remove unknown binding: 66,1,1/0:1699474046/1699474048 [ 1845.110386][T26851] tipc: Failed to remove unknown binding: 66,1,1/0:1699474046/1699474048 [ 1845.189289][T25111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.201067][T25111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.315983][T25111] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1845.455855][T25111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.464404][T25111] usb 4-1: config 0 descriptor?? [ 1845.807923][T26859] loop2: detected capacity change from 0 to 4096 [ 1845.831742][T26859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1845.839021][T26859] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1845.839332][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1845.847448][T26859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1846.033077][T26865] loop1: detected capacity change from 0 to 2048 [ 1846.607335][ T28] audit: type=1326 audit(1728156345.740:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1846.754890][ T28] audit: type=1326 audit(1728156345.740:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1846.784448][ T28] audit: type=1326 audit(1728156345.740:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1846.791628][T25111] usb 4-1: string descriptor 0 read error: -22 [ 1846.814176][T26865] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1846.822841][T26872] loop4: detected capacity change from 0 to 2048 [ 1846.828579][ T28] audit: type=1326 audit(1728156345.740:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1846.852960][ T28] audit: type=1326 audit(1728156345.740:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1846.869937][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1846.876494][ T28] audit: type=1326 audit(1728156345.740:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1846.882826][T26834] netlink: 'syz.3.6419': attribute type 1 has an invalid length. [ 1846.905213][ T28] audit: type=1326 audit(1728156345.740:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1846.917431][T26872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1846.936267][ T28] audit: type=1326 audit(1728156345.740:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1846.946005][T26834] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6419'. [ 1846.975835][ T28] audit: type=1326 audit(1728156345.740:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1847.049947][ T28] audit: type=1326 audit(1728156345.740:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26861 comm="syz.1.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaadb7dff9 code=0x7ffc0000 [ 1847.089196][T25111] uclogic 0003:256C:006D.0102: failed retrieving string descriptor #200: -71 [ 1847.098235][T25111] uclogic 0003:256C:006D.0102: failed retrieving pen parameters: -71 [ 1847.106470][T25111] uclogic 0003:256C:006D.0102: failed probing pen v2 parameters: -71 [ 1847.114362][T25111] uclogic 0003:256C:006D.0102: failed probing parameters: -71 [ 1847.122278][T25111] uclogic: probe of 0003:256C:006D.0102 failed with error -71 [ 1847.140503][T25111] usb 4-1: USB disconnect, device number 109 [ 1847.382762][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1847.628162][T26886] loop3: detected capacity change from 0 to 2048 [ 1847.647954][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1847.655185][T26886] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.6429: casefold flag without casefold feature [ 1847.667992][T26886] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1847.679361][T26886] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1847.688305][T26886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1848.488242][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1848.536803][T26903] loop3: detected capacity change from 0 to 2048 [ 1848.547295][T26903] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.6433: casefold flag without casefold feature [ 1848.560421][T26903] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1848.571336][T26903] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1848.713424][T26903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1849.800418][T26917] loop2: detected capacity change from 0 to 128 [ 1849.821086][T26915] loop1: detected capacity change from 0 to 2048 [ 1849.863039][T26915] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.6435: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1849.883019][T26915] EXT4-fs (loop1): get root inode failed [ 1849.888780][T26915] EXT4-fs (loop1): mount failed [ 1850.336026][T26915] loop1: detected capacity change from 0 to 512 [ 1850.424307][T26915] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6435: bad orphan inode 17 [ 1850.435958][T26915] ext4_test_bit(bit=16, block=4) = 1 [ 1850.441154][T26915] is_bad_inode(inode)=0 [ 1850.445267][T26915] NEXT_ORPHAN(inode)=0 [ 1850.449119][T26915] max_ino=32 [ 1850.452131][T26915] i_nlink=1 [ 1850.455113][T26915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1850.467091][T25304] EXT4-fs (loop3): unmounting filesystem. [ 1850.473226][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1850.511169][T26934] loop1: detected capacity change from 0 to 2048 [ 1850.561589][T26934] Alternate GPT is invalid, using primary GPT. [ 1850.567725][T26934] loop1: p2 p3 p7 [ 1851.066942][T26947] loop2: detected capacity change from 0 to 2048 [ 1851.076407][T26947] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.6442: casefold flag without casefold feature [ 1851.089869][T26947] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1851.100222][T26947] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1851.107802][T26947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1851.930404][T26969] loop3: detected capacity change from 0 to 512 [ 1852.109464][T26969] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 1852.120504][T26969] block device autoloading is deprecated and will be removed. [ 1852.128246][T26969] I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1852.137561][T26969] EXT4-fs (loop3): couldn't read superblock of external journal [ 1852.151406][T26972] loop1: detected capacity change from 0 to 2048 [ 1852.151826][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1852.164269][T26972] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.6448: casefold flag without casefold feature [ 1852.177329][T26972] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1852.190639][T26975] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6447'. [ 1852.197813][T26972] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1852.199781][T26975] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6447'. [ 1852.206948][T26972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1852.220521][T26975] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 1852.900788][T26989] loop4: detected capacity change from 0 to 128 [ 1853.003749][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1853.067236][T26995] loop1: detected capacity change from 0 to 512 [ 1853.204501][T26995] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1853.212396][T26995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1853.222152][T26995] System zones: 0-1, 15-15, 18-18, 34-34 [ 1853.231418][T26995] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1853.238834][T26995] __quota_error: 23 callbacks suppressed [ 1853.238862][T26995] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1853.254590][T26995] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1853.271957][T26995] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1853.365948][T26995] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6453: bad orphan inode 16 [ 1853.420304][T26995] ext4_test_bit(bit=15, block=18) = 1 [ 1853.441624][T26995] is_bad_inode(inode)=0 [ 1853.446598][T26995] NEXT_ORPHAN(inode)=0 [ 1853.450575][T26995] max_ino=32 [ 1853.453561][T26995] i_nlink=2 [ 1853.456869][T26995] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1853.853982][T27008] loop4: detected capacity change from 0 to 2048 [ 1853.879286][T27008] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.6456: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1853.897781][T27008] EXT4-fs (loop4): get root inode failed [ 1853.903317][T27008] EXT4-fs (loop4): mount failed [ 1853.955713][T27008] loop4: detected capacity change from 0 to 512 [ 1853.965876][T27008] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.6456: bad orphan inode 17 [ 1853.976726][T27008] ext4_test_bit(bit=16, block=4) = 1 [ 1853.982049][T27008] is_bad_inode(inode)=0 [ 1853.986089][T27008] NEXT_ORPHAN(inode)=0 [ 1853.989995][T27008] max_ino=32 [ 1853.993033][T27008] i_nlink=1 [ 1853.995993][T27008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1854.026589][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1854.027247][T27014] loop2: detected capacity change from 0 to 2048 [ 1854.060538][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1854.067175][T27014] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.6457: casefold flag without casefold feature [ 1854.077475][T27017] loop4: detected capacity change from 0 to 2048 [ 1854.080711][T27014] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1854.100365][T27014] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1854.109000][T27014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1854.113434][T27017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1855.067890][T24674] EXT4-fs (loop4): unmounting filesystem. [ 1855.079278][T26000] EXT4-fs (loop2): unmounting filesystem. [ 1855.086564][T27029] loop1: detected capacity change from 0 to 2048 [ 1855.102420][T27029] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.6462: casefold flag without casefold feature [ 1855.115372][T27029] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1855.125809][T27029] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1855.133508][T27029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1855.586253][ T9078] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1855.935207][T24354] EXT4-fs (loop1): unmounting filesystem. [ 1855.983615][ T9078] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1856.015355][T27050] loop1: detected capacity change from 0 to 4096 [ 1856.022583][T27050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1856.029817][T27050] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1856.046572][T27050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1856.049596][ T9078] usb 3-1: config 0 has no interface number 0 [ 1856.072367][ T9078] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1856.566081][ T9078] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1856.576623][ T9078] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1856.585516][ T9078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.636186][ T9078] usb 3-1: config 0 descriptor?? [ 1856.966780][T24354] EXT4-fs (loop1): unmounting filesystem. SYZFAIL: repeatedly failed to execute the program proc=0 req=2036 state=1 status=9 (errno 11: Resource temporarily unavailable) [ 1857.097969][ T28] audit: type=1400 audit(1728156356.830:819): avc: denied { write } for pid=280 comm="syz-executor" path="pipe:[6464]" dev="pipefs" ino=6464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1857.356238][ T9078] usbhid 3-1:0.1: can't add hid device: -71 [ 1857.362014][ T9078] usbhid: probe of 3-1:0.1 failed with error -71 [ 1857.375950][ T9078] usb 3-1: USB disconnect, device number 111 [ 1857.626557][T22979] device bridge_slave_1 left promiscuous mode [ 1857.632469][T22979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.639846][T22979] device bridge_slave_0 left promiscuous mode [ 1857.645741][T22979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.653290][T22979] device veth1_macvtap left promiscuous mode [ 1857.659134][T22979] device veth0_vlan left promiscuous mode [ 1858.386999][T22979] device bridge_slave_1 left promiscuous mode [ 1858.392927][T22979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.400268][T22979] device bridge_slave_0 left promiscuous mode [ 1858.406264][T22979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.413682][T22979] device bridge_slave_1 left promiscuous mode [ 1858.419710][T22979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.426950][T22979] device bridge_slave_0 left promiscuous mode [ 1858.432850][T22979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.440428][T22979] device bridge_slave_1 left promiscuous mode [ 1858.446447][T22979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.453578][T22979] device bridge_slave_0 left promiscuous mode [ 1858.459607][T22979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.467090][T22979] device bridge_slave_1 left promiscuous mode [ 1858.472987][T22979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.480240][T22979] device bridge_slave_0 left promiscuous mode [ 1858.486248][T22979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.494101][T22979] device veth1_macvtap left promiscuous mode [ 1858.500072][T22979] device veth0_vlan left promiscuous mode [ 1858.505704][T22979] device veth1_macvtap left promiscuous mode [ 1858.511549][T22979] device veth0_vlan left promiscuous mode [ 1858.517512][T22979] device veth1_macvtap left promiscuous mode [ 1858.523307][T22979] device veth0_vlan left promiscuous mode [ 1858.529247][T22979] device veth1_macvtap left promiscuous mode [ 1858.535043][T22979] device veth0_vlan left promiscuous mode