last executing test programs: 30.010379199s ago: executing program 1 (id=313): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x8}}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) r7 = syz_usb_connect$hid(0x0, 0x4e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c770c09062d67f2a6034ad7bafefa490d645a5f5ffff7500000000003a9a91700e7e531c968428e6f699abfc2db7401eecf50b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r9}, 0x10) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r10, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 27.838740104s ago: executing program 1 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000011000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000840)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x2}}, 0x10, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000700)}], 0x2, 0x0, 0x0, 0x40014}, 0x80) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000280)=r3, 0x12) 24.190248704s ago: executing program 1 (id=326): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000000)='./file1\x00', 0xa1c800, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) (rerun: 64) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) (async, rerun: 32) r3 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x1, 0xffffd, 0x8}) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000400)={0x10, 0x3f8, 0x1, 0x70bd2c, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x20000800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x3}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001e00)={'bond0\x00'}) (async) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='spmi_write_begin\x00', r10}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r13, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r11, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/246, 0xf6}], 0x1}, 0x0) (async) sendmsg$inet(r11, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendfile(r7, r6, 0x0, 0x80000000) 23.770743995s ago: executing program 1 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup, 0xe, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$selinux_user(r1, 0x0, 0x29) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000880)={0x7, 0x0, [{0x40000000, 0x3, 0xc, 0x0, 0x2b}, {0x3, 0x7, 0x9, 0xe, 0x7fffffff}, {0x6, 0x868e, 0x9, 0xf1, 0x9}, {0x0, 0x7b, 0xfffffff7, 0x0, 0x5}, {0x2, 0x10, 0x3, 0xc}, {0x40000000, 0x8, 0x3, 0xa2ba, 0x6}, {0x40000001, 0x4, 0xff, 0x5, 0x5}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'pimreg0\x00'}) 22.786046998s ago: executing program 1 (id=331): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$eJzs3M9LI2cYwPEnP4xJxEwOpaWF4kt7aXsYNO25EIpCaaCiplQLhVEnbcg0kUywpJRqT72W/ge97EE8ehN29x/wsrfdy1725mVhDyuL7CyZH5roJO6OZqPr9wMy78zzPOP7khieCc4c/vjvb7WKrVeMlsTTSmIiIkcieYlLIOZv4+44Jd225fOJZw8/Xlxe+a5YKs0uKDVXXPqyoJTKTd39/c+Mn7Y/Lgf5nw+fFp4cvH/w4eHLpV+rtqraqt5oKUOtNh63jFXLVOtVu6YrNW+Zhm2qat02m1684cUrVmNjo62M+vpkdqNp2rYy6m1VM9uq1VCtZlsZvxjVutJ1XU1mJUwq9OhtVd5ZWDCKEYvXrngyiOqF4zgDwk6saCREJHMuUt4Z6rwAAMC1dKb/T7gtfaT+X3Ju/99JPu3/dz+535r4YS/n9//7qbD+/6tH3rl6+v+0iFxp/58OWf35jujG23qT5Ev1/7geps5f08Z69prNopH1/35df/+0O+0O6P8BAAAAAAAAAAAAAAAAAAAAALgJjhxHcxxHC7b+zxenGd6xUc4Rw9Pn9dfG/Tumgv1RzxPDsbi8Imn3xr1kTsT6Z7O8Wfa2fjxInBZNjt33g68zDu48Uh15uWdt+fVbm+WEGylWpCqWmDIjmuTP1jvO3Lel2Rnl6a0fk2x3fUE0eS+8vhBan5LPPu2q10WTB2vSEEvWO+/rY+ek/q8Zpb75vnSmPuPmAQAAAADwLtDVidDrd13vF/fqT66ve78fEOm6Pp8OvT5Pah8lR7t2AAAAAABuC7v9R82wLLM5YJCRi3OiD5LRyscG5SS6VtgTku2+S075Twge3koHDIJ/pKilukJp+d8/HOXMwfqHM+e4RKmaEmfcm9VlfnvwtVG/HJkf9uuV7BP64L87z6OdOeY/tbc79PVe+oKVDm0w9lofHk7ikp8+AAAAAN6moOnP2O5ubNTzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNhrwGLDkVT1ObNRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6LVwEAAP//mxn/6g==") r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000000)=ANY=[]) 22.567483159s ago: executing program 1 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000011000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 22.567163239s ago: executing program 32 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000011000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 10.195829672s ago: executing program 0 (id=394): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000000240)="80", 0x1}], 0x1}}], 0x1, 0x60cd894) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5102c216214dff14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00008400000084"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x8, 0x6, 0x0, 0xa, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2={0xff, 0x3, '\x00', 0xf}, 0x40, 0xba08, 0x0, 0xffffffff}}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r8, 0x1c14a000) 7.878587699s ago: executing program 0 (id=411): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) (fail_nth: 3) 7.41483067s ago: executing program 0 (id=412): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x11, r1, 0x260a9000) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x0, 0x400, 0x7ff, 0x1, 0x5, 0x6}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x3, 0x6, @multicast}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x3, 0x6, @multicast}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) syz_usb_connect(0x0, 0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100004e4aa92082051600578e01020301090236000200000000090400000103ed020009050300000000000009040008"], 0x0) 6.004313894s ago: executing program 3 (id=418): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340), 0x3, 0x482, &(0x7f0000001040)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x85c12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) close(0xffffffffffffffff) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 5.675492805s ago: executing program 4 (id=420): socket$inet(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f0000000300), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) getpid() r1 = socket$inet6(0xa, 0x3, 0x3d) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100cb64e38de387", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) io_setup(0x200, &(0x7f0000000140)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_submit(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r7 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r7, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1, &(0x7f00000004c0)=""/75, 0x4b}}], 0x1, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000200)={&(0x7f0000000c00)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='[', 0x1}], 0x1}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 5.570924255s ago: executing program 0 (id=421): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$eJzsmb2LE0EYxp+Z3eydhyg2FjYWHniit9ndqFxzxQmWgnCKWgZvPU73LpKskAQEg42NpYVga2NpYWFl4V9gq4UKgoUp7YSR+djdyWYT4gdG9P3BzT7z9c68L9yzsAFBEP8tHz98ff/w3NqlUwD2YxkLZvyzo5/i4Oj6d4/vnHy0fv7J87dPX+8duPuyHI/JPWL28z0ArzYcpGCuOXFk93IRNtO4DI4TRl8Bg6/lN6HQnRgM18yam5Zu7TMiif3rrWTrxk4SB7IJZRPJpmGfLy81HDBsAVhUtxOCWfOdXv9WM0nidlnURHbO2NSPimn1U/fb4FhHVj0hOICrD+4PZN/UBgF4Xr8QHKHRDTBsGr2GBfi+X5TEyv+IW8R3Zsl/vuKZEodW/9Sh4Locf0Pu/7Co/ZY4rDwi/6HzkcPDzAPtNZ/mnvvPC2VcAMam3iwlyYVfiOxVFCoXhT9JZz9u+ZMLN/ePerp7u97p9Vd3dpvb8Xa8F0WNs8HpIDgT1ZUR6XaK/y0qf1qy4tcmrPWYh24zTdthF0jbYd6PdGs57uaL1he1hyv/41g5pmMw887KX5QlmPnj6inVilO98t7EnAiCIAiCIAiCIAiCIAiCIKo5Cgb9S5hg5oNoFdFF9YXyewAAAP//L0Rm/Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) stat(&(0x7f0000004c80)='./file1\x00', 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) fadvise64(r0, 0xaa1f, 0xff39, 0x61) 4.589052028s ago: executing program 0 (id=423): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') fchdir(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x80000f, 0x2000011, r2, 0xd7f8d000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) socket(0x1, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0x9) r4 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) eventfd(0x1) write$hidraw(r4, &(0x7f00000001c0)="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", 0x4000) 4.360121198s ago: executing program 2 (id=425): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x14fc, &(0x7f0000001540)="$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") mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fstat(r0, &(0x7f0000000180)) 3.942886219s ago: executing program 0 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) tee(0xffffffffffffffff, r3, 0x6, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55715f11e961d1fde85cda4c8aae3a0c64e30cd8655910b3eb2d1451a6bf4b04dc0af703f4c87963ba1424815f140290fb3f659193ae297fdcd50b6dc8d41d9568a55e58cc6514e272e53a081168e74d7189f0e655f66e08f0e108968d80ea3cac636aa60bea16f5e27d5761f66d99ca89ad8cf4e13a2013988c4222d7cf1ff8682043d3d6f16b20de6f1ea6691dcee8e86fa2109aa7898fe15f2c973463c482db5da9926d158ee55592221796e273ccf22a74e8dd3674739087015098b80e9842e82aa484b0047773b358f02338ba5950707984fb201d101bfd1f78b0ea4f397c22d94b5a34491cf3f671af9dacdf409cc1f8d960358d99d506f9b3f52ce15d0cf72083819b4a3a6dfe62b510150dfe25ef1caf21e26954118b0c2dea8b744bed8de035a056fa2d0f7370b9df062c204e070015c5c544f5c74625ea73c563000000c1fcb5a25271"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) sendto$inet6(r6, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3.860386809s ago: executing program 33 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) tee(0xffffffffffffffff, r3, 0x6, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55715f11e961d1fde85cda4c8aae3a0c64e30cd8655910b3eb2d1451a6bf4b04dc0af703f4c87963ba1424815f140290fb3f659193ae297fdcd50b6dc8d41d9568a55e58cc6514e272e53a081168e74d7189f0e655f66e08f0e108968d80ea3cac636aa60bea16f5e27d5761f66d99ca89ad8cf4e13a2013988c4222d7cf1ff8682043d3d6f16b20de6f1ea6691dcee8e86fa2109aa7898fe15f2c973463c482db5da9926d158ee55592221796e273ccf22a74e8dd3674739087015098b80e9842e82aa484b0047773b358f02338ba5950707984fb201d101bfd1f78b0ea4f397c22d94b5a34491cf3f671af9dacdf409cc1f8d960358d99d506f9b3f52ce15d0cf72083819b4a3a6dfe62b510150dfe25ef1caf21e26954118b0c2dea8b744bed8de035a056fa2d0f7370b9df062c204e070015c5c544f5c74625ea73c563000000c1fcb5a25271"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) sendto$inet6(r6, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3.70858905s ago: executing program 5 (id=432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYRES64=r1, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410e9) sendfile(r6, r5, 0x0, 0x100000000) 3.70362533s ago: executing program 2 (id=433): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340), 0x3, 0x482, &(0x7f0000001040)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x85c12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 3.486000901s ago: executing program 3 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_off}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x40, 0x0) (async) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x40, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x703842, 0x1aa) io_setup(0xd, &(0x7f00000001c0)) (async) io_setup(0xd, &(0x7f00000001c0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file1\x00', 0x26000bc5) (async) inotify_add_watch(r1, &(0x7f0000000080)='./file1\x00', 0x26000bc5) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='./bus\x00') (async) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='./bus\x00') 3.366464081s ago: executing program 4 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pause() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.270795471s ago: executing program 3 (id=436): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x0, 0xd, 0x0, 0xfffc, 0x5, 0x2, 0x0, 0xbc, 0x800, 0x0, 0x1000, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x8, 0x37, {0x37, 0x6, "08a22ba213dfb39c5e873f5820ef402aa8dba7b01857eb6bead50bec1be28ae46d3dab5228acf6b55997e06c1c4b44c6912321024c"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0xa, 0x54, "72f2b3e0e8df612577da22576c4a8335a4f365e214dd3545dfa3f113a45a453c83e278058e7c4a04820eb292bbe264a57c0394d1bb48f864222297f2716902d65d75791a2eb7d78f2c9000badfe51fc3be868dc2"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x0, 0x69, {0x67, "909c5b7c1fd0391c3d5a246c8a98320e5246328215624bb799cc417505124d1210aee220ba4d1c27e0cba0a624cb2cada1d700a20c3db7f1cd384e05edf9076158166dec1f9c15f215f043dd5643fc88f9570cede07b637781a0109f3f2ed6d465adf80e8560e1"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0xf}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xfa}}) 2.688661523s ago: executing program 2 (id=437): prlimit64(0x0, 0xe, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.662703743s ago: executing program 5 (id=438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000001100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, @void, @value}, 0x94) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x404200, 0x0) io_uring_setup(0xadd, &(0x7f0000000340)={0x0, 0x345c, 0x20, 0x3, 0x3b5, 0x0, r4}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.585685593s ago: executing program 2 (id=439): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') fchdir(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x80000f, 0x2000011, r2, 0xd7f8d000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) socket(0x1, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0x9) r4 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) eventfd(0x1) write$hidraw(r4, &(0x7f00000001c0)="c13504b6eef12f4c18cbdcc9f5b40069a57ed7ae157527bffbdcd1ae8a6cb209f95031d3837640cd21705232464fa72bc84b5da0f96d32f3a9be48e767ea5ed33845983575663ce068ad596b7c0f3c279cedc6411f8556643eb74cbc5013a2899c2d4990e3f67701ccd499fb6fb0bf4eb2ef0ef308000000000000005723ab363a2c962c11a09cf895cac6dfc518d6a7e896c6211e3dbc7dbb0a8532be176b6a5d312e855047c12ef7bd4b8e519127b1dab65d578423c02ed6a537049b470a0041438fb89e4fe3b7dd4a10c4eb7d6da203af334a82c995ae54e8b2275863f8551084889f18932e84dcca273186877fd9a3887cd0a7ef7a5aa5f34d67b956ba6200a13c5b958b70bd31b60da7ceee3028b4577c8e035cbfa009468eee2c03a0919a020714e148db88adfbec0e6020684fca4e6ff2b956f422b6fc78f4c9b9cfc661dcb034875f15cb7eec6b5ef9c59b80bfeea12fb59d00543d14bc6db45ada9fa9f984e409c6fda2cc7bab508887de098ca374d85b0045424a9ca8d757286545b710d9623b68d5055fb119a9a447dc5ea3df840cbfdfadf9494a10a37655adfdf082f1c2b8852a474e12398988b9eb9afceaaeb6eba6e15b1f02179cea162c788e7003dd0a7ad51692445c68b8e703f1fe47e948b4a5abb13883c5f103b05df9e88bd070ddac06d0370cb02ef5bb58034ef68f7dea7fdacb2abafde001000000f18a52f684b34a07e3e4930020ca2f0272ef2a0209b5d880e953b2d089be314c2964a3d7e1e4596a4631dfd7d1344a151955072a118d7778bdbe50a26d1f", 0x4000) 2.585230053s ago: executing program 2 (id=440): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@jqfmt_vfsv0}]}, 0x1, 0x4c4, &(0x7f00000000c0)="$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") r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x14000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/872], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x27, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000800a7000000000000000000fcf25bd3b220459bf1b4ff8271512719f22fd174247ed4903465a4c5a47f6a09825132ed05b63b2e8087e68f155f7ab18e0fda962b5016b48f9f64f9e5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7e3ffff13000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005d14ffff00000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff07000200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018300000010000000000000000000000850000002c000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'wlan1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1, 0x0, 0x7fffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(r9, &(0x7f0000000700)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) splice(r8, 0x0, r10, 0x0, 0x88000cc, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r11}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000740)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[], 0x4, 0x251, &(0x7f0000000880)="$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") r12 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_ENTRY(r12, 0x0, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) fstatfs(r13, 0x0) fcntl$setpipe(r9, 0x407, 0x8900003) write$eventfd(r9, &(0x7f0000000000), 0x8) 2.507710073s ago: executing program 5 (id=441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c200000000009500001200000000b609c5d8cc5a475dd466048a2af0057092bcc1631cb63d7cdb"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd07, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.440706773s ago: executing program 5 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) tee(0xffffffffffffffff, r3, 0x6, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) sendto$inet6(r6, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2.388238903s ago: executing program 4 (id=443): socket$netlink(0x10, 0x3, 0x6) r0 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x14fc, &(0x7f0000001540)="$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") mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fstat(r0, &(0x7f0000000180)) 1.946180265s ago: executing program 2 (id=444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresgid(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='mm_page_alloc\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = openat$incfs(r5, &(0x7f0000000100)='.log\x00', 0x0, 0x0) read$eventfd(r6, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x600) ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f0000000a00)={0x2, 0xffffffff}) 1.921515215s ago: executing program 4 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) 1.801845275s ago: executing program 6 (id=430): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340), 0x3, 0x482, &(0x7f0000001040)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x85c12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) close(0xffffffffffffffff) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.793724555s ago: executing program 4 (id=446): r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x6, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800e60cf3ffff1b110000", @ANYBLOB="8433d51d22df971edae63049fcd5cadc5a9fd7d65d29cb2bb912d7caf54e375b6105fef068", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100000a0000650005000000000018010000786c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd8c3902cf0e18c76, '\x00', 0x0, @fallback=0x2a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x3, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000a00)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x6, 0x1503, &(0x7f0000001540)="$eJzs3AnYjVXXOPC19t63HpJOkoS99ro5ybBJkgxJMiRJkrySKSEkSRISD5mSJMk8JZlDMoVknqfMSfJKkiQkJNn/S3Hp/Xq/r/f/Tt7ve9bvuu7r2eu5z9pn3Wfd59zD9Tznm7b9KtSqWLYGM8M/BH/9kQoAKQDQCwCuBoAIAIpmLpr5/Pr0GlP/sScR/1wPT7rcFYjLSfqftkn/0zbpf9om/U/bpP9pm/Q/bZP+p23SfyHSsk2Tb7hGlrS7/NH9/85/644k9///F5Ljf5o04OJA+p+2Sf//D0r/26CM/p8eKv1P26T/aZv0P22T/qdt0v+0TfovRFr2d9wzLv/If8B963/jogDgctfwL1su9/4nhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECJtOB0uMQBwcXy56xJCCCGEEEIIIcQ/T7jiclcghBBCCCGEEEKIfz0EBRoMRJAOroAUSA8Z4ErICFdBJrgaEnANZIZrIQtcV+ZiRnbIATnBAoEDhhhyQW5Iwo2QB26CvJAP8kMB8FAQCsHNUBhugSJwKxSF26AY3A7FoQSUhFJwB5SGO6EM3AVl4W4oB+WhAlSEe6AS3AuV4T6oAvdDVXgAqsGDUB0eghrwMNSEP0EteARqw6NQB+pCPagPDf6u/BegI7wInaAzpEIX6AovQTfoDj2gJ/SCl6E3vAJ94FXoC69BP3gd+sMbMADehIEwCAbDEBgKw2A4jICRMApGw1swBt6GsfAOjIPxMAEmwiSYDFPgXZgK02A6vAcz4H2YCbNgNsyBufABzIP5sAA+hIXwESyCxbAElsIyWA4rYCWsgtWwBtbCOlgPG2AjbIKPYTNsga2wDbbDDtgJn8Au+BR2w2ewBz7//8w/9V/y2yEgoEKFBg2mw3SYgimYATNgRsyImTATJjCBmTEzZsEsmBWzYjbMhtkxO+bEnEhIyMiYC3NhEpOYB/NgXsyL+TE/evRYCAthYbwFi2ARLIpFsRgWw+JYAktgKSyFpbE0lsEyWBbLYjkshxWwAt6D9+C9WBkrYxWsglWxKlbDalgdq2MNrIE1sSbWwlpYG2tjHayD9bAeNsAG2BAbYiNshE2wCTbFptgcm2MLbIEtsSU2w1bYGltjG2yDbbEttsP22B5fwBfwRXwRO2M51QW7Ylfsht2wB/bEnvgy9sZX8BV8Ffvia9gPX8fX8Q0cgCdxIA7CwTgYS6thOBxHIKtROBpH4xgcg2NxLI7D8TgeJ+IknIxTcApOxWk4Dd/DGfg+vo+zcBbOwbk4F+fhfFyAC3AhnsJFuBiX4FJchstxGa7EVbgS1+BaXIPrcT1uxI34MX6MQ3ALbsNtuAN34Cf4CX6Kn2Jf3IN7cC/uxX24D/fjfjyAB/AgHsRDeAgP42E8gkfwKB7D43gMT+AJPImn8DSexjN4Bs/ic9m/qrkj3+q+oM4zyqh0Kp1KUSkqg8qgMqqMKpPKpBIqoTKrzCqLyqKyqqwqm8qmsqvsKqfKqUiRYhWrXCqXSqqkyqNSLnxC5FdeeVVIFVKFVWFVRBVRRdVtqpi6XRVXJVRjX0qVUqVVE19G3aXKqrKqnCqvKqiKCJCqKqnKqrKqoqqoqqqqqqYeVNVVF+yBD6vznamlXsPaqh/WUXVVPVVfvYGPqYZqADZSjVUT9YQahAOxuWroW6inVEs1HFupZ9QIfFa1UaOwrXpetVPtVQf1guqoGvlOqrMah11UVzURu6nuqofqqaZieXW+YxXUq6qvek31U6+rOfiGGqDeVAPVIDVYDVFD1TA1XI1QI9UoNVq9pcaot9VY9Y4ap8arCWqimqQmqynqXTVVTSszXb2nZqj31Uw1S81Wc9Rc9YGap+arBepDtVB9pBapxWqJWqqWqeVqhVqpVqnVao1aq9ap9WqD2qg2qY/VZrVFbVXb1Ha1Q+1Un6hd6lO1W32m9qjP1V71Z7VPfaH2qy/VAfWVOqi+VofUN+qw+lYdUd+po+qYOq6+VyfUD+qkOqVOqx/VGfWTOqt+VudUUKBRK6210ZFOp6/QKTq9zqCv1Bn1VTqTvlon9DU6s75WZ9HX6az6ep1N36Cz6xwa1K+dZh3rXDq3TuobdR59k86r8+n8uoD2uqAupG/WhfUtuoi+VRfVt+li+nZdXJfQJXUpfYcure/UZfRduqy+W5fT5XUFXVHfoyvpe3VlfZ+uou/XVfUDupp+UFfXD+ka+mFdU9dPAjyia+tHdR1dV9fT9XUD/ZhuqB/XjXRj3UQ/oZvqZrq5flK30E/plvpp3Uo/o1vrZ3Ub/Zxuq5/X7XR73UH/rM/poDvpzjpVd9Fd9Uu6m+6ue+ieupd+WffWr+g++lXdV7+m++nXdX/9hh6g39QD9SA9WA/RQ/UwPVyP0CP1KD1av6XH6Lf1WP2OHqfH6wl6op6kJ+seF2aa/jfkv/1X8vv88uwb9Sb9sd6st+itepvernfonXqn3qV36d16t96j9+i9eq/ep/fp/Xq/PqAP6IP6oD6kD+nD+rA+oo/oo/qY/lF/r0/oH/RJfUqf0j/qM/qMPnvhNQCDRhltjIlMOnOFSTHpTQZzpclorjKZzNUmYa4xmc21Jou5zmQ115ts5gaT3eQwOY01ZJxhE5tcJrdJmhtNHnOTyWvymfymgPGmoClkbv6H8/+ovgamgWloGppGppFpYpqYpqapaW6amxamhWlpWppWppVpbVqbNqaNaWvamnamnelgOpiOpqPpZDqZVJNqupqXTDfT3fQwPU0v87LpbXqbPqaP6Wv6mn6mn+lv+psBZoAZaAaawWawGWqGmuFmuBlpRprRZrQZY8aYsWasGWfGmQlmgplkJpkpZoqZaqaa6Wa6mWFmmJnn3yxmtplr5pp5Zp5ZYBaYhWahWWQWm8VmqVlqlpvlZqVZaVab1WatWWvWm/VmkdlkNpnNZrPZaraa7Wa72Wl2ml1ml9ltdps9Zo/Za/aafWaf2W/2mwPnP37NQXPIHDKHzWFzxBwxR81Rc9wcNyfMCXPSnDSnzWlzxpwxZ81Zc86cO3/aF6lIRSYyUbooXZQSpUQZogxRxihjlCnKFCWiRJQ5yhxlia6LskbXR9miG6LsUY4oZ2QjilzEURzlinJHyejGKE90U5Q3yhfljwpEPioYFYpujgpHt0RFolujotFtUbHo9qh4VCIqGZWK7ohKR3dGZaK7orLR3VG5qHxUIaoY3RNViu6NKkf3RVWi+6Oq0QNRtejBqHr0UFQjejiqGZkLx5dHozpR3aheVD9q8E+dP4ST1z/uO9nONtV2sV3tS7ab7W572J62l33Z9rav2D72VdvXvmb72ddtf/uGHWDftAPtIDvYDrFD7TA73I6wI+0oO9q+ZcfYt+1Y+44dZ8fbCXainWQn2yn2XTvVTrPT7Xt2hn3fzrSz7Gw7x6YDgHl2vl1gP7QL7Ud2kV1sl9ildpldblfYlXaVXW3X2LV2nV1vN9iNdpP92G62W+xWu81utzvsTvuJ3WU/tbvtZ3aP/dzutX+2++wXdr/90h6wX9mD9mt7yH5jD9tv7RH7nT1qj9nj9nt7wv5gT9pT9rT90Z6xP9mz9md7zobzJ/fnD+9kyFA6SkcplEIZKANlpIyUiTJRghKUmTJTFspCWSkrZaNslJ2yU07KSecxMeWiXJSkJOWhPJSX8lJ+yk+ePBWiQlSYClMRKkJFqSgVo2JUnIpTSSpJd9AddCfdSXfRXXQ33U3lqTxVpIpUiSpRZapMVagKVaWqVI2qUXWqTjWoBtWkmlSLalFtqk11qA7Vo3rUgBpQQ2pIjagRNaEm1JSaUnNqTi2oBbWkltSKWlFrak1tqA21pbbUjtpRB+pAHakjdaJOlEqp1JW6UjfqRj2oB/WiXtSbelMf6kN9qS/1o37Un/rTABpAA2kQDaYhNJSG0XAaQSNpFI2m0TSGxtBYGkvjaBxNoAk0iSbRFJpCU2kqTafpNINm0EyaSbNpNs2luTSP5tECWkALaSEtokW0hJbQMlpGK2gFraJVtIbW0DpaRxtoA22iTbSZNtNW2krbaTvtpJ20i3bRbtpNe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0nI7TCTpBJ+kknabTdIZ+orP0M52jQCkuvcvgrnQZ3VUuk7va/dc4m7vBZXc5XE5nXVZ3/V/E5JzL6/K5/K6A866gK+Ru/l1c3JVwJV0pd4cr7e50ZX4XV3L3usruPlfF3e8qunv+Iq7qHnDVyjziqrtHXQ1X19V09V0t94ir7R51dVxdV8/Vd01dM9fcPelauKdcS/f07+J5bj6CW+3WuLVul/vUnXY/ukPuG3fG/eQ6uc6ul3vZ9XavuD7uVdfXvfa7eLAb4oa6YW64G+FGulG/iye4iW6Sm+ymuHfdVDftd/Fc94Gb4Ra4mW6Wm+3m/BLPc/PdAvehW+g+covcYrfELXXL3HK3wq10qy7UutStdxvcRrfTfeI2uy1uq9vmtrsdv8Tnt2O3+8ztcZ+7g+5rt8994fa7w+6A++qX+Pz2HXbfuiPuO3fUHXPH3ffuhPvBnXSnftn+89v+vfvZnXPBASMr1mw44nR8Badwes7AV3JGvooz8dWc4Gs4M1/LWfg6zsrXcza+gbNzDs7JlokdM8eci3Nzkm/kPHwT5+V8nJ8LsOeCXIhv5sJ8CxfhW7ko38bF+HYuziW4JJfiO7g038ll+C4uy3dzOS7PFbgi38OV+F6uzPdxFb6fq/IDXI0f5Or8ENfgh7km/4lr8SNcmx/lOlyX63F9bsCPcUN+nBtxY27CT3BTbsbN+UluwU9xS36aW/EzDKm/Hk3a8vPcjttzB36BO/KL3Ik7cyqncld+ibtxd+7BPbkXv8y9+ZX0Fw5A3I9f5/78Bg/gN3kgD+LBPISH8jAeziN4JI/i0fwWj+G3eSy/w+N4PE/giTyJJ/MUfpen8jSezu/xDH6fZ/Isns1zeC5/wPN4Pi/gD3khf8SLeDEv4aW8jJfzCl7Jq3g1r+G1vI7X8wbeyJv4Y97MW3grb+PtvIN38ie8iz/l3fwZ7+HPeS//mffxF7yfv+QD/BUf5K/5EH/Dh/lbPsLf8VE+xsf5ez7BP/BJPsWn+Uc+wz/xWf6Zz3FgiDFWsY5NHMXp4ivilDh9nGHvkjhjfFWcKb46TsTXxJnja+Ms8XVx1vj6OFt8Q5w9zhHnjG1MsYs5juNcce44Gd8Y54lvivPG+eL8cYHYxwXjQvHNceH4lrhIfGtcNL4tLhbfHhePS8SP3F8qviMuHd8Zl4nvisvGd8fl4vJxhbhifE9cKb43rhzfF1eJ74+LxA/E1eIH4+rxQ3GN+OG4ZvynuFb8SFw7fjSuE9eN68X14wbxY3HD+PG4Udw4bhI/ETeNm8XN4yfjFvFTccv46T9cnxp3ibvGL8UvxSHcp2cn5yTnJj9IzkvOT17cBRYlFyeXJJcmlyWXJ1ckVyZXJVcn1yTXJtcl1yc3JDcmQ6h4BXj0ymtvfOTT+St8ik/vM/grfUZ/lc/kr/YJf43P7K/1Wfx1Pqu/3mfzN/jsPofP6a0n7zz72OfyuX3S3+jz+Jt8Xp/P5/cFvPcFfSFf3zfwDXxD/7hv5Bv7Jv4J/4Rv5pv5J/2T/inf0j/tW/lnfGv/rG/jn/PP+ed9O9/ed/Av+I7+Rd/Jd/apPtV39V19N9/N9/A9fC/fy/f2vX0f38f39X19P9/P9/f9/QA/wA/0A/1gP9gPBfDD/XA/0o/0o/1oP8aP8WP9WD/Oj/MT/AQ/yU/yU/wUP9VP9dP9dD8j7ww/08/0s/1sP9fP9fP8PL/AL/AL/UK/yC/yS/wSv8wv8yv8Cr/Kr/Jr/Bq/zq/zG/wGv8lv8pv9Zr/Vb/Xb/Xa/0+/0u/wuv9vv9nv8Hr/X7/X7/D6/33/pD/iv/EH/tT/kv/GH/bf+iP/OH/XH/HH/vT/hf/An/Sl/2v/oz/if/Fn/sz/ngx+deCsxJvF2YmzincS4xPjEhMTExKTE5MSUxLuJqYlpiemJ9xIzEu8nZiZmJWYn5iTmJj5IzEvMTyxIfJhYmPgosSixOLEksTSxLLE8EUKOzXHIFXKHZLgx5Ak3hbwhX8gfCgQfCoZC4eZQONwSioRbQ9FwWygWbg/FQ4lQMjwa6oS6oV6oHxqEx0LD8HhoFBqHJuGJ0DQ0C83Dk6FFeCq0DE+HVuGZ0Do8G9qE50Lb8HxoF9qHDuGF0DG8GDqFziE1dAldw0uhW+geeoSeoVd4OfQOr4Q+4dXQN7wW+oXXQ//wRhgQ3gwDw6AwOAwJQ8OwMDyMCCPDqDA6vBXGhLfD2PBOGBfGhwlhYpgUJocp4d0wNUwL08N7YUZ4P8wMs8LsMCfMDR+EeWF+WBA+DAvDR2FRWByWhKVhWVgeVoSVYVXAC++V9WFD2Bg2hY/D5rAlbA3bwvawI+wMn4Rd4dOwO3wW9oTPw97w57AvfBH2hy/DgfBVOBi+DofCN+Fw+DYcCd+Fo+FYOB6+DyfCD+FkOBVOhx/DmfBTOBt+Dufkf9aEEEIIIf4mY/5gfZe/8jt1YTmvKwBcteWGA79drwFgXdZfx91V9qYJAHiqc9uHLy7lyqWmXrj0hkUaotyzACAB6S7m//L9A4lfx4uhCTSDFtAYCv/V+rqr9mf4D+ZP3gaQ4Tc5KXApDp0vzn/LfzP/sBl/OP8sgLy5L+Wcv0K8GF+qv8h/M//1Df9g/vRfjAZo9JucjHApvjR/IXgcnoYWf/FIIYQQQgghhBDiV91VydZ/dH17/vo8u7mUcwVcihcD/o/X50IIIYQQQgghhLj8nm3f4cnHWrRo3DpNDrr8vekaLn/x/86BvrC7/GZV/mLwf+VFuPjHLP8p9fxHDC7jh5IQQgghhBDiX+LSSf/lrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEi7/h1fJ3a5t1EIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYS43P5fAAAA//8Y+BtI") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5}) unlink(&(0x7f0000000140)='./file1\x00') r7 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x600000) ioctl$BLKBSZGET(r7, 0x80081270, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000005100000004000030ca00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknod(&(0x7f0000002800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x10001) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x1000800, &(0x7f0000000880)=ANY=[@ANYBLOB="756e695f786c6100806c2d9f3974653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c00"], 0x0, 0x243, &(0x7f0000000c00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000f7ff000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) 1.485541266s ago: executing program 5 (id=447): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340), 0x3, 0x482, &(0x7f0000001040)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x85c12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 598.248488ms ago: executing program 6 (id=448): prlimit64(0x0, 0xe, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 525.551919ms ago: executing program 4 (id=449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYRES64=r1, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$dupfd(r4, 0x0, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410e9) sendfile(r6, r5, 0x0, 0x100000000) 192.66489ms ago: executing program 3 (id=450): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') fchdir(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x80000f, 0x2000011, r2, 0xd7f8d000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) socket(0x1, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0x9) r4 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) eventfd(0x1) write$hidraw(r4, &(0x7f00000001c0)="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", 0x4000) 145.78607ms ago: executing program 3 (id=451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c200000000009500001200000000b609c5d8cc5a475dd466048a2af0057092bcc1631cb63d7cdb"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd07, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 131.17061ms ago: executing program 5 (id=452): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x21000e, &(0x7f0000001340)={[{@resuid}]}, 0x1, 0x538, &(0x7f0000001900)="$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") (async) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x21000e, &(0x7f0000001340)={[{@resuid}]}, 0x1, 0x538, &(0x7f0000001900)="$eJzs3c1vI2cZAPBnnHhJuilJgUOp1LKiRbsVrL1paBtxaLsCcasAlfsSJd4oihOvYqddW1WVigNHJISgEidOXJD4A5BQ/wRUqRK9I0CgCrZw4AAMmvF4P9xxNtHacZT8ftLY77zz8TyvHdvvfGQmgHPrUkS8FhEzEfF8RCwW9ZViiIP+kM33yZ2317Mhm/LG35NIirqIvHjXxWKxuf5TqXa3t73WbDb2ivF6Z+dWvd3tXd3aWdtsbDZ2V1aWX1p9efXF1WtjaWfWrle+9Zef/fhX337ld1976483/nblnSzpbxbTi3aM3Uf5YzV7Le6ajYi9SQSbgpmiPdVpJwIAwJFkffzPRcSX8/7/YszkvbnccJdu7uSzAwAAAMYhfXUh/pNEpOlg8z4FAAAAzphXI2IhkkqtOBdgISqVWq1/Du8X4rFKs9XufPVma393I5sWsRTVys2tZuNacU7tUlSTbHw5L98bf2FofCUinoiIny7O5+O19VZzY8r7PgAAAOC8uDi0/f+vg/72PwAAAHDGLE07AQAAAGDiRm3/JyecBwAAADA5jv8DAADAmfbd11/PhnRw/+uNN7v72603r2402tu1nf312npr71Zts9XazK/Zt/Ow9TVbrVtfj9392/VOo92pt7u9Gzut/d3OjS33DwQAAIBpeeJL73+URMTBN+bzIXMhe5gZsYBzBeDMqBxn5j9PLg/g5I36mQfOvtlpJwBMz8HxF7k0iTyAqXngUh8lnYL7T955YJ/B7yeXEwAAMF6Xv1h+/D/bBKhOOzlgoo51/B84Uxz/h/PrmMf/P5hUHsDJq+oBwLn3sFt9lF68Y37E8f8LZTOn6aHrAgAAJm4hH5JKrTgWuBCVSq0W8Xj+r/7V5OZWs3EtIj4bEX9YrH4mG1/Ol0zcHhAAAAAAAAAAAAAAAAAAAAAAAAAAjihNk0gBAACAMy2i8tekuP/X5cXnFob3D1xI/r0YxS293vrFGz+/vdbp7C1n9f+4W995r6h/YRp7MAAAAIBhg+30wXY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzTJ3feXh8MJxn34+vxnVgqiz8bc/nzXFQj4rF/JjF733JJRMyMIf7BuxHxZFn8JEsrlooshuNXImJ+/PGr96bcjf90mqal8S+OIT6cZ+9fj4jXyj7/lbiUP5d//meL4VF9fD3/kJfGH3z/zYz4/nv8iDGe+vA39ZHx3414arb8+28QPxkR/9myFZa8KD/4fq/3qcr+yiP9ZcTl0t+f5IFY9c7OrXq727u6tbO22dhs7K6sLL+0+vLqi6vX6je3mo3isbSNP3n6t/8bqvpv2pe3Pz4d/0fRf1sObf9zWeG+b+xIh8MUwT68fefz/WJ1aBV5/CvPlr//Tx4SP/ub+ErxO5BNvzwoH/TL93vm1x88U5pYEX9jxOv/sPf/yqiVDnn+ez/80xFnBQBOQLvb215rNht7RyrMH2fmbm87TSMGNe+laXrMxRVOsDDo3U0sxNxpaekpKGR961OQxqjCOPZsAQAAp829Tv+RF3lnogkBAAAAAAAAAAAAAAAAAADAOdTuRuXw64GlacSjXU5sOObBdJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCo/wcAAP//wojTbg==") r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) fcntl$setstatus(r3, 0x4, 0x2800) (async) fcntl$setstatus(r3, 0x4, 0x2800) syz_fuse_handle_req(r3, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/154, 0x9a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0xffdd) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000004503"]) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000004503"]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061109b0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 42.70955ms ago: executing program 3 (id=453): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340), 0x3, 0x482, &(0x7f0000001040)="$eJzs3M1vFOUfAPDvbLeF8oNfK+ILL0oVjURjSwsqBw9gNNFEExM94LG2hSCFGloTIUSqBzwaEu/Go4l/gSe9GPVk4lXvhoQYLqBexszOTLst23bZbrvAfj7Jss8zL3m+3515dp6Zh20AXWso+yeJ2B4Rv0fEQF5dusFQ/nbrxqWJv29cmkgiTd/5K6ltd/PGpYly03K//5WV+by+t0G7sxcunhmfnp46X9RH5s5+ODJ74eLzp8+On5o6NXVu7OjRI4dHX3px7IWVg0+azzOL6eaeT2b27X79vatvTZy4+v7P3yZl/svyaJOhBst6ysLTbW6s03bUlZNqUejpUDA0LTtE2eHqrfX/geiJ6sK6gXjts44GB2yoNE3TvtsX/5umaXZ9nU+B+1gSnY4A6Iziel/9f/4+sQH3wXe168fzG6As71vFK19TjUqxTe+y+9t2yu62Tsz/81X2io15DgEAsMT3x/P3bNxRvvIllXi4brtjxdzQYEQ8EBE7I+LBiNgVEQ9F1LZ9JCIerdunmemZ5ZMkt49/Ktday6w52fjv5WJua+n4rxz9xWBPUdtRy783OXl6eupQRGRj5oPRuyWrj67Sxg+v/vbFSuuG6sZ/2StrvxwLFnFcq25Zus/k+Nz4enKud/3TiD3VRvknCzMB2XHcHRF79rfWxulnv9m30rq1819FtbV46qVfRzyTH//5WJZ/KVl9fnJka0xPHRopz4rb/fLrlbdXCn31/HvXn+AasuO/reH5v5D/YBLRHxH5fO3snbdx5Y/PV7ynafX870verZXLZ9cfj8/NnR+N6EveLJYfW1w+trhvWS+3z/I/eKBx/98Zi5/E3ojITuLHIuLxiNhfxP5ERDwZEQdWyf+nV576oPX8N1aW/+Tax39xvr6FQs+ZH79b0ujgKvkn0eD4H6mVDhZLmvn+azbA9X5+AAAAcC+oRLyxPZLKcF7eGlGpDA/n/19+V2yrTM/Mzj13cuajc5P5bwQGo7dSPukaqHseOlo8MSjrY8Vtflk/XDw3/rKnv1YfnpiZnux08tDlsn5e1/9je1yr9f/Mn36/Afe/NsyjAfeoVvt/mqaXa4X+toYDbCLXf+he+j90rwb9f/mIfstmxQJsrkbX/8sdiAPYfMb/0L30f+hey/r/oaOdCgTYdK7/0JXW87v+thWy75+7IIymC2naodb7Op/7QiEqLezVfwd/mkGho4VOfzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0x38BAAD//6xz5UY=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x85c12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) close(0xffffffffffffffff) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 6 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000aa00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ec00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r0}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000340)=""/69, 0x623c41ea}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x80041285, &(0x7f0000001080)) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d64697361626c652c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c6332d76b131d463fa7fa165e6f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6661756c745f747970653d3030303030303030303030"], 0x1, 0x5505, &(0x7f0000002480)="$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") r5 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={r5, 0xfb01000000000000}) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000300)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x1c, 0x0, 0x400}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) pselect6(0x40, &(0x7f0000000080)={0x100, 0x7fffffff, 0xfffffffffffff079, 0x10000, 0x5, 0xd, 0xd4, 0xc}, &(0x7f0000000180)={0x100000001, 0xb81a, 0xffc, 0x100000000, 0xfffffffffffffffe, 0x101, 0x3, 0x6}, &(0x7f00000001c0)={0x9, 0xa4, 0x3, 0x3, 0x3ff, 0x6, 0x5, 0xe}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x3]}, 0x8}) kernel console output (not intermixed with test programs): loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 71.755365][ T903] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.152: invalid indirect mapped block 1 (level 1) [ 71.768666][ T895] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.150: invalid indirect mapped block 1 (level 1) [ 71.777405][ T903] EXT4-fs (loop1): 1 truncate cleaned up [ 71.787281][ T903] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.800122][ T895] EXT4-fs (loop2): 1 truncate cleaned up [ 71.809022][ T318] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 71.817219][ T908] loop0: detected capacity change from 0 to 16 [ 71.824876][ T895] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.835935][ T908] erofs: (device loop0): mounted with root inode @ nid 36. [ 71.844137][ T908] attempt to access beyond end of device [ 71.844137][ T908] loop0: rw=0, want=24, limit=16 [ 73.789369][ T921] loop0: detected capacity change from 0 to 512 [ 73.909536][ T921] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 73.930386][ T921] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.157: invalid indirect mapped block 1 (level 1) [ 73.943652][ T921] EXT4-fs (loop0): 1 truncate cleaned up [ 73.949464][ T921] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.037341][ T928] loop1: detected capacity change from 0 to 512 [ 74.334515][ T928] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 74.411903][ T928] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.156: invalid indirect mapped block 1 (level 1) [ 74.479800][ T928] EXT4-fs (loop1): 1 truncate cleaned up [ 74.508850][ T928] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.461335][ T943] loop0: detected capacity change from 0 to 512 [ 76.803541][ T943] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 76.818754][ T943] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.160: invalid indirect mapped block 1 (level 1) [ 76.855541][ T943] EXT4-fs (loop0): 1 truncate cleaned up [ 76.864463][ T943] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.916156][ T957] loop1: detected capacity change from 0 to 16 [ 76.924764][ T957] erofs: (device loop1): mounted with root inode @ nid 36. [ 77.068487][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.071519][ T957] attempt to access beyond end of device [ 77.071519][ T957] loop1: rw=0, want=24, limit=16 [ 77.705470][ T964] loop3: detected capacity change from 0 to 512 [ 77.715338][ T967] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 77.807473][ T594] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 77.843575][ T967] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 77.853131][ T967] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 78.487610][ T967] attempt to access beyond end of device [ 78.487610][ T967] loop1: rw=524288, want=392, limit=16 [ 78.500463][ T967] attempt to access beyond end of device [ 78.500463][ T967] loop1: rw=524288, want=400, limit=16 [ 78.527173][ T967] attempt to access beyond end of device [ 78.527173][ T967] loop1: rw=524288, want=32, limit=16 [ 78.539541][ T964] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 78.554276][ T964] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.166: invalid indirect mapped block 1 (level 1) [ 78.567390][ T967] attempt to access beyond end of device [ 78.567390][ T967] loop1: rw=524288, want=736, limit=16 [ 78.578469][ T967] attempt to access beyond end of device [ 78.578469][ T967] loop1: rw=524288, want=744, limit=16 [ 78.598669][ T964] EXT4-fs (loop3): 1 truncate cleaned up [ 78.604200][ T964] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.667197][ T977] loop1: detected capacity change from 0 to 512 [ 78.705670][ T973] loop4: detected capacity change from 0 to 512 [ 78.785762][ T973] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.795129][ T977] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 78.814024][ T977] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.168: invalid indirect mapped block 1 (level 1) [ 78.839072][ T977] EXT4-fs (loop1): 1 truncate cleaned up [ 78.844684][ T977] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.858680][ T594] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 78.879033][ T594] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 78.890671][ T594] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 78.899739][ T594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.029027][ T951] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 79.053151][ T973] EXT4-fs (loop4): failed to initialize system zone (-117) [ 79.060383][ T973] EXT4-fs (loop4): mount failed [ 79.127124][ T988] loop3: detected capacity change from 0 to 512 [ 79.179064][ T988] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 79.260673][ T988] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.170: invalid indirect mapped block 1 (level 1) [ 79.274846][ T988] EXT4-fs (loop3): 1 truncate cleaned up [ 79.280633][ T988] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.361880][ T992] loop4: detected capacity change from 0 to 16 [ 79.459169][ T992] erofs: (device loop4): mounted with root inode @ nid 36. [ 79.487092][ T992] attempt to access beyond end of device [ 79.487092][ T992] loop4: rw=0, want=24, limit=16 [ 79.563429][ T998] loop2: detected capacity change from 0 to 512 [ 79.587474][ T992] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 79.636369][ T992] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 79.645787][ T992] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 79.655005][ T992] attempt to access beyond end of device [ 79.655005][ T992] loop4: rw=524288, want=392, limit=16 [ 79.667385][ T992] attempt to access beyond end of device [ 79.667385][ T992] loop4: rw=524288, want=400, limit=16 [ 79.680296][ T998] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 79.724283][ T992] attempt to access beyond end of device [ 79.724283][ T992] loop4: rw=524288, want=32, limit=16 [ 79.740169][ T998] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.172: invalid indirect mapped block 1 (level 1) [ 79.784653][ T998] EXT4-fs (loop2): 1 truncate cleaned up [ 79.792076][ T998] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.899161][ T594] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 79.906965][ T594] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input4 [ 79.928504][ T594] usb 3-1: USB disconnect, device number 7 [ 81.258991][ T1024] loop0: detected capacity change from 0 to 512 [ 81.268837][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.419003][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 81.419025][ T30] audit: type=1400 audit(1731237550.473:517): avc: denied { map } for pid=1026 comm="syz.4.178" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.451967][ T1027] loop4: detected capacity change from 0 to 256 [ 81.469259][ T1024] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 81.484079][ T30] audit: type=1400 audit(1731237550.503:518): avc: denied { execute } for pid=1026 comm="syz.4.178" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.484538][ T1024] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.177: invalid indirect mapped block 1 (level 1) [ 81.522795][ T1024] EXT4-fs (loop0): 1 truncate cleaned up [ 81.531980][ T1027] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 81.543997][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 81.554099][ T1024] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.701927][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.758284][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.768300][ T39] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 82.777348][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.041268][ T30] audit: type=1400 audit(1731237551.803:519): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.374855][ T39] usb 2-1: config 0 descriptor?? [ 83.428338][ T39] usb 2-1: can't set config #0, error -71 [ 83.436119][ T39] usb 2-1: USB disconnect, device number 2 [ 83.464860][ T1040] netlink: 'syz.1.181': attribute type 3 has an invalid length. [ 83.482033][ T1041] loop4: detected capacity change from 0 to 512 [ 83.534960][ T30] audit: type=1400 audit(1731237552.423:520): avc: denied { map } for pid=1033 comm="syz.4.179" path="/dev/ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.588569][ T1041] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 83.623089][ T1041] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.180: invalid indirect mapped block 1 (level 1) [ 83.666824][ T1041] EXT4-fs (loop4): 1 truncate cleaned up [ 83.677916][ T1041] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.998413][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.468595][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.498621][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.508921][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 84.517852][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.540699][ T39] usb 2-1: config 0 descriptor?? [ 84.644097][ T30] audit: type=1400 audit(1731237553.693:521): avc: denied { name_bind } for pid=1052 comm="syz.2.184" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 84.672109][ T30] audit: type=1400 audit(1731237553.713:522): avc: denied { node_bind } for pid=1052 comm="syz.2.184" saddr=::ffff:172.20.20.170 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 84.743631][ T594] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 84.802731][ T594] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.812266][ T370] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.769747][ T1077] loop0: detected capacity change from 0 to 512 [ 85.806354][ T1077] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 85.835771][ T1077] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.190: invalid indirect mapped block 1 (level 1) [ 85.868677][ T1077] EXT4-fs (loop0): 1 truncate cleaned up [ 85.874327][ T1077] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.906990][ T39] logitech-hidpp-device 0003:046D:C086.0007: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 86.029718][ T958] usb 2-1: USB disconnect, device number 3 [ 86.478391][ T370] usb 5-1: unable to get BOS descriptor or descriptor too short [ 86.486180][ T39] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 86.588433][ T370] usb 5-1: config 6 has an invalid interface number: 162 but max is 3 [ 86.596938][ T370] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 86.816439][ T370] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 86.825165][ T370] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 86.835388][ T370] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 4 [ 86.844416][ T370] usb 5-1: config 6 has no interface number 1 [ 86.850610][ T370] usb 5-1: config 6 interface 162 altsetting 249 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 86.861981][ T370] usb 5-1: config 6 interface 162 altsetting 249 has a duplicate endpoint with address 0x7, skipping [ 86.872957][ T370] usb 5-1: config 6 interface 162 altsetting 249 has a duplicate endpoint with address 0xB, skipping [ 86.883980][ T370] usb 5-1: config 6 interface 162 has no altsetting 0 [ 86.928364][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 86.934251][ T30] audit: type=1400 audit(1731237555.983:523): avc: denied { unlink } for pid=1086 comm="syz.1.193" name="#1" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.019287][ T30] audit: type=1326 audit(1731237556.073:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 87.042624][ T30] audit: type=1326 audit(1731237556.073:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 87.065878][ T60] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 87.068406][ T370] usb 5-1: New USB device found, idVendor=1199, idProduct=0026, bcdDevice=51.2c [ 87.073289][ T30] audit: type=1326 audit(1731237556.073:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 87.082181][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.105485][ T30] audit: type=1326 audit(1731237556.073:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 87.143638][ T30] audit: type=1326 audit(1731237556.073:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 87.148331][ T370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.183684][ T30] audit: type=1326 audit(1731237556.073:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 87.206740][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.216619][ T370] usb 5-1: Product: syz [ 87.220780][ T39] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 87.230887][ T370] usb 5-1: Manufacturer: syz [ 87.235364][ T370] usb 5-1: SerialNumber: syz [ 87.240011][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.251109][ T39] usb 3-1: config 0 descriptor?? [ 87.258269][ T30] audit: type=1326 audit(1731237556.073:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 87.288526][ T1050] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.324980][ T30] audit: type=1326 audit(1731237556.073:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 87.378276][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 87.398324][ T30] audit: type=1326 audit(1731237556.073:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 87.498595][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.532372][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.548504][ T370] hub 5-1:6.162: bad descriptor, ignoring hub [ 87.554418][ T370] hub: probe of 5-1:6.162 failed with error -5 [ 87.578474][ T60] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 87.590472][ T370] hub 5-1:6.0: bad descriptor, ignoring hub [ 87.595167][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.610009][ T370] hub: probe of 5-1:6.0 failed with error -5 [ 87.632434][ T60] usb 4-1: config 0 descriptor?? [ 87.669757][ T370] usb 5-1: USB disconnect, device number 5 [ 87.788300][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 87.794172][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 87.834622][ T39] usb 3-1: USB disconnect, device number 8 [ 88.468383][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 88.474262][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 88.490525][ T60] usb 4-1: USB disconnect, device number 6 [ 90.208786][ T1134] loop2: detected capacity change from 0 to 512 [ 90.359699][ T1134] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 90.410865][ T1134] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.206: invalid indirect mapped block 1 (level 1) [ 90.424963][ T1134] EXT4-fs (loop2): 1 truncate cleaned up [ 90.430757][ T1134] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.598339][ T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.659701][ T1165] loop3: detected capacity change from 0 to 512 [ 91.719299][ T1165] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 91.738432][ T60] usb 2-1: device descriptor read/64, error -71 [ 92.438301][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 92.438321][ T30] audit: type=1400 audit(1731237561.443:585): avc: denied { create } for pid=1177 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.591607][ T30] audit: type=1400 audit(1731237561.443:586): avc: denied { bind } for pid=1177 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.787547][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.894817][ T30] audit: type=1400 audit(1731237561.443:587): avc: denied { write } for pid=1177 comm="syz.4.220" path="socket:[19514]" dev="sockfs" ino=19514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.920061][ T30] audit: type=1400 audit(1731237561.513:588): avc: denied { write } for pid=1179 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.940812][ T30] audit: type=1400 audit(1731237561.513:589): avc: denied { ioctl } for pid=1179 comm="syz.2.222" path="socket:[19523]" dev="sockfs" ino=19523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.968549][ T30] audit: type=1400 audit(1731237561.533:590): avc: denied { setopt } for pid=1179 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.978345][ T350] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.078315][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 93.148374][ T370] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 93.198338][ T60] usb 2-1: device descriptor read/64, error -71 [ 93.208465][ T39] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 93.216460][ T39] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 93.226405][ T39] usb 4-1: config 0 has no interface number 0 [ 93.232342][ T39] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 82, changing to 10 [ 93.238287][ T350] usb 1-1: Using ep0 maxpacket: 16 [ 93.243270][ T39] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1703, setting to 1024 [ 93.259204][ T39] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.272054][ T39] usb 4-1: config 0 interface 52 has no altsetting 0 [ 93.321736][ T1191] loop1: detected capacity change from 0 to 256 [ 93.361873][ T30] audit: type=1326 audit(1731237562.413:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 93.386033][ T30] audit: type=1326 audit(1731237562.413:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 93.392002][ T1191] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 93.409321][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.421000][ T39] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 93.421032][ T39] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 93.421055][ T39] usb 4-1: Product: syz [ 93.421068][ T39] usb 4-1: SerialNumber: syz [ 93.421974][ T39] usb 4-1: config 0 descriptor?? [ 93.432579][ T30] audit: type=1326 audit(1731237562.443:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 93.485205][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.495009][ T350] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 93.504227][ T350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.512907][ T350] usb 1-1: config 0 descriptor?? [ 93.538395][ T370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.638284][ T370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.648113][ T370] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 93.668293][ T30] audit: type=1326 audit(1731237562.443:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 93.691397][ T370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.821136][ T370] usb 3-1: config 0 descriptor?? [ 94.138316][ T350] usbhid 1-1:0.0: can't add hid device: -71 [ 94.144201][ T350] usbhid: probe of 1-1:0.0 failed with error -71 [ 94.163544][ T350] usb 1-1: USB disconnect, device number 7 [ 94.233145][ T1203] loop4: detected capacity change from 0 to 2048 [ 94.237274][ T520] usb 4-1: USB disconnect, device number 7 [ 94.327242][ T1203] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.371787][ T370] pyra 0003:1E7D:2CF6.0008: invalid report_count 27681 [ 94.378609][ T370] pyra 0003:1E7D:2CF6.0008: item 0 2 1 9 parsing failed [ 94.385588][ T370] pyra 0003:1E7D:2CF6.0008: parse failed [ 94.391261][ T370] pyra: probe of 0003:1E7D:2CF6.0008 failed with error -22 [ 94.863300][ T370] usb 3-1: USB disconnect, device number 9 [ 95.082235][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.178757][ T1232] loop3: detected capacity change from 0 to 128 [ 95.215293][ T1237] loop1: detected capacity change from 0 to 512 [ 95.244846][ T1237] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 95.259617][ T1237] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.238: invalid indirect mapped block 1 (level 1) [ 95.289648][ T1237] EXT4-fs (loop1): 1 truncate cleaned up [ 95.295696][ T1237] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.312670][ T1243] loop0: detected capacity change from 0 to 1024 [ 95.402847][ T1243] EXT4-fs (loop0): Unrecognized mount option "euid<18446744073709551615" or missing value [ 96.600141][ T1259] loop3: detected capacity change from 0 to 512 [ 96.758497][ T1259] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 96.774649][ T1259] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.242: invalid indirect mapped block 1 (level 1) [ 96.782283][ T1270] loop4: detected capacity change from 0 to 1024 [ 96.813902][ T1259] EXT4-fs (loop3): 1 truncate cleaned up [ 96.828478][ T1259] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.858291][ T506] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 96.889700][ T1272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.931149][ T1270] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.838394][ T506] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 97.848513][ T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 97.871802][ T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 97.895067][ T506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.920119][ T506] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.938553][ T506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.960137][ T506] usb 2-1: config 0 descriptor?? [ 97.988410][ T1260] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.078400][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 98.078419][ T30] audit: type=1400 audit(1731237567.123:664): avc: denied { execute } for pid=1283 comm="syz.2.248" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.118284][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.134020][ T1286] loop2: detected capacity change from 0 to 512 [ 98.154815][ T30] audit: type=1400 audit(1731237567.123:665): avc: denied { execute_no_trans } for pid=1283 comm="syz.2.248" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.220477][ T1286] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 98.238053][ T1286] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.249: invalid indirect mapped block 1 (level 1) [ 98.254204][ T1286] EXT4-fs (loop2): 1 truncate cleaned up [ 98.259837][ T1286] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.418341][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 98.853278][ T506] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 100.479595][ T506] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 100.517265][ T506] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.568329][ T39] usb 5-1: device descriptor read/all, error -71 [ 100.586506][ T30] audit: type=1326 audit(1731237569.633:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 100.657158][ T1302] loop1: detected capacity change from 0 to 2048 [ 100.668598][ T30] audit: type=1326 audit(1731237569.673:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 100.688289][ T506] usb 2-1: USB disconnect, device number 6 [ 100.728652][ T1307] loop2: detected capacity change from 0 to 512 [ 100.769083][ T30] audit: type=1326 audit(1731237569.673:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 100.848761][ T1302] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.860320][ T1307] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 100.895128][ T30] audit: type=1326 audit(1731237569.673:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 100.898514][ T1307] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.257: invalid indirect mapped block 1 (level 1) [ 101.026622][ T1307] EXT4-fs (loop2): 1 truncate cleaned up [ 101.090032][ T1307] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.119369][ T30] audit: type=1326 audit(1731237569.673:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 102.620783][ T1328] loop4: detected capacity change from 0 to 16 [ 102.758571][ T30] audit: type=1326 audit(1731237569.673:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 102.788628][ T1328] erofs: (device loop4): mounted with root inode @ nid 36. [ 102.817613][ T1328] handle_bad_sector: 2 callbacks suppressed [ 102.817637][ T1328] attempt to access beyond end of device [ 102.817637][ T1328] loop4: rw=0, want=24, limit=16 [ 102.846799][ T1333] loop1: detected capacity change from 0 to 512 [ 102.908294][ T30] audit: type=1326 audit(1731237569.673:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 102.971521][ T1333] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 103.026314][ T1333] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.262: invalid indirect mapped block 1 (level 1) [ 103.052673][ T30] audit: type=1326 audit(1731237569.673:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 103.129012][ T30] audit: type=1326 audit(1731237569.673:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 103.150899][ T1333] EXT4-fs (loop1): 1 truncate cleaned up [ 103.162382][ T30] audit: type=1326 audit(1731237569.673:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 103.185592][ T1333] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.268633][ T30] audit: type=1326 audit(1731237569.673:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 103.368505][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.448635][ T302] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.540184][ T30] audit: type=1326 audit(1731237569.673:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5f4e376719 code=0x7ffc0000 [ 103.938647][ T39] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 103.946705][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 104.028330][ T302] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 104.046612][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 104.058708][ T30] audit: type=1326 audit(1731237569.713:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1303 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 104.088265][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 104.159967][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 104.181297][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.249954][ T302] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.278425][ T30] audit: type=1326 audit(1731237569.713:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1303 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 104.283380][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.320542][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.338147][ T20] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.354454][ T302] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.364986][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.368330][ T30] audit: type=1326 audit(1731237569.713:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1303 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 104.372912][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.416077][ T302] usb 3-1: config 0 descriptor?? [ 104.425128][ T39] usb 5-1: config 0 descriptor?? [ 104.434392][ T1353] loop1: detected capacity change from 0 to 512 [ 104.440694][ T1345] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.451731][ T1341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.474087][ T30] audit: type=1326 audit(1731237569.713:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1303 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 104.504055][ T30] audit: type=1326 audit(1731237569.713:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1303 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 104.528245][ T30] audit: type=1326 audit(1731237569.713:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1303 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 104.552689][ T1353] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 104.567653][ T1353] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.267: invalid indirect mapped block 1 (level 1) [ 104.580884][ T1353] EXT4-fs (loop1): 1 truncate cleaned up [ 104.586348][ T1353] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.182493][ T39] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 105.202614][ T302] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 105.253541][ T39] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 105.263551][ T302] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 105.385050][ T1345] FAULT_INJECTION: forcing a failure. [ 105.385050][ T1345] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.449771][ T39] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 105.469269][ T302] plantronics 0003:047F:FFFF.000C: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 105.483775][ T1345] CPU: 1 PID: 1345 Comm: syz.2.265 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 105.493671][ T1345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.503565][ T1345] Call Trace: [ 105.506698][ T1345] [ 105.509470][ T1345] dump_stack_lvl+0x151/0x1c0 [ 105.513977][ T1345] ? io_uring_drop_tctx_refs+0x190/0x190 [ 105.519446][ T1345] ? kstrtouint_from_user+0x20a/0x2a0 [ 105.524655][ T1345] dump_stack+0x15/0x20 [ 105.528648][ T1345] should_fail+0x3c6/0x510 [ 105.532900][ T1345] should_fail_usercopy+0x1a/0x20 [ 105.537763][ T1345] _copy_to_user+0x20/0x90 [ 105.542017][ T1345] simple_read_from_buffer+0xc7/0x150 [ 105.547223][ T1345] proc_fail_nth_read+0x1a3/0x210 [ 105.552078][ T1345] ? proc_fault_inject_write+0x390/0x390 [ 105.557545][ T1345] ? fsnotify_perm+0x269/0x5b0 [ 105.562146][ T1345] ? security_file_permission+0x86/0xb0 [ 105.567541][ T1345] ? proc_fault_inject_write+0x390/0x390 [ 105.572995][ T1345] vfs_read+0x27d/0xd40 [ 105.576991][ T1345] ? kernel_read+0x1f0/0x1f0 [ 105.581419][ T1345] ? __kasan_check_write+0x14/0x20 [ 105.586361][ T1345] ? mutex_lock+0xb6/0x1e0 [ 105.590614][ T1345] ? wait_for_completion_killable_timeout+0x10/0x10 [ 105.597045][ T1345] ? __fdget_pos+0x2e7/0x3a0 [ 105.601467][ T1345] ? ksys_read+0x77/0x2c0 [ 105.605632][ T1345] ksys_read+0x199/0x2c0 [ 105.609711][ T1345] ? vfs_write+0x1110/0x1110 [ 105.614135][ T1345] ? debug_smp_processor_id+0x17/0x20 [ 105.619351][ T1345] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 105.625246][ T1345] __x64_sys_read+0x7b/0x90 [ 105.629595][ T1345] x64_sys_call+0x28/0x9a0 [ 105.633838][ T1345] do_syscall_64+0x3b/0xb0 [ 105.638097][ T1345] ? clear_bhb_loop+0x35/0x90 [ 105.642611][ T1345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.648459][ T1345] RIP: 0033:0x7f5b2c9f015c [ 105.652689][ T1345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 105.672112][ T1345] RSP: 002b:00007f5b2b66a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.680356][ T1345] RAX: ffffffffffffffda RBX: 00007f5b2cba8f80 RCX: 00007f5b2c9f015c [ 105.688169][ T1345] RDX: 000000000000000f RSI: 00007f5b2b66a0a0 RDI: 0000000000000004 [ 105.695987][ T1345] RBP: 00007f5b2b66a090 R08: 0000000000000000 R09: 0000000000000000 [ 105.703789][ T1345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.711605][ T1345] R13: 0000000000000000 R14: 00007f5b2cba8f80 R15: 00007ffddfef09d8 [ 105.719421][ T1345] [ 105.832462][ T302] usb 3-1: USB disconnect, device number 10 [ 105.840484][ T39] usb 5-1: USB disconnect, device number 8 [ 106.043390][ T1370] device syzkaller0 entered promiscuous mode [ 106.474426][ T1384] loop4: detected capacity change from 0 to 128 [ 106.474728][ T1385] 9pnet: Insufficient options for proto=fd [ 106.558745][ T1384] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 106.733300][ T1395] loop2: detected capacity change from 0 to 512 [ 107.069057][ T1395] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 107.384734][ T1395] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.277: invalid indirect mapped block 1 (level 1) [ 107.438325][ T1395] EXT4-fs (loop2): 1 truncate cleaned up [ 107.453970][ T1395] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.577479][ T1410] loop0: detected capacity change from 0 to 16 [ 107.628885][ T1410] erofs: (device loop0): mounted with root inode @ nid 36. [ 107.652798][ T369] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 107.909952][ T1418] loop4: detected capacity change from 0 to 512 [ 108.049366][ T1418] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 108.079177][ T1418] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.281: invalid indirect mapped block 1 (level 1) [ 108.197543][ T1418] EXT4-fs (loop4): 1 truncate cleaned up [ 108.225495][ T1418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.396049][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 108.396068][ T30] audit: type=1326 audit(1731237577.443:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1409 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 108.535395][ T30] audit: type=1326 audit(1731237577.443:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1409 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7ce0719 code=0x7ffc0000 [ 108.817640][ T1414] loop1: detected capacity change from 0 to 1024 [ 108.930447][ T1414] EXT4-fs (loop1): Ignoring removed orlov option [ 108.947639][ T1414] EXT4-fs (loop1): Ignoring removed oldalloc option [ 108.954717][ T1414] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.977910][ T1414] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 109.000134][ T1414] EXT4-fs (loop1): invalid journal inode [ 109.079262][ T30] audit: type=1400 audit(1731237577.973:846): avc: denied { mounton } for pid=1413 comm="syz.1.283" path="/65/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 109.103825][ T1414] EXT4-fs (loop1): can't get journal size [ 109.270114][ T1414] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 109.522390][ T1438] loop4: detected capacity change from 0 to 512 [ 109.560522][ T1414] loop1: detected capacity change from 0 to 512 [ 109.592385][ T1438] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 109.607510][ T1438] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.287: invalid indirect mapped block 1 (level 1) [ 109.621178][ T1438] EXT4-fs (loop4): 1 truncate cleaned up [ 109.628873][ T1414] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #3: comm syz.1.283: corrupted inode contents [ 109.640443][ T1438] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.651306][ T1414] EXT4-fs error (device loop1): ext4_dirty_inode:6038: inode #3: comm syz.1.283: mark_inode_dirty error [ 109.753212][ T1414] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #3: comm syz.1.283: corrupted inode contents [ 110.942478][ T1414] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.283: mark_inode_dirty error [ 110.957322][ T1451] loop0: detected capacity change from 0 to 512 [ 110.983894][ T1414] Quota error (device loop1): write_blk: dquota write failed [ 111.002655][ T1449] loop3: detected capacity change from 0 to 512 [ 111.018359][ T1414] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 111.032800][ T1414] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.283: Failed to acquire dquot type 0 [ 111.069750][ T1449] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 111.092864][ T1451] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 111.114496][ T1414] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.283: corrupted inode contents [ 111.138349][ T1451] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.290: invalid indirect mapped block 1 (level 1) [ 111.151379][ T1449] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.289: invalid indirect mapped block 1 (level 1) [ 111.164611][ T1449] EXT4-fs (loop3): 1 truncate cleaned up [ 111.170578][ T1449] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.177197][ T1414] EXT4-fs error (device loop1): ext4_dirty_inode:6038: inode #16: comm syz.1.283: mark_inode_dirty error [ 111.200297][ T1451] EXT4-fs (loop0): 1 truncate cleaned up [ 111.205779][ T1451] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.238347][ T1414] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.283: corrupted inode contents [ 111.258492][ T1414] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.283: mark_inode_dirty error [ 111.298331][ T1414] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.283: corrupted inode contents [ 111.322663][ T1414] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 111.364632][ T1414] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.283: corrupted inode contents [ 111.388472][ T1414] EXT4-fs error (device loop1): ext4_truncate:4303: inode #16: comm syz.1.283: mark_inode_dirty error [ 111.408490][ T1414] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 111.610622][ T1414] EXT4-fs (loop1): 1 truncate cleaned up [ 111.616429][ T1414] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.699001][ T1414] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038 (0x7fffffff) [ 112.025916][ T1414] syz.1.283 (1414) used greatest stack depth: 19616 bytes left [ 112.056483][ T30] audit: type=1326 audit(1731237581.103:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1459 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 112.183824][ T30] audit: type=1326 audit(1731237581.163:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1459 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 112.277770][ T30] audit: type=1326 audit(1731237581.163:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1459 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 112.302464][ T30] audit: type=1326 audit(1731237581.163:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1459 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 112.325867][ T30] audit: type=1326 audit(1731237581.163:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1459 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 112.905341][ T1471] loop0: detected capacity change from 0 to 512 [ 112.912952][ T1472] loop1: detected capacity change from 0 to 512 [ 112.979114][ T1472] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 112.993872][ T1472] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.293: invalid indirect mapped block 1 (level 1) [ 113.009626][ T1471] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 113.024902][ T1472] EXT4-fs (loop1): 1 truncate cleaned up [ 113.035751][ T1472] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.067199][ T1471] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.291: invalid indirect mapped block 1 (level 1) [ 113.190760][ T1471] EXT4-fs (loop0): 1 truncate cleaned up [ 113.201000][ T1471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.747276][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 115.747292][ T30] audit: type=1400 audit(1731237584.793:876): avc: denied { name_bind } for pid=1487 comm="syz.3.299" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 115.819444][ T1490] tipc: Trying to set illegal importance in message [ 115.995446][ T1497] loop1: detected capacity change from 0 to 512 [ 116.080501][ T1497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.091641][ T1497] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038 (0x7fffffff) [ 116.119960][ T1497] xt_hashlimit: size too large, truncated to 1048576 [ 116.180978][ T30] audit: type=1326 audit(1731237585.233:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e5531719 code=0x7ffc0000 [ 116.207100][ T1500] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 116.218294][ T6] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 116.233327][ T30] audit: type=1326 audit(1731237585.253:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e5531719 code=0x7ffc0000 [ 116.265067][ T1504] loop2: detected capacity change from 0 to 512 [ 116.307997][ T30] audit: type=1326 audit(1731237585.253:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f53e5531719 code=0x7ffc0000 [ 116.354925][ T30] audit: type=1326 audit(1731237585.253:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e5531719 code=0x7ffc0000 [ 116.385992][ T1504] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 116.412149][ T1504] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.303: invalid indirect mapped block 1 (level 1) [ 116.431618][ T30] audit: type=1326 audit(1731237585.253:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e5531719 code=0x7ffc0000 [ 116.462776][ T1504] EXT4-fs (loop2): 1 truncate cleaned up [ 116.473737][ T1504] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.509678][ T30] audit: type=1326 audit(1731237585.253:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e5533637 code=0x7ffc0000 [ 116.594732][ T30] audit: type=1326 audit(1731237585.253:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e5531719 code=0x7ffc0000 [ 116.629333][ T1508] loop3: detected capacity change from 0 to 512 [ 116.635602][ T30] audit: type=1326 audit(1731237585.253:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e5531719 code=0x7ffc0000 [ 116.659201][ T30] audit: type=1326 audit(1731237585.253:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e5531719 code=0x7ffc0000 [ 117.396650][ T1514] loop4: detected capacity change from 0 to 512 [ 117.413626][ T1508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 117.461081][ T1508] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.304: invalid indirect mapped block 1 (level 1) [ 117.494838][ T1508] EXT4-fs (loop3): 1 truncate cleaned up [ 117.509942][ T1508] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.521811][ T1514] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 117.568396][ T1514] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.305: invalid indirect mapped block 1 (level 1) [ 117.684417][ T1514] EXT4-fs (loop4): 1 truncate cleaned up [ 117.694185][ T1514] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.203559][ T1502] loop0: detected capacity change from 0 to 131072 [ 119.543992][ T1528] loop3: detected capacity change from 0 to 16 [ 119.550639][ T594] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 119.574037][ T594] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.580851][ T1532] loop4: detected capacity change from 0 to 1024 [ 119.608156][ T1534] loop2: detected capacity change from 0 to 1024 [ 119.640972][ T1532] EXT4-fs (loop4): Unrecognized mount option "euid<18446744073709551615" or missing value [ 119.653567][ T1528] erofs: (device loop3): mounted with root inode @ nid 36. [ 119.670751][ T1528] attempt to access beyond end of device [ 119.670751][ T1528] loop3: rw=0, want=24, limit=16 [ 119.682550][ T1534] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.687477][ T1528] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 119.708884][ T1528] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 119.717993][ T1528] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 119.727533][ T1528] attempt to access beyond end of device [ 119.727533][ T1528] loop3: rw=524288, want=392, limit=16 [ 119.738903][ T1528] attempt to access beyond end of device [ 119.738903][ T1528] loop3: rw=524288, want=400, limit=16 [ 119.750399][ T1528] attempt to access beyond end of device [ 119.750399][ T1528] loop3: rw=524288, want=32, limit=16 [ 119.761714][ T1528] attempt to access beyond end of device [ 119.761714][ T1528] loop3: rw=524288, want=736, limit=16 [ 119.782158][ T1528] attempt to access beyond end of device [ 119.782158][ T1528] loop3: rw=524288, want=744, limit=16 [ 119.911084][ T60] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.046428][ T1540] loop3: detected capacity change from 0 to 512 [ 120.158649][ T1540] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 120.173748][ T1540] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.312: invalid indirect mapped block 1 (level 1) [ 120.188185][ T1540] EXT4-fs (loop3): 1 truncate cleaned up [ 120.193786][ T1540] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.318491][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 121.508341][ T6] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 121.518430][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.530339][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.540452][ T60] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 121.549818][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.721538][ T60] usb 1-1: config 0 descriptor?? [ 121.849277][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 121.859219][ T370] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.110359][ T6] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 122.136312][ T6] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 122.148389][ T6] usb 3-1: config 135 has no interface number 0 [ 122.155128][ T6] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.369825][ T370] usb 2-1: Using ep0 maxpacket: 16 [ 122.488362][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.499135][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.509113][ T370] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.521854][ T370] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.530726][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.538645][ T6] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 122.543176][ T370] usb 2-1: config 0 descriptor?? [ 122.547620][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.560338][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 122.566138][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 122.573039][ T60] usb 1-1: USB disconnect, device number 8 [ 122.578716][ T6] usb 3-1: Product: syz [ 122.582723][ T6] usb 3-1: Manufacturer: syz [ 122.587650][ T6] usb 3-1: SerialNumber: syz [ 122.618460][ T6] usb 3-1: can't set config #135, error -71 [ 122.625115][ T6] usb 3-1: USB disconnect, device number 12 [ 122.688265][ T350] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.881111][ T1550] UDC core: couldn't find an available UDC or it's busy: -16 [ 122.888993][ T1550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.922565][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 122.922590][ T30] audit: type=1400 audit(1731237591.973:905): avc: denied { listen } for pid=1549 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.048347][ T370] usbhid 2-1:0.0: can't add hid device: -71 [ 123.054326][ T370] usbhid: probe of 2-1:0.0 failed with error -71 [ 123.118848][ T370] usb 2-1: USB disconnect, device number 7 [ 123.258468][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.269325][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.279157][ T350] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 123.288097][ T350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.298725][ T350] usb 4-1: config 0 descriptor?? [ 124.257573][ T1571] loop4: detected capacity change from 0 to 512 [ 124.327804][ T1571] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 124.347689][ T1571] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.320: invalid indirect mapped block 1 (level 1) [ 124.361220][ T1571] EXT4-fs (loop4): 1 truncate cleaned up [ 124.366709][ T1571] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.427222][ T1587] loop2: detected capacity change from 0 to 512 [ 126.788568][ T1587] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 126.806117][ T1587] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.323: invalid indirect mapped block 1 (level 1) [ 126.820176][ T1587] EXT4-fs (loop2): 1 truncate cleaned up [ 126.825714][ T1587] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.604209][ T30] audit: type=1326 audit(1731237596.653:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 127.685736][ T30] audit: type=1326 audit(1731237596.683:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 127.752424][ T1608] loop1: detected capacity change from 0 to 512 [ 127.785516][ T30] audit: type=1326 audit(1731237596.683:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 127.828460][ T1610] loop0: detected capacity change from 0 to 16 [ 127.855448][ T30] audit: type=1326 audit(1731237596.683:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 127.879766][ T30] audit: type=1326 audit(1731237596.683:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 127.905491][ T1608] EXT4-fs (loop1): 1 orphan inode deleted [ 127.919620][ T1610] erofs: (device loop0): mounted with root inode @ nid 36. [ 127.938369][ T1608] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 127.964053][ T1610] attempt to access beyond end of device [ 127.964053][ T1610] loop0: rw=0, want=24, limit=16 [ 128.025135][ T30] audit: type=1326 audit(1731237596.683:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.043214][ T350] usbhid 4-1:0.0: can't add hid device: -71 [ 128.055633][ T350] usbhid: probe of 4-1:0.0 failed with error -71 [ 128.056029][ T1610] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 128.063000][ T350] usb 4-1: USB disconnect, device number 8 [ 128.083063][ T1608] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038 (0x7fffffff) [ 128.092978][ T1610] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 128.163784][ T1610] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 128.171870][ T30] audit: type=1326 audit(1731237596.683:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.196196][ T30] audit: type=1326 audit(1731237596.683:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.204944][ T1608] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #18: comm syz.1.327: corrupted xattr block 37 [ 128.219443][ T30] audit: type=1326 audit(1731237596.683:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.254183][ T30] audit: type=1326 audit(1731237596.683:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.259148][ T1610] attempt to access beyond end of device [ 128.259148][ T1610] loop0: rw=524288, want=392, limit=16 [ 128.277192][ T30] audit: type=1326 audit(1731237596.683:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.312487][ T1608] EXT4-fs (loop1): Remounting filesystem read-only [ 128.355690][ T1610] attempt to access beyond end of device [ 128.355690][ T1610] loop0: rw=524288, want=400, limit=16 [ 128.568913][ T30] audit: type=1326 audit(1731237596.683:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.592226][ T1610] attempt to access beyond end of device [ 128.592226][ T1610] loop0: rw=524288, want=32, limit=16 [ 128.603110][ T30] audit: type=1326 audit(1731237596.683:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.648815][ T1610] attempt to access beyond end of device [ 128.648815][ T1610] loop0: rw=524288, want=736, limit=16 [ 128.673594][ T292] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 128.678510][ T30] audit: type=1326 audit(1731237596.683:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.710711][ T1610] attempt to access beyond end of device [ 128.710711][ T1610] loop0: rw=524288, want=744, limit=16 [ 128.721900][ T30] audit: type=1326 audit(1731237596.683:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 128.777442][ T1622] loop0: detected capacity change from 0 to 16 [ 128.788276][ T350] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.839118][ T1622] erofs: (device loop0): mounted with root inode @ nid 36. [ 128.855457][ T1622] attempt to access beyond end of device [ 128.855457][ T1622] loop0: rw=0, want=24, limit=16 [ 128.873878][ T1622] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 128.882880][ T1622] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 128.892399][ T1622] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 128.902059][ T1622] attempt to access beyond end of device [ 128.902059][ T1622] loop0: rw=524288, want=392, limit=16 [ 128.913298][ T1622] attempt to access beyond end of device [ 128.913298][ T1622] loop0: rw=524288, want=400, limit=16 [ 128.924309][ T1622] attempt to access beyond end of device [ 128.924309][ T1622] loop0: rw=524288, want=32, limit=16 [ 129.010473][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.022318][ T1632] loop0: detected capacity change from 0 to 512 [ 129.028693][ T350] usb 4-1: Using ep0 maxpacket: 16 [ 129.033724][ T1625] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.054859][ T370] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.062956][ T1625] device bridge_slave_0 entered promiscuous mode [ 129.069915][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.076774][ T1625] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.084378][ T1625] device bridge_slave_1 entered promiscuous mode [ 129.101876][ T1632] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 129.116637][ T1632] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.335: invalid indirect mapped block 1 (level 1) [ 129.130033][ T1632] EXT4-fs (loop0): 1 truncate cleaned up [ 129.135608][ T1632] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.158417][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.175440][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.194477][ T350] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 129.215986][ T350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.230901][ T350] usb 4-1: config 0 descriptor?? [ 129.237943][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.244811][ T1625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.251955][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.258836][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.462636][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.476156][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.519535][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.588571][ T370] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 129.625170][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 129.679720][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.691303][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.701405][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 129.754907][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.775410][ T370] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.792069][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.807905][ T369] device bridge_slave_1 left promiscuous mode [ 129.816427][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.026105][ T370] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.048924][ T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.069914][ T369] device bridge_slave_0 left promiscuous mode [ 130.075915][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.086617][ T370] usb 5-1: config 0 descriptor?? [ 130.099464][ T369] device veth1_macvtap left promiscuous mode [ 130.115524][ T369] device veth0_vlan left promiscuous mode [ 130.121235][ T1619] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 130.268079][ T1645] loop0: detected capacity change from 0 to 256 [ 130.280939][ T1645] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 130.287734][ T1625] device veth0_vlan entered promiscuous mode [ 130.301114][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.309995][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.318783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.326684][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.340478][ T1625] device veth1_macvtap entered promiscuous mode [ 130.349148][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.356453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.363950][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.372805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.381252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.448417][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.459748][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.468310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.476534][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.603150][ T370] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 130.608330][ T350] usbhid 4-1:0.0: can't add hid device: -71 [ 130.616437][ T350] usbhid: probe of 4-1:0.0 failed with error -71 [ 130.638048][ T350] usb 4-1: USB disconnect, device number 9 [ 130.640710][ T370] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 130.709110][ T370] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 131.004025][ T350] usb 5-1: USB disconnect, device number 9 [ 131.205506][ T1658] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 131.251377][ T1658] loop3: detected capacity change from 0 to 512 [ 131.268469][ T1658] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.275087][ T1658] EXT4-fs (loop3): inodes count not valid: 31 vs 32 [ 131.297807][ T1661] loop2: detected capacity change from 0 to 2048 [ 131.316117][ T1665] loop0: detected capacity change from 0 to 16 [ 131.330144][ T1665] erofs: (device loop0): mounted with root inode @ nid 36. [ 131.367481][ T1665] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 131.381206][ T1661] loop2: p1 < > p4 [ 131.386267][ T1658] loop3: detected capacity change from 0 to 512 [ 131.388701][ T1661] loop2: p4 size 8388608 extends beyond EOD, truncated [ 131.393355][ T1665] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 131.410149][ T1665] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 131.431721][ T101] loop2: p1 < > p4 [ 131.432229][ T1658] EXT4-fs (loop3): 1 orphan inode deleted [ 131.436045][ T101] loop2: p4 size 8388608 extends beyond EOD, [ 131.440959][ T1658] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,errors=continue,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 131.441247][ T101] truncated [ 131.447206][ T1658] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038 (0x7fffffff) [ 131.540546][ T101] loop2: p1 < > p4 [ 131.544737][ T101] loop2: p4 size 8388608 extends beyond EOD, truncated [ 131.548852][ T1674] loop0: detected capacity change from 0 to 2048 [ 131.611090][ T1677] loop2: detected capacity change from 0 to 16 [ 131.617262][ T1674] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 131.618499][ T350] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.638956][ T1677] erofs: (device loop2): mounted with root inode @ nid 36. [ 131.652296][ T317] udevd[317]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 131.656663][ T1677] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 131.663800][ T1371] udevd[1371]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 131.675913][ T1677] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 131.701499][ T1677] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 131.707307][ T317] udevd[317]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 131.726649][ T1371] udevd[1371]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 131.854299][ T856] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 131.871885][ T856] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.898352][ T350] usb 5-1: Using ep0 maxpacket: 8 [ 131.978394][ T594] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 132.076857][ T1690] loop0: detected capacity change from 0 to 256 [ 132.098501][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 132.109658][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 132.116654][ T1690] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 132.247406][ T1692] loop0: detected capacity change from 0 to 128 [ 132.258418][ T594] usb 4-1: Using ep0 maxpacket: 16 [ 132.305439][ T1692] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 132.368408][ T350] usb 5-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 132.383227][ T350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.398414][ T594] usb 4-1: config 0 has no interfaces? [ 132.422076][ T350] usb 5-1: config 0 descriptor?? [ 132.468438][ T350] usb 5-1: can't set config #0, error -71 [ 132.493464][ T350] usb 5-1: USB disconnect, device number 10 [ 132.642536][ T594] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 132.671049][ T594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.699209][ T594] usb 4-1: Product: syz [ 132.718623][ T594] usb 4-1: Manufacturer: syz [ 132.737524][ T1700] loop2: detected capacity change from 0 to 128 [ 132.754262][ T1698] loop5: detected capacity change from 0 to 1024 [ 132.768569][ T594] usb 4-1: SerialNumber: syz [ 132.782617][ T594] usb 4-1: config 0 descriptor?? [ 132.839708][ T1698] EXT4-fs (loop5): Test dummy encryption mode enabled [ 132.850747][ T1698] EXT4-fs (loop5): Can't change test_dummy_encryption on remount [ 132.889985][ T10] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 132.899455][ T1700] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.915792][ T1700] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 132.950459][ T1700] syz.2.353 (pid 1700) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 133.218440][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 133.218503][ T30] audit: type=1400 audit(1731237602.193:979): avc: denied { write } for pid=1697 comm="syz.5.352" name="/" dev="9p" ino=639950127194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.389164][ T30] audit: type=1400 audit(1731237602.193:980): avc: denied { add_name } for pid=1697 comm="syz.5.352" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.421900][ T30] audit: type=1400 audit(1731237602.193:981): avc: denied { create } for pid=1697 comm="syz.5.352" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 133.442545][ T30] audit: type=1400 audit(1731237602.193:982): avc: denied { associate } for pid=1697 comm="syz.5.352" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 133.458318][ T350] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 133.540226][ T1713] loop4: detected capacity change from 0 to 16 [ 133.658602][ T1713] erofs: (device loop4): mounted with root inode @ nid 36. [ 133.683425][ T1713] handle_bad_sector: 15 callbacks suppressed [ 133.683448][ T1713] attempt to access beyond end of device [ 133.683448][ T1713] loop4: rw=0, want=24, limit=16 [ 133.727195][ T1716] attempt to access beyond end of device [ 133.727195][ T1716] loop4: rw=0, want=24, limit=16 [ 133.728289][ T350] usb 3-1: Using ep0 maxpacket: 8 [ 133.747971][ T1713] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 133.774503][ T1713] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 133.798469][ T1713] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 133.822586][ T1713] attempt to access beyond end of device [ 133.822586][ T1713] loop4: rw=524288, want=392, limit=16 [ 133.850873][ T1713] attempt to access beyond end of device [ 133.850873][ T1713] loop4: rw=524288, want=400, limit=16 [ 133.872096][ T1713] attempt to access beyond end of device [ 133.872096][ T1713] loop4: rw=524288, want=32, limit=16 [ 133.883025][ T350] usb 3-1: config 1 interface 0 has no altsetting 0 [ 133.898367][ T1713] attempt to access beyond end of device [ 133.898367][ T1713] loop4: rw=524288, want=736, limit=16 [ 133.951527][ T1713] attempt to access beyond end of device [ 133.951527][ T1713] loop4: rw=524288, want=744, limit=16 [ 134.000781][ T506] usb 4-1: USB disconnect, device number 10 [ 134.068340][ T350] usb 3-1: New USB device found, idVendor=0603, idProduct=0600, bcdDevice= 0.40 [ 134.087437][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.117743][ T350] usb 3-1: Product: Ⰺ [ 134.137961][ T350] usb 3-1: Manufacturer: 贠괟싙밾㙿袌椯굅禍瞜䁧긢鼯腎픟ꚯ⅟语꠵벿逸槨深㼎♆⧪ොꈲ㱪䗫枓預漭蛔䁿㚺뽏嵭ﳨ譌᧲ヨ﷍웫需狧ꋏ๰㭊掣즶敔확㦻醖㪘漍炊˘剶䃉ꔟ㫥栺얾쥔摯壥䢡ѱ㇄龂琵ᢐ鯽↞㟮溧齀로戇俼縴뙏㢞대雈燪뻜ꬶ஬쓶褽鱨齛幎㭳䜾⣙睍殞澀仺만 [ 134.340565][ T350] usb 3-1: SerialNumber: ⇶غ敿א풆ゞ逃洯퇚槏ꅌ㠃ᝲ﬽뎇멈槰鿹ﳧ璩컠첻吡踧䖖竚雒ꇉ咕븒竹᯳鉿㜟職咧冗 [ 134.358656][ T30] audit: type=1400 audit(1731237603.413:983): avc: denied { create } for pid=1726 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 134.628599][ T30] audit: type=1400 audit(1731237603.673:984): avc: denied { ioctl } for pid=1699 comm="syz.2.353" path="socket:[19265]" dev="sockfs" ino=19265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.730419][ T30] audit: type=1400 audit(1731237603.753:985): avc: denied { connect } for pid=1699 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.827961][ T1732] 9pnet: Insufficient options for proto=fd [ 134.912634][ T1734] loop3: detected capacity change from 0 to 512 [ 135.053039][ T1734] EXT4-fs error (device loop3): ext4_get_journal_inode:5150: comm syz.3.362: inode #1: comm syz.3.362: iget: illegal inode # [ 135.053153][ T30] audit: type=1326 audit(1731237604.103:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.5.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1066395719 code=0x0 [ 135.088306][ T350] usbhid 3-1:1.0: can't add hid device: -71 [ 135.088369][ T350] usbhid: probe of 3-1:1.0 failed with error -71 [ 135.100462][ T1734] EXT4-fs (loop3): Remounting filesystem read-only [ 135.221891][ T30] audit: type=1326 audit(1731237604.273:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.5.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1066395719 code=0x0 [ 135.245131][ T1734] EXT4-fs (loop3): no journal found [ 135.253507][ T1734] EXT4-fs (loop3): can't get journal size [ 135.380174][ T350] usb 3-1: USB disconnect, device number 13 [ 135.392047][ T1743] loop0: detected capacity change from 0 to 16 [ 135.420724][ T1734] EXT4-fs (loop3): failed to initialize system zone (-22) [ 135.429879][ T1734] EXT4-fs (loop3): mount failed [ 135.444514][ T1746] loop5: detected capacity change from 0 to 512 [ 135.470118][ T1746] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 135.490605][ T1751] loop0: detected capacity change from 0 to 128 [ 135.494620][ T1746] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.367: invalid indirect mapped block 1 (level 1) [ 135.519229][ T1746] EXT4-fs (loop5): 1 truncate cleaned up [ 135.530134][ T1746] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.581289][ T1751] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 135.608760][ T1753] loop3: detected capacity change from 0 to 512 [ 135.685466][ T1753] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 135.718371][ T1753] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.368: invalid indirect mapped block 1 (level 1) [ 135.761269][ T1753] EXT4-fs (loop3): 1 truncate cleaned up [ 135.766835][ T1753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.094450][ T1759] loop4: detected capacity change from 0 to 512 [ 136.789691][ T1759] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 136.814253][ T1759] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.369: invalid indirect mapped block 1 (level 1) [ 136.837738][ T1759] EXT4-fs (loop4): 1 truncate cleaned up [ 136.847523][ T1759] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.938785][ T350] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 136.946276][ T369] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 136.992936][ T30] audit: type=1400 audit(1731237606.043:988): avc: denied { read } for pid=1763 comm="syz.5.371" dev="nsfs" ino=4026532738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 138.024806][ T856] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 138.148370][ T350] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 138.163390][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.174713][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.185617][ T1781] loop5: detected capacity change from 0 to 16 [ 138.198044][ T350] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 138.211431][ T350] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 138.220730][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.232714][ T350] usb 3-1: config 0 descriptor?? [ 138.298269][ T594] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.365666][ T1788] loop5: detected capacity change from 0 to 1024 [ 138.391958][ T1788] EXT4-fs (loop5): Unrecognized mount option "euid<18446744073709551615" or missing value [ 138.398488][ T856] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.412672][ T856] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.498358][ T856] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.517700][ T856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.536002][ T856] usb 4-1: SerialNumber: syz [ 138.618624][ T350] usbhid 3-1:0.0: can't add hid device: -71 [ 138.627249][ T350] usbhid: probe of 3-1:0.0 failed with error -71 [ 138.642339][ T350] usb 3-1: USB disconnect, device number 14 [ 138.658400][ T594] usb 1-1: Using ep0 maxpacket: 32 [ 138.828039][ T1767] UDC core: couldn't find an available UDC or it's busy: -16 [ 138.835386][ T1767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 138.978463][ T594] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 138.987842][ T594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.997060][ T594] usb 1-1: Product: syz [ 139.002021][ T594] usb 1-1: Manufacturer: syz [ 139.006740][ T594] usb 1-1: SerialNumber: syz [ 139.030305][ T594] usb 1-1: config 0 descriptor?? [ 139.081445][ T856] usb 4-1: 0:2 : does not exist [ 139.288740][ T1779] loop4: detected capacity change from 0 to 131072 [ 139.450243][ T1779] F2FS-fs (loop4): Test dummy encryption mode enabled [ 139.481995][ T1779] F2FS-fs (loop4): invalid crc value [ 139.552063][ T370] usb 4-1: USB disconnect, device number 11 [ 139.556742][ T1779] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.788453][ T594] (unnamed net_device) (uninitialized): Assigned a random MAC address: 46:44:ca:73:84:78 [ 139.837919][ T594] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 139.847290][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 139.847307][ T30] audit: type=1400 audit(1731237608.893:991): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 139.901005][ T594] usb 1-1: USB disconnect, device number 9 [ 139.912268][ T1779] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.944066][ T30] audit: type=1326 audit(1731237608.993:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 140.101024][ T30] audit: type=1326 audit(1731237608.993:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 140.125171][ T30] audit: type=1326 audit(1731237608.993:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 140.161923][ T30] audit: type=1326 audit(1731237608.993:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 140.299510][ T30] audit: type=1326 audit(1731237608.993:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 140.310210][ T1817] FAULT_INJECTION: forcing a failure. [ 140.310210][ T1817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.327970][ T30] audit: type=1326 audit(1731237608.993:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 140.365129][ T30] audit: type=1326 audit(1731237608.993:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 140.390120][ T30] audit: type=1326 audit(1731237608.993:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 140.415462][ T1817] CPU: 0 PID: 1817 Comm: syz.3.385 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 140.425365][ T1817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.430468][ T30] audit: type=1326 audit(1731237608.993:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2c9f1719 code=0x7ffc0000 [ 140.435260][ T1817] Call Trace: [ 140.435269][ T1817] [ 140.435276][ T1817] dump_stack_lvl+0x151/0x1c0 [ 140.469204][ T1817] ? io_uring_drop_tctx_refs+0x190/0x190 [ 140.474672][ T1817] ? arch_stack_walk+0xf3/0x140 [ 140.479353][ T1817] dump_stack+0x15/0x20 [ 140.483338][ T1817] should_fail+0x3c6/0x510 [ 140.487594][ T1817] should_fail_usercopy+0x1a/0x20 [ 140.492452][ T1817] _copy_from_user+0x20/0xd0 [ 140.496878][ T1817] __copy_msghdr_from_user+0xaf/0x7c0 [ 140.502087][ T1817] ? __stack_depot_save+0x34/0x470 [ 140.507034][ T1817] ? __ia32_sys_shutdown+0x70/0x70 [ 140.511979][ T1817] ? kmem_cache_free+0x116/0x2e0 [ 140.516755][ T1817] ? __kasan_slab_free+0x11/0x20 [ 140.521526][ T1817] ? slab_free_freelist_hook+0xbd/0x190 [ 140.526908][ T1817] ? kmem_cache_free+0x116/0x2e0 [ 140.531693][ T1817] ? putname+0xfa/0x150 [ 140.535670][ T1817] ? do_sys_openat2+0x1fc/0x820 [ 140.540360][ T1817] ___sys_sendmsg+0x166/0x2e0 [ 140.544873][ T1817] ? __sys_sendmsg+0x260/0x260 [ 140.549478][ T1817] ? __kasan_check_write+0x14/0x20 [ 140.554418][ T1817] ? proc_fail_nth_write+0x20b/0x290 [ 140.559542][ T1817] ? __fdget+0x1bc/0x240 [ 140.563620][ T1817] __sys_sendmmsg+0x2bf/0x530 [ 140.568135][ T1817] ? __ia32_sys_sendmsg+0x90/0x90 [ 140.572992][ T1817] ? mutex_unlock+0xb2/0x260 [ 140.577423][ T1817] ? __kasan_check_write+0x14/0x20 [ 140.582370][ T1817] ? __ia32_sys_read+0x90/0x90 [ 140.586970][ T1817] ? debug_smp_processor_id+0x17/0x20 [ 140.592174][ T1817] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 140.598077][ T1817] __x64_sys_sendmmsg+0xa0/0xb0 [ 140.602763][ T1817] x64_sys_call+0x81d/0x9a0 [ 140.607102][ T1817] do_syscall_64+0x3b/0xb0 [ 140.611359][ T1817] ? clear_bhb_loop+0x35/0x90 [ 140.615869][ T1817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.621597][ T1817] RIP: 0033:0x7f5f4e376719 [ 140.625853][ T1817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.645291][ T1817] RSP: 002b:00007f5f4cfef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.653538][ T1817] RAX: ffffffffffffffda RBX: 00007f5f4e52df80 RCX: 00007f5f4e376719 [ 140.661349][ T1817] RDX: 0000000000000001 RSI: 0000000020003240 RDI: 0000000000000003 [ 140.669158][ T1817] RBP: 00007f5f4cfef090 R08: 0000000000000000 R09: 0000000000000000 [ 140.676976][ T1817] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 140.684780][ T1817] R13: 0000000000000000 R14: 00007f5f4e52df80 R15: 00007fffc7931688 [ 140.692599][ T1817] [ 140.841345][ T1837] loop3: detected capacity change from 0 to 512 [ 140.860650][ T1837] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000200000,minixdf,,errors=continue. Quota mode: writeback. [ 140.880520][ T1837] ext4 filesystem being mounted at /68/bus supports timestamps until 2038 (0x7fffffff) [ 140.914837][ T1837] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.388: bg 0: block 128: padding at end of block bitmap is not set [ 140.996882][ T1851] loop2: detected capacity change from 0 to 16 [ 141.023301][ T1848] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 141.045159][ T1779] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 141.058966][ T1851] erofs: (device loop2): mounted with root inode @ nid 36. [ 141.073739][ T1851] attempt to access beyond end of device [ 141.073739][ T1851] loop2: rw=0, want=24, limit=16 [ 141.097271][ T1851] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 141.106222][ T1861] attempt to access beyond end of device [ 141.106222][ T1861] loop2: rw=0, want=24, limit=16 [ 141.127922][ T1851] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 141.136955][ T1851] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 141.149250][ T1851] attempt to access beyond end of device [ 141.149250][ T1851] loop2: rw=524288, want=392, limit=16 [ 141.161802][ T1851] attempt to access beyond end of device [ 141.161802][ T1851] loop2: rw=524288, want=400, limit=16 [ 141.173366][ T1851] attempt to access beyond end of device [ 141.173366][ T1851] loop2: rw=524288, want=32, limit=16 [ 141.184581][ T1851] attempt to access beyond end of device [ 141.184581][ T1851] loop2: rw=524288, want=736, limit=16 [ 141.195867][ T1851] attempt to access beyond end of device [ 141.195867][ T1851] loop2: rw=524288, want=744, limit=16 [ 141.312825][ T1874] syz.2.396[1874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.312903][ T1874] syz.2.396[1874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.422903][ T1881] syz.2.397[1881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.434216][ T1880] loop5: detected capacity change from 0 to 256 [ 141.434623][ T1881] syz.2.397[1881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.455231][ T1883] FAULT_INJECTION: forcing a failure. [ 141.455231][ T1883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.483374][ T1883] CPU: 0 PID: 1883 Comm: syz.3.400 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 141.493270][ T1883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.503169][ T1883] Call Trace: [ 141.506292][ T1883] [ 141.509067][ T1883] dump_stack_lvl+0x151/0x1c0 [ 141.513581][ T1883] ? io_uring_drop_tctx_refs+0x190/0x190 [ 141.519049][ T1883] ? arch_stack_walk+0xf3/0x140 [ 141.523742][ T1883] dump_stack+0x15/0x20 [ 141.527909][ T1883] should_fail+0x3c6/0x510 [ 141.532159][ T1883] should_fail_usercopy+0x1a/0x20 [ 141.537018][ T1883] _copy_from_user+0x20/0xd0 [ 141.541444][ T1883] __copy_msghdr_from_user+0x587/0x7c0 [ 141.546737][ T1883] ? __ia32_sys_shutdown+0x70/0x70 [ 141.551683][ T1883] ? kmem_cache_free+0x116/0x2e0 [ 141.556459][ T1883] ? __kasan_slab_free+0x11/0x20 [ 141.560811][ T1887] loop4: detected capacity change from 0 to 512 [ 141.561226][ T1883] ? slab_free_freelist_hook+0xbd/0x190 [ 141.572682][ T1883] ? kmem_cache_free+0x116/0x2e0 [ 141.577458][ T1883] ? putname+0xfa/0x150 [ 141.581446][ T1883] ? do_sys_openat2+0x1fc/0x820 [ 141.586256][ T1883] ___sys_sendmsg+0x166/0x2e0 [ 141.590737][ T1883] ? __sys_sendmsg+0x260/0x260 [ 141.595339][ T1883] ? __kasan_check_write+0x14/0x20 [ 141.600293][ T1883] ? proc_fail_nth_write+0x20b/0x290 [ 141.605411][ T1883] ? __fdget+0x1bc/0x240 [ 141.609485][ T1883] __sys_sendmmsg+0x2bf/0x530 [ 141.613999][ T1883] ? __ia32_sys_sendmsg+0x90/0x90 [ 141.618854][ T1883] ? mutex_unlock+0xb2/0x260 [ 141.623285][ T1883] ? __kasan_check_write+0x14/0x20 [ 141.628235][ T1883] ? __ia32_sys_read+0x90/0x90 [ 141.632831][ T1883] ? debug_smp_processor_id+0x17/0x20 [ 141.638039][ T1883] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 141.643938][ T1883] __x64_sys_sendmmsg+0xa0/0xb0 [ 141.648624][ T1883] x64_sys_call+0x81d/0x9a0 [ 141.652966][ T1883] do_syscall_64+0x3b/0xb0 [ 141.657217][ T1883] ? clear_bhb_loop+0x35/0x90 [ 141.661732][ T1883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.667547][ T1883] RIP: 0033:0x7f5f4e376719 [ 141.671801][ T1883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.691242][ T1883] RSP: 002b:00007f5f4cfef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.699595][ T1883] RAX: ffffffffffffffda RBX: 00007f5f4e52df80 RCX: 00007f5f4e376719 [ 141.707409][ T1883] RDX: 0000000000000001 RSI: 0000000020003240 RDI: 0000000000000003 [ 141.715215][ T1883] RBP: 00007f5f4cfef090 R08: 0000000000000000 R09: 0000000000000000 [ 141.723029][ T1883] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 141.731019][ T1883] R13: 0000000000000000 R14: 00007f5f4e52df80 R15: 00007fffc7931688 [ 141.738973][ T1883] [ 141.755553][ T1887] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 141.770276][ T1887] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.391: invalid indirect mapped block 1 (level 1) [ 141.784146][ T1887] EXT4-fs (loop4): 1 truncate cleaned up [ 141.789670][ T1887] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.808308][ T325] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.985106][ T1896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 142.028314][ T506] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 142.178371][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.189183][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.199835][ T325] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 142.209305][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.237964][ T325] usb 1-1: config 0 descriptor?? [ 142.505943][ T1908] usb usb8: usbfs: process 1908 (syz.4.406) did not claim interface 0 before use [ 142.540525][ T1908] loop4: detected capacity change from 0 to 2048 [ 142.591904][ T506] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 142.599914][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 142.610923][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 142.611772][ T1908] loop4: p3 < > p4 < > [ 142.621851][ T506] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.621905][ T506] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.636217][ T1908] loop4: partition table partially beyond EOD, [ 142.639379][ T1911] loop5: detected capacity change from 0 to 16 [ 142.659721][ T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.667845][ T1908] truncated [ 142.671286][ T506] usb 4-1: config 0 descriptor?? [ 142.671834][ T1908] loop4: p3 start 4284289 is beyond EOD, truncated [ 142.688381][ T1890] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.714273][ T1911] erofs: (device loop5): mounted with root inode @ nid 36. [ 142.723784][ T1911] attempt to access beyond end of device [ 142.723784][ T1911] loop5: rw=0, want=24, limit=16 [ 142.739656][ T325] belkin 0003:1020:0006.0010: report_id 0 is invalid [ 142.746310][ T101] loop4: p3 < > p4 < > [ 142.750654][ T101] loop4: partition table partially beyond EOD, truncated [ 142.760523][ T1892] loop2: detected capacity change from 0 to 131072 [ 142.767074][ T325] belkin 0003:1020:0006.0010: item 0 0 1 8 parsing failed [ 142.768633][ T1912] attempt to access beyond end of device [ 142.768633][ T1912] loop5: rw=0, want=24, limit=16 [ 142.778385][ T101] loop4: p3 start 4284289 is beyond EOD, [ 142.788481][ T325] belkin 0003:1020:0006.0010: parse failed [ 142.789318][ T101] truncated [ 142.794058][ T325] belkin: probe of 0003:1020:0006.0010 failed with error -22 [ 142.819116][ T1892] F2FS-fs (loop2): Test dummy encryption mode enabled [ 142.827126][ T1892] F2FS-fs (loop2): invalid crc value [ 142.833998][ T1892] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.871656][ T1918] loop5: detected capacity change from 0 to 1024 [ 142.880072][ T1371] udevd[1371]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 142.900216][ T1918] EXT4-fs (loop5): Unrecognized mount option "euid<18446744073709551615" or missing value [ 142.995354][ T325] usb 1-1: USB disconnect, device number 10 [ 142.997568][ T1892] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.020419][ T1371] udevd[1371]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 143.211801][ T506] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 143.241323][ T506] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 143.277708][ T506] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 143.654340][ T1935] FAULT_INJECTION: forcing a failure. [ 143.654340][ T1935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.698178][ T1935] CPU: 1 PID: 1935 Comm: syz.0.411 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 143.708169][ T1935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.718063][ T1935] Call Trace: [ 143.721198][ T1935] [ 143.723965][ T1935] dump_stack_lvl+0x151/0x1c0 [ 143.728486][ T1935] ? io_uring_drop_tctx_refs+0x190/0x190 [ 143.733946][ T1935] ? release_firmware_map_entry+0x190/0x190 [ 143.739835][ T1935] dump_stack+0x15/0x20 [ 143.743832][ T1935] should_fail+0x3c6/0x510 [ 143.748072][ T1935] should_fail_usercopy+0x1a/0x20 [ 143.752940][ T1935] _copy_from_user+0x20/0xd0 [ 143.757358][ T1935] iovec_from_user+0xc7/0x330 [ 143.761872][ T1935] __import_iovec+0x6d/0x420 [ 143.766295][ T1935] ? __ia32_sys_shutdown+0x70/0x70 [ 143.771247][ T1935] import_iovec+0xe5/0x120 [ 143.775500][ T1935] ___sys_sendmsg+0x215/0x2e0 [ 143.780019][ T1935] ? __sys_sendmsg+0x260/0x260 [ 143.784613][ T1935] ? __kasan_check_write+0x14/0x20 [ 143.789558][ T1935] ? proc_fail_nth_write+0x20b/0x290 [ 143.794686][ T1935] ? __fdget+0x1bc/0x240 [ 143.798757][ T1935] __sys_sendmmsg+0x2bf/0x530 [ 143.803275][ T1935] ? __ia32_sys_sendmsg+0x90/0x90 [ 143.808129][ T1935] ? mutex_unlock+0xb2/0x260 [ 143.812556][ T1935] ? __kasan_check_write+0x14/0x20 [ 143.817512][ T1935] ? __kasan_check_write+0x14/0x20 [ 143.822452][ T1935] ? switch_fpu_return+0x15f/0x2e0 [ 143.827400][ T1935] __x64_sys_sendmmsg+0xa0/0xb0 [ 143.832086][ T1935] x64_sys_call+0x81d/0x9a0 [ 143.836423][ T1935] do_syscall_64+0x3b/0xb0 [ 143.840676][ T1935] ? clear_bhb_loop+0x35/0x90 [ 143.845192][ T1935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.850920][ T1935] RIP: 0033:0x7f50b7ce0719 [ 143.855172][ T1935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.874619][ T1935] RSP: 002b:00007f50b6959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.882859][ T1935] RAX: ffffffffffffffda RBX: 00007f50b7e97f80 RCX: 00007f50b7ce0719 [ 143.890668][ T1935] RDX: 0000000000000001 RSI: 0000000020003240 RDI: 0000000000000003 [ 143.898479][ T1935] RBP: 00007f50b6959090 R08: 0000000000000000 R09: 0000000000000000 [ 143.906295][ T1935] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 143.914106][ T1935] R13: 0000000000000000 R14: 00007f50b7e97f80 R15: 00007ffd495da608 [ 143.921918][ T1935] [ 144.115394][ T1938] device batadv_slave_0 entered promiscuous mode [ 144.304663][ T1933] loop4: detected capacity change from 0 to 40427 [ 144.379064][ T1933] F2FS-fs (loop4): Unrecognized mount option "0x0000000000000000" or missing value [ 144.398304][ T325] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.447145][ T1890] loop3: detected capacity change from 0 to 40427 [ 144.506116][ T1890] F2FS-fs (loop3): fault_injection options not supported [ 144.518297][ T1890] F2FS-fs (loop3): fault_type options not supported [ 144.537205][ T1890] F2FS-fs (loop3): invalid crc value [ 144.557620][ T1890] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.598091][ T1933] overlayfs: failed to resolve './file0': -2 [ 144.617732][ T1890] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.642587][ T1890] attempt to access beyond end of device [ 144.642587][ T1890] loop3: rw=2049, want=45104, limit=40427 [ 144.708296][ T520] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 144.768406][ T325] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 144.778183][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.794600][ T325] usb 1-1: config 0 descriptor?? [ 144.800421][ T1952] loop2: detected capacity change from 0 to 512 [ 144.811883][ T1952] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 144.827477][ T1952] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.417: invalid indirect mapped block 1 (level 1) [ 144.841190][ T325] usb-storage 1-1:0.0: USB Mass Storage device detected [ 144.848437][ T1952] EXT4-fs (loop2): 1 truncate cleaned up [ 144.854271][ T1952] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.953041][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 144.953058][ T30] audit: type=1326 audit(1731237614.003:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 144.985198][ T325] usb-storage 1-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 5.15.167-syzkaller-android13-5.15.167_r00) [ 144.985198][ T325] Please send a copy of this message to and [ 145.014174][ T30] audit: type=1326 audit(1731237614.033:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 145.070622][ T30] audit: type=1326 audit(1731237614.033:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 145.110609][ T30] audit: type=1326 audit(1731237614.033:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 145.134333][ T30] audit: type=1326 audit(1731237614.033:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 145.158086][ T30] audit: type=1326 audit(1731237614.033:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 145.218442][ T1938] UDC core: couldn't find an available UDC or it's busy: -16 [ 145.236037][ T30] audit: type=1326 audit(1731237614.033:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 145.266601][ T1938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 145.303494][ T1937] device batadv_slave_0 left promiscuous mode [ 145.362957][ T30] audit: type=1326 audit(1731237614.033:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 145.494077][ T30] audit: type=1326 audit(1731237614.033:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 145.638729][ T30] audit: type=1326 audit(1731237614.033:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f49ac539719 code=0x7ffc0000 [ 145.721662][ T325] usb 1-1: USB disconnect, device number 11 [ 145.739047][ T1965] loop2: detected capacity change from 0 to 512 [ 145.766230][ T1965] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 145.797171][ T1965] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.419: invalid indirect mapped block 1 (level 1) [ 145.820581][ T1965] EXT4-fs (loop2): 1 truncate cleaned up [ 145.826054][ T1965] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.851183][ T1968] loop4: detected capacity change from 0 to 512 [ 145.863042][ T1970] loop0: detected capacity change from 0 to 16 [ 145.939746][ T1974] loop3: detected capacity change from 0 to 512 [ 145.951179][ T1977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 145.951463][ T1968] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.959920][ T1977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.422'. [ 145.975094][ T1970] erofs: (device loop0): mounted with root inode @ nid 36. [ 145.979685][ T1977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.422'. [ 146.008817][ T1968] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038 (0x7fffffff) [ 146.392449][ T1968] xt_hashlimit: size too large, truncated to 1048576 [ 146.430710][ T1970] handle_bad_sector: 1 callbacks suppressed [ 146.430801][ T1970] attempt to access beyond end of device [ 146.430801][ T1970] loop0: rw=0, want=24, limit=16 [ 146.513406][ T1974] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 146.835679][ T1974] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.418: invalid indirect mapped block 1 (level 1) [ 146.861140][ T1981] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 146.868893][ T291] attempt to access beyond end of device [ 146.868893][ T291] loop0: rw=0, want=312, limit=16 [ 146.888621][ T1974] EXT4-fs (loop3): 1 truncate cleaned up [ 146.908016][ T1974] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.930529][ T291] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 146.970282][ T1977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1977 comm=syz.5.422 [ 146.988082][ T1983] attempt to access beyond end of device [ 146.988082][ T1983] loop0: rw=0, want=24, limit=16 [ 147.000230][ T856] usb 4-1: USB disconnect, device number 12 [ 147.007533][ T1977] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2304 sclass=netlink_xfrm_socket pid=1977 comm=syz.5.422 [ 147.148154][ T1988] loop2: detected capacity change from 0 to 256 [ 147.499594][ T291] syz-executor (291) used greatest stack depth: 18552 bytes left [ 147.604460][ T1988] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 147.810805][ T2006] loop2: detected capacity change from 0 to 512 [ 147.896395][ T2006] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 147.922967][ T2006] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.433: invalid indirect mapped block 1 (level 1) [ 147.950174][ T2004] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.957511][ T2006] EXT4-fs (loop2): 1 truncate cleaned up [ 147.963518][ T2004] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.973389][ T2006] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.984695][ T2004] device bridge_slave_0 entered promiscuous mode [ 148.006008][ T2013] overlayfs: missing 'workdir' [ 148.021927][ T2004] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.050203][ T2004] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.077865][ T2004] device bridge_slave_1 entered promiscuous mode [ 148.220276][ T8] device bridge_slave_1 left promiscuous mode [ 148.227321][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.268739][ T8] device bridge_slave_0 left promiscuous mode [ 148.309011][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.362555][ T8] device veth1_macvtap left promiscuous mode [ 148.401367][ T8] device veth0_vlan left promiscuous mode [ 148.498338][ T856] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 148.833250][ T26] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 148.841723][ T26] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.865991][ T2034] loop2: detected capacity change from 0 to 512 [ 148.903104][ T2034] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 148.912531][ T856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.929873][ T2034] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.440: invalid indirect mapped block 4294967295 (level 1) [ 148.944987][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.952643][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.960387][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.967836][ T2034] EXT4-fs (loop2): Remounting filesystem read-only [ 148.975610][ T2034] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.440: invalid indirect mapped block 4294967295 (level 1) [ 148.975755][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.990094][ T2034] EXT4-fs (loop2): 2 truncates cleaned up [ 149.003224][ T2034] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,jqfmt=vfsv0,. Quota mode: writeback. [ 149.047241][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.054250][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.061581][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.070475][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.079346][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.086208][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.093520][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.124184][ T2044] loop4: detected capacity change from 0 to 256 [ 149.131991][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.139812][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.149660][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.158303][ T856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.315282][ T2044] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 149.476922][ T2004] device veth0_vlan entered promiscuous mode [ 149.483169][ T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.491379][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.499480][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.506980][ T856] usb 4-1: Product: syz [ 149.512874][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.520162][ T856] usb 4-1: Manufacturer: syz [ 149.523397][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.524922][ T856] usb 4-1: SerialNumber: syz [ 149.543017][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.551111][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.560560][ T2004] device veth1_macvtap entered promiscuous mode [ 149.587000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.602787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.611042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.623875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.634578][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.681963][ T2056] loop6: detected capacity change from 0 to 512 [ 149.706007][ T2056] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 149.722207][ T2056] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.430: invalid indirect mapped block 1 (level 1) [ 149.735612][ T2056] EXT4-fs (loop6): 1 truncate cleaned up [ 149.741659][ T2056] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.858376][ T2060] loop4: detected capacity change from 0 to 16 [ 150.075570][ T2063] loop5: detected capacity change from 0 to 512 [ 150.132501][ T2060] erofs: (device loop4): mounted with root inode @ nid 36. [ 150.263939][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 150.263964][ T30] audit: type=1400 audit(1731237619.313:1128): avc: denied { execute } for pid=2053 comm="syz.4.446" name="file1" dev="loop4" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.300556][ T2063] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 150.353509][ T2063] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.447: invalid indirect mapped block 1 (level 1) [ 150.413225][ T30] audit: type=1400 audit(1731237619.393:1129): avc: denied { execute_no_trans } for pid=2053 comm="syz.4.446" path="/88/file1/file1" dev="loop4" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.449041][ T2063] EXT4-fs (loop5): 1 truncate cleaned up [ 150.475767][ T2063] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.840899][ T325] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 151.068381][ T856] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 151.084863][ T856] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 151.115175][ T856] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 151.238343][ T325] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 151.246297][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 151.314973][ T856] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 151.332936][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 151.362243][ T856] usb 4-1: USB disconnect, device number 13 [ 151.379429][ T325] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.395650][ T325] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.404724][ T2080] loop3: detected capacity change from 0 to 512 [ 151.426094][ T856] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 151.450410][ T30] audit: type=1400 audit(1731237620.503:1130): avc: denied { mount } for pid=2082 comm="syz.5.452" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 151.464541][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.495952][ T2084] loop5: detected capacity change from 0 to 512 [ 151.531319][ T520] ================================================================== [ 151.539217][ T520] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 151.546850][ T520] Read of size 8 at addr ffff888117d56c70 by task kworker/0:5/520 [ 151.554494][ T520] [ 151.556659][ T520] CPU: 0 PID: 520 Comm: kworker/0:5 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 151.566655][ T520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.576546][ T520] Workqueue: rcu_gp process_srcu [ 151.581316][ T520] Call Trace: [ 151.584442][ T520] [ 151.587212][ T520] dump_stack_lvl+0x151/0x1c0 [ 151.591727][ T520] ? io_uring_drop_tctx_refs+0x190/0x190 [ 151.597192][ T520] ? panic+0x760/0x760 [ 151.601102][ T520] print_address_description+0x87/0x3b0 [ 151.606482][ T520] kasan_report+0x179/0x1c0 [ 151.610821][ T520] ? __kasan_check_write+0x14/0x20 [ 151.615762][ T520] ? __list_del_entry_valid+0xa6/0x120 [ 151.621057][ T520] ? __list_del_entry_valid+0xa6/0x120 [ 151.626353][ T520] __asan_report_load8_noabort+0x14/0x20 [ 151.631822][ T520] __list_del_entry_valid+0xa6/0x120 [ 151.636943][ T520] process_one_work+0x458/0xc10 [ 151.641632][ T520] worker_thread+0xad5/0x12a0 [ 151.646150][ T520] kthread+0x421/0x510 [ 151.650048][ T520] ? worker_clr_flags+0x180/0x180 [ 151.654908][ T520] ? kthread_blkcg+0xd0/0xd0 [ 151.659346][ T520] ret_from_fork+0x1f/0x30 [ 151.663589][ T520] [ 151.663656][ T30] audit: type=1400 audit(1731237620.613:1131): avc: denied { create } for pid=2088 comm="syz.6.454" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.666448][ T520] [ 151.666454][ T520] Allocated by task 856: [ 151.666464][ T520] ____kasan_kmalloc+0xdb/0x110 [ 151.697785][ T520] __kasan_kmalloc+0x9/0x10 [ 151.702124][ T520] __kmalloc+0x13a/0x270 [ 151.706198][ T520] kvmalloc_node+0x1f0/0x4d0 [ 151.710625][ T520] alloc_netdev_mqs+0x8c/0xc90 [ 151.715229][ T520] alloc_etherdev_mqs+0x33/0x40 [ 151.719918][ T520] usbnet_probe+0x1fc/0x2840 [ 151.724351][ T520] usb_probe_interface+0x5b6/0xa90 [ 151.729288][ T520] really_probe+0x28d/0x970 [ 151.733627][ T520] __driver_probe_device+0x1a0/0x310 [ 151.738838][ T520] driver_probe_device+0x54/0x3d0 [ 151.743697][ T520] __device_attach_driver+0x2c5/0x470 [ 151.747536][ T30] audit: type=1400 audit(1731237620.613:1132): avc: denied { read } for pid=2088 comm="syz.6.454" name="file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.748899][ T520] bus_for_each_drv+0x183/0x200 [ 151.748918][ T520] __device_attach+0x312/0x510 [ 151.748936][ T520] device_initial_probe+0x1a/0x20 [ 151.748955][ T520] bus_probe_device+0xbe/0x1e0 [ 151.748971][ T520] device_add+0xb60/0xf10 [ 151.748990][ T520] usb_set_configuration+0x190f/0x1e80 [ 151.798983][ T520] usb_generic_driver_probe+0x8b/0x150 [ 151.804282][ T520] usb_probe_device+0x144/0x260 [ 151.808963][ T520] really_probe+0x28d/0x970 [ 151.813304][ T520] __driver_probe_device+0x1a0/0x310 [ 151.818427][ T520] driver_probe_device+0x54/0x3d0 [ 151.823290][ T520] __device_attach_driver+0x2c5/0x470 [ 151.828491][ T520] bus_for_each_drv+0x183/0x200 [ 151.833176][ T520] __device_attach+0x312/0x510 [ 151.837775][ T520] device_initial_probe+0x1a/0x20 [ 151.842635][ T520] bus_probe_device+0xbe/0x1e0 [ 151.847235][ T520] device_add+0xb60/0xf10 [ 151.851405][ T520] usb_new_device+0x1038/0x1c00 [ 151.856088][ T520] hub_event+0x2def/0x4770 [ 151.860340][ T520] process_one_work+0x6bb/0xc10 [ 151.865031][ T520] worker_thread+0xad5/0x12a0 [ 151.869541][ T520] kthread+0x421/0x510 [ 151.873448][ T520] ret_from_fork+0x1f/0x30 [ 151.877706][ T520] [ 151.879870][ T520] Freed by task 856: [ 151.883606][ T520] kasan_set_track+0x4b/0x70 [ 151.888026][ T520] kasan_set_free_info+0x23/0x40 [ 151.892892][ T520] ____kasan_slab_free+0x126/0x160 [ 151.897848][ T520] __kasan_slab_free+0x11/0x20 [ 151.902434][ T520] slab_free_freelist_hook+0xbd/0x190 [ 151.907643][ T520] kfree+0xc8/0x220 [ 151.911289][ T520] kvfree+0x35/0x40 [ 151.914937][ T520] netdev_freemem+0x3f/0x60 [ 151.919271][ T520] netdev_release+0x7f/0xb0 [ 151.923611][ T520] device_release+0x95/0x1c0 [ 151.928040][ T520] kobject_put+0x178/0x260 [ 151.932300][ T520] put_device+0x1f/0x30 [ 151.936287][ T520] free_netdev+0x34f/0x440 [ 151.940540][ T520] usbnet_disconnect+0x245/0x390 [ 151.945310][ T520] usb_unbind_interface+0x1fa/0x8c0 [ 151.950346][ T520] device_release_driver_internal+0x50b/0x7d0 [ 151.956254][ T520] device_release_driver+0x19/0x20 [ 151.961195][ T520] bus_remove_device+0x2f8/0x360 [ 151.965967][ T520] device_del+0x663/0xe90 [ 151.970138][ T520] usb_disable_device+0x380/0x720 [ 151.975085][ T520] usb_disconnect+0x32a/0x890 [ 151.979593][ T520] hub_event+0x1d42/0x4770 [ 151.983844][ T520] process_one_work+0x6bb/0xc10 [ 151.988537][ T520] worker_thread+0xe02/0x12a0 [ 151.993046][ T520] kthread+0x421/0x510 [ 151.996958][ T520] ret_from_fork+0x1f/0x30 [ 152.001224][ T520] [ 152.003373][ T520] Last potentially related work creation: [ 152.008933][ T520] kasan_save_stack+0x3b/0x60 [ 152.013443][ T520] __kasan_record_aux_stack+0xd3/0xf0 [ 152.018648][ T520] kasan_record_aux_stack_noalloc+0xb/0x10 [ 152.024293][ T520] insert_work+0x56/0x320 [ 152.028456][ T520] __queue_work+0x92a/0xcd0 [ 152.032797][ T520] queue_work_on+0x105/0x170 [ 152.037222][ T520] usbnet_link_change+0xeb/0x100 [ 152.041999][ T520] usbnet_probe+0x1dcb/0x2840 [ 152.046511][ T520] usb_probe_interface+0x5b6/0xa90 [ 152.051461][ T520] really_probe+0x28d/0x970 [ 152.055794][ T520] __driver_probe_device+0x1a0/0x310 [ 152.061003][ T520] driver_probe_device+0x54/0x3d0 [ 152.065865][ T520] __device_attach_driver+0x2c5/0x470 [ 152.071070][ T520] bus_for_each_drv+0x183/0x200 [ 152.075848][ T520] __device_attach+0x312/0x510 [ 152.080454][ T520] device_initial_probe+0x1a/0x20 [ 152.085321][ T520] bus_probe_device+0xbe/0x1e0 [ 152.089904][ T520] device_add+0xb60/0xf10 [ 152.094074][ T520] usb_set_configuration+0x190f/0x1e80 [ 152.099364][ T520] usb_generic_driver_probe+0x8b/0x150 [ 152.104662][ T520] usb_probe_device+0x144/0x260 [ 152.109349][ T520] really_probe+0x28d/0x970 [ 152.113687][ T520] __driver_probe_device+0x1a0/0x310 [ 152.118808][ T520] driver_probe_device+0x54/0x3d0 [ 152.123668][ T520] __device_attach_driver+0x2c5/0x470 [ 152.128875][ T520] bus_for_each_drv+0x183/0x200 [ 152.133560][ T520] __device_attach+0x312/0x510 [ 152.138160][ T520] device_initial_probe+0x1a/0x20 [ 152.143021][ T520] bus_probe_device+0xbe/0x1e0 [ 152.147622][ T520] device_add+0xb60/0xf10 [ 152.151787][ T520] usb_new_device+0x1038/0x1c00 [ 152.156474][ T520] hub_event+0x2def/0x4770 [ 152.160731][ T520] process_one_work+0x6bb/0xc10 [ 152.165441][ T520] worker_thread+0xad5/0x12a0 [ 152.169937][ T520] kthread+0x421/0x510 [ 152.173836][ T520] ret_from_fork+0x1f/0x30 [ 152.178085][ T520] [ 152.180256][ T520] The buggy address belongs to the object at ffff888117d56000 [ 152.180256][ T520] which belongs to the cache kmalloc-4k of size 4096 [ 152.194144][ T520] The buggy address is located 3184 bytes inside of [ 152.194144][ T520] 4096-byte region [ffff888117d56000, ffff888117d57000) [ 152.207421][ T520] The buggy address belongs to the page: [ 152.212907][ T520] page:ffffea00045f5400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117d50 [ 152.222958][ T520] head:ffffea00045f5400 order:3 compound_mapcount:0 compound_pincount:0 [ 152.231142][ T520] flags: 0x4000000000010200(slab|head|zone=1) [ 152.237027][ T520] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 152.245443][ T520] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 152.253857][ T520] page dumped because: kasan: bad access detected [ 152.260114][ T520] page_owner tracks the page as allocated [ 152.265662][ T520] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 321, ts 50406819197, free_ts 39013647315 [ 152.285883][ T520] post_alloc_hook+0x1a3/0x1b0 [ 152.290570][ T520] prep_new_page+0x1b/0x110 [ 152.294920][ T520] get_page_from_freelist+0x3550/0x35d0 [ 152.300300][ T520] __alloc_pages+0x27e/0x8f0 [ 152.304715][ T520] new_slab+0x9a/0x4e0 [ 152.308621][ T520] ___slab_alloc+0x39e/0x830 [ 152.313048][ T520] __slab_alloc+0x4a/0x90 [ 152.317221][ T520] kmem_cache_alloc_trace+0x142/0x210 [ 152.322422][ T520] uevent_show+0x160/0x310 [ 152.326674][ T520] dev_attr_show+0x56/0xd0 [ 152.330927][ T520] sysfs_kf_seq_show+0x265/0x3e0 [ 152.335714][ T520] kernfs_seq_show+0x119/0x160 [ 152.340298][ T520] seq_read_iter+0x430/0xd00 [ 152.344724][ T520] kernfs_fop_read_iter+0x145/0x470 [ 152.349758][ T520] vfs_read+0xa81/0xd40 [ 152.353752][ T520] ksys_read+0x199/0x2c0 [ 152.357833][ T520] page last free stack trace: [ 152.362345][ T520] free_unref_page_prepare+0x7c8/0x7d0 [ 152.367682][ T520] free_unref_page+0xe8/0x750 [ 152.372156][ T520] __free_pages+0x61/0xf0 [ 152.376391][ T520] __free_slab+0xec/0x1d0 [ 152.380490][ T520] __unfreeze_partials+0x165/0x1a0 [ 152.385433][ T520] put_cpu_partial+0xc4/0x120 [ 152.390032][ T520] __slab_free+0x1c8/0x290 [ 152.394289][ T520] ___cache_free+0x109/0x120 [ 152.398728][ T520] qlink_free+0x4d/0x90 [ 152.402797][ T520] qlist_free_all+0x44/0xb0 [ 152.407132][ T520] kasan_quarantine_reduce+0x15a/0x180 [ 152.412425][ T520] __kasan_slab_alloc+0x2f/0xe0 [ 152.417111][ T520] slab_post_alloc_hook+0x53/0x2c0 [ 152.422057][ T520] __kmalloc+0x11e/0x270 [ 152.426223][ T520] __vmalloc_node_range+0x2d6/0x8d0 [ 152.431343][ T520] __vmalloc+0x7a/0x90 [ 152.435254][ T520] [ 152.437420][ T520] Memory state around the buggy address: [ 152.442891][ T520] ffff888117d56b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.450790][ T520] ffff888117d56b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.458686][ T520] >ffff888117d56c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.466585][ T520] ^ [ 152.474244][ T520] ffff888117d56c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.482210][ T520] ffff888117d56d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.490192][ T520] ================================================================== [ 152.498088][ T520] Disabling lock debugging due to kernel taint [ 152.519439][ T2084] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.529968][ T325] usb 3-1: config 0 descriptor?? [ 152.548298][ T2048] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.571361][ T2084] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 152.592127][ T2084] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 152.613309][ T2084] System zones: 0-2, 18-18, 34-34 [ 152.627631][ T2084] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.452: bad orphan inode 15 [ 152.630800][ T30] audit: type=1400 audit(1731237620.613:1133): avc: denied { open } for pid=2088 comm="syz.6.454" path="/2/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 152.638825][ T2080] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 152.680643][ T30] audit: type=1400 audit(1731237620.613:1134): avc: denied { ioctl } for pid=2088 comm="syz.6.454" path="/2/file0" dev="tmpfs" ino=29 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 152.704571][ T325] usbhid 3-1:0.0: can't add hid device: -71 [ 152.710661][ T325] usbhid: probe of 3-1:0.0 failed with error -71 [ 152.725593][ T325] usb 3-1: USB disconnect, device number 15 [ 152.728519][ T2080] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.453: invalid indirect mapped block 1 (level 1) [ 152.745733][ T2084] ext4_test_bit(bit=14, block=18) = 1 [ 152.753458][ T2084] is_bad_inode(inode)=0 [ 152.757484][ T2084] NEXT_ORPHAN(inode)=2264924160 [ 152.768283][ T2084] max_ino=32 [ 152.771307][ T2084] i_nlink=0 [ 152.774292][ T2084] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 152.788972][ T2080] EXT4-fs (loop3): 1 truncate cleaned up [ 152.794531][ T2080] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.806154][ T2084] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.452: bg 0: block 80: padding at end of block bitmap is not set [ 152.828308][ T2084] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 152.829472][ T2090] loop6: detected capacity change from 0 to 40427 [ 152.894586][ T2084] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 152.912166][ T2090] F2FS-fs (loop6): fault_injection options not supported [ 152.919186][ T2090] F2FS-fs (loop6): Unrecognized mount option "c2kF?^ompress_cache" or missing value [ 153.618466][ T30] audit: type=1400 audit(1731237622.663:1135): avc: denied { write } for pid=2088 comm="syz.6.454" name="file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.670836][ T30] audit: type=1400 audit(1731237622.723:1136): avc: denied { unlink } for pid=2004 comm="syz-executor" name="file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1