last executing test programs: 8.47804219s ago: executing program 3 (id=322): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 8.254858189s ago: executing program 3 (id=323): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0x11, 0x148, 0x0, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4f5) write$UHID_INPUT(r1, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) syz_clone3(0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x2, 0xa4, &(0x7f00000002c0)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0x0, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0xfffd, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3, 0x7}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x11}, @mdlm={0x15}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xffff, 0x0, 0x0, 0x5, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x80, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x4200, 0x0, 0x8001, 0x7, 0x0, 0x3756, 0x0, 0x803, 0x5, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000380)="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"}, 0x20) 6.357175581s ago: executing program 1 (id=331): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 6.33603955s ago: executing program 1 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0\x00', 0xa6) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x100, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0/../file0\x00', r1, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8001, 0x80, 0x15a5, 0x1000, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x1, 0x10, 0x1ff, 0xfffffffe, {{0x1b, 0x4, 0x1, 0x6, 0x6c, 0x65, 0x0, 0x6, 0x6, 0x0, @remote, @remote, {[@rr={0x7, 0x7, 0x85, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x2c, 0xf, 0x3, 0x4, [{@rand_addr=0x64010100, 0xfffffffe}, {@rand_addr=0x64010102, 0x6}, {@loopback, 0x3}, {@empty}, {@local, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0xab, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0xc}, {@multicast1}, {@local, 0xfffffff8}, {@rand_addr=0x64010101, 0x568d}]}]}}}}}) r5 = creat(&(0x7f0000000480)='./file0/../file0/file0\x00', 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x60, 0x3, 0xfffffffa, 0x23811, r3, 0xfffffffd, '\x00', r4, r5, 0x0, 0x1, 0x2, 0x6, @void, @value, @void, @value}, 0x50) r7 = getpgrp(0xffffffffffffffff) ptrace$pokeuser(0x6, r7, 0x9, 0x4) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@getroute={0x14, 0x1a, 0x1, 0x70bd29, 0x2, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x141240, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000680)={'batadv0\x00', @broadcast}) sched_getattr(r7, &(0x7f00000006c0)={0x38}, 0x38, 0x0) execve(&(0x7f0000000700)='./file0/../file0\x00', &(0x7f00000009c0)={[&(0x7f0000000740)='tunl0\x00', &(0x7f0000000780)='!]\x00', &(0x7f00000007c0)='.:\x00', &(0x7f0000000800)='tunl0\x00', &(0x7f0000000840)='*!(\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000900)='@^.),}*@\x00', &(0x7f0000000940)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000980)='\xff\xff\xff\xff\xff\xff']}, &(0x7f0000000b40)={[&(0x7f0000000a40)='[:.\x00', &(0x7f0000000a80)='batadv0\x00', &(0x7f0000000ac0)='batadv0\x00', &(0x7f0000000b00)='$%\x00']}) syz_usb_connect(0x5, 0x97f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x8a, 0xc6, 0xd1, 0xff, 0x403, 0xf3c1, 0xb2e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96d, 0x4, 0x47, 0x7, 0xa0, 0x2f, [{{0x9, 0x4, 0xe6, 0x5, 0x1, 0x97, 0xa5, 0x6b, 0x2, [], [{{0x9, 0x5, 0xf, 0xc, 0x200, 0xe8, 0x7f, 0x4f}}]}}, {{0x9, 0x4, 0xdf, 0x2, 0x0, 0xff, 0xff, 0xff, 0x3, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x4, 0x9}, @as_header={0x7, 0x24, 0x1, 0x22, 0x5, 0x2}]}, @hid_hid={0x9, 0x21, 0x2, 0x77, 0x1, {0x22, 0x858}}]}}, {{0x9, 0x4, 0x61, 0xb, 0xb, 0xff, 0x2, 0x7c, 0x6, [@generic={0xf7, 0xb, "e369efa4d5b16885677e289f8575151e9ff7f966d8f8abefcbe76f3808812c3f9bcbf2509b0d5ad68dbd3519d91293a45b1f93e2ca636608624c36c53e70ac6df68b979938fcc4bfea560d214650e3e4fe5eddc7b377cd0ec5d8304a9b04831dcd3cc54ea4d9e73eb91df6d34a26db49b27266330099bb35d1a0eea143ed2f55f5ccbf5de6f114b43b2a5c15444d385cf47ce5e90a41e29bfab4b4b91bf906cb02304bd6f3fe8b6bdf78b3592acc44b28be4b74ae94495e2ea24235becfd8c55dbe2976a9fc33df1bd7c9ae2f21a314bc664219f069cd76658954a462fe35b4a531813d3bf5ce27909062a206001e5eb0a620010f6"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x8b, 0x0, 0x3}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x401, 0xfaaa, 0x8a, "cfdedd"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, "", "079abe"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0xcb, 0xe1, "ba46"}]}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x8, 0x96, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x79, 0xff, 0x3}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x6, 0x9, 0x8}}, {{0x9, 0x5, 0xd, 0x11, 0x200, 0xa, 0x2, 0x7}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x3, 0x2, 0x81, [@generic={0xee, 0xa, "136e3f79dcc30017c29a56b787d0213dea11f36cbdf2317540367c22c1c5041f3537a97fa1312ce49bec63517b5a5c17fc5e832429076fb1d1dd0082c55f067ec822d50f7d65aa2dd1319efd61ee57f374fc1ecff4174992eda3e206ca7db3f1e597675070e949f314c52dce7852547a25c7450a00df0103a5059791c70c22b2ded280d2d710b6e10957d32ceb811969e80526751181ade782664033fb551bdf653a2627131a82e79a0355dacac6a0291f525f8609b4a9e05d5adeb4c549c7069bfdb421ecfa84db43d62cca77d188986bc5b2b49b0219666ecb9f32e13dd25b4d5fc88c59ab770ce1c13933"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2, 0xf8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x7, 0x6, 0x10, [@generic={0x4f, 0x4, "5a302801c8aa1e0e31faf8e348df9e22b522efe828eaec84536a11241f46a88876c1995b900f3ffd7a3b1db7b0ce147bfcaa7cc49797f66b0aaa5ee86a2e69099e2b85be9c173fd2c284c20e05"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x1, 0xf9, 0x9, [@generic={0x43, 0xe, "e914dab0f439657479b554585a3e2173111f363a370f87672196e523d82974e71cfaa268d3b5ec129fa18149c3ff41d5f49548a945284809be28ac25f63d5afaeb"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x9e4}, @generic={0xef, 0x22, "bbb8039696a7674aacda599baf696ca403175830e8f788ac5df945e9dcb2207fe1fe491914af4735cce8c71436e997eaf4fa0fa5e33555a986442cd23ade5942459b866556c3ca493cc5b891c8b8be9eac6701539c3266f6570793c0f51a1a94111a0fba472feccffe310387bfec4f50272fefdf36b51475db296ae4ab285e4dcf91203d54b4969462a133317ec898e3f138ce04707745a45e756339a2f6ff3a44757c5a59f0ec052d96c3fd08ba09e6981e029f3cf60515f60086e2a88e49c66ec08624e88af7fb96f0d3fa83cf6c3c628ba5c3af7bd107209b14ef051059985fb16b00fd080cdf4fd47e4866"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x5c5}]}}, {{0x9, 0x5, 0x0, 0xc, 0x0, 0x2, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1}]}}]}}, {{0x9, 0x4, 0xc5, 0x80, 0x6, 0x71, 0xf7, 0xe5, 0x5, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "ae"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x68, 0x2, 0xf9}, [@ncm={0x6, 0x24, 0x1a, 0x99, 0x18}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x6, [0x7, 0x8000, 0x2, 0x6c1e, 0x3]}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x20}, @country_functional={0x8, 0x24, 0x7, 0x8, 0xff, [0xfff9]}]}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x9, 0x5, 0x59, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x393}, @generic={0x37, 0xeb193d4def606dc6, "a72e1c605992b0adc25b413ccc697c9a877f21af14b67d77c74a4bf817d8c433b2bfed60efff9a23fa5cbb3cab8e75f81062c98197"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x7eb, 0x6, 0xfe, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x0, 0x5, 0x3, [@generic={0xc3, 0xf, "b1318e498f73f2c78c2ca4bc99855acecac7be01f64b5ab7cf4f162375fbc60c4b47d287701456fcdbd9c894e558a8668080e567546f18bbe479ba448e6e5eb547425716b36c1473895c158f69c8f520b2e95f214ac71005a0008b7018722ac4097bcba82bffa7a33f97809da1cd8e66ac9c4a7110f87f0bcb1afaa6e9d9a007c7b2fab8ade86b5cee92e78ed484512256074357be31478bdf2e78296ce8077303128392a804f91f5236f90a89170a8ec87127c6e3c1ed4ca92fe08d4a5bc907a0"}, @generic={0xc4, 0xa, "7f5fbba2c5393ab4fa8859e218fa525c3071e46fc9dd3db38039e6b861ab6d4f36a2dd8d2b53ac7d6ff1c6ca381f01868dbbcfb5d4f57065494ae82064a0c11c877103a95860e463cd298e423d19c0e4d574ae346803b339012c82534b1d893298ae0ad5dce0a437a3758fb9b385d23fafda717d827194da70a108734f9e26bc8e12e7243933c1455fcd44498ea8f0f01705bbb3837f46048a75c6d0da38124c325549e27026dd34efb9ae7f5f419e7b9baed3d490076aed9e8d7fe7d5dcbf819a2d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xf6, 0x7, 0x2, [@generic={0xf5, 0x2c, "9eb89e6d3040df3370e89eacb93049159bb284662a934d8e4a17884c0f62d0e2999346aa361b3d5a361ec5ac0b6befeb8d526afeb0ad03aca48427fbd5904d18b39c7d0915c027f45bad1503b3df179e7707590af8ef25c77e0005c3890ca2b721d6bad2e8a273d65678f619cc5e906dd6b62c7dbd18e07e48fcf3fd9463dd0690cb9ec25cdeb4aeb5ee2febdd6e0251f277a46856eb7565e8c8cf53bbce4b14e4f3d3a85cb83b55351c95d39e410d514a0dc38c6c122a9208626256ca44a97d7124067629c2d65c1c784430942b7df687ebd206e2ee0091c0383bdebb7d0a637c1e885f56d4d9d9f23deeef63d93d1fe30fea"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x2, 0x2, 0x1, [@generic={0x81, 0x1, "ff8be3449692d050dd4eac3d1313fea97cddfe172194b4f239a1d69e696763c9396597ef19f47363efa0d5fca6b5a623ffda7e3285ed9adbe125c443edd7ae749d8a8da34e0fa81f3faf91e7f1a2ece794fe60c0654f45dc6c1b5f13b4009dc63286e9da89953cce2057ef12351ec44dce7f9ed18bc0b78a84ffbd658c94fd"}, @generic={0x8a, 0x21, "72b63bc28d88bb8c37827039d2fc142f2f77b11c61eb9ad1fb3a0a9044080644c08b4c3945e0b82fb3c5a1106d2ba7254db5159a9630dd48a99ccc52b6ad179d11d1f88ddb79318d264d4f4b2202f5b1cca8dbeccda8e57dc9ca0942aaa2e65883236e85b069f027e3885ad87ce1495f729ff4bd22e3f5c8fd9bb39a91d562d9e3c83fc782f75404"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x35, 0x7, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xcf}, @generic={0xbf, 0x22, "39937f93f484cc0a1e5c3b3746d3982544d1c316bc7a3f3037fe1c4b6f233532de6fb2c6952ff25bd3e4f833f4457981ca208a55a0c039cb68d2f67b7461d8d86a260209d225b48859644a465dddb950db790f46ba7dad820b388733c3de9fcb5006328405045e70277430245da298741b76b7c9f75dc03778b0b99fa5d109adb51954d7f674e58bfd97cbb72f24af6890897660e3c7ee9776ee1ca207f14e0995c07b834885e43ab2e55fdde1ebaf38a391e6fbf2c293833045ebb0a3"}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x310, 0x4, 0xd4, 0x6}, 0x33, &(0x7f0000001540)={0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x0, 0xf00, 0x5, [0x0, 0x3f00, 0xc0, 0xffc00f, 0xff003f, 0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0x6, 0xfff7}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x81d}}]}) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000001640)=0x9, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000001680)={0x0, 'vlan0\x00', {0x2}, 0x8d}) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000016c0)=@sg0, r1, &(0x7f0000001700)) r11 = syz_io_uring_complete(0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@o_path={&(0x7f00000018c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x3, &(0x7f0000001740)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000001780)='GPL\x00', 0x60b, 0x41, &(0x7f00000017c0)=""/65, 0x41000, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001880)={0x3, 0x3, 0x1, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001940)=[r5, r11, r3, r12, r3, r6, r3], 0x0, 0x10, 0x2, @void, @value}, 0x94) fcntl$getownex(r9, 0x10, &(0x7f0000001a40)) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r11) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x84, r13, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x60000}, 0x0) 5.560311747s ago: executing program 2 (id=335): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/schedstat\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x4000000000010046) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0x3eaf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.112288224s ago: executing program 3 (id=337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) 4.608682522s ago: executing program 2 (id=340): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfff0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x105200, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x4, 0x8, 0x6, 0x3, 0xe, "78f8c8c1962448d6e76b1355a44cba61f71426"}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 4.558926272s ago: executing program 3 (id=341): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x12, 0x2, 0x83, 0x7}) sched_setscheduler(0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00\x00\x00'], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 4.458455941s ago: executing program 4 (id=343): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000480)={[{@dioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0xa6cbd92e0c665009}}, {@minixdf}], [{@measure}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOwuuwsFVXUSdzda7QGWEwK0EmKPIHVD4kZR7DiKndKEHtIzVyQqcYIjfwDnnrhzQXDjUg5I/IhADRIHoxlPUje1m6hJ7Cj+fKTRvDdv6u97Tee9+pvEL4CR9XZE7EVEMSI+i4iZ7HouO+LjzpHc92T//vLB/v3lXLTbn/4zl7Yn16LrzySuZa9ZiogffifiJ7nn4zZ3dteXarXqVlafa9U355o7uzfX6kur1dXqRqWyuLA4/+GtDyrnNta36sWs9OXHf9j7xs+Sbk1nV7rHcZ46Qy8cxUmMR8T3LyLYEIxl4ykOuyO8lHxEvB4R76TP/0yMpV9NAOAqa7dnoj3TXQcArrp8mgPL5ctZLmA68vlyuZPDeyOm8rVGs3XjTmN7Y6WTK5uNQv7OWq06n+UKZ6OQS+oLaflpvXKsfisiXouIX0xMpvXycqO2Msz/+ADACLt2bP3/z0Rn/QcArrjSsDsAAAyc9R8ARo/1HwBGj/UfAEZPZ/2fHHY3AIAB8v4fAEaP9R8ARsoPPvkkOdoH2edfr9zd2V5v3L25Um2ul+vby+XlxtZmebXRWE0/s6d+0uvVGo3Nhfdj+97sNzebrbnmzu7temN7o3U7/Vzv29VCetfeAEYGAPTz2luP/pxLVuSPJtMjuvZyKAy1Z8BFyw+7A8DQjA27A8DQ2O0LRtcZ3uNLD8AV0WOL3meUev2CULvdbl9cl4ALdv0L8v8wqrry/34KGEaM/D+MLvl/GF3tdu60e/7HaW8EAC43OX6gz/f/X8/Ov82+OfDjleN3PLzIXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDldrj/bznbC3w68vlyOeKViJiNQu7OWq06HxGvRsSfJgoTSX1hyH0GAM4q/7dctv/X9Zn3pp9pevPaUbEYET/91ae/vLfUam39MaKY+9fE4fXWw+x6ZfC9BwBOdrhOJ+dHXW/kn+zfXz48Btmfv387Ikqd+Af7xTg4ij8e4+m5FIWImPp3Lqt35LpyF2ex9yAiPt9r/LmYTnMgnZ1Pj8dPYr8y0Pj5Z+Ln07bOOfm7+Nw59AVGzaNk/vm41/OXj7fTc+/nv5TOUGeXzX/JSy0fpHPg0/iH899Yn/nv1DHe//13O6XJ59seRHxxPOIw9kHX/HMYP9cn/nunjP+XL735Tr+29q8jrkfv+N2x5lr1zbnmzu7NtfrSanW1ulGpLC4szn9464PKXJqjnuu/Gvzjoxuv9mtLxj/VJ37phPF/9ZTj/83/PvvRV14Q/+vv9oqfjzdeED9ZE792yvhLU78r9WtL4q/0Gf9JX/8bLw77vWJWePzX3ee2DQcAhqe5s7u+VKtVtxQULn8h+Sd7CbrRs/CtQcUqRu+mn7/beaaPNbXbLxWr34xxHlk34DI4eugj4r/D7gwAAAAAAAAAAAAAANDTIH5jadhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6fwAAAP//sUPPoQ==") pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) socket$inet6(0x10, 0x2, 0x6) ioperm(0x1, 0x7, 0x80000001) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xf) accept4(r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "be2c00", 0x4e, 0x2f, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xff95, 0x800], "027a3dff"}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x72}}}}}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[], 0x48, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_PDEATHSIG(0x1, 0xcaa) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x112) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3daa, 0x0, 0xb}) r4 = io_uring_setup(0x2c4d, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, &(0x7f0000000000), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x7) creat(&(0x7f0000000080)='./file0\x00', 0x60) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, 0x0, &(0x7f0000000080)) 3.617780477s ago: executing program 2 (id=344): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={&(0x7f00000018c0)=ANY=[@ANYBLOB="9feb010019"], &(0x7f0000001900)=""/195, 0x2a, 0xc3, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000e9ffffffffffffff000000000000a6b600000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x400002) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000480)=""/232) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0xfeee, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000f1ff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x6) 3.616680428s ago: executing program 0 (id=345): syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe4, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0x5dc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d250721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bff000000000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd50eee7c16dfdf09b5783defef3bfa7297512fdcdad18bcf2455bc80394d8f34e2ef84f33038f4b6ef516d7baa99f24f2f100fc46aec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009080)=ANY=[@ANYBLOB="a40000000001210400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180240003"], 0xa4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x4a, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88caffff0000000000", 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) creat(&(0x7f0000000000)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) write$tcp_mem(r3, &(0x7f0000000080), 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$PIO_UNIMAP(r5, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) 3.608677237s ago: executing program 3 (id=346): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3.589286407s ago: executing program 4 (id=347): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4e68, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="030000000500000000040000090000005c57b93a", @ANYRES32, @ANYBLOB="0000000000000000000000000000000700000000000000ab9fdc510fd2b68877ab311782b3be77d89b257b6b315118fa28f512c685e9ee5b3230d8aad155711da27fa4a80a39c434d5a66ae52886376af8e2348bb8ca1a3137f25b3c637067236f4c8c8e18a3baf641136d624e81292c9a083c44c5741cde22822bad0c028d4c4708e75ab516ac0666a582a4bb89e2931c80391f34281de681733d2cb7be944d70cb089c66ad7e5044310ca56421b445e4367fa24471fc0f60918ec65480b6d80af6c6e9950000000000", @ANYRES32=0x0, @ANYBLOB="0100"/24, @ANYRES32=r0, @ANYRES16=0x0], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r3, &(0x7f0000000440)="c3", 0x1, 0xfece) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x40000, 0x100000001}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xf00, &(0x7f00000008c0)={[], [{@pcr={'pcr', 0x3d, 0x2f}}, {@dont_appraise}, {@fowner_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, 'd((~\x8cOu\xb4=\x01\x8c?\x89$>#\x9c\x86z\xa1~\xaa\xc6hq\xder\xffFR\xd4\xa0}\xba\xa8\xe7\xef\x9bj\xc2b\r.\xdd\xfd\x9e\xe6\xb6\xdd\x1d\x15\xbb\xfd\xd8\x85\xa9\xb1\x87\x17\xbe\xd6\xecys1\x17\xcc\x18\xbe\x88A\x85\x9a\x06\xdceJ\xbaw\xb9k\xa9 \xfaO\x18L`r\x8b\xe4\a\b\xc5\xa0\xe4Ki\x01\x94\xbc\xb4\xa3\xa3\xb5l\x15\x85\x8b\x84\xf1\x9fT\x05\xac\xe1N\xd60\x97\xea\xa5\r\xae\xfc\x96\x1f\xb4\x9b,)3\xc7s\x95\xe5I\xb5pd\xd6c\xaf\a\x13#a\xe7\xd8\xc78\xf8b/\xc1\x1ehk\xaa%k9\x8b0\n\xf4.`\v\xb7\x95\x96I\xb8\xdc\x81\vB\x15T?#-L*\x85\xb7\xe3O\x83D\x119W\xf7\xc5P\x9e\xb5\x03\x82\xf9\x18\x13\x04L\xcc\xba-\xf02\x17E\xacy\xfehT{\xea\'\x90JMlP\x17\xb1E\x80\x86\x85\xe8a4\xbe\xf0\tfTE\xc3\xdc\xfa\xaf\x1b\x87\x9f\xec\xe3\xd3\x9bf\xb2\xd7\xc5o]\x1c\x97\xd3\x98\x98\x93\xde\x932\x9f+\xa3\xed\xbd\xda\x15z\x84\xe5\xe98`\xf0^y#\xe3'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@smackfshat={'smackfshat', 0x3d, 'minixdf'}}, {@flag='ro'}]}, 0x3, 0x467, &(0x7f0000002280)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8010, &(0x7f0000000540)={[{@user_xattr}, {@noquota}, {@orlov}, {@jqfmt_vfsv1}, {@block_validity}, {@errors_remount}, {@noquota}, {@dax_always}, {@delalloc}, {@block_validity}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x90000009}) epoll_pwait(r6, &(0x7f00000001c0), 0x0, 0xfff, 0x0, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x36bc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 3.576401297s ago: executing program 0 (id=348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r1, 0x4bfb, &(0x7f0000000140)) 3.206988046s ago: executing program 1 (id=349): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800410, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x6a, 0xa, 0xff00}, [@map_fd, @jmp]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3.196216746s ago: executing program 0 (id=350): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f000003f300)=""/102400, 0x19000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000180)="df5f56586a60fb3c7b9e22", 0xb}, {&(0x7f00000002c0)="d2fdd991bcdb807f8fac10b3c71ad0911c848f0c80a4df009ddefbe4f0634f772fa3e45cbfcc594639e7ba54e42f9022d12eb9c0e53f893e1785214bf69f791b", 0x40}, {&(0x7f0000000340)="d0773b3e12f495f56af060d5223c62e57310e76f7158324c7307dc7a46eb9c0eb0d89d30f59069cec7238e9ae42ffaef25fba5e75f9742c4c68757abab139d938f9c893d6a8de473103bbd3f7a1573b1e44918a7c049009968e66a7cd2fbc95465ec34af1e57a6318fe3e48ecea6ce1ca3959258f8df8bd5fa0b357cf5c4a256dbec7e9944a5d2345a2518696312b6fab69044249b62123aae39bd8ae532a6753a453512da159b07099c94528433c5028fc7b62f", 0xb4}], 0x3, 0x1, 0xa1f, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x81, 0xffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.063725625s ago: executing program 3 (id=351): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 2.926162844s ago: executing program 4 (id=352): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f000003f300)=""/102400, 0x19000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000180)="df5f56586a60fb3c7b9e22", 0xb}, {&(0x7f00000002c0)="d2fdd991bcdb807f8fac10b3c71ad0911c848f0c80a4df009ddefbe4f0634f772fa3e45cbfcc594639e7ba54e42f9022d12eb9c0e53f893e1785214bf69f791b", 0x40}, {&(0x7f0000000340)="d0773b3e12f495f56af060d5223c62e57310e76f7158324c7307dc7a46eb9c0eb0d89d30f59069cec7238e9ae42ffaef25fba5e75f9742c4c68757abab139d938f9c893d6a8de473103bbd3f7a1573b1e44918a7c049009968e66a7cd2fbc95465ec34af1e57a6318fe3e48ecea6ce1ca3959258f8df8bd5fa0b357cf5c4a256dbec7e9944a5d2345a2518696312b6fab69044249b62123aae39bd8ae532a6753a453512da159b07099c94528433c5028fc7b62f", 0xb4}], 0x3, 0x1, 0xa1f, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x81, 0xffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.686417503s ago: executing program 2 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000002000000ff070000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a48c38, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000f00)='.\x00', 0x1aca438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16], 0xb, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000f80)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_clone(0x1000000, &(0x7f0000000bc0)="0af6ee5313fffe8b58bef57351f8719879114421e640b82d9770fcc16c833a3c611e63ed412cbcb5dfe98452b6028784d322c6b9882b9d3016c4b5efac316d4786e06f99650d2a7b356a1e64bf950d13", 0x50, &(0x7f0000000580), &(0x7f0000000c40), &(0x7f0000000d00)="c77ae6ab0e85b0c8dc08214d23e631bface85b8687d90aaa060871ade23d668bc2394bcc2705e2f90c43f47f550a4fce8cccfa32535c43c9a3820ce86339a8293a4cd4527a3b4b2a3d213dd8e25776599525cc36a56f8ba147f1e70e68558c265316b4b78603e3caf9b93f86651b35d25b2cbc9d2e2fa1f296be62d57a3da4eb9c63f8051b26bd4eea87f8fa81b0eb699b94b5c9fbb19c014eaa7764967c36734cfb680c358c26e4706c752e3e87d74213fde34efb2296eb7c9797ade3b3ab74251d30bbfd55201cf11c89ee188a") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.196346381s ago: executing program 1 (id=354): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfff0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x105200, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x4, 0x8, 0x6, 0x3, 0xe, "78f8c8c1962448d6e76b1355a44cba61f71426"}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1.95615126s ago: executing program 2 (id=355): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800410, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x6a, 0xa, 0xff00}, [@map_fd, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.816323269s ago: executing program 0 (id=356): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4e68, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="030000000500000000040000090000005c57b93a", @ANYRES32, @ANYBLOB="0000000000000000000000000000000700000000000000ab9fdc510fd2b68877ab311782b3be77d89b257b6b315118fa28f512c685e9ee5b3230d8aad155711da27fa4a80a39c434d5a66ae52886376af8e2348bb8ca1a3137f25b3c637067236f4c8c8e18a3baf641136d624e81292c9a083c44c5741cde22822bad0c028d4c4708e75ab516ac0666a582a4bb89e2931c80391f34281de681733d2cb7be944d70cb089c66ad7e5044310ca56421b445e4367fa24471fc0f60918ec65480b6d80af6c6e9950000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYRES16=0x0], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r3, &(0x7f0000000440)="c3", 0x1, 0xfece) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x40000, 0x100000001}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xf00, &(0x7f00000008c0)={[], [{@pcr={'pcr', 0x3d, 0x2f}}, {@dont_appraise}, {@fowner_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, 'd((~\x8cOu\xb4=\x01\x8c?\x89$>#\x9c\x86z\xa1~\xaa\xc6hq\xder\xffFR\xd4\xa0}\xba\xa8\xe7\xef\x9bj\xc2b\r.\xdd\xfd\x9e\xe6\xb6\xdd\x1d\x15\xbb\xfd\xd8\x85\xa9\xb1\x87\x17\xbe\xd6\xecys1\x17\xcc\x18\xbe\x88A\x85\x9a\x06\xdceJ\xbaw\xb9k\xa9 \xfaO\x18L`r\x8b\xe4\a\b\xc5\xa0\xe4Ki\x01\x94\xbc\xb4\xa3\xa3\xb5l\x15\x85\x8b\x84\xf1\x9fT\x05\xac\xe1N\xd60\x97\xea\xa5\r\xae\xfc\x96\x1f\xb4\x9b,)3\xc7s\x95\xe5I\xb5pd\xd6c\xaf\a\x13#a\xe7\xd8\xc78\xf8b/\xc1\x1ehk\xaa%k9\x8b0\n\xf4.`\v\xb7\x95\x96I\xb8\xdc\x81\vB\x15T?#-L*\x85\xb7\xe3O\x83D\x119W\xf7\xc5P\x9e\xb5\x03\x82\xf9\x18\x13\x04L\xcc\xba-\xf02\x17E\xacy\xfehT{\xea\'\x90JMlP\x17\xb1E\x80\x86\x85\xe8a4\xbe\xf0\tfTE\xc3\xdc\xfa\xaf\x1b\x87\x9f\xec\xe3\xd3\x9bf\xb2\xd7\xc5o]\x1c\x97\xd3\x98\x98\x93\xde\x932\x9f+\xa3\xed\xbd\xda\x15z\x84\xe5\xe98`\xf0^y#\xe3'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@smackfshat={'smackfshat', 0x3d, 'minixdf'}}, {@flag='ro'}]}, 0x3, 0x467, &(0x7f0000002280)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8010, &(0x7f0000000540)={[{@user_xattr}, {@noquota}, {@orlov}, {@jqfmt_vfsv1}, {@block_validity}, {@errors_remount}, {@noquota}, {@dax_always}, {@delalloc}, {@block_validity}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x90000009}) epoll_pwait(r6, &(0x7f00000001c0), 0x0, 0xfff, 0x0, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x36bc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 1.417724967s ago: executing program 4 (id=357): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.275892286s ago: executing program 1 (id=358): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000480)={[{@dioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0xa6cbd92e0c665009}}, {@minixdf}], [{@measure}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) socket$inet6(0x10, 0x2, 0x6) ioperm(0x1, 0x7, 0x80000001) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xf) accept4(r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "be2c00", 0x4e, 0x2f, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xff95, 0x800], "027a3dff"}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x72}}}}}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[], 0x48, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_PDEATHSIG(0x1, 0xcaa) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x112) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3daa, 0x0, 0xb}) r4 = io_uring_setup(0x2c4d, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, &(0x7f0000000000), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x7) creat(&(0x7f0000000080)='./file0\x00', 0x60) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 1.275003566s ago: executing program 4 (id=359): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4e68, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="030000000500000000040000090000005c57b93a", @ANYRES32, @ANYBLOB="0000000000000000000000000000000700000000000000ab9fdc510fd2b68877ab311782b3be77d89b257b6b315118fa28f512c685e9ee5b3230d8aad155711da27fa4a80a39c434d5a66ae52886376af8e2348bb8ca1a3137f25b3c637067236f4c8c8e18a3baf641136d624e81292c9a083c44c5741cde22822bad0c028d4c4708e75ab516ac0666a582a4bb89e2931c80391f34281de681733d2cb7be944d70cb089c66ad7e5044310ca56421b445e4367fa24471fc0f60918ec65480b6d80af6c6e9950000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/23, @ANYRES32=r0, @ANYRES16=0x0], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r3, &(0x7f0000000440)="c3", 0x1, 0xfece) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x40000, 0x100000001}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xf00, &(0x7f00000008c0)={[], [{@pcr={'pcr', 0x3d, 0x2f}}, {@dont_appraise}, {@fowner_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, 'd((~\x8cOu\xb4=\x01\x8c?\x89$>#\x9c\x86z\xa1~\xaa\xc6hq\xder\xffFR\xd4\xa0}\xba\xa8\xe7\xef\x9bj\xc2b\r.\xdd\xfd\x9e\xe6\xb6\xdd\x1d\x15\xbb\xfd\xd8\x85\xa9\xb1\x87\x17\xbe\xd6\xecys1\x17\xcc\x18\xbe\x88A\x85\x9a\x06\xdceJ\xbaw\xb9k\xa9 \xfaO\x18L`r\x8b\xe4\a\b\xc5\xa0\xe4Ki\x01\x94\xbc\xb4\xa3\xa3\xb5l\x15\x85\x8b\x84\xf1\x9fT\x05\xac\xe1N\xd60\x97\xea\xa5\r\xae\xfc\x96\x1f\xb4\x9b,)3\xc7s\x95\xe5I\xb5pd\xd6c\xaf\a\x13#a\xe7\xd8\xc78\xf8b/\xc1\x1ehk\xaa%k9\x8b0\n\xf4.`\v\xb7\x95\x96I\xb8\xdc\x81\vB\x15T?#-L*\x85\xb7\xe3O\x83D\x119W\xf7\xc5P\x9e\xb5\x03\x82\xf9\x18\x13\x04L\xcc\xba-\xf02\x17E\xacy\xfehT{\xea\'\x90JMlP\x17\xb1E\x80\x86\x85\xe8a4\xbe\xf0\tfTE\xc3\xdc\xfa\xaf\x1b\x87\x9f\xec\xe3\xd3\x9bf\xb2\xd7\xc5o]\x1c\x97\xd3\x98\x98\x93\xde\x932\x9f+\xa3\xed\xbd\xda\x15z\x84\xe5\xe98`\xf0^y#\xe3'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@smackfshat={'smackfshat', 0x3d, 'minixdf'}}, {@flag='ro'}]}, 0x3, 0x467, &(0x7f0000002280)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vdZNNsdmv384Fp39t5M/O+O+/tvJm3mwD61kj2TxKxKyJ+i4ihWnZlgZHafzcXL5X/WbxUTmJp6a0/k2q5G4uXykXRYrudeWY0jUg/SfKDxNb63c5duHhmqlKZOZ/nx+fPvjc+d+His6fPTp2aOTVzbvLYsaNHJl54fvK5tuJI1lifxXXjwIezB/e/9s7V18snrr7707fZNrvy9fVxdMpIFvhfS1WN657o9MF6bHddOhnoYUVYl1JEZKdrsNr/h6IUt07eULz6cU8rB2yq7Nq0tfXqhSXgHpbE2mX+7kZFgC4rLvTZ/W+xdGnocVe4/lLtBiiL+2a+1NYMRJqXGWy4v+2kkYg4sfDvV9kSm/QcAgCg3mflL4/HM83Gf2k8WFduTz6HMhwR90XE3oi4PyL2RcQDEVnZxiFlW0Ya8rePf9JrdxhaW7Lx34v53NbK8V8x+ovhUp7bXY1/MDl5ujJzOH9PRmNwa5afWOUY37/y6+et1tWP/7IlO34xFszrcW2g4QHd9NT8VHVQ2gHXP4o4MNAs/mR5JiCJiP0RcWB9u95TJE4/9c3B7QebF1o7/lV0YJ5p6euIJ2vnfyEa4i8kq89Pjm+Lyszh8aJV3O7nX6682er4LeLfsvHI2pOd/x0r239jkeGkfr52bv3HuPL7py3vae60/W9J3q6el+KN+mBqfv78RMSW5Hg1v+L1yVvbFvmifBb/6KHm/X9vvk12nIciImvCD0fEIxHxaF73xyLi8Yg4tEr8P76cJ5q01w21/w7I4p9u+vm33P4bzv/6E6UzP3xX7GzbuuPPzv/Ramo0f6X6+beGdiu40fcPAAAA/g/S6nfgk3RsOZ2mY2O17/Dvix1pZXZu/umTs++fm659V344BtPiSddQ3fPQiWQh32MtP5k/Ky7WH8mfG39R2l7Nj5VnK9M9jh363c4W/T/zR6nXtQM2XbN5tMmuTUEBvdTY/9OV2ctvdLMyQFf5vTb0rzX6f9qtegDd5/oP/atZ/7/ckDcXAPcm13/oX/o/9C/9H/qX/g99aSO/65fo50Sklcr0tojVCxd/EOjuqLNE+4lefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD///xQ9VA=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8010, &(0x7f0000000540)={[{@user_xattr}, {@noquota}, {@orlov}, {@jqfmt_vfsv1}, {@block_validity}, {@errors_remount}, {@noquota}, {@dax_always}, {@delalloc}, {@block_validity}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x90000009}) epoll_pwait(r6, &(0x7f00000001c0), 0x0, 0xfff, 0x0, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x36bc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 1.222492516s ago: executing program 0 (id=360): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800410, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x6a, 0xa, 0xff00}, [@map_fd, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.005606065s ago: executing program 2 (id=361): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x50) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x80e, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}]}, 0x3, 0x45c, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000000800)=""/112, 0x70) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 199.426391ms ago: executing program 4 (id=362): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$vcsn(&(0x7f0000000000), 0x4e68, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r2, &(0x7f0000000440)="c3", 0x1, 0xfece) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x0, 0x0, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x40000, 0x100000001}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xf00, &(0x7f00000008c0)={[], [{@pcr={'pcr', 0x3d, 0x2f}}, {@dont_appraise}, {@fowner_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, 'd((~\x8cOu\xb4=\x01\x8c?\x89$>#\x9c\x86z\xa1~\xaa\xc6hq\xder\xffFR\xd4\xa0}\xba\xa8\xe7\xef\x9bj\xc2b\r.\xdd\xfd\x9e\xe6\xb6\xdd\x1d\x15\xbb\xfd\xd8\x85\xa9\xb1\x87\x17\xbe\xd6\xecys1\x17\xcc\x18\xbe\x88A\x85\x9a\x06\xdceJ\xbaw\xb9k\xa9 \xfaO\x18L`r\x8b\xe4\a\b\xc5\xa0\xe4Ki\x01\x94\xbc\xb4\xa3\xa3\xb5l\x15\x85\x8b\x84\xf1\x9fT\x05\xac\xe1N\xd60\x97\xea\xa5\r\xae\xfc\x96\x1f\xb4\x9b,)3\xc7s\x95\xe5I\xb5pd\xd6c\xaf\a\x13#a\xe7\xd8\xc78\xf8b/\xc1\x1ehk\xaa%k9\x8b0\n\xf4.`\v\xb7\x95\x96I\xb8\xdc\x81\vB\x15T?#-L*\x85\xb7\xe3O\x83D\x119W\xf7\xc5P\x9e\xb5\x03\x82\xf9\x18\x13\x04L\xcc\xba-\xf02\x17E\xacy\xfehT{\xea\'\x90JMlP\x17\xb1E\x80\x86\x85\xe8a4\xbe\xf0\tfTE\xc3\xdc\xfa\xaf\x1b\x87\x9f\xec\xe3\xd3\x9bf\xb2\xd7\xc5o]\x1c\x97\xd3\x98\x98\x93\xde\x932\x9f+\xa3\xed\xbd\xda\x15z\x84\xe5\xe98`\xf0^y#\xe3'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@smackfshat={'smackfshat', 0x3d, 'minixdf'}}, {@flag='ro'}]}, 0x3, 0x467, &(0x7f0000002280)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vdZNNsdmv384Fp39t5M/O+O+/tvJm3mwD61kj2TxKxKyJ+i4ihWnZlgZHafzcXL5X/WbxUTmJp6a0/k2q5G4uXykXRYrudeWY0jUg/SfKDxNb63c5duHhmqlKZOZ/nx+fPvjc+d+His6fPTp2aOTVzbvLYsaNHJl54fvK5tuJI1lifxXXjwIezB/e/9s7V18snrr7707fZNrvy9fVxdMpIFvhfS1WN657o9MF6bHddOhnoYUVYl1JEZKdrsNr/h6IUt07eULz6cU8rB2yq7Nq0tfXqhSXgHpbE2mX+7kZFgC4rLvTZ/W+xdGnocVe4/lLtBiiL+2a+1NYMRJqXGWy4v+2kkYg4sfDvV9kSm/QcAgCg3mflL4/HM83Gf2k8WFduTz6HMhwR90XE3oi4PyL2RcQDEVnZxiFlW0Ya8rePf9JrdxhaW7Lx34v53NbK8V8x+ovhUp7bXY1/MDl5ujJzOH9PRmNwa5afWOUY37/y6+et1tWP/7IlO34xFszrcW2g4QHd9NT8VHVQ2gHXP4o4MNAs/mR5JiCJiP0RcWB9u95TJE4/9c3B7QebF1o7/lV0YJ5p6euIJ2vnfyEa4i8kq89Pjm+Lyszh8aJV3O7nX6682er4LeLfsvHI2pOd/x0r239jkeGkfr52bv3HuPL7py3vae60/W9J3q6el+KN+mBqfv78RMSW5Hg1v+L1yVvbFvmifBb/6KHm/X9vvk12nIciImvCD0fEIxHxaF73xyLi8Yg4tEr8P76cJ5q01w21/w7I4p9u+vm33P4bzv/6E6UzP3xX7GzbuuPPzv/Ramo0f6X6+beGdiu40fcPAAAA/g/S6nfgk3RsOZ2mY2O17/Dvix1pZXZu/umTs++fm659V344BtPiSddQ3fPQiWQh32MtP5k/Ky7WH8mfG39R2l7Nj5VnK9M9jh363c4W/T/zR6nXtQM2XbN5tMmuTUEBvdTY/9OV2ctvdLMyQFf5vTb0rzX6f9qtegDd5/oP/atZ/7/ckDcXAPcm13/oX/o/9C/9H/qX/g99aSO/65fo50Sklcr0tojVCxd/EOjuqLNE+4lefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD///xQ9VA=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8010, &(0x7f0000000540)={[{@user_xattr}, {@noquota}, {@orlov}, {@jqfmt_vfsv1}, {@block_validity}, {@errors_remount}, {@noquota}, {@dax_always}, {@delalloc}, {@block_validity}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x90000009}) epoll_pwait(r5, &(0x7f00000001c0), 0x0, 0xfff, 0x0, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x36bc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 167.353821ms ago: executing program 1 (id=363): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r1], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) write$cgroup_int(r3, &(0x7f00000001c0)=0x700, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x400204, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) 0s ago: executing program 0 (id=364): r0 = syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f00000068c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0], 0x1, 0x553b, &(0x7f0000001380)="$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") r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) lseek(r1, 0xfffffffffffffffb, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) write$P9_RSYMLINK(r0, &(0x7f0000000a00)={0x14, 0x11, 0x1, {0x10, 0x3, 0x3}}, 0x14) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_uring_setup(0x3eaf, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_clone3(&(0x7f00000014c0)={0x20100000, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): .499494][ T519] loop4: detected capacity change from 0 to 128 [ 32.582256][ T519] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 32.596280][ T519] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.723301][ T524] loop1: detected capacity change from 0 to 512 [ 32.749700][ T524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.762058][ T527] loop0: detected capacity change from 0 to 512 [ 32.806291][ T527] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 32.815376][ T524] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.014672][ T292] EXT4-fs (loop4): unmounting filesystem. [ 33.041377][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 33.041393][ T28] audit: type=1400 audit(1734547304.395:173): avc: denied { name_bind } for pid=532 comm="syz.4.46" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 33.252701][ T28] audit: type=1400 audit(1734547304.415:174): avc: denied { node_bind } for pid=532 comm="syz.4.46" saddr=fe88::5 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.660792][ T534] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.817036][ T293] EXT4-fs (loop1): unmounting filesystem. [ 33.826278][ T545] FAULT_INJECTION: forcing a failure. [ 33.826278][ T545] name failslab, interval 1, probability 0, space 0, times 1 [ 33.838832][ T545] CPU: 0 PID: 545 Comm: syz.2.50 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 33.848208][ T545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 33.858097][ T545] Call Trace: [ 33.861235][ T545] [ 33.863998][ T545] dump_stack_lvl+0x151/0x1b7 [ 33.868513][ T545] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 33.873817][ T545] dump_stack+0x15/0x18 [ 33.877804][ T545] should_fail_ex+0x3d0/0x520 [ 33.882322][ T545] __should_failslab+0xaf/0xf0 [ 33.886914][ T545] ? selinux_bpf_map_alloc+0x51/0x140 [ 33.892119][ T545] should_failslab+0x9/0x20 [ 33.896482][ T545] __kmem_cache_alloc_node+0x3d/0x2a0 [ 33.901668][ T545] ? selinux_bpf_map_alloc+0x51/0x140 [ 33.906875][ T545] kmalloc_trace+0x2a/0xa0 [ 33.911127][ T545] selinux_bpf_map_alloc+0x51/0x140 [ 33.916161][ T545] security_bpf_map_alloc+0x62/0x90 [ 33.921193][ T545] map_create+0x897/0xcf0 [ 33.925367][ T545] __sys_bpf+0x2e6/0x7f0 [ 33.929443][ T545] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 33.934660][ T545] ? __ia32_sys_read+0x90/0x90 [ 33.939248][ T545] ? debug_smp_processor_id+0x17/0x20 [ 33.944456][ T545] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 33.950361][ T545] __x64_sys_bpf+0x7c/0x90 [ 33.955142][ T545] x64_sys_call+0x87f/0x9a0 [ 33.959469][ T545] do_syscall_64+0x3b/0xb0 [ 33.963723][ T545] ? clear_bhb_loop+0x55/0xb0 [ 33.968243][ T545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.973972][ T545] RIP: 0033:0x7fdcf2b85d29 [ 33.978390][ T545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.997834][ T545] RSP: 002b:00007fdcf3a96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 34.006178][ T545] RAX: ffffffffffffffda RBX: 00007fdcf2d75fa0 RCX: 00007fdcf2b85d29 [ 34.014005][ T545] RDX: 0000000000000048 RSI: 00000000200009c0 RDI: 0000000000000000 [ 34.021894][ T545] RBP: 00007fdcf3a96090 R08: 0000000000000000 R09: 0000000000000000 [ 34.029695][ T545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.037516][ T545] R13: 0000000000000000 R14: 00007fdcf2d75fa0 R15: 00007ffe56c8d098 [ 34.045330][ T545] [ 34.050033][ T534] usb 5-1: config 0 has an invalid interface number: 149 but max is 0 [ 34.073474][ T534] usb 5-1: config 0 has no interface number 0 [ 34.079400][ T534] usb 5-1: config 0 interface 149 has no altsetting 0 [ 34.086522][ T543] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 34.102262][ T534] usb 5-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=36.2f [ 34.106696][ T550] loop2: detected capacity change from 0 to 512 [ 34.111992][ T534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.130613][ T550] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 34.139311][ T550] EXT4-fs (loop2): orphan cleanup on readonly fs [ 34.148689][ T534] usb 5-1: config 0 descriptor?? [ 34.151088][ T556] loop3: detected capacity change from 0 to 512 [ 34.159729][ T28] audit: type=1326 audit(1734547305.505:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=547 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb028985d29 code=0x7ffc0000 [ 34.160186][ T550] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 34.196269][ T28] audit: type=1326 audit(1734547305.535:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=547 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb028985d29 code=0x7ffc0000 [ 34.201665][ T556] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.228870][ T550] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 34.236950][ T550] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.52: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 34.241244][ T562] loop1: detected capacity change from 0 to 512 [ 34.256195][ T550] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.52: couldn't read orphan inode 13 (err -117) [ 34.273109][ T550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.281815][ T318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.291873][ T550] EXT4-fs (loop2): unmounting filesystem. [ 34.301473][ T562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.312195][ T562] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.392984][ T570] loop2: detected capacity change from 0 to 512 [ 34.410373][ T533] loop4: detected capacity change from 0 to 256 [ 34.417625][ T570] ext4: Unknown parameter 'pcr' [ 34.447511][ T533] FAT-fs (loop4): Directory bread(block 64) failed [ 34.454227][ T533] FAT-fs (loop4): Directory bread(block 65) failed [ 34.460613][ T533] FAT-fs (loop4): Directory bread(block 66) failed [ 34.466959][ T533] FAT-fs (loop4): Directory bread(block 67) failed [ 34.473321][ T533] FAT-fs (loop4): Directory bread(block 68) failed [ 34.479679][ T533] FAT-fs (loop4): Directory bread(block 69) failed [ 34.486072][ T533] FAT-fs (loop4): Directory bread(block 70) failed [ 34.492399][ T533] FAT-fs (loop4): Directory bread(block 71) failed [ 34.498729][ T533] FAT-fs (loop4): Directory bread(block 72) failed [ 34.505061][ T533] FAT-fs (loop4): Directory bread(block 73) failed [ 34.601195][ T28] audit: type=1400 audit(1734547305.865:177): avc: denied { mount } for pid=532 comm="syz.4.46" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.659642][ T534] usb 5-1: string descriptor 0 read error: -71 [ 34.671863][ T534] usb-storage 5-1:0.149: USB Mass Storage device detected [ 34.681062][ T534] usb-storage 5-1:0.149: Quirks match for vid 357d pid 7788: 4800000 [ 34.682252][ T318] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.702065][ T570] loop2: detected capacity change from 0 to 1024 [ 34.708448][ T570] EXT4-fs: Ignoring removed orlov option [ 34.714061][ T570] EXT4-fs: dax option not supported [ 34.732560][ T534] usb 5-1: USB disconnect, device number 2 [ 34.836962][ T577] loop2: detected capacity change from 0 to 512 [ 34.843435][ T577] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 35.146040][ T293] EXT4-fs (loop1): unmounting filesystem. [ 35.184185][ T601] loop0: detected capacity change from 0 to 512 [ 35.190549][ T601] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 35.219480][ T28] audit: type=1400 audit(1734547306.565:178): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.384915][ T608] loop3: detected capacity change from 0 to 512 [ 35.424630][ T608] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.468337][ T608] EXT4-fs (loop3): 1 truncate cleaned up [ 35.478178][ T608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 35.947647][ T616] loop2: detected capacity change from 0 to 512 [ 36.097867][ T616] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 36.181653][ T618] FAULT_INJECTION: forcing a failure. [ 36.181653][ T618] name failslab, interval 1, probability 0, space 0, times 0 [ 36.247084][ T618] CPU: 0 PID: 618 Comm: syz.0.64 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 36.256479][ T618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 36.266817][ T618] Call Trace: [ 36.269934][ T618] [ 36.272712][ T618] dump_stack_lvl+0x151/0x1b7 [ 36.277224][ T618] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 36.282522][ T618] dump_stack+0x15/0x18 [ 36.285288][ T611] loop4: detected capacity change from 0 to 40427 [ 36.286510][ T618] should_fail_ex+0x3d0/0x520 [ 36.297282][ T618] __should_failslab+0xaf/0xf0 [ 36.301881][ T618] ? kvmalloc_node+0x221/0x640 [ 36.306473][ T618] should_failslab+0x9/0x20 [ 36.306733][ T611] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 36.311046][ T618] __kmem_cache_alloc_node+0x3d/0x2a0 [ 36.311074][ T618] ? kasan_save_alloc_info+0x1f/0x30 [ 36.311093][ T618] ? kvmalloc_node+0x221/0x640 [ 36.311119][ T618] __kmalloc_node+0xa3/0x1e0 [ 36.319355][ T611] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.324017][ T618] ? is_bpf_text_address+0x172/0x190 [ 36.324048][ T618] kvmalloc_node+0x221/0x640 [ 36.324074][ T618] ? __kernel_text_address+0xd/0x40 [ 36.324093][ T618] ? vm_mmap+0xb0/0xb0 [ 36.362268][ T611] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.364694][ T618] ? arch_stack_walk+0xf3/0x140 [ 36.364733][ T618] ? bpf_test_run_xdp_live+0x30/0x1f70 [ 36.380759][ T618] bpf_test_run_xdp_live+0x286/0x1f70 [ 36.386104][ T618] ? stack_trace_snprint+0xf0/0xf0 [ 36.391033][ T618] ? __stack_depot_save+0x36/0x480 [ 36.395981][ T618] ? kasan_set_track+0x60/0x70 [ 36.400582][ T618] ? kasan_set_track+0x4b/0x70 [ 36.405315][ T618] ? kasan_save_alloc_info+0x1f/0x30 [ 36.410438][ T618] ? __kasan_kmalloc+0x9c/0xb0 [ 36.415035][ T618] ? __kmalloc+0xb4/0x1e0 [ 36.417905][ T611] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.419197][ T618] ? bpf_prog_test_run_xdp+0x414/0x1130 [ 36.419224][ T618] ? xdp_convert_md_to_buff+0x360/0x360 [ 36.426411][ T611] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.431438][ T618] ? x64_sys_call+0x87f/0x9a0 [ 36.431465][ T618] ? do_syscall_64+0x3b/0xb0 [ 36.431487][ T618] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.457304][ T611] overlayfs: missing 'lowerdir' [ 36.458968][ T618] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 36.459004][ T618] ? __kasan_check_write+0x14/0x20 [ 36.464183][ T28] audit: type=1400 audit(1734547307.805:179): avc: denied { setattr } for pid=610 comm="syz.4.61" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.469881][ T618] ? _copy_from_user+0x90/0xc0 [ 36.469912][ T618] ? bpf_test_init+0x169/0x190 [ 36.505389][ T618] ? xdp_convert_md_to_buff+0x5d/0x360 [ 36.508937][ T626] syz.4.61[626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.510676][ T618] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 36.510708][ T618] ? dev_put+0x80/0x80 [ 36.510728][ T618] ? __kasan_check_write+0x14/0x20 [ 36.521973][ T626] syz.4.61[626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.526745][ T618] ? fput+0x15b/0x1b0 [ 36.526771][ T618] ? dev_put+0x80/0x80 [ 36.554441][ T618] bpf_prog_test_run+0x3b0/0x630 [ 36.559208][ T618] ? bpf_prog_query+0x260/0x260 [ 36.564012][ T618] ? selinux_bpf+0xd2/0x100 [ 36.568351][ T618] ? security_bpf+0x82/0xb0 [ 36.572691][ T618] __sys_bpf+0x59f/0x7f0 [ 36.576881][ T618] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 36.582087][ T618] ? __ia32_sys_read+0x90/0x90 [ 36.586770][ T618] ? debug_smp_processor_id+0x17/0x20 [ 36.592246][ T618] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 36.598148][ T618] __x64_sys_bpf+0x7c/0x90 [ 36.602495][ T618] x64_sys_call+0x87f/0x9a0 [ 36.606836][ T618] do_syscall_64+0x3b/0xb0 [ 36.611265][ T618] ? clear_bhb_loop+0x55/0xb0 [ 36.615776][ T618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.621502][ T618] RIP: 0033:0x7fb7e0d85d29 [ 36.625756][ T618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.645197][ T618] RSP: 002b:00007fb7e1c0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.653439][ T618] RAX: ffffffffffffffda RBX: 00007fb7e0f75fa0 RCX: 00007fb7e0d85d29 [ 36.661259][ T618] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 36.669076][ T618] RBP: 00007fb7e1c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.676887][ T618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.684685][ T618] R13: 0000000000000000 R14: 00007fb7e0f75fa0 R15: 00007ffeab83d7f8 [ 36.692504][ T618] [ 36.744109][ T296] EXT4-fs (loop3): unmounting filesystem. [ 36.768398][ T28] audit: type=1400 audit(1734547308.115:180): avc: denied { create } for pid=629 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.776590][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 36.788097][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 36.909165][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 36.941778][ T28] audit: type=1400 audit(1734547308.145:181): avc: denied { connect } for pid=629 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.030750][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.030774][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.037360][ T28] audit: type=1400 audit(1734547308.385:182): avc: denied { write } for pid=629 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.051102][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.066054][ T636] loop3: detected capacity change from 0 to 128 [ 37.104302][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.113726][ T636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.119876][ T632] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 37.152122][ T636] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.362416][ T644] loop4: detected capacity change from 0 to 512 [ 37.370149][ T296] EXT4-fs (loop3): unmounting filesystem. [ 37.397765][ T644] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 37.411147][ T647] loop3: detected capacity change from 0 to 512 [ 37.417740][ T644] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 37.427898][ T644] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 37.438291][ T644] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 37.446540][ T644] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 37.454676][ T644] EXT4-fs (loop4): failed to initialize system zone (-117) [ 37.463419][ T647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.472608][ T644] EXT4-fs (loop4): mount failed [ 37.477451][ T647] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.663120][ T296] EXT4-fs (loop3): unmounting filesystem. [ 38.669464][ T28] audit: type=1400 audit(1734547310.015:183): avc: denied { create } for pid=661 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 38.953476][ T28] audit: type=1400 audit(1734547310.305:184): avc: denied { read } for pid=666 comm="syz.3.75" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.976221][ T538] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.984124][ T28] audit: type=1400 audit(1734547310.335:185): avc: denied { open } for pid=666 comm="syz.3.75" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.008190][ T28] audit: type=1400 audit(1734547310.335:186): avc: denied { ioctl } for pid=666 comm="syz.3.75" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.130676][ T376] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.190698][ T538] usb 2-1: Using ep0 maxpacket: 32 [ 39.196821][ T538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.217834][ T538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.238107][ T538] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.265565][ T538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.273757][ T667] loop3: detected capacity change from 0 to 40427 [ 39.289219][ T538] usb 2-1: config 0 descriptor?? [ 39.300100][ T667] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 39.305323][ T538] hub 2-1:0.0: USB hub found [ 39.308124][ T667] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 39.321311][ T667] F2FS-fs (loop3): invalid crc value [ 39.338738][ T667] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.439643][ T667] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 39.450990][ T667] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.504606][ T538] hub 2-1:0.0: 1 port detected [ 39.675057][ T681] loop2: detected capacity change from 0 to 40427 [ 39.735282][ T538] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 39.760317][ T681] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 39.771836][ T690] loop0: detected capacity change from 0 to 128 [ 39.772951][ T681] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.779745][ T538] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 39.798879][ T690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.808041][ T690] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.817308][ T681] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.849302][ T538] usbhid 2-1:0.0: can't add hid device: -71 [ 39.863051][ T538] usbhid: probe of 2-1:0.0 failed with error -71 [ 39.901261][ T538] usb 2-1: USB disconnect, device number 3 [ 39.973908][ T28] audit: type=1400 audit(1734547311.325:187): avc: denied { ioctl } for pid=696 comm="syz.3.82" path="socket:[17094]" dev="sockfs" ino=17094 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.987648][ T681] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.005103][ T681] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.024782][ T681] overlayfs: missing 'lowerdir' [ 40.030455][ T681] syz.2.79[681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.030533][ T681] syz.2.79[681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.058861][ T295] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 40.059880][ T294] EXT4-fs (loop0): unmounting filesystem. [ 40.070909][ T295] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 40.083517][ T295] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 40.085448][ T28] audit: type=1400 audit(1734547311.435:188): avc: denied { compute_member } for pid=703 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.224451][ T710] loop2: detected capacity change from 0 to 512 [ 40.252480][ T710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.261770][ T710] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.289214][ T28] audit: type=1400 audit(1734547311.635:189): avc: denied { append } for pid=709 comm="syz.2.85" path="/18/file1/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.316491][ T295] EXT4-fs (loop2): unmounting filesystem. [ 40.327769][ T28] audit: type=1400 audit(1734547311.675:190): avc: denied { create } for pid=715 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 40.332291][ T716] bridge0: port 3(ip6gretap1) entered blocking state [ 40.354365][ T716] bridge0: port 3(ip6gretap1) entered disabled state [ 40.361706][ T716] device ip6gretap1 entered promiscuous mode [ 40.380359][ T28] audit: type=1400 audit(1734547311.675:191): avc: denied { ioctl } for pid=715 comm="syz.1.88" path="socket:[17121]" dev="sockfs" ino=17121 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.405050][ T716] bridge0: port 3(ip6gretap1) entered blocking state [ 40.411685][ T716] bridge0: port 3(ip6gretap1) entered forwarding state [ 40.450159][ T28] audit: type=1400 audit(1734547311.695:192): avc: denied { write } for pid=707 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.454463][ T717] bridge0: port 4(syz_tun) entered blocking state [ 40.483217][ T725] loop4: detected capacity change from 0 to 128 [ 40.500481][ T725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.513382][ T725] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.546006][ T717] bridge0: port 4(syz_tun) entered disabled state [ 40.557261][ T717] device syz_tun entered promiscuous mode [ 40.563364][ T717] bridge0: port 4(syz_tun) entered blocking state [ 40.569640][ T717] bridge0: port 4(syz_tun) entered forwarding state [ 40.576446][ T375] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 40.756738][ T292] EXT4-fs (loop4): unmounting filesystem. [ 40.801850][ T375] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.817882][ T375] usb 4-1: config 0 has no interfaces? [ 40.833168][ T375] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 40.842355][ T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.843717][ T734] loop4: detected capacity change from 0 to 128 [ 40.858786][ T375] usb 4-1: config 0 descriptor?? [ 40.875547][ T734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.891877][ T734] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.073147][ T375] usb 4-1: USB disconnect, device number 2 [ 41.091699][ T739] loop0: detected capacity change from 0 to 512 [ 41.112349][ T739] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 41.123677][ T292] EXT4-fs (loop4): unmounting filesystem. [ 41.171739][ T739] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 41.185176][ T739] EXT4-fs (loop0): 1 truncate cleaned up [ 41.193756][ T739] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.243345][ T294] EXT4-fs (loop0): unmounting filesystem. [ 41.801386][ T756] netlink: 96 bytes leftover after parsing attributes in process `syz.0.97'. [ 41.956450][ T758] loop1: detected capacity change from 0 to 512 [ 41.983581][ T758] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.992508][ T758] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.379194][ T765] loop4: detected capacity change from 0 to 512 [ 42.550192][ T771] loop3: detected capacity change from 0 to 128 [ 42.563301][ T765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.575054][ T765] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.586510][ T771] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.595030][ T771] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.064395][ T293] EXT4-fs (loop1): unmounting filesystem. [ 43.071581][ T296] EXT4-fs (loop3): unmounting filesystem. [ 43.179563][ T784] FAULT_INJECTION: forcing a failure. [ 43.179563][ T784] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.405412][ T784] CPU: 1 PID: 784 Comm: syz.3.106 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 43.414891][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 43.424782][ T784] Call Trace: [ 43.427912][ T784] [ 43.430689][ T784] dump_stack_lvl+0x151/0x1b7 [ 43.435207][ T784] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 43.440496][ T784] ? getname_flags+0xba/0x520 [ 43.445007][ T784] dump_stack+0x15/0x18 [ 43.449008][ T784] should_fail_ex+0x3d0/0x520 [ 43.453515][ T784] should_fail+0xb/0x10 [ 43.457505][ T784] should_fail_usercopy+0x1a/0x20 [ 43.462366][ T784] strncpy_from_user+0x24/0x2b0 [ 43.467054][ T784] ? getname_flags+0xba/0x520 [ 43.471566][ T784] getname_flags+0xf2/0x520 [ 43.475910][ T784] __x64_sys_mknodat+0x98/0xc0 [ 43.480592][ T784] x64_sys_call+0x6cd/0x9a0 [ 43.484932][ T784] do_syscall_64+0x3b/0xb0 [ 43.489190][ T784] ? clear_bhb_loop+0x55/0xb0 [ 43.493698][ T784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.499423][ T784] RIP: 0033:0x7f4ea7985d29 [ 43.503680][ T784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.523120][ T784] RSP: 002b:00007f4ea8835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 43.531367][ T784] RAX: ffffffffffffffda RBX: 00007f4ea7b75fa0 RCX: 00007f4ea7985d29 [ 43.539287][ T784] RDX: 0000000000002000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 43.539310][ T784] RBP: 00007f4ea8835090 R08: 0000000000000000 R09: 0000000000000000 [ 43.539325][ T784] R10: 0000000000000707 R11: 0000000000000246 R12: 0000000000000001 [ 43.539337][ T784] R13: 0000000000000000 R14: 00007f4ea7b75fa0 R15: 00007fff32b0e528 [ 43.539357][ T784] [ 43.551168][ T292] EXT4-fs (loop4): unmounting filesystem. [ 43.588540][ T792] loop1: detected capacity change from 0 to 128 [ 43.650344][ T797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 43.650376][ T797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 43.650389][ T797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 43.650401][ T797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 43.692567][ T792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.694009][ T792] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.717399][ T802] loop3: detected capacity change from 0 to 512 [ 43.827169][ T804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 43.837094][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 43.853067][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 43.870219][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 43.940423][ T802] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 44.066499][ T293] EXT4-fs (loop1): unmounting filesystem. [ 44.438087][ T812] loop1: detected capacity change from 0 to 40427 [ 44.450564][ T812] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 44.465021][ T812] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.500087][ T812] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.623508][ T812] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.640688][ T812] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.668528][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 44.668545][ T28] audit: type=1400 audit(1734547316.015:209): avc: denied { create } for pid=828 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.699543][ T812] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 44.718308][ T812] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 44.730223][ T819] loop2: detected capacity change from 0 to 40427 [ 44.736794][ T28] audit: type=1400 audit(1734547316.045:210): avc: denied { setopt } for pid=828 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.751125][ T832] syz.1.113[832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.766083][ T819] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 44.776170][ T28] audit: type=1400 audit(1734547316.065:211): avc: denied { bind } for pid=828 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.780333][ T832] syz.1.113[832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.807361][ T819] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 44.842389][ T819] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.852132][ T28] audit: type=1400 audit(1734547316.205:212): avc: denied { write } for pid=811 comm="syz.1.113" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.917034][ T841] loop4: detected capacity change from 0 to 512 [ 44.947830][ T829] loop3: detected capacity change from 0 to 40427 [ 44.957402][ T293] f2fs_fill_dentries: 4 callbacks suppressed [ 44.957419][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 44.966614][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 44.975377][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 44.983319][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 44.991534][ T841] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 45.038353][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 45.038379][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 45.046002][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 45.055509][ T819] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.055811][ T841] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.067362][ T819] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.071449][ T841] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 45.077567][ T849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 45.087091][ T841] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 45.120803][ T841] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.123: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 45.174178][ T854] FAULT_INJECTION: forcing a failure. [ 45.174178][ T854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.180116][ T841] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.123: couldn't read orphan inode 13 (err -117) [ 45.188679][ T854] CPU: 1 PID: 854 Comm: syz.3.127 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 45.208050][ T854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 45.216674][ T841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.217953][ T854] Call Trace: [ 45.217962][ T854] [ 45.227296][ T841] EXT4-fs (loop4): unmounting filesystem. [ 45.229825][ T854] dump_stack_lvl+0x151/0x1b7 [ 45.242685][ T854] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 45.248489][ T854] ? vfs_write+0x952/0xed0 [ 45.252738][ T854] ? __kasan_slab_free+0x11/0x20 [ 45.257522][ T854] dump_stack+0x15/0x18 [ 45.261509][ T854] should_fail_ex+0x3d0/0x520 [ 45.266021][ T854] should_fail+0xb/0x10 [ 45.270022][ T854] should_fail_usercopy+0x1a/0x20 [ 45.274875][ T854] _copy_from_user+0x1e/0xc0 [ 45.279298][ T854] __sys_bpf+0x23b/0x7f0 [ 45.283378][ T854] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 45.288596][ T854] ? __ia32_sys_read+0x90/0x90 [ 45.293186][ T854] ? debug_smp_processor_id+0x17/0x20 [ 45.298393][ T854] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.304299][ T854] __x64_sys_bpf+0x7c/0x90 [ 45.308547][ T854] x64_sys_call+0x87f/0x9a0 [ 45.312888][ T854] do_syscall_64+0x3b/0xb0 [ 45.317140][ T854] ? clear_bhb_loop+0x55/0xb0 [ 45.321653][ T854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.327401][ T854] RIP: 0033:0x7f4ea7985d29 [ 45.331730][ T854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.351165][ T854] RSP: 002b:00007f4ea8835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.359411][ T854] RAX: ffffffffffffffda RBX: 00007f4ea7b75fa0 RCX: 00007f4ea7985d29 [ 45.367221][ T854] RDX: 0000000000000020 RSI: 0000000020000780 RDI: 0000000000000001 [ 45.375032][ T854] RBP: 00007f4ea8835090 R08: 0000000000000000 R09: 0000000000000000 [ 45.382848][ T854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.390671][ T854] R13: 0000000000000000 R14: 00007f4ea7b75fa0 R15: 00007fff32b0e528 [ 45.398494][ T854] [ 45.426295][ T28] audit: type=1400 audit(1734547316.775:213): avc: denied { ioctl } for pid=855 comm="syz.3.128" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17392 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.545813][ T295] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 45.545841][ T295] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 45.554451][ T295] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 45.700899][ T28] audit: type=1326 audit(1734547316.985:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7985d29 code=0x7ffc0000 [ 45.877728][ T28] audit: type=1326 audit(1734547316.985:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7985d29 code=0x7ffc0000 [ 45.910978][ T28] audit: type=1326 audit(1734547316.985:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4ea7985d29 code=0x7ffc0000 [ 45.951960][ T28] audit: type=1326 audit(1734547316.985:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7985d29 code=0x7ffc0000 [ 46.055934][ T28] audit: type=1326 audit(1734547316.995:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7985d29 code=0x7ffc0000 [ 46.270741][ T867] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.381250][ T885] loop2: detected capacity change from 0 to 512 [ 46.414560][ T885] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 46.431431][ T885] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.443699][ T885] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 46.471874][ T867] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 46.481644][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.504505][ T867] usb 5-1: config 0 descriptor?? [ 46.509972][ T885] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 46.526898][ T885] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.135: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 46.527108][ T867] usb 5-1: bad CDC descriptors [ 46.570850][ T885] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.135: couldn't read orphan inode 13 (err -117) [ 46.586543][ T885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.619080][ T885] EXT4-fs (loop2): unmounting filesystem. [ 46.624812][ T879] loop0: detected capacity change from 0 to 40427 [ 46.632767][ T879] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 46.641048][ T879] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 46.685454][ T879] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.719216][ T873] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.735937][ T39] usb 5-1: USB disconnect, device number 3 [ 46.737141][ T898] loop2: detected capacity change from 0 to 512 [ 46.796303][ T898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.800100][ T879] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 46.812207][ T879] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.814054][ T898] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.858123][ T879] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 46.874195][ T879] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.911641][ T879] syz.0.134[879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.911720][ T879] syz.0.134[879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.947601][ T905] loop1: detected capacity change from 0 to 128 [ 47.071352][ T318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.582510][ T916] __nla_validate_parse: 3 callbacks suppressed [ 47.582534][ T916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.144'. [ 47.651599][ T295] EXT4-fs (loop2): unmounting filesystem. [ 47.670715][ T916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'. [ 47.679419][ T916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 47.702054][ T916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 47.728989][ T919] loop0: detected capacity change from 0 to 128 [ 47.758269][ T919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.810897][ T919] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.843679][ T924] FAULT_INJECTION: forcing a failure. [ 47.843679][ T924] name failslab, interval 1, probability 0, space 0, times 0 [ 47.882563][ T926] loop3: detected capacity change from 0 to 512 [ 47.891295][ T924] CPU: 0 PID: 924 Comm: syz.2.146 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 47.893101][ T912] loop1: detected capacity change from 0 to 40427 [ 47.900782][ T924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 47.900804][ T924] Call Trace: [ 47.900812][ T924] [ 47.900820][ T924] dump_stack_lvl+0x151/0x1b7 [ 47.900849][ T924] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 47.900875][ T924] dump_stack+0x15/0x18 [ 47.936616][ T924] should_fail_ex+0x3d0/0x520 [ 47.941136][ T924] ? security_file_alloc+0x29/0x120 [ 47.946249][ T924] __should_failslab+0xaf/0xf0 [ 47.950850][ T924] should_failslab+0x9/0x20 [ 47.952257][ T912] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 47.955190][ T924] kmem_cache_alloc+0x3b/0x320 [ 47.967435][ T924] ? __alloc_file+0x29/0x2a0 [ 47.971856][ T924] security_file_alloc+0x29/0x120 [ 47.976719][ T924] __alloc_file+0xb2/0x2a0 [ 47.980972][ T924] alloc_empty_file+0x95/0x180 [ 47.985859][ T924] alloc_file+0x5a/0x5e0 [ 47.989932][ T924] alloc_file_pseudo+0x259/0x2f0 [ 47.994712][ T924] ? alloc_empty_file_noaccount+0x80/0x80 [ 48.000391][ T924] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 48.005285][ T924] anon_inode_getfile+0xa7/0x180 [ 48.010037][ T924] bpf_link_prime+0xed/0x250 [ 48.014478][ T924] bpf_tracing_prog_attach+0x7c6/0xff0 [ 48.019749][ T924] ? putname+0xfa/0x150 [ 48.023835][ T924] ? bpf_raw_tp_link_attach+0x6b0/0x6b0 [ 48.029214][ T924] ? _kstrtol+0x150/0x150 [ 48.033374][ T924] ? memcpy+0x56/0x70 [ 48.037192][ T924] ? avc_has_perm_noaudit+0x2dd/0x430 [ 48.042399][ T924] bpf_raw_tp_link_attach+0x428/0x6b0 [ 48.047609][ T924] ? bpf_insn_prepare_dump+0x950/0x950 [ 48.052903][ T924] ? __kasan_check_write+0x14/0x20 [ 48.057850][ T924] ? fput+0x15b/0x1b0 [ 48.061664][ T924] bpf_raw_tracepoint_open+0x22d/0x4a0 [ 48.066959][ T924] ? bpf_obj_get_info_by_fd+0x3e60/0x3e60 [ 48.072613][ T924] ? selinux_bpf+0xd2/0x100 [ 48.076946][ T924] ? security_bpf+0x82/0xb0 [ 48.081379][ T924] __sys_bpf+0x4f5/0x7f0 [ 48.085443][ T924] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 48.090659][ T924] ? __ia32_sys_read+0x90/0x90 [ 48.095254][ T924] ? debug_smp_processor_id+0x17/0x20 [ 48.100464][ T924] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 48.106448][ T924] __x64_sys_bpf+0x7c/0x90 [ 48.110710][ T924] x64_sys_call+0x87f/0x9a0 [ 48.115045][ T924] do_syscall_64+0x3b/0xb0 [ 48.119382][ T924] ? clear_bhb_loop+0x55/0xb0 [ 48.123895][ T924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.129640][ T924] RIP: 0033:0x7fdcf2b85d29 [ 48.133877][ T924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.153317][ T924] RSP: 002b:00007fdcf3a96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.161565][ T924] RAX: ffffffffffffffda RBX: 00007fdcf2d75fa0 RCX: 00007fdcf2b85d29 [ 48.169371][ T924] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000011 [ 48.177184][ T924] RBP: 00007fdcf3a96090 R08: 0000000000000000 R09: 0000000000000000 [ 48.184993][ T924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.192815][ T924] R13: 0000000000000000 R14: 00007fdcf2d75fa0 R15: 00007ffe56c8d098 [ 48.200621][ T924] [ 48.204216][ T912] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 48.246709][ T912] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.282147][ T934] loop4: detected capacity change from 0 to 512 [ 48.296672][ T934] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.149: casefold flag without casefold feature [ 48.319681][ T934] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.149: couldn't read orphan inode 15 (err -117) [ 48.331541][ T934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.427652][ T294] EXT4-fs (loop0): unmounting filesystem. [ 48.443822][ T912] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 48.460704][ T912] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 48.512108][ T926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.551052][ T926] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.013694][ T296] EXT4-fs (loop3): unmounting filesystem. [ 50.108401][ T293] f2fs_fill_dentries: 11 callbacks suppressed [ 50.108423][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 50.124743][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 50.150718][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 50.178448][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 50.188541][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 50.199449][ T940] loop0: detected capacity change from 0 to 40427 [ 50.220700][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 50.220728][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 50.258248][ T940] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 50.300960][ T940] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 50.313777][ T936] loop2: detected capacity change from 0 to 40427 [ 50.333848][ T936] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 50.345483][ T940] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.361015][ T936] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 50.400895][ T936] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.457963][ T940] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 50.480810][ T940] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.499269][ T292] EXT4-fs (loop4): unmounting filesystem. [ 50.524430][ T958] device pim6reg1 entered promiscuous mode [ 50.535409][ T936] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 50.549897][ T940] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 50.558648][ T936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 50.567407][ T940] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 50.591690][ T940] syz.0.151[940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.591786][ T940] syz.0.151[940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.660073][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 50.703694][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 50.712902][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 50.759000][ T980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 50.821201][ T980] tipc: Started in network mode [ 50.828833][ T983] loop4: detected capacity change from 0 to 128 [ 50.835086][ T980] tipc: Node identity 7f000001, cluster identity 4711 [ 50.850309][ T983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.859453][ T980] tipc: Enabled bearer , priority 10 [ 50.889772][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.907266][ T983] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.923318][ T980] device bridge_slave_0 left promiscuous mode [ 50.945242][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.971553][ T980] device bridge_slave_1 left promiscuous mode [ 50.977549][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.992663][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 50.992680][ T28] audit: type=1326 audit(1734547322.345:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.023294][ T28] audit: type=1326 audit(1734547322.375:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.048336][ T28] audit: type=1326 audit(1734547322.375:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.061462][ T986] tipc: Enabling of bearer rejected, failed to enable media [ 51.083181][ T28] audit: type=1326 audit(1734547322.375:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.115780][ T995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.160'. [ 51.125150][ T995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 51.134618][ T28] audit: type=1326 audit(1734547322.375:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.140745][ T995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 51.169512][ T28] audit: type=1326 audit(1734547322.375:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.187546][ T995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 51.205791][ T28] audit: type=1326 audit(1734547322.375:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.322214][ T999] loop3: detected capacity change from 0 to 512 [ 51.328783][ T999] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 51.337247][ T28] audit: type=1326 audit(1734547322.375:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.374541][ T28] audit: type=1326 audit(1734547322.375:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.379353][ T292] EXT4-fs (loop4): unmounting filesystem. [ 51.399553][ T28] audit: type=1326 audit(1734547322.375:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb7e0d85d29 code=0x7ffc0000 [ 51.404757][ T297] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.439356][ T318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.553727][ T1012] loop4: detected capacity change from 0 to 512 [ 51.564249][ T1012] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 51.602541][ T318] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.640728][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 51.646811][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.666315][ T297] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.679325][ T297] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 51.696139][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.705553][ T297] usb 1-1: config 0 descriptor?? [ 51.799313][ T1016] loop1: detected capacity change from 0 to 40427 [ 51.810737][ T1016] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 51.820786][ T1016] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 51.849757][ T1016] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.856574][ T538] tipc: Node number set to 2130706433 [ 51.907615][ T1016] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 51.915339][ T1016] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 52.175285][ T297] apple 0003:05AC:0240.0001: hidraw0: USB HID vff.fe Device [HID 05ac:0240] on usb-dummy_hcd.0-1/input0 [ 52.179533][ T1042] loop3: detected capacity change from 0 to 512 [ 52.205803][ T1042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.219031][ T1046] loop1: detected capacity change from 0 to 128 [ 52.220076][ T1042] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.234466][ T1046] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.246354][ T1046] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.392453][ T316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 52.429170][ T1050] loop4: detected capacity change from 0 to 512 [ 52.441491][ T293] EXT4-fs (loop1): unmounting filesystem. [ 52.487364][ T297] usb 1-1: USB disconnect, device number 2 [ 52.610895][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 52.683035][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.772746][ T1050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.781861][ T1050] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.844220][ T316] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 52.880243][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.889137][ T316] usb 3-1: config 0 descriptor?? [ 53.313613][ T296] EXT4-fs (loop3): unmounting filesystem. [ 53.344411][ T1063] loop3: detected capacity change from 0 to 128 [ 53.356418][ T1063] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.365001][ T1063] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.459465][ T292] EXT4-fs (loop4): unmounting filesystem. [ 53.525897][ T316] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 53.533296][ T316] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 53.540908][ T316] hid-steam 0003:28DE:1102.0002: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 53.552956][ T316] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 53.560003][ T316] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 53.567812][ T316] hid-steam 0003:28DE:1102.0003: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 53.590238][ T296] EXT4-fs (loop3): unmounting filesystem. [ 53.600291][ T1073] FAULT_INJECTION: forcing a failure. [ 53.600291][ T1073] name failslab, interval 1, probability 0, space 0, times 0 [ 53.623664][ T1073] CPU: 1 PID: 1073 Comm: syz.4.178 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 53.633364][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 53.633383][ T1073] Call Trace: [ 53.633390][ T1073] [ 53.633398][ T1073] dump_stack_lvl+0x151/0x1b7 [ 53.633432][ T1073] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 53.633460][ T1073] dump_stack+0x15/0x18 [ 53.633481][ T1073] should_fail_ex+0x3d0/0x520 [ 53.633512][ T1073] ? security_file_alloc+0x29/0x120 [ 53.633534][ T1073] __should_failslab+0xaf/0xf0 [ 53.633558][ T1073] should_failslab+0x9/0x20 [ 53.633586][ T1073] kmem_cache_alloc+0x3b/0x320 [ 53.633609][ T1073] ? __alloc_file+0x29/0x2a0 [ 53.633630][ T1073] security_file_alloc+0x29/0x120 [ 53.633652][ T1073] __alloc_file+0xb2/0x2a0 [ 53.633673][ T1073] alloc_empty_file+0x95/0x180 [ 53.633694][ T1073] alloc_file+0x5a/0x5e0 [ 53.633715][ T1073] alloc_file_pseudo+0x259/0x2f0 [ 53.633738][ T1073] ? alloc_empty_file_noaccount+0x80/0x80 [ 53.633760][ T1073] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 53.633786][ T1073] anon_inode_getfile+0xa7/0x180 [ 53.633813][ T1073] bpf_link_prime+0xed/0x250 [ 53.633841][ T1073] bpf_tracing_prog_attach+0x7c6/0xff0 [ 53.633861][ T1073] ? putname+0xfa/0x150 [ 53.633881][ T1073] ? bpf_raw_tp_link_attach+0x6b0/0x6b0 [ 53.633901][ T1073] ? _kstrtol+0x150/0x150 [ 53.633932][ T1073] ? memcpy+0x56/0x70 [ 53.633951][ T1073] ? avc_has_perm_noaudit+0x2dd/0x430 [ 53.633985][ T1073] bpf_raw_tp_link_attach+0x428/0x6b0 [ 53.634006][ T1073] ? bpf_insn_prepare_dump+0x950/0x950 [ 53.634031][ T1073] ? __kasan_check_write+0x14/0x20 [ 53.634051][ T1073] ? fput+0x15b/0x1b0 [ 53.634071][ T1073] bpf_raw_tracepoint_open+0x22d/0x4a0 [ 53.634104][ T1073] ? bpf_obj_get_info_by_fd+0x3e60/0x3e60 [ 53.634136][ T1073] ? selinux_bpf+0xd2/0x100 [ 53.634161][ T1073] ? security_bpf+0x82/0xb0 [ 53.634188][ T1073] __sys_bpf+0x4f5/0x7f0 [ 53.634225][ T1073] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 53.634260][ T1073] ? __ia32_sys_read+0x90/0x90 [ 53.634290][ T1073] ? debug_smp_processor_id+0x17/0x20 [ 53.634317][ T1073] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.634345][ T1073] __x64_sys_bpf+0x7c/0x90 [ 53.634373][ T1073] x64_sys_call+0x87f/0x9a0 [ 53.634396][ T1073] do_syscall_64+0x3b/0xb0 [ 53.634419][ T1073] ? clear_bhb_loop+0x55/0xb0 [ 53.634446][ T1073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.634472][ T1073] RIP: 0033:0x7f33ee185d29 [ 53.634491][ T1073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.634509][ T1073] RSP: 002b:00007f33eefc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.634533][ T1073] RAX: ffffffffffffffda RBX: 00007f33ee375fa0 RCX: 00007f33ee185d29 [ 53.634549][ T1073] RDX: 0000000000000010 RSI: 0000000020000440 RDI: 0000000000000011 [ 53.634562][ T1073] RBP: 00007f33eefc0090 R08: 0000000000000000 R09: 0000000000000000 [ 53.634576][ T1073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.634588][ T1073] R13: 0000000000000000 R14: 00007f33ee375fa0 R15: 00007ffee171bdc8 [ 53.634607][ T1073] [ 53.645765][ T316] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' connected [ 53.651535][ T1077] loop3: detected capacity change from 0 to 128 [ 53.676434][ T316] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0002/input/input4 [ 53.847708][ T1077] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.855303][ T316] usb 3-1: USB disconnect, device number 2 [ 53.862523][ T1077] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.121708][ T316] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' disconnected [ 54.158533][ T296] EXT4-fs (loop3): unmounting filesystem. [ 54.323981][ T1089] loop4: detected capacity change from 0 to 2048 [ 54.332762][ T1089] FAT-fs (loop4): Unrecognized mount option "0000000000000000000000518446744073709551615 œ·À" or missing value [ 54.547752][ T1089] loop4: detected capacity change from 0 to 2048 [ 54.558855][ T1089] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 55.377374][ T1094] loop3: detected capacity change from 0 to 512 [ 55.395116][ T538] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 55.423783][ T1094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.433700][ T1094] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.577325][ T1096] loop4: detected capacity change from 0 to 40427 [ 55.583719][ T538] usb 2-1: Using ep0 maxpacket: 32 [ 55.589627][ T1096] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 55.597759][ T538] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 55.691435][ T1096] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 55.976833][ T538] usb 2-1: config 0 has no interface number 0 [ 55.991446][ T1096] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.993572][ T538] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 56.016754][ T538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.031842][ T538] usb 2-1: Product: syz [ 56.039989][ T538] usb 2-1: Manufacturer: syz [ 56.043170][ T1100] loop0: detected capacity change from 0 to 40427 [ 56.044509][ T19] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 56.051582][ T1096] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 56.057997][ T538] usb 2-1: SerialNumber: syz [ 56.070538][ T538] usb 2-1: config 0 descriptor?? [ 56.075480][ T1096] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 56.083614][ T538] smsc95xx v2.0.0 [ 56.084454][ T1100] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 56.098601][ T1100] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 56.104156][ T1096] overlayfs: missing 'lowerdir' [ 56.109630][ T1100] F2FS-fs (loop0): Found nat_bits in checkpoint [ 56.118917][ T1096] syz.4.188[1096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.119015][ T1096] syz.4.188[1096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.141227][ T292] f2fs_fill_dentries: 18 callbacks suppressed [ 56.141265][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 56.158558][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 56.162319][ T1100] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 56.166664][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 56.173729][ T1100] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.180839][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 56.195412][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 56.203117][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 56.234988][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 56.251697][ T296] EXT4-fs (loop3): unmounting filesystem. [ 56.255810][ T1100] overlayfs: missing 'lowerdir' [ 56.282106][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.291806][ T1100] syz.0.189[1100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.292937][ T1100] syz.0.189[1100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.304326][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 56.335926][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.367188][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.385807][ T19] usb 3-1: Product: syz [ 56.389816][ T19] usb 3-1: Manufacturer: syz [ 56.394585][ T19] usb 3-1: SerialNumber: syz [ 56.419808][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 56.419837][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 56.427345][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 56.634619][ T1093] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 56.869127][ T1123] loop0: detected capacity change from 0 to 128 [ 56.877818][ T1123] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 56.886386][ T1123] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.942701][ T1121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 57.202970][ T294] EXT4-fs (loop0): unmounting filesystem. [ 57.261954][ T1093] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 57.471035][ T19] cdc_ncm 3-1:1.0: failed to get mac address [ 57.477719][ T19] cdc_ncm 3-1:1.0: bind() failure [ 57.490709][ T19] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 57.505200][ T19] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 57.516537][ T1135] loop4: detected capacity change from 0 to 512 [ 57.525504][ T19] usb 3-1: USB disconnect, device number 3 [ 57.539897][ T1135] EXT4-fs (loop4): 1 truncate cleaned up [ 57.546555][ T1135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.590449][ T538] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 57.601089][ T538] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 57.610207][ T538] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 57.621571][ T538] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 57.629049][ T538] usb 2-1: USB disconnect, device number 4 [ 57.698503][ T292] EXT4-fs (loop4): unmounting filesystem. [ 57.713980][ T1139] loop4: detected capacity change from 0 to 512 [ 57.720382][ T1139] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 58.326437][ T1162] loop2: detected capacity change from 0 to 128 [ 58.350989][ T1164] loop1: detected capacity change from 0 to 512 [ 58.357644][ T1162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.370995][ T1162] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.414807][ T1164] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 58.429663][ T1164] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.445567][ T1164] EXT4-fs warning (device loop1): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 58.468091][ T1164] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 58.541259][ T316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 58.552294][ T1164] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.203: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.620853][ T1164] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.203: couldn't read orphan inode 13 (err -117) [ 58.633401][ T295] EXT4-fs (loop2): unmounting filesystem. [ 58.654719][ T1164] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.657108][ T1171] loop2: detected capacity change from 0 to 512 [ 58.664677][ T1164] EXT4-fs (loop1): unmounting filesystem. [ 58.675569][ T1171] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 58.781813][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.800692][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.820553][ T316] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 58.830060][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.843581][ T316] usb 1-1: config 0 descriptor?? [ 58.918565][ T1176] hub 2-0:1.0: USB hub found [ 58.923710][ T1176] hub 2-0:1.0: 1 port detected [ 59.281768][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.311726][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.374910][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.442474][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.497812][ T1160] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 59.584640][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.637423][ T1183] loop1: detected capacity change from 0 to 512 [ 59.660145][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.667065][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.673883][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.680715][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.687500][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.695735][ T316] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 59.704226][ T1183] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 59.712774][ T1183] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.713175][ T316] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 59.719489][ T1183] EXT4-fs warning (device loop1): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 59.744763][ T1183] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 59.755298][ T1183] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.206: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 60.087332][ T316] usb 1-1: USB disconnect, device number 3 [ 60.124092][ T1183] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.206: couldn't read orphan inode 13 (err -117) [ 60.163455][ T1183] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 60.245176][ T1193] FAULT_INJECTION: forcing a failure. [ 60.245176][ T1193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.258477][ T1193] CPU: 1 PID: 1193 Comm: syz.4.208 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 60.268027][ T1193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 60.277924][ T1193] Call Trace: [ 60.281054][ T1193] [ 60.283823][ T1193] dump_stack_lvl+0x151/0x1b7 [ 60.288339][ T1193] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 60.293632][ T1193] ? hashlen_string+0x120/0x120 [ 60.298319][ T1193] dump_stack+0x15/0x18 [ 60.302343][ T1193] should_fail_ex+0x3d0/0x520 [ 60.306825][ T1193] should_fail+0xb/0x10 [ 60.310819][ T1193] should_fail_usercopy+0x1a/0x20 [ 60.315673][ T1193] _copy_to_user+0x1e/0x90 [ 60.319936][ T1193] simple_read_from_buffer+0xc7/0x150 [ 60.325140][ T1193] proc_fail_nth_read+0x1a3/0x210 [ 60.329999][ T1193] ? proc_fault_inject_write+0x390/0x390 [ 60.335465][ T1193] ? fsnotify_perm+0x269/0x5b0 [ 60.340070][ T1193] ? security_file_permission+0x86/0xb0 [ 60.345880][ T1193] ? proc_fault_inject_write+0x390/0x390 [ 60.351351][ T1193] vfs_read+0x26c/0xae0 [ 60.355345][ T1193] ? kernel_read+0x1f0/0x1f0 [ 60.359772][ T1193] ? mutex_lock+0xb1/0x1e0 [ 60.364030][ T1193] ? bit_wait_io_timeout+0x120/0x120 [ 60.369144][ T1193] ? __fdget_pos+0x2e2/0x390 [ 60.373567][ T1193] ? ksys_read+0x77/0x2c0 [ 60.377743][ T1193] ksys_read+0x199/0x2c0 [ 60.381836][ T1193] ? vfs_write+0xed0/0xed0 [ 60.386075][ T1193] ? debug_smp_processor_id+0x17/0x20 [ 60.391359][ T1193] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 60.397261][ T1193] __x64_sys_read+0x7b/0x90 [ 60.401603][ T1193] x64_sys_call+0x28/0x9a0 [ 60.405852][ T1193] do_syscall_64+0x3b/0xb0 [ 60.410106][ T1193] ? clear_bhb_loop+0x55/0xb0 [ 60.414629][ T1193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.420344][ T1193] RIP: 0033:0x7f33ee18473c [ 60.424599][ T1193] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.444047][ T1193] RSP: 002b:00007f33eef9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.452303][ T1193] RAX: ffffffffffffffda RBX: 00007f33ee376080 RCX: 00007f33ee18473c [ 60.460095][ T1193] RDX: 000000000000000f RSI: 00007f33eef9f0a0 RDI: 0000000000000005 [ 60.467905][ T1193] RBP: 00007f33eef9f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.475716][ T1193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.483525][ T1193] R13: 0000000000000001 R14: 00007f33ee376080 R15: 00007ffee171bdc8 [ 60.491346][ T1193] [ 60.525644][ T1196] loop4: detected capacity change from 0 to 512 [ 60.600031][ T1196] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 60.617479][ T1196] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.644084][ T1196] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 60.690090][ T1196] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 60.709169][ T1196] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.211: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 60.749258][ T1196] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.211: couldn't read orphan inode 13 (err -117) [ 60.988401][ T1213] loop1: detected capacity change from 0 to 2048 [ 60.996594][ T1213] FAT-fs (loop1): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿ" or missing value [ 61.007430][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 61.007481][ T28] audit: type=1400 audit(1734547332.285:286): avc: denied { accept } for pid=1204 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 61.779795][ T28] audit: type=1400 audit(1734547333.125:287): avc: denied { bind } for pid=1216 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.863199][ T28] audit: type=1400 audit(1734547333.145:288): avc: denied { name_bind } for pid=1216 comm="syz.4.217" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 61.950676][ T28] audit: type=1400 audit(1734547333.145:289): avc: denied { node_bind } for pid=1216 comm="syz.4.217" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 62.004091][ T1207] loop3: detected capacity change from 0 to 40427 [ 62.034420][ T1207] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 62.050649][ C0] sched: RT throttling activated [ 62.053180][ T1207] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 62.073664][ T1207] F2FS-fs (loop3): invalid crc value [ 62.095802][ T1207] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.205818][ T1211] loop0: detected capacity change from 0 to 40427 [ 62.223858][ T1230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.219'. [ 62.230554][ T1228] loop4: detected capacity change from 0 to 128 [ 62.242558][ T1230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 62.251547][ T1211] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 62.259213][ T1211] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.268547][ T1230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 62.285961][ T1207] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 62.293001][ T1228] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.324910][ T1230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 62.333569][ T1207] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 62.366554][ T1211] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.408544][ T1246] loop2: detected capacity change from 0 to 512 [ 62.415895][ T1246] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 62.445507][ T1244] loop1: detected capacity change from 0 to 512 [ 62.499835][ T1242] syz.3.213: attempt to access beyond end of device [ 62.499835][ T1242] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 62.513808][ T1242] syz.3.213: attempt to access beyond end of device [ 62.513808][ T1242] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.536544][ T1244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 62.544886][ T1211] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 62.551870][ T1211] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 62.566821][ T1244] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.594815][ T1242] syz.3.213 (1242) used greatest stack depth: 19560 bytes left [ 62.604715][ T1244] EXT4-fs warning (device loop1): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 62.606734][ T1253] loop4: detected capacity change from 0 to 512 [ 62.640783][ T1244] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 62.653209][ T1244] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.223: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 62.672428][ T1253] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.675139][ T1244] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.223: couldn't read orphan inode 13 (err -117) [ 62.783161][ T294] f2fs_fill_dentries: 4 callbacks suppressed [ 62.783181][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 62.789079][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 62.796764][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 62.804598][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 62.812258][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 62.819787][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 62.828424][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 63.490733][ T538] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 63.506660][ T1270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.231'. [ 63.530725][ T1270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.231'. [ 63.545440][ T1264] loop2: detected capacity change from 0 to 40427 [ 63.549749][ T1270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 63.572391][ T1264] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 63.580479][ T1270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 63.603551][ T1264] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 63.651707][ T1264] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.701944][ T538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.725961][ T538] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.762496][ T538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.775201][ T538] usb 2-1: config 0 descriptor?? [ 63.780366][ T1264] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 63.788245][ T1264] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.833521][ T1298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.236'. [ 63.834356][ T1299] loop4: detected capacity change from 0 to 128 [ 63.842536][ T1298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 63.897993][ T1299] EXT4-fs mount: 9 callbacks suppressed [ 63.898026][ T1299] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 63.937403][ T1299] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.031511][ T1293] loop0: detected capacity change from 0 to 40427 [ 64.038232][ T295] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 64.038254][ T295] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 64.048824][ T1293] F2FS-fs (loop0): Unrecognized mount option "nodisct_merge" or missing value [ 64.053613][ T1304] capability: warning: `syz.3.237' uses deprecated v2 capabilities in a way that may be insecure [ 64.075772][ T295] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 64.174545][ T1304] loop3: detected capacity change from 0 to 1024 [ 64.305888][ T292] EXT4-fs (loop4): unmounting filesystem. [ 64.330015][ T1308] loop4: detected capacity change from 0 to 512 [ 64.336240][ T738] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.444211][ T28] audit: type=1400 audit(1734547335.795:290): avc: denied { read } for pid=1303 comm="syz.3.237" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.493996][ T1304] tmpfs: Unknown parameter 'nolazytime0' [ 64.589508][ T1308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.632294][ T1308] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.663517][ T1313] loop3: detected capacity change from 0 to 128 [ 64.680783][ T28] audit: type=1400 audit(1734547335.815:291): avc: denied { open } for pid=1303 comm="syz.3.237" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.704655][ T28] audit: type=1400 audit(1734547335.835:292): avc: denied { ioctl } for pid=1303 comm="syz.3.237" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.730338][ T28] audit: type=1400 audit(1734547335.955:293): avc: denied { name_bind } for pid=1303 comm="syz.3.237" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.752443][ T28] audit: type=1400 audit(1734547335.995:294): avc: denied { read write } for pid=1303 comm="syz.3.237" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 64.775956][ T28] audit: type=1400 audit(1734547335.995:295): avc: denied { open } for pid=1303 comm="syz.3.237" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 64.805190][ T1320] loop2: detected capacity change from 0 to 512 [ 64.813022][ T1320] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 64.859118][ T1325] loop0: detected capacity change from 0 to 128 [ 64.885038][ T1304] loop3: detected capacity change from 0 to 16 [ 64.893387][ T1304] erofs: Unknown parameter 'ext4' [ 64.902273][ T1325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.910840][ T1325] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.976141][ T323] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.456992][ T292] EXT4-fs (loop4): unmounting filesystem. [ 65.647110][ T294] EXT4-fs (loop0): unmounting filesystem. [ 65.673480][ T1346] loop0: detected capacity change from 0 to 128 [ 65.693716][ T1346] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.710893][ T1346] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.815176][ T1334] loop3: detected capacity change from 0 to 40427 [ 65.830865][ T1334] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 65.841124][ T1334] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.923459][ T1334] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.998659][ T294] EXT4-fs (loop0): unmounting filesystem. [ 66.055600][ T1334] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 66.062633][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 66.062697][ T28] audit: type=1400 audit(1734547337.415:297): avc: denied { create } for pid=1360 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.070040][ T1361] fuse: Bad value for 'group_id' [ 66.094285][ T1334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 66.128030][ T28] audit: type=1400 audit(1734547337.415:298): avc: denied { setopt } for pid=1360 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.150883][ T28] audit: type=1400 audit(1734547337.415:299): avc: denied { bind } for pid=1360 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.172158][ T28] audit: type=1400 audit(1734547337.415:300): avc: denied { mounton } for pid=1360 comm="syz.0.253" path="/49/file0" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.328750][ T538] usbhid 2-1:0.0: can't add hid device: -71 [ 66.343453][ T538] usbhid: probe of 2-1:0.0 failed with error -71 [ 66.361202][ T538] usb 2-1: USB disconnect, device number 5 [ 66.399936][ T1384] loop2: detected capacity change from 0 to 512 [ 66.410239][ T1384] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 66.559691][ T1393] loop3: detected capacity change from 0 to 512 [ 66.569355][ T1393] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 66.708053][ T1396] loop1: detected capacity change from 0 to 2048 [ 66.716543][ T1396] FAT-fs (loop1): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿ" or missing value [ 67.846974][ T1405] loop0: detected capacity change from 0 to 512 [ 67.918896][ T1408] loop3: detected capacity change from 0 to 512 [ 68.061019][ T1405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.069798][ T1405] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.080567][ T1408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.110663][ T1423] FAULT_INJECTION: forcing a failure. [ 68.110663][ T1423] name failslab, interval 1, probability 0, space 0, times 0 [ 68.123120][ T1423] CPU: 1 PID: 1423 Comm: syz.2.267 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 68.132636][ T1423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 68.143353][ T1423] Call Trace: [ 68.146482][ T1423] [ 68.149249][ T1423] dump_stack_lvl+0x151/0x1b7 [ 68.153765][ T1423] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 68.159058][ T1423] ? path_openat+0x10fd/0x2d60 [ 68.163657][ T1423] ? do_sys_openat2+0x151/0x870 [ 68.168347][ T1423] ? __x64_sys_openat+0x243/0x290 [ 68.173208][ T1423] ? x64_sys_call+0x6bf/0x9a0 [ 68.177734][ T1423] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.180821][ T1408] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.183618][ T1423] dump_stack+0x15/0x18 [ 68.183648][ T1423] should_fail_ex+0x3d0/0x520 [ 68.202370][ T1423] __should_failslab+0xaf/0xf0 [ 68.206969][ T1423] ? sock_kmalloc+0x9c/0x100 [ 68.211405][ T1423] should_failslab+0x9/0x20 [ 68.215730][ T1423] __kmem_cache_alloc_node+0x3d/0x2a0 [ 68.220944][ T1423] ? sock_kmalloc+0x9c/0x100 [ 68.225367][ T1423] __kmalloc+0xa3/0x1e0 [ 68.229360][ T1423] sock_kmalloc+0x9c/0x100 [ 68.233612][ T1423] __ipv6_sock_mc_join+0x30d/0x650 [ 68.237425][ T28] audit: type=1400 audit(1868765064.579:301): avc: denied { read write } for pid=1404 comm="syz.0.265" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.238562][ T1423] ipv6_sock_mc_join_ssm+0x2d/0x40 [ 68.261582][ T1408] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.266: corrupted xattr block 33 [ 68.265725][ T1423] do_ipv6_setsockopt+0x2b67/0x4190 [ 68.265767][ T1423] ? sk_dst_reset+0xa0/0xa0 [ 68.286559][ T1423] ? __kasan_check_write+0x14/0x20 [ 68.291590][ T1423] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 68.293548][ T1408] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 68.296903][ T1423] ? kernel_text_address+0xa9/0xe0 [ 68.296930][ T1423] ? _raw_spin_lock+0x1b0/0x1b0 [ 68.315301][ T1423] ? __kernel_text_address+0xd/0x40 [ 68.316151][ T28] audit: type=1400 audit(1868765064.579:302): avc: denied { open } for pid=1404 comm="syz.0.265" path="/54/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.320330][ T1423] ? arch_stack_walk+0xf3/0x140 [ 68.347676][ T1423] ? _parse_integer_limit+0x19b/0x1e0 [ 68.352884][ T1423] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 68.357600][ T1425] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.266: corrupted xattr block 33 [ 68.358518][ T1423] ? __bpf_ringbuf_reserve+0x478/0x520 [ 68.375278][ T1423] ? avc_has_perm_noaudit+0x2dd/0x430 [ 68.380475][ T1423] ? avc_denied+0x1b0/0x1b0 [ 68.384830][ T1423] ? avc_has_perm+0x16f/0x260 [ 68.389332][ T1423] ? avc_has_perm_noaudit+0x430/0x430 [ 68.394643][ T1423] ? selinux_socket_setsockopt+0x260/0x360 [ 68.400278][ T1423] ? selinux_socket_getsockopt+0x340/0x340 [ 68.406013][ T1423] ipv6_setsockopt+0x60/0x1a0 [ 68.410520][ T1423] udpv6_setsockopt+0x8c/0xa0 [ 68.415034][ T1423] sock_common_setsockopt+0xa2/0xc0 [ 68.420063][ T1423] ? sock_common_recvmsg+0x240/0x240 [ 68.425396][ T1423] __sys_setsockopt+0x4dc/0x8b0 [ 68.430176][ T1423] ? __ia32_sys_recv+0xb0/0xb0 [ 68.434777][ T1423] ? debug_smp_processor_id+0x17/0x20 [ 68.439987][ T1423] __x64_sys_setsockopt+0xbf/0xd0 [ 68.444853][ T1423] x64_sys_call+0x1a2/0x9a0 [ 68.449189][ T1423] do_syscall_64+0x3b/0xb0 [ 68.453526][ T1423] ? clear_bhb_loop+0x55/0xb0 [ 68.458032][ T1423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.463774][ T1423] RIP: 0033:0x7fdcf2b85d29 [ 68.468012][ T1423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.487454][ T1423] RSP: 002b:00007fdcf3a75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.495701][ T1423] RAX: ffffffffffffffda RBX: 00007fdcf2d76080 RCX: 00007fdcf2b85d29 [ 68.503513][ T1423] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000008 [ 68.511330][ T1423] RBP: 00007fdcf3a75090 R08: 0000000000000108 R09: 0000000000000000 [ 68.519137][ T1423] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 68.527137][ T1423] R13: 0000000000000000 R14: 00007fdcf2d76080 R15: 00007ffe56c8d098 [ 68.534972][ T1423] [ 68.597598][ T1408] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.266: corrupted xattr block 33 [ 68.635228][ T1425] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 68.635374][ T28] audit: type=1400 audit(1868765064.579:303): avc: denied { append } for pid=1404 comm="syz.0.265" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.690710][ T317] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 68.736210][ T1408] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 68.752213][ T28] audit: type=1400 audit(1868765065.049:304): avc: denied { read } for pid=1407 comm="syz.3.266" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 70.840750][ T317] usb 4-1: Using ep0 maxpacket: 16 [ 70.848648][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.881514][ T28] audit: type=1400 audit(1868765067.229:305): avc: denied { ioctl } for pid=1404 comm="syz.0.265" path="socket:[19361]" dev="sockfs" ino=19361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.917519][ T1451] __nla_validate_parse: 15 callbacks suppressed [ 70.917542][ T1451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 70.934574][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.958367][ T296] EXT4-fs (loop3): unmounting filesystem. [ 70.979444][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 70.994462][ T28] audit: type=1400 audit(1868765067.249:306): avc: denied { setopt } for pid=1404 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.028057][ T317] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 71.053657][ T1451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 71.062602][ T317] usb 4-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 71.071750][ T28] audit: type=1400 audit(1868765067.249:307): avc: denied { write } for pid=1404 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.099316][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.117605][ T1451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 71.133674][ T317] usb 4-1: config 0 descriptor?? [ 71.143074][ T1451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 71.155058][ T294] EXT4-fs (loop0): unmounting filesystem. [ 71.168364][ T317] usb 4-1: can't set config #0, error -71 [ 71.180012][ T317] usb 4-1: USB disconnect, device number 3 [ 71.230686][ T1475] loop4: detected capacity change from 0 to 512 [ 71.242947][ T1475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.251827][ T1475] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.470793][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 71.600700][ T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 71.608093][ T6] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 71.651969][ T39] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 71.660888][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.669298][ T39] usb 1-1: config 0 descriptor?? [ 71.674943][ T39] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 71.682584][ T39] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 71.690745][ T317] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.791934][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.802753][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.813538][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.823100][ T6] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 71.833677][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.846356][ T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.855387][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.864566][ T19] usb 2-1: config 0 descriptor?? [ 71.869412][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.878639][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.885179][ T1463] hub 9-0:1.0: USB hub found [ 71.890903][ T317] usb 4-1: Using ep0 maxpacket: 8 [ 71.895839][ T6] usb 3-1: Product: syz [ 71.896955][ T1463] hub 9-0:1.0: 1 port detected [ 71.900412][ T6] usb 3-1: Manufacturer: syz [ 71.909470][ T1463] tmpfs: Unknown parameter 'dont_measure' [ 71.909656][ T6] usb 3-1: SerialNumber: syz [ 71.920260][ T39] usb 1-1: USB disconnect, device number 4 [ 71.927028][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.928443][ T39] ftdi_sio 1-1:0.0: device disconnected [ 71.938860][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.952814][ T317] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 71.961848][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.970364][ T317] usb 4-1: config 0 descriptor?? [ 72.099321][ T292] EXT4-fs (loop4): unmounting filesystem. [ 72.127485][ T1453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.132225][ T1484] loop4: detected capacity change from 0 to 128 [ 72.143573][ T1484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.152433][ T1484] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.334322][ T292] EXT4-fs (loop4): unmounting filesystem. [ 72.386590][ T317] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 72.401591][ T317] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 72.421601][ T317] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 72.435539][ T317] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 72.444774][ T317] lenovo 0003:17EF:6062.0005: unknown main item tag 0x0 [ 72.457716][ T317] lenovo 0003:17EF:6062.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 72.530134][ T1492] loop4: detected capacity change from 0 to 40427 [ 72.541309][ T1492] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 72.557049][ T1492] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 72.574841][ T1492] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.587946][ T297] usb 4-1: USB disconnect, device number 4 [ 72.619815][ T19] usbhid 2-1:0.0: can't add hid device: -71 [ 72.625654][ T19] usbhid: probe of 2-1:0.0 failed with error -71 [ 72.632858][ T19] usb 2-1: USB disconnect, device number 6 [ 72.645477][ T1492] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 72.652555][ T1492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.772127][ T1453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.027146][ T6] cdc_ncm 3-1:1.0: failed to get mac address [ 73.037360][ T6] cdc_ncm 3-1:1.0: bind() failure [ 73.043829][ T6] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 73.050394][ T6] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 73.064532][ T6] usb 3-1: USB disconnect, device number 4 [ 73.108259][ T292] f2fs_fill_dentries: 11 callbacks suppressed [ 73.108280][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 73.114623][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 73.122522][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 73.129908][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 73.137431][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 73.144876][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 73.154627][ T292] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 73.284825][ T1503] loop3: detected capacity change from 0 to 40427 [ 73.299168][ T1503] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 73.307137][ T1503] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.380191][ T1503] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.502359][ T1528] loop1: detected capacity change from 0 to 256 [ 73.506899][ T1530] loop4: detected capacity change from 0 to 512 [ 73.526428][ T1530] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 73.554032][ T1503] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 73.561900][ T1503] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.647443][ T323] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.672143][ T28] audit: type=1400 audit(1868765070.019:308): avc: denied { mounton } for pid=1527 comm="syz.1.292" path="/49/file0/file2" dev="loop1" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 73.738396][ T1544] loop0: detected capacity change from 0 to 512 [ 75.083018][ T1544] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.091881][ T1544] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.055744][ T1565] loop1: detected capacity change from 0 to 512 [ 76.057665][ T1563] loop4: detected capacity change from 0 to 1024 [ 76.062415][ T1565] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 76.096643][ T1563] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 76.100341][ T296] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 76.105819][ T296] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 76.113682][ T296] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 76.164453][ T323] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.197201][ T294] EXT4-fs (loop0): unmounting filesystem. [ 76.218753][ T1577] loop0: detected capacity change from 0 to 128 [ 76.319317][ T1577] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 76.339434][ T1577] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.591058][ T1587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 76.611479][ T1587] device macsec1 entered promiscuous mode [ 76.617073][ T1587] device bridge0 entered promiscuous mode [ 76.629187][ T1587] FAULT_INJECTION: forcing a failure. [ 76.629187][ T1587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.642297][ T1587] CPU: 1 PID: 1587 Comm: syz.2.302 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 76.651838][ T1587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 76.661734][ T1587] Call Trace: [ 76.664855][ T1587] [ 76.667635][ T1587] dump_stack_lvl+0x151/0x1b7 [ 76.672154][ T1587] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 76.677444][ T1587] dump_stack+0x15/0x18 [ 76.681432][ T1587] should_fail_ex+0x3d0/0x520 [ 76.685948][ T1587] should_fail+0xb/0x10 [ 76.689938][ T1587] should_fail_usercopy+0x1a/0x20 [ 76.694804][ T1587] _copy_from_user+0x1e/0xc0 [ 76.699240][ T1587] kstrtouint_from_user+0xc2/0x180 [ 76.704173][ T1587] ? kstrtol_from_user+0x180/0x180 [ 76.709127][ T1587] ? __kasan_check_read+0x11/0x20 [ 76.713989][ T1587] proc_fail_nth_write+0xa6/0x290 [ 76.718845][ T1587] ? selinux_file_permission+0x2bb/0x560 [ 76.724313][ T1587] ? proc_fail_nth_read+0x210/0x210 [ 76.729348][ T1587] ? fsnotify_perm+0x6a/0x5b0 [ 76.733864][ T1587] ? security_file_permission+0x86/0xb0 [ 76.739237][ T1587] ? proc_fail_nth_read+0x210/0x210 [ 76.744276][ T1587] vfs_write+0x41d/0xed0 [ 76.748351][ T1587] ? __kasan_check_read+0x11/0x20 [ 76.753225][ T1587] ? file_end_write+0x1c0/0x1c0 [ 76.757897][ T1587] ? mutex_lock+0xb1/0x1e0 [ 76.762153][ T1587] ? bit_wait_io_timeout+0x120/0x120 [ 76.767274][ T1587] ? __fdget_pos+0x2e2/0x390 [ 76.771696][ T1587] ? ksys_write+0x77/0x2c0 [ 76.775954][ T1587] ksys_write+0x199/0x2c0 [ 76.780124][ T1587] ? __ia32_sys_read+0x90/0x90 [ 76.784720][ T1587] ? debug_smp_processor_id+0x17/0x20 [ 76.789928][ T1587] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 76.790251][ T1589] loop3: detected capacity change from 0 to 128 [ 76.795825][ T1587] __x64_sys_write+0x7b/0x90 [ 76.795859][ T1587] x64_sys_call+0x2f/0x9a0 [ 76.795883][ T1587] do_syscall_64+0x3b/0xb0 [ 76.814837][ T1587] ? clear_bhb_loop+0x55/0xb0 [ 76.819435][ T1587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.825160][ T1587] RIP: 0033:0x7fdcf2b847df [ 76.829417][ T1587] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 76.848858][ T1587] RSP: 002b:00007fdcf3a54030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 76.857102][ T1587] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdcf2b847df [ 76.865348][ T1587] RDX: 0000000000000001 RSI: 00007fdcf3a540a0 RDI: 000000000000000a [ 76.873159][ T1587] RBP: 00007fdcf3a54090 R08: 0000000000000000 R09: 0000000000000000 [ 76.880966][ T1587] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 76.888782][ T1587] R13: 0000000000000000 R14: 00007fdcf2d76160 R15: 00007ffe56c8d098 [ 76.896686][ T1587] [ 77.121852][ T1589] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.176407][ T1589] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.428567][ T296] EXT4-fs (loop3): unmounting filesystem. [ 78.493508][ T1607] loop3: detected capacity change from 0 to 128 [ 78.585316][ T294] EXT4-fs (loop0): unmounting filesystem. [ 78.623747][ T1607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.641179][ T1607] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.699267][ T1593] loop2: detected capacity change from 0 to 40427 [ 78.717821][ T1593] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 78.734201][ T1593] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 78.775519][ T1603] loop1: detected capacity change from 0 to 40427 [ 78.802672][ T1603] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 78.810565][ T1603] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.835225][ T1593] F2FS-fs (loop2): invalid crc value [ 78.851600][ T1603] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.867511][ T296] EXT4-fs (loop3): unmounting filesystem. [ 78.879842][ T1593] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.932335][ T1603] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.944150][ T1603] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.954064][ T1626] loop3: detected capacity change from 0 to 128 [ 78.978555][ T1626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.998022][ T1629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.312'. [ 79.000326][ T1626] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.009060][ T1629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 79.049984][ T1629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 79.051049][ T1593] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 79.062616][ T1629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 79.115651][ T1593] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.290553][ T1633] loop0: detected capacity change from 0 to 40427 [ 79.297547][ T295] syz-executor: attempt to access beyond end of device [ 79.297547][ T295] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 79.311814][ T293] f2fs_fill_dentries: 4 callbacks suppressed [ 79.311835][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 79.321614][ T1633] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 79.328791][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 79.329353][ T1633] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.345225][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 79.352697][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 79.360073][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 79.369825][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 79.377703][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 79.391739][ T296] EXT4-fs (loop3): unmounting filesystem. [ 79.441550][ T1633] F2FS-fs (loop0): Found nat_bits in checkpoint [ 79.685142][ T1633] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 79.743019][ T1633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.919006][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 79.919034][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 79.928598][ T294] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 79.938375][ T1660] loop2: detected capacity change from 0 to 512 [ 79.976217][ T1664] loop1: detected capacity change from 0 to 128 [ 79.989377][ T1660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.006719][ T1660] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.019049][ T1664] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.090951][ T1664] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.507179][ T1680] loop0: detected capacity change from 0 to 512 [ 80.530515][ T1680] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 80.539623][ T1680] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.552552][ T293] EXT4-fs (loop1): unmounting filesystem. [ 80.636251][ T1684] loop1: detected capacity change from 0 to 128 [ 80.650266][ T1684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.659070][ T1684] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.933154][ T295] EXT4-fs (loop2): unmounting filesystem. [ 81.140753][ T6] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 81.148235][ T538] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 81.210919][ T293] EXT4-fs (loop1): unmounting filesystem. [ 81.227351][ T1692] loop1: detected capacity change from 0 to 512 [ 81.234385][ T1692] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.245495][ T1692] EXT4-fs (loop1): 1 truncate cleaned up [ 81.251133][ T1692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.392257][ T294] EXT4-fs (loop0): unmounting filesystem. [ 81.680391][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.691571][ T538] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.702422][ T538] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 81.713022][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 81.734118][ T538] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.748733][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.752722][ T1700] loop0: detected capacity change from 0 to 512 [ 81.757661][ T538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.771829][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.779824][ T6] usb 5-1: Product: syz [ 81.780212][ T1700] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 81.784377][ T6] usb 5-1: Manufacturer: syz [ 81.796351][ T538] usb 4-1: Product: syz [ 81.800317][ T538] usb 4-1: Manufacturer: syz [ 81.804995][ T6] usb 5-1: SerialNumber: syz [ 81.809702][ T538] usb 4-1: SerialNumber: syz [ 81.920359][ T1703] loop2: detected capacity change from 0 to 512 [ 81.926898][ T1703] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 82.017617][ T1674] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 82.022806][ T1675] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.120349][ T293] EXT4-fs (loop1): unmounting filesystem. [ 82.410742][ T39] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 82.560931][ T39] usb 2-1: device descriptor read/64, error -71 [ 82.633059][ T538] cdc_ncm 4-1:1.0: bind() failure [ 82.638170][ T1675] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.647413][ T538] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 82.654314][ T538] cdc_ncm 4-1:1.1: bind() failure [ 82.669396][ T538] usb 4-1: USB disconnect, device number 5 [ 82.733790][ T1711] loop0: detected capacity change from 0 to 40427 [ 82.742269][ T1711] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 82.749931][ T1711] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 82.760257][ T1711] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.814682][ T1711] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 82.821644][ T1711] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.832553][ T39] usb 2-1: device descriptor read/64, error -71 [ 82.855474][ T6] cdc_ncm 5-1:1.0: failed to get mac address [ 82.861849][ T6] cdc_ncm 5-1:1.0: bind() failure [ 82.868146][ T6] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 82.876064][ T6] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 82.885389][ T6] usb 5-1: USB disconnect, device number 4 [ 83.120835][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 83.280779][ T39] usb 2-1: device descriptor read/64, error -71 [ 83.451406][ T1739] loop4: detected capacity change from 0 to 512 [ 83.478624][ T1739] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.519285][ T1739] EXT4-fs (loop4): 1 truncate cleaned up [ 83.528786][ T1739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.613506][ T39] usb 2-1: device descriptor read/64, error -71 [ 83.732327][ T39] usb usb2-port1: attempt power cycle [ 83.927796][ T1755] loop0: detected capacity change from 0 to 512 [ 83.943444][ T1755] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 83.951449][ T292] EXT4-fs (loop4): unmounting filesystem. [ 84.002969][ T1762] loop4: detected capacity change from 0 to 512 [ 84.024819][ T1762] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 84.045307][ T318] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.170747][ T1764] device veth1_macvtap left promiscuous mode [ 84.176597][ T1764] device macsec0 entered promiscuous mode [ 84.270750][ T39] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 84.322567][ T39] usb 2-1: device descriptor read/8, error -71 [ 84.492151][ T39] usb 2-1: device descriptor read/8, error -71 [ 84.799176][ T1773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'. [ 84.808759][ T1773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 84.844383][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 84.851910][ T1773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 84.867900][ T1773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 84.893690][ T39] usb 2-1: device descriptor read/8, error -71 [ 85.052090][ T39] usb 2-1: device descriptor read/8, error -71 [ 85.100383][ T1779] loop4: detected capacity change from 0 to 128 [ 85.170998][ T39] usb usb2-port1: unable to enumerate USB device [ 85.236331][ T1779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 85.285142][ T1779] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.295247][ T1786] loop1: detected capacity change from 0 to 512 [ 85.370013][ T1786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.381252][ T1786] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.509191][ T292] EXT4-fs (loop4): unmounting filesystem. [ 86.074104][ T1802] loop2: detected capacity change from 0 to 512 [ 86.125241][ T1802] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 86.136239][ T1802] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.143305][ T1802] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 86.210838][ T1802] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 86.235011][ T1802] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.353: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 86.284009][ T293] EXT4-fs (loop1): unmounting filesystem. [ 86.339848][ T1802] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.353: couldn't read orphan inode 13 (err -117) [ 86.388887][ T1802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.413438][ T1802] EXT4-fs (loop2): unmounting filesystem. [ 86.544984][ T1811] loop2: detected capacity change from 0 to 512 [ 86.615628][ T1811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.649669][ T1811] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.675952][ T1816] loop0: detected capacity change from 0 to 128 [ 86.770122][ T1816] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.779696][ T1816] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.208312][ T294] EXT4-fs (loop0): unmounting filesystem. [ 87.225092][ T1829] loop4: detected capacity change from 0 to 128 [ 87.251691][ T1830] loop1: detected capacity change from 0 to 512 [ 87.259672][ T1829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.272520][ T1833] loop0: detected capacity change from 0 to 512 [ 87.278951][ T1830] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 87.288627][ T1829] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.338108][ T1833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 87.347041][ T1833] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.472218][ T295] EXT4-fs (loop2): unmounting filesystem. [ 88.283151][ T292] EXT4-fs (loop4): unmounting filesystem. [ 88.286201][ T1842] loop2: detected capacity change from 0 to 512 [ 88.297384][ T1842] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.468858][ T1846] loop4: detected capacity change from 0 to 128 [ 88.477105][ T294] EXT4-fs (loop0): unmounting filesystem. [ 88.484641][ T1842] EXT4-fs (loop2): 1 truncate cleaned up [ 88.490523][ T1834] ------------[ cut here ]------------ [ 88.490771][ T1842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.495907][ T1834] kernel BUG at fs/buffer.c:2714! [ 88.509591][ T1834] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 88.515169][ T1846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.515533][ T1834] CPU: 0 PID: 1834 Comm: kmmpd-loop0 Not tainted 6.1.118-syzkaller-00072-g4bcafa4d0093 #0 [ 88.530930][ T1846] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.533451][ T1834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 88.575168][ T1834] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 88.580375][ T1834] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d4 c3 e6 ff e9 b0 fe ff ff e8 8a 50 9f ff 0f 0b e8 83 50 9f ff <0f> 0b e8 7c 50 9f ff 0f 0b e8 75 50 9f ff 0f 0b e8 6e 50 9f ff 0f [ 88.599822][ T1834] RSP: 0018:ffffc9000112fc20 EFLAGS: 00010293 [ 88.605710][ T1834] RAX: ffffffff81d6362d RBX: 0000000000000000 RCX: ffff88811ad36540 [ 88.613526][ T1834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.621421][ T1834] RBP: ffffc9000112fc70 R08: ffffffff81d63200 R09: ffffed10218944be [ 88.629247][ T1834] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 88.637044][ T1834] R13: 1ffff110218944bd R14: ffff88810c4a25e8 R15: 0000000000003801 [ 88.645005][ T1834] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 88.653770][ T1834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.660193][ T1834] CR2: 000055558076f4a8 CR3: 000000012f1aa000 CR4: 00000000003506b0 [ 88.668104][ T1834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.675907][ T1834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.683716][ T1834] Call Trace: [ 88.686838][ T1834] [ 88.689629][ T1834] ? __die_body+0x62/0xb0 [ 88.693780][ T1834] ? die+0x88/0xb0 [ 88.697339][ T1834] ? do_trap+0x103/0x330 [ 88.701427][ T1834] ? submit_bh_wbc+0x4cd/0x4f0 [ 88.706111][ T1834] ? handle_invalid_op+0x95/0xc0 [ 88.710879][ T1834] ? submit_bh_wbc+0x4cd/0x4f0 [ 88.715488][ T1834] ? exc_invalid_op+0x32/0x50 [ 88.720007][ T1834] ? asm_exc_invalid_op+0x1b/0x20 [ 88.724854][ T1834] ? submit_bh_wbc+0xa0/0x4f0 [ 88.729364][ T1834] ? submit_bh_wbc+0x4cd/0x4f0 [ 88.733966][ T1834] ? submit_bh_wbc+0x4cd/0x4f0 [ 88.738565][ T1834] ? __kasan_check_read+0x11/0x20 [ 88.743435][ T1834] submit_bh+0x1d/0x30 [ 88.747331][ T1834] write_mmp_block_thawed+0x3a0/0x570 [ 88.752542][ T1834] ? read_mmp_block+0x7d0/0x7d0 [ 88.757227][ T1834] ? update_process_times+0x1b0/0x1b0 [ 88.762525][ T1834] write_mmp_block+0x12b/0x2a0 [ 88.767123][ T1834] kmmpd+0x263/0xa10 [ 88.770857][ T1834] ? write_mmp_block_thawed+0x570/0x570 [ 88.776245][ T1834] ? __kthread_parkme+0x12d/0x180 [ 88.781102][ T1834] kthread+0x26d/0x300 [ 88.785097][ T1834] ? write_mmp_block_thawed+0x570/0x570 [ 88.790584][ T1834] ? kthread_blkcg+0xd0/0xd0 [ 88.795046][ T1834] ret_from_fork+0x1f/0x30 [ 88.799353][ T1834] [ 88.802394][ T1834] Modules linked in: [ 89.074482][ T1834] ---[ end trace 0000000000000000 ]--- [ 89.081682][ T1834] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 89.088398][ T1834] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d4 c3 e6 ff e9 b0 fe ff ff e8 8a 50 9f ff 0f 0b e8 83 50 9f ff <0f> 0b e8 7c 50 9f ff 0f 0b e8 75 50 9f ff 0f 0b e8 6e 50 9f ff 0f [ 89.109663][ T1834] RSP: 0018:ffffc9000112fc20 EFLAGS: 00010293 [ 89.117090][ T1834] RAX: ffffffff81d6362d RBX: 0000000000000000 RCX: ffff88811ad36540 [ 89.125535][ T1834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.135824][ T1834] RBP: ffffc9000112fc70 R08: ffffffff81d63200 R09: ffffed10218944be [ 89.145532][ T1834] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 89.154433][ T1834] R13: 1ffff110218944bd R14: ffff88810c4a25e8 R15: 0000000000003801 [ 89.423193][ T1834] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 89.432511][ T1834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.439106][ T1834] CR2: ffffffffdfa50000 CR3: 000000010f7e8000 CR4: 00000000003506b0 [ 89.447084][ T1834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.455803][ T1834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.463772][ T1834] Kernel panic - not syncing: Fatal exception [ 89.469900][ T1834] Kernel Offset: disabled [ 89.474038][ T1834] Rebooting in 86400 seconds..