last executing test programs: 3m43.947043989s ago: executing program 2 (id=442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noquota}, {@noload}]}, 0x3, 0x430, &(0x7f0000000d80)="$eJzs28tvG8UfAPDvrpP2lz5+CVV5NC0QKIiIR9KkpfTABQQ3Dkhw6DUkaRXqNqgJEq0iCAiVI0Lijjgi8RdwggsCTkhc4Y4qVSiXFk5Ga+8mtmPnVSdu8ecjbTKzO9bM17tjz+x4A+hZI9mfJOJQRPweEYO1bGOBkdq/OytL03+vLE0nUam89VdSLXd7ZWm6KFq87mCR6YtIP03ieIt6F65dvzRVLs9ezfPji5ffG1+4dv2FuctTF2cvzl6ZPHfuzOmJl85OvtiROLO4bg9/OH/i2P6ImD7/xTs/f5sU8TfF0SEjGx18ulLpcHXddbgunfR1sSFsS6nWTaO/2v8HoxRrJ28wXv+kq40DdlWlUqk81P7wcgX4D0ti8zKlLZQB7jfFF302/y22PRp63BNuvVKbAGVx38m32pG+SPMy/U3z204aiYjzy/98lW2xO/chAAAafJ+Nf55vNf5Lo/6+0P/zNZShiHggIo5ExNmIOBoRD0ZUyz4cEY9ss/7mRZL145/05o4C26Js/PdyvrbVOP4rRn8xVMpzh6vx9ycX5sqzp/L3ZDT692f5iQ3q+OG13z5vd6x+/JdtWf3FWDBvx82+/Y2vmZlanLqbmOvd+jhiuK9V/MnqSkASEcciYniHdcw9+82Jdsc2j38DHVhnqnwd8Uzt/C9HU/yFZOP1yfH/RXn21HhxVaz3y6833mxX/13F3wHZ+T/Q8vpfjX8oqV+vXdh+HTf++KztnGan1/++5O2GfR9MLS5enYjYl7xRa3T9/smmcpNr5bP4R0+27v9HYu2dOB4R2UX8aEQ8FhGP521/IiKejIiTG8T/06tPvbvz+HdXFv/Mts7/WmJfNO9pnShd+vG7hkqHthN/dv7PVFOj+Z6tfP5tpV07u5oBAADg/pNGxKFI0rHVdJqOjdV+w380DqTl+YXF5y7Mv39lpvaMwFD0p8WdrsG6+6ET+bS+yE825U/n942/LA1U82PT8+WZbgcPPe5gm/6f+bPU7dYBu87zWtC79H/oXfo/9C79H3pXi/4/0I12AHuv1ff/R11oB7D3mvq/ZT/oIeb/0Lv0f+hd+j/0pIWB2PwheQmJdYlI74lmSOxSotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//xZHjYg==") syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x5}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, &(0x7f00000005c0)=""/193, 0x3a, 0xc1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) write$binfmt_script(r5, &(0x7f0000000cc0), 0xfd45) syz_open_procfs(0x0, 0x0) mknod$loop(0x0, 0x1000, 0x1) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 3m40.142693578s ago: executing program 2 (id=450): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) 3m39.253261069s ago: executing program 2 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r2, 0x0, 0x20000000}, 0x20) 3m38.20330351s ago: executing program 2 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 3m36.936811948s ago: executing program 2 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) ptrace(0x10, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x39, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, 0x80}}) 3m35.212727358s ago: executing program 2 (id=465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000059000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r3, 0x9, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setreuid(0xffffffffffffffff, 0xee00) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x629, &(0x7f0000001080)="$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") ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 3m19.735807089s ago: executing program 32 (id=465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000059000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r3, 0x9, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setreuid(0xffffffffffffffff, 0xee00) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x629, &(0x7f0000001080)="$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") ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 12.632901404s ago: executing program 0 (id=1019): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.026534743s ago: executing program 3 (id=1022): creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 11.643865672s ago: executing program 3 (id=1023): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4091) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main=@item_4={0x3, 0x0, 0xa, "69f07454"}, @local]}}, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000001c40), 0x1, 0x4b842) write$hidraw(r3, 0x0, 0x0) fallocate(r0, 0x3, 0x9, 0x10000) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) write(r3, &(0x7f0000000100)="2e480e60512064d29a6edae2267135f567b5b73264b3e0c26df0757f37d39ac75e951520c382f94f915307362f44c0f40d5d6ecf75", 0x35) 8.289639361s ago: executing program 0 (id=1030): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) rmdir(0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x1, 0x95, &(0x7f0000000440)=""/149, 0x41000, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xe2, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000700)={0x9, 0x4, 0xfffffff7, 0x10000, 0x8, "93fce576b0ac384c27ba672f069699a0acfb36"}) 8.165360307s ago: executing program 1 (id=1032): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noquota}, {@noload}]}, 0x3, 0x430, &(0x7f0000000d80)="$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") syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x73d014, 0x0) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x5}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, &(0x7f00000005c0)=""/193, 0x3a, 0xc1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) write$binfmt_script(r2, &(0x7f0000000cc0), 0xfd45) syz_open_procfs(0x0, 0x0) mknod$loop(0x0, 0x1000, 0x1) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 7.83855965s ago: executing program 4 (id=1034): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 7.705038153s ago: executing program 5 (id=1035): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="f0995f9f7d14558200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f00000010c0)=0x1000007c, 0x3) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x40, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x3ec0) 7.575638803s ago: executing program 4 (id=1036): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r7, 0x0, 0x81, 0x7c0, &(0x7f0000000700)="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", 0x4}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 7.526279093s ago: executing program 5 (id=1037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) 6.359129029s ago: executing program 4 (id=1038): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) bind$inet(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581219f"], 0x0) 6.229259156s ago: executing program 1 (id=1039): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vcsa(0xffffffffffffff9c, 0x0, 0x20600, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 6.216364503s ago: executing program 5 (id=1040): setuid(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 6.124746361s ago: executing program 3 (id=1041): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.124192934s ago: executing program 0 (id=1042): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) 4.614196938s ago: executing program 1 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 4.172097265s ago: executing program 0 (id=1044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001540)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "bdc6f5", 0x0, 0x6c, 0xff, @private1, @mcast2}}}}, 0x0) 4.163819254s ago: executing program 1 (id=1045): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000b00)) 4.052680805s ago: executing program 3 (id=1046): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 3.806818157s ago: executing program 0 (id=1047): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x124831, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) syz_mount_image$exfat(&(0x7f0000002600), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000002780)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYBLOB="2bde1d94763ccb81f2136c700f066a318e53b3337ccbde3190a7dc68e02a7a8ba935708998a2be722e0f94a6dd00b4e6ba9754f96c01033cfbf94681dafa426dea12cf061209893c44de0c0cf3e34b80f7097918f458d24f732bf2a862bed33996f68b7d919f16e0d9727da5050a8e5441e05a5e9f71f7", @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c646973636172642c666d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d6575632d6a702c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c0092803b831534d131135366249e8a045ee656058ddf6f41400b01a0870e4c656ef6f11325a20c319fd81269acc3b77200feb4294a821f553876d64b4a41390c44492e6f79c4b09bbe8e5cb02585b919505651c34f3e21f9532204a0c936a1da6422edb1108cf73536e8fbe241e030f5b5e1d081994fbe8a093c44b63f3da6a8a46706b47fa3"], 0x1, 0x152d, &(0x7f00000010c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+55zf6Zee37yf5/k+1jt7v2u/+/vOd/baG/Nt16G1mtSu3oiI4L+CF/5IAoBYABgIAHkBIACA8nHl47K255SY9N8dhP2xHky90hWwK4n7n71x/7M37n/2xv3P3rj/2Rv3P3vj/mdv3H/GsrNN0wpd8xd6XQVXvoYr+mr4Jx+Pn/9nZ3z9/z8ks8zYL9eUua4bQMy/m8L9z964//9nBf/OTtz/7I37n13FXukC2F8Af/6zgxz/dAv3P3vj/jOWnV3p591X+gWRv9h7cCTnhcb8WefPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9CU77yxQAXBpf6boYY4wxxhhjjDH2x/E5rnQFjDHGGGOMMcYY+9+HIECCggBiIAfEQk7IBQIAroY8kBcicA3EwbWQD66D/FAACkIhiIfCUAQ0GLBAEEJRKAZRuB6Kww1QAkpCKSgNDspAAtwIZeEmKAc3Q3m4BSrArVARKkFlqAK3QVW4HarBHVAd7oQaUBNqQW24C+rA3VAX7oF6cC/Uh/ugAdwPDeEBaAQPQmN4CJrAw9AUHoFm0BxaQEto9T/Kfx56wgvQC3pDEvSBvvAi9IP+MABegoHwMgyCV2AwvArJMASGwmswDF6H4fAGjICRMArehNHwFoyBsTAOxkMKTICJ8DZMgndgMrwLU2AqpMI0mA7vwQyYCbPgfZgNH8AcmAvzYD6kwYewABZCOnwEi+BjyIDFsASWwjJYDitgJayC1bAG1sI6WA8bYCNsgs2wBbbCNtgOO+AT2Amfwi7YDXvgM9gLn/+H+af+Ib8bAgIKFKhQYQzGYCzGYi7MhbkxN+bBPBjBCMZhHObDfJgf82NBLIjxGI9FsAgaNEhIWBSLYhSjWByLYwksgaWwFDp0mIAJWBZvwnJYDstjeayAFbAiVsJKWAWrYFWsitWwGlbH6lgDa2AtrIV34V3YB+tiXayH9bA+1r/0eAobYSNsjI2xCTbBptgUm2EzbIEtsBW2wtbYGttgG2yH7bA9tscO2AETMRE7YkfshJ2wM3bGLtgFu2JX7IbdsXvm8zkAX8AXsDfWEH2wL/bFfpicYwC+hC/hyzgIX8FX8FVMxiE4FF/D1/B1HI4ncQSOxFE4CquKt3AMjkUS4zEFU3AiTsRJOAmzCn0Xp2IqTsPpOB1n4Eycie/jbPwAP8C5OBfnYxqm4QJciOmYjovwFGbgYlyCS3EZLsdluBJX4Upcg2txDa7H9bgRN+Jm3IxbcStux+34CSoA/BR3425Mxr24F/fhPtyP+/EAHsBMzMSDeBAP4SE8jIfxCB7Bo3gMj+MxPIEn8CSewtN4Gs/iWTyHz8Z/3fiTkquTQWRRQokYESNiRazIJXKJ3CK3yCPyiIiIiDgRJ/KJfCK/yC8KioIiXsSLIqKIMMIIEmEMAIioiIriorgoIUqIUqKUcMKJBJEgyoqyopwoJ8qLW0QFcauoKCqJtq6KqCKqinaumrhDVBfVRQ1RU9QStUVtUUfUEXVFXVFP1BP1RX3RQNwvGoo+OAAfFFmdaSKGYFMxFJuJ5kJe/AnWWgzHNqKtaCceFyNxBHYQrV2ieEp0FGOwk/ibGIvPiC5iPHYVz4luorvoIZ4XPUUb10v0FpOxj+grpmI/0V8MEC+JGVhTvI+zc9YSr4pkMUQMFa+J+fi6GC7eECPESDFKvClGi7fEGDFWjBPjRYqYICaKt8Uk8Y6YLN4VU8RUkSqmieniPTFDzBSzxPtitvhAzBFzxTwxX6SJD8UCsVCki4/EIvGxyBCLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vFDvGJ2Ck+FbvEbrFHfCb2is/FPvGF2C++FAfEVyJTfC0Oim/EIfGtOCy+E0fE9+KoOCaOix/ECfGjOClOidPijDgrfhLnxM/ivPACJEohpVQykDEyh4yVOWUueZXMLYOL7+41Mk5eK/PJ62R+WUAWlIVkvCwsi0gtjbSSZCiLymIyKq+XxeUNsoQsKUvJ0tLJMjJB3ijLyptkOXmzLC9vkRXkrbKirCQryyryNllV3i4hcuEYNWRNWUvWlnfJJLhb1pX3yHryXllf3icbyPtlQ/mAbCQflI3lQ7KJfFg2lY/IZrK5bCFbylbyUdlaPibbyLaynXxctpdPyA7ySZkon5Idpb/4LfKM7CKflV3lc7Kb7C57yJ/leellL9lbQh+QfeWLsp/sLwfEAoB8WQ6Sr8jB8lWZLIfIofI1OUy+LofLN+QIOVKOkm/K0fItOUaOlePkeJkiJ8iJ8m05Sb4jJ8t35RQ5VabKaXKAHPjLTLOk/Jf5b/9O/uBfjr5RbpKb5Ra5VW6T2+UO+YncKXfKXXKX3CP3yL1yr9wn98n9cr88IA/ITJkpD8qD8pA8JA/Lw/KIPCKPymPyjPxBnpA/ypPylDwlz8iz8qw8d/E9AIVKKKmUClSMyqFiVU6VS12lcqurVR6VV0XUNSpOXavyqetUflVAFVSFVLwqrIoorYyyilSoiqpiKqqux4vfMKqUKq2cKqMS1I3/Sb4qrm5QJVTJX+Vfqi/pn9TXSrVSrVVr1Ua1Ue1UO9VetVcdVAeVqBJVR9VRdVKdVGfVWXVRXVRX1VV1U91UD9VD9VQ9VS/VSyWpJNVXvaj6qf5qgHpJDVQvq0FqkBqsBqtklayGqqFqmBqmhqvhaoQaoUapUWq0Gq3GqDFqnBqnUlSKmqgmqklqkpqsJqspaopKValqupquZqgZapaapWar2WqOmqPmqXkqTaWpBWqBSlfpapFapDLUYrVYLVVL1XK1XK1UK9VqtVqtVWvVerVeZahNapPaoraobWqb2qF2qJ1qp9qldqk9ao/aq/aqfWqf2q/2qwPqgMpUmeqgOqgOqUPqsDqsjqgj6qg6qo6r4+qEOqFOqpPqtDqtzqqz6pw6p86r81nLvkAEIlCBCmKCmCA2iA1yBbmC3EHuIE+QJ4gEkSAuiAvyBdcF+YMCQcGgUBAfFA6KBDowgQ3ExaZHg+uD4sENQYmgZFAqKB24oEyQENwYlA1uCsoFNwflg1uCCsGtQcWgUlA5qBLcFlQNbg+qBXcE1YM7gxpBzaBWUDu4K6gT3B3UDe4J6gX3BvWD+4IGwf1Bw+CBoFHwYNA4eChoEjwcNA0eCZoFzYMWQcug1R86v/cnCzzmeuneOkn30X31i7qf7q8H6Jf0QP2yHqRf0YP1qzpZD9FD9Wt6mH5dD9dv6BF6pB6l39Sj9Vt6jB6rx+nxOkVP0BP123qSfkdP1u/qKXqqTtXT9HT9np6hZ+pZ+n09W3+g5+i5ep6er9P0h3qBXqjT9Ud6kf5YZ+jFeoleqpfp5XqFXqlX6dV6jV6r1+n1eoPeqDfpzXqL3qq36e16h/5E79Sf6l16t96jP9N79ed6n/5C79df6gP6K52pv9YH9Tf6kP5WH9bf6SP6e31UH9PH9Q/6hP5Rn9Sn9Gl9Rp/VP+lz+md9XvusxX3W5d0oo0yMiTGxJtbkMrlMbpPb5DF5TMRETJyJM/lMPpPf5DcFTUETb+JNEVPEZCFDpqgpaqImaoqb4qaEKWFKmVLGGWcSTIIpa8qacqacKW/KmwqmgqloKprKprK5zdxmbje3mzvMHeZOc6epaWqa2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpZpqZFqaFaWVamdamtWlj2ph2pp1pb9qbDqaDSTSJpqPpaDqZTqaz6Wy6mC6mq+lquplupofpYXqanqaX6WWSTJLpa/qafqafGWAGmIFmoBlkBpnBZrBJNslmqBlqhplhZrgZbkaYkWZU1kLVvGXGmLFmnBlvUkyKmWgmmklmkplsJpspZopJNalmupluZpgZZpaZZWab2WaOmWPmmXkmzaSZBWaBSTfpZpFZZDJMhllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSaTHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02Bi9dLb2JtTpvLXmVz26ttHpvX/mNc0Bay8bawLWK1zW8L/Co21toStqQtZUtbZ8vYBHvjb+KKtpKtbKvY22xVe7ut9pu4jr3b1rX32Hr2Xlvb3vWruL69zzawD9uGiAC2uW1sW9om9mHb1D5im9nmtoVtadvbJ2wH+6RNtE/Zjvbp38QL7EK7yq62a+xau8vutqftGXvIfmvP2p9sL9vbDrQv20H2FTvYvmqT7ZDfxKPsm3a0fcuOsWPtODv+N/EUO9Wm2ml2un3PzrAzfxOn2Q/tbJtu59i5dp6d/0ucVVO6/cgush/bDBvAErvULrPL7Qq78lKtPq9dbzfYjXan/dRusVvtNrvd7ri0ELa77R77md1rP7cH7Td2v/3SHrCHbab9+pc46/wO2+/sEfu9PWqP2eP2B3vC/qguZWed+w/2Z3veeguEBCRJUUAxlINiKSfloqsoN11NeSgvRegaiqNrKR9dR/mpABWkQhRPhakIaTJkiSikolSMonQ9XSqvFJUmR2UogW6ksnQTlaObqTzdQhXoVqpIlagyVaHbqCrdTtXoDqpOd1INqkm1qDbdRXXo7pwAQPXoXqpP91EDup8a0gPUiB6kxvQQNaGHqSk9Qs2oObWgltSKHqXW9Bi1obbUjh6n9vQEdaAnKZGeoo70NHWiv1Fneoa60LPUlZ6jbtSdetDz1JNeoF7Um5KoD/WlF6kf9acB9BINpJdpEL1Cg+lVSqYhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSeUmgCTaS3aRK9Q5PpXZpCUymVptF0eo9m0EyaRe/TbPqA5tBcmkfzKY0+pAW0kNLpI1pEH1MGLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpBn9BO+pR20W7aQ5/RXvqc9tEXtJ++pAP0FWXS13SQvqFD9C0dpu98b/qejtIxOk4/0An6kU7SKTpNZ+gs/UTn6Gc6T54gxFCEMlRhEMaEOcLYMGeYK7wqzB1eHeYJ84aR8JowLrw2zBdeF+YPC4QFw0JhfFg4LBLq0IQ2pDAMi4bFwmh4fVg8vCEsEZYMS4WlQxeWCRPCG8Oy4U1hufDmsHx4S1ghvDWsGFYKH763SnhbWDW8PawW3hFWD+8Ma4Q1w1ph7fCusE54d1g3vCesF94blgvvCxuE94cNwwfCRuGDYePwobBJ+HDYNHwkbBY2D1uELcNW4aNh6/CxsE3YNmwXPh62D58IO4RPhonhU2HH8Olftt+38J9vTwr7hH3DF8MXQ+/vkfOi86Np0Q+jC6ILo+nRj6KLoh9HM6KLo0uiS6PLosujK6Iro6uiq6Nromuj66LroxuiG6Pe184BDp1w0ikXuBiXw8W6nC6Xu8rldle7PC6vi7hrXJy71uVz17n8roAr6Aq5eFfYFXHaGWcdudAVdcVc1F3virsbXAlX0pVypZ1zZVyCa+lauVautXvMtXFtXTv3uHvcPeGecE+6J91TrqN72nVyf3Od3TOui3vWPeuec91cd9fDPe96ugl5Lnwmk1xf19f1c/3cADfADXQD3SA3yA12g12yS3ZD3VA3zA1zw91wN8KNcKPcKDfajXZj3Bg3zo1zKS7FTXQT3SQ3yU12k90UN8WlulQ33U13M9wMV3XmhaPMcXPcPDfPpbk0t8BlrRnT3SK3yGW4DLfELXHL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfL570wqdvr9rl9br/b7w64r1ym+9oddN+4Q+5bd9h95464791Rd8wddz+4E+5Hd9KdcqfdGXfW/eTOuZ/deeddSmRCZGLk7cikyDuRyZF3I1MiUyOpkWmR6ZH3IjMiMyOzIu9HZkc+iMyJzI3Mi8yPpEU+jCyILIykRz6KLIp8HMmILI4siSyNLIssj3hfeEvoi/piPuqv98X9Db6EL+lL+dLe+TI+wd/oy/qbfDl/sy/vb/EV/K2+oq/kK/tHfDPf3LfwLX0r/6hv7R/zbXxb384/7tv7J3wH/6RP9E/5jv5p38n/zXf2z/gu/lnf1T/nu/nuvod/3vf0L/hevrdP8n18X/+i7+f7+wH+JT/Qv+wH+Vf8YP+qT/ZD/FD/mh/mX/fD/Rt+hB/pR8W86UdfukWG8T7FT/AT/dt+kn/HT/bv+il+qk/10/x0/56f4Wf6Wf59P9t/4Of4uX6en+/T/Id+gV/o0/1HfpH/2Gf4xZceKvsVfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7Hf4Tv9N/6nf53X6P/8zv9Z/7ff4Lv99/6Q/4ry5dk/wh/60/7L/zR/z3/qg/5o/7H/wJ/6M/6U/50/6MP+t/8uf8z/48/581xhhjjLF/y4TLQ/HrLRce5/f5nRzxdzv3BYCrtxbK/PvtWSvKdfkvjPuL+PYRAHiqd9cHL71q1EhKSrq4b4aEoNhcgEt/E5QlBi7Hi6EdPAGJ0BbK/m79/UX3s/Qv5o/eApDr73Ji4XJ8ef4vADDpd+Z/9PFRCyqEp+P+P/PPBShR7HJOTrgcL4Z2v6xl20K5f1J/gdb/ov6cX6YAtPm7nNxwOb5cfwI8Bk9D4q/2ZIwxxhhjjDHGLugvKne+dP956V98/t79eby6nJMDLsf/6v6cMcYYY4wxxhhjV94z3Xs8+WhiYtvO//mg2v8o698eNIX/rZl58LsD7wEufUUBwH85IUDWQP6ZZ7H5TzlW8sWPzj9uWnbGB/DXaOUfMbjCP5gYY4wxxhhjf7jLi/5ff11dqYIYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFs6M/4dWJX+hwZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BQAA//9/hvTx") r2 = syz_open_dev$usbmon(&(0x7f0000002640), 0x9, 0x8000) mmap$usbmon(&(0x7f0000af1000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r2, 0xffffffffffffffff) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xc0085504, &(0x7f00000000c0)={{}, "c4005a51cf48a456fe399e96793568de827d6e3af15928143f77a2c2bf19506fac2c94a8808e7365569e94b6012f452ddbdb4acaadf3199a4fa57eab4549a87e05bb9a155f3d08704dc753cff79d5128dc113e58ecd5a19e0bc7bef139e74acaed4f126be4cc57e22d44a734c7f2c44b2b2dc3ecfb59318827549e5b2679b3cc4f8d5df2bc30b674fb5f8e181e7dab6cc37989c9911a3d5b32ac444ebf78c76d68c313ed1bcaa4bfcdddc200878c72704b48f4cda8c86a41c703694c1e57aaf73751f45d5ed54010c14c30ea8ca2f620ab57b6ad6bdf3263aeab2de44576b10a1040c6cc84fcf2cb5037e025b227baf26e0c5bda231531365c778ef42bc49fd603b98b7b5173f2f1669834e8cd5167092f5d56e6c2623165710ec863179f143dba38551641ea77676773f3a18e97ada500fe448f172e6e714e16079d8233626d4c5c08c9117c5872c5d815ae0d481c25f2cfd2c76c6723e5ee78d5941b7d49e3d123294dd4c04c2691c5d086393047e3fd027daebf2114d1e9da89a36a49f7a411638060e87593ed8e45fb4292ff888e2eb7b776c9428623a34454eb2f11a47b43707e4b161faa8b8dc0d9cb2a0ac253ab41d01721909ae06af564cabff5a0ba5df004c44138b49d2e17944f6588839fdedcf6ddef583df85490fa3a956e416e02943d56f734c3d3aa8b4898544e8f417c79bb5532b4ab2393c6723488c627a285686a0dac4cd6df370ab806b80f251256cfc058f8c2c2b46dca533048a18315caca12ad5915f077285ffbe1a4b5f46f2af4e45695348200e1f5a57a698acae6b4f6124fc076af5f40c3461e91b2639a84be51abe62d27cde1642731d31ae1264d20a21011bd221f8d0e4fc9835ccb61405e1ba6fcd48b9d3487909f89a0f40f91abfd3d33876b707d908bd2b076d37f5b2e2d530210e3930cf0418c3a7d8d0900cd16b4d2b2d4ebf6134c88813a808d82c86a20b7beb6534bb112b374d5b00e000000e37872a2df879ebd568f0b20ce7d4aeb5ef6c960093b8a3d0e0332d821fdd099269364539d876caf78e60232baf7cc26589453666f17f94ac05fc2b752546a9586f9f18288e5944effa6f912709652113377ee14d949842910b0af467706b42d969908840fe55857f526694cdacb7735f2e0bdc49ca50ca57193aec63535f679e1486185bae007a7cd345bf8d7428e1a2881f6d327ee34ef0bbd67b51d25000fc59ed894c001ca327898dc4a3e7c33e20542772f31e7f125eedec11604b6569f051e643bff91d616284d2ea0f25320c22caba4d681781a13bf341dc22f882540aaab75d5bba9bbfe8aa960705d1d903a7ed8b7a14cc18b2ec9d1640ba3b6cf9c2a6cde4f7b23d1eb42fa57d2b2206c6cd6f84a5b7d682a09064e341c844edd3361f2e457a5057e1c3d97916190d9749adbadb70797f1729cc01c6146a23942e245021fe02748e2235582b36df8236c8b25fa94d1ed7e495f0df447b36f609b17526b2c8c43f1ded38f99344f2553fd911deed701d89fdf92ed6368d74f6f09ce2d26a3916f28eda4fac022f043aff14bab96f3841980533b2f935cfe7e40ad9cc77557d50a32a73aa71ae37a0cece6580887608d028b55fa7a1a1cf214098fe13c1a32ee5890e3d2c9a4d23041f89bac353aa1641df4375080b2181555e9667082a35b041645be39a47298b747eed9d127d8d342b620d0ecd2a48a86bd7dbfa04bf5fad62f5b1055b2259dc64b02d27599fff87c8303b47174e3ee66645d1eaaa05d63bad90ef4fdb97d21b468b37c313571d5776495460b57ba25dc2a5def286c8e81a3fdaa3dfb1dfb9deec86aa3629a03b9722bd95a96972a32552ba5d74f03989c73598b3ba0ef19151631ba4cf90d1bcc35c7cd2fecd6c271564df5ed060081417488454f5878f09523ce1b966162808d13a86872ad04bc777544ae4477459d197c6aaecf52e229a6cc94d151e014b589311f8e5bb7eb57605a80c11a7df2110b70735ae34a21e467f7bd8c3f81c1f9dfcf9464365566786b086637717df597c05b45249b04faa2269ca5a3fca2f1797682f24a34c9f70c27b6dd47fe9f6f006c934481524985afeec903f160c4e2c36c2bbe2081ff33733ca17ca2a2d794fd3af80d5a1adcbfa384e1ba851f4a554433e532f321b332d640513c9df326ddaa4691201f94d1b4b82b82f9bb986e00242fce6588d906cd820640a59707cecf78533496fdc49d90effde5769812ae474ef31adb849542ef23359a640eeeadecf273713a46e96c836823012fc190c8d1dd88d965fbe11074da36375c11fedc648160b55b8b8bc830b72a6f98b1396a72d96f06fab40ddd4729dc162d30e8a34c4041cc22fd62eb501fa685ae7d53376cca12e40f53edd0ae8abbb666c75a6ca8658b4ef8810931158868afb757831d14e81cdadc995fcb98e2da29050080ca03494f81b59985dbe3da8634a3c4a00626d08d6f1f997ccd63a1a103d292d29cdf15b2c4bca2f34ba406a47d9a184ed712356257ec45aa9a8ed8b8daca20f6a2edb1494a2af100000000000000006f1bfeb0edfdb1f10b66753f3fe900b95be3aafbfb5e2976de8b2c6b485243770da0cdc8f4d7384b6f39817f5661429442b20cab08cc28cf814ebf10d7ad4de140241ec169d70781524127a9454e5f1ee9fd5652818683a2f7ff0b11c8fea2ff7398e01df48c8eb62123f2630d561470003d020f4cc8923654fcf65d400ed0792af6bf1876099951e938adc275f47b9ba178b8ae3e9b295fab66c144ad8ad2fd29bced367833b76b2f0ded8dfead5dfccfc9ba2d658688abeb41f53eaf6efa82e5947f8d7a6e1010517032443507f5bd419317324000ca02e49db1cb985f8f11149496bfe54629f3f759c3100e0ab50c95446fd390a87b884930763ac810bdcdaee81b64343b955eba24d34d816bcf3eb5df1b6b44317e033a9015640942da607e3ea61727b97eab7511ff680dc5f4e54fa19e07c0023152272edc066010e661de98f73f913bc04983b325ff62134b41081dce65528af69b5206f9522b3e09f78dea218621e60f5ca9c58212526d96aace431133528b8a5354b213ef4883ef271e488bf629284c277843202bf7a41dbe2616e8338ab14f83bd6da1d1c4a4b50b6372564187a497036f2040f77c099bd0d98d3e4eebd4bf433360c518fc965e966642a22a335f3a9688336bd254dc9fe32632d4c1599c6b72fca290d9cae38548f4ad5d2a165053b7d392276d81ff26e97ebcfa210eddc832240de22bbfc6623929aa2d8bad6c41db54e2125063f9153e98b2316ae5e9d51a3a9efe5a81242f7045dbafa8db63cafad19e32b767dcd5adfd5e5459dce45c71f61a18a3e6a7de43bd61d6015fac48dcecb60795e02b30dc04cc4a408abc2dee10a97fb387a229ba5c07cebc63037c0102c846393b2bf865db38e51ce44b5cede8d530cb6496e5a34b9b0b060b8bd6f98cd53169518a1732d92af494c351f8ce753754f7d944865de345d8520a9232a1c5e516e61f23c39e09bac5d7c70a478e0b7a3208f61f090f69b9ab33da7a8ae16626c3d26f11065fd46851eff2c5968f937e90abe02555cad9e54b4bcaf3ee55aba96406cd457e27c1ad5b9cc640afff1d94d7d5f854fd50a66bf37355c548f840129ae0d81dc23202e4d7921236172d1c4920c1bf5e7bfad21740acd8f5fa278b6de2336276e271045d0ef0a9a566ae988269cb16f7eee941941d3a9f05d754cbb92a27ad9cb374872c3566a9db35920d63f0cfa69ef8dfc41f307f7c1f1ae712e3f6001e57e1de99777212ede107b692182c507b168c77a3824f0cd663f6d2ffe73e3d90587b3444e9a3cb093ddefd2869db927938ecf6cbd16a85d0849b7c829a37b70b24868e7ab1aa2adc012d85a8bf374225281b50882a40e6bed667f0538d8c85768cc9d8537bedfebe64cddf937a150c565e3824a75f5e7a173fed0ed3b3aa8750fde47ce1c219d5fc1977abc24c7a28aa8251e29a17eee3405d4c1f1f5e8b53df9425d6dde4b9de4715097c580500000037b42974a40f0bf24dcca060871b759e5f42a12da7d89a494468f6c91c47ac17e7bfd61e62872541fd5d3941c0f0ebca3de06ca63cb50f60fa5ffc61ade4eaed0fd5dd1eb4b8e2d2ebb689741fb354c8bbdc9092f68a156952395585113d78254ec826ba49204d76b8dcd854c4cf942c50c38ad5f8db2bf032d5eced178b25e56f9b39961aea03785119cab42fffbbbeaa15f0c21511f441fd72ab25014dbe5a35dfe295486e0d2e5803304deff8736e1d8df7886e4725321bc450c68459f01b5b3014735e81f989945e59b4c5e367976e90124e9cf422cc0f0d624627ab83ccd65ac7c1b91424672ebb3d91d932994c6e215a9d60efb6ed87eb579951668273e9a38f9089179459d2f670a21bd999a97c968891c59402d188dc601ef033fb9af3291b8778f2a38d379913a02d2215f2960f80847afe4d65f1fc7bcd1995e83fc88d87d799af0bf16060780efc8dbd08b041d8c2f646ca18ea18d3d295e172b344b6aea8d2a2620b6379c5c368459fee07bfcc83c83acaf3dc67755bbe8fe58b1a39051ef2327b30c886a0a5183e38c199e32365cb8194deade3262ea5ffa559b789da10f2948e135ce5858e1b016c153b14795a085b5bef350f95487a3f748afa943179d87a1e8828edc33804c2ea49979074fe162a8a36689286c390585d9f83645be3b921c4a6678b8ffd7edfb7c85265d5796ce4f12595b364fcc81b58c267beaa85dd47ad8c55783fe526d6dd0e3cc1f70a7e88d6f826b18aeab8282ff8e2a13ee8f03fab41be97af13c87883f87e6f0bdda04deebc05e35b601a55cc984478a997725d3faab2101cd9596c757c659e6b6c9178f620fbdcb87e399404f4bcd9b57dd1013818e58a785bed0a7fd1f5e5e355816ceba6745a42e10a145c87aedede2e0bed7bc75015a8354ba95a226c87df41d41e4ae368c4e84e8a032c48977601d71eae547f95375746e1f9c86135481bd09a08fee04db26b96cc9327bbde61cec27a56d114cc0e6459170e6cc4dde84e3fe1d975d05e14dbdac32aa759e5d0268fe819a3dc503247b6c24c1607b4742671f5ad63c21812b1904b3c39ec8734fb1ee77a124a29c50154f53c89754f5e4719cc0279c851a63fc33e16f2393e5134568b78126b5680664fcd1fbf9d88f4efdadc120bbb4f21ddd7bf4c445a534631c5f2c4b51d7842743493b4a13bb99f160987284bc7960aaa6d40dbe05e20f42ff48425d1c8166b7fd457d33d808b456b7b11d3d3c1f445a9698ee8a473fb116c5c4824fa224088fa6f031f07f2972e62592d59536dc4cbe3c1cb33e922b0f35f79f1df10ab43e1d3e5dc480bdd8a7039f71ee9c73f976809ec2853ad0c18e4f0ee73fd1361591375d3db6c822e7baae597fc454aae7b426922e9fd9a87fe52a25d5cd03434d7ffb9f319fbeb403c0836f2117cf851bf7660ecb567a6cd918e85190683c1c0a79da1cd92b8527400008f047a436a4859be0e7b9469c6830a81d81f93ea8ba1b614de4386294089c9b34f4b8116ae7afedd43f6a82abf4302e4d8a9fba0b87347df1f5bb676f496bf29bf9ea9e3ea4bd1dd3f3d4feb7609f96424f35035b5a13fd6efd0441dea1c1f17feae7d5a1ef77aa05537fc87e112e123e306ef0daa36e1ff069be815c5d0b74b6b41c6d5b76c04057de0a43c2e40b04fc11b60f0f1e7ff0b88fb600d79e03cc8b73fed0af95601acca00"}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x259fdbfd, 0x4000000}, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000b00)="94"}) r6 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x2, 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7eff, 0x10000000]}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) write(r6, &(0x7f0000002680)="cf76158d6f7bef8e8ec4bd2978c265aa9b4a69d71c2672af6c850dee18dfb189d48cad85bc9315670b45d47a16e1526323b36241c633ae5fa07c26b59b661a42135e0e1fcb693c3e952ca5034d3f6c2975a07fdebe9013691cd0f93c9450691b2b3303f038ddfa7e112430e92ce19d50de5c9863e8b1bdf5726013d2985147a425918c4bdebab8ccfff25e063194c0", 0x8f) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r8, 0x0, 0x0, 0x0, 0x800, 0x7, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0xffffffff, 0xd66}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 3.806321083s ago: executing program 3 (id=1048): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r7, 0x0, 0x81, 0x7c0, &(0x7f0000000700)="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", 0x4}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 3.69527079s ago: executing program 1 (id=1049): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noquota}, {@noload}]}, 0x3, 0x430, &(0x7f0000000d80)="$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") syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x73d014, 0x0) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x5}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, &(0x7f00000005c0)=""/193, 0x3a, 0xc1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) write$binfmt_script(r2, &(0x7f0000000cc0), 0xfd45) syz_open_procfs(0x0, 0x0) mknod$loop(0x0, 0x1000, 0x1) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 2.554700704s ago: executing program 3 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) 2.554246777s ago: executing program 4 (id=1051): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="4416051100006efc6c0000000000000000fd000000", 0x15) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.315451213s ago: executing program 1 (id=1052): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x2004001}, 0x40004) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="2db926bd7000fddbdf2515000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004040) 2.230791331s ago: executing program 5 (id=1053): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vcsa(0xffffffffffffff9c, 0x0, 0x20600, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.160951529s ago: executing program 0 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfde0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x18, r5, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x80000) shutdown(r6, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 923.380385ms ago: executing program 4 (id=1055): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703836362c696f636861727365743d63703836362c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835322c756e695f786c6174653d312c757466383d302c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c747a3d5554432c73686f72746e616d653d77696e39352c00a00a0cd39f36d6b13ea19f07b37c61c4cf4ebfcb3df05994c20b6e4aaf23620b4cc18ae687df50c7079c24b6115418d83b45e9eeca405cd5d311a10231ee3d6c8d6b8f5c2509c98010751480ddcc0b6d6dd3c7b4df119719a21f887458644c085b43c0c5e06375dc26c7444fc499f4d0e888683e864bc9a2e359756312102a0a492d23f790e5a2a9e539d2c328e973e85c53802527c1d237445a1abab1908ffdd9057f6272d8b377baa22675d9f1db55e5407fc6690f3fc15b929ef7279054d9e55a"], 0x6, 0x2d5, &(0x7f0000000680)="$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") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) 741.274606ms ago: executing program 5 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 40.837453ms ago: executing program 5 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000201050000000000000000000200000834774edc6930"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 0s ago: executing program 4 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), 0x0}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r6}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) sendmmsg$inet(r7, &(0x7f0000001700)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x14) kernel console output (not intermixed with test programs): er 6 [ 196.366070][ T3078] usblp0: removed [ 196.447875][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 196.453951][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 196.460076][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 196.466136][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 197.106369][ T7100] xt_socket: unknown flags 0x40 [ 197.582456][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 197.784753][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 197.796491][ T5889] usb 4-1: config 0 has no interfaces? [ 197.925144][ T5889] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.948044][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.506591][ T5889] usb 4-1: Product: syz [ 198.510786][ T5889] usb 4-1: Manufacturer: syz [ 198.518119][ T5889] usb 4-1: SerialNumber: syz [ 198.526443][ T5889] usb 4-1: config 0 descriptor?? [ 198.794811][ T5889] usb 4-1: USB disconnect, device number 4 [ 200.719645][ T7107] loop1: detected capacity change from 0 to 40427 [ 200.771888][ T7107] F2FS-fs (loop1): build fault injection rate: 690 [ 200.814317][ T7107] F2FS-fs (loop1): invalid crc value [ 200.837016][ T7107] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 201.228698][ T7131] loop1: detected capacity change from 0 to 512 [ 201.334804][ T7131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.416234][ T7131] EXT4-fs (loop1): orphan cleanup on readonly fs [ 201.508576][ T7131] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.346: bg 0: block 248: padding at end of block bitmap is not set [ 201.696683][ T7131] Quota error (device loop1): write_blk: dquota write failed [ 201.704404][ T7131] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 201.869218][ T7131] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.346: Failed to acquire dquot type 1 [ 201.954670][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 201.993574][ T7131] EXT4-fs (loop1): 1 truncate cleaned up [ 202.123194][ T7140] loop3: detected capacity change from 0 to 256 [ 202.635678][ T7131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.684819][ T5889] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.791024][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 202.827655][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.856141][ T5889] usb 1-1: Product: syz [ 202.873272][ T5889] usb 1-1: Manufacturer: syz [ 202.907352][ T5889] usb 1-1: SerialNumber: syz [ 202.987147][ T30] audit: type=1326 audit(1750699419.666:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 203.055728][ T30] audit: type=1326 audit(1750699419.696:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 203.092397][ T30] audit: type=1326 audit(1750699419.696:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 203.149961][ T7146] xt_socket: unknown flags 0x40 [ 203.376566][ T30] audit: type=1326 audit(1750699419.696:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 203.613558][ T5889] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 203.629952][ T7131] syz.1.346 (7131) used greatest stack depth: 20088 bytes left [ 203.653253][ T5889] usb 1-1: USB disconnect, device number 6 [ 203.662251][ T5889] usblp0: removed [ 203.763517][ T30] audit: type=1326 audit(1750699419.696:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 204.566453][ T7137] loop2: detected capacity change from 0 to 32768 [ 204.727616][ T7137] (syz.2.344,7137,0):ocfs2_initialize_super:2227 ERROR: status = -12 [ 204.761827][ T7137] (syz.2.344,7137,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 207.380118][ T7178] tipc: Enabling of bearer rejected, failed to enable media [ 210.685272][ T7197] loop3: detected capacity change from 0 to 32768 [ 210.795269][ T7197] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 211.022688][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 211.448466][ T7209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.371'. [ 211.483819][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 211.590272][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.706079][ T7211] loop4: detected capacity change from 0 to 1024 [ 212.257266][ T7211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.302693][ T7222] loop1: detected capacity change from 0 to 512 [ 212.325487][ T7222] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.422350][ T7222] EXT4-fs (loop1): 1 truncate cleaned up [ 212.576346][ T7222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.695085][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.736424][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.850921][ T7272] loop4: detected capacity change from 0 to 256 [ 219.863812][ T7272] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.907422][ T30] audit: type=1800 audit(1750699436.586:1169): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.389" name="file2" dev="loop4" ino=1048613 res=0 errno=0 [ 219.929038][ T7273] loop3: detected capacity change from 0 to 1024 [ 219.939155][ T7273] EXT4-fs: Ignoring removed nobh option [ 219.964472][ T7251] loop1: detected capacity change from 0 to 32768 [ 220.126627][ T7273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.143147][ T7251] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 220.831551][ T5825] ocfs2: Unmounting device (7,1) on (node local) [ 223.214867][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.944525][ T7308] syz.3.397 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 224.764789][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 224.964702][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 224.986700][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.025746][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 225.069941][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.606922][ T9] usb 4-1: config 0 descriptor?? [ 225.973860][ T7336] loop4: detected capacity change from 0 to 256 [ 225.992478][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 226.015220][ T7336] exfat: Bad value for 'uid' [ 226.019859][ T7336] exfat: Bad value for 'uid' [ 226.026198][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.408'. [ 226.269600][ T7327] loop2: detected capacity change from 0 to 32768 [ 226.276174][ T9] magicmouse 0003:05AC:0265.0003: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 226.700082][ T7327] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 226.977633][ T5889] usb 4-1: USB disconnect, device number 5 [ 227.091670][ T7343] fido_id[7343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 227.849243][ T5827] ocfs2: Unmounting device (7,2) on (node local) [ 228.650240][ T5889] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 229.003085][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.013915][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 229.029265][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 229.040575][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 229.082703][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.903132][ T5889] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 230.042033][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.082293][ T5889] usb 4-1: Product: syz [ 230.104747][ T5889] usb 4-1: Manufacturer: syz [ 230.109463][ T5889] usb 4-1: SerialNumber: syz [ 230.156572][ T7367] loop2: detected capacity change from 0 to 512 [ 230.189708][ T5889] usb 4-1: config 0 descriptor?? [ 230.234288][ T5889] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 230.253427][ T7367] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.311406][ T7367] EXT4-fs (loop2): 1 truncate cleaned up [ 230.326448][ T7367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.363764][ T7357] loop4: detected capacity change from 0 to 40427 [ 230.418607][ T7357] F2FS-fs (loop4): build fault injection rate: 771 [ 230.475563][ T7357] F2FS-fs (loop4): invalid crc value [ 230.566127][ T5976] usb 4-1: USB disconnect, device number 6 [ 231.222599][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.267080][ T30] audit: type=1326 audit(1750699447.936:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 231.274931][ T7357] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 231.353536][ T30] audit: type=1326 audit(1750699447.936:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 231.377175][ T30] audit: type=1326 audit(1750699447.936:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 231.400196][ T30] audit: type=1326 audit(1750699447.936:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 231.473070][ T30] audit: type=1326 audit(1750699447.936:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 231.555137][ T7389] Zero length message leads to an empty skb [ 233.549700][ T7394] loop1: detected capacity change from 0 to 256 [ 234.591726][ T7394] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 234.943353][ T7392] kthread_run failed with err -4 [ 234.950409][ T7392] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 235.025807][ T30] audit: type=1326 audit(1750699451.706:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 235.108173][ T30] audit: type=1326 audit(1750699451.726:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 235.214779][ T30] audit: type=1326 audit(1750699451.736:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 236.220728][ T30] audit: type=1326 audit(1750699451.736:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 236.247808][ T30] audit: type=1326 audit(1750699451.736:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 237.223770][ T30] audit: type=1326 audit(1750699451.736:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cc78e929 code=0x7ffc0000 [ 237.257379][ T30] audit: type=1326 audit(1750699451.966:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8b8e929 code=0x7ffc0000 [ 238.093565][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 238.230624][ T30] audit: type=1326 audit(1750699451.966:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ac8b8e929 code=0x7ffc0000 [ 238.253127][ T30] audit: type=1326 audit(1750699451.966:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8b8e929 code=0x7ffc0000 [ 238.421951][ T30] audit: type=1326 audit(1750699451.966:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8b8e929 code=0x7ffc0000 [ 238.461950][ T30] audit: type=1326 audit(1750699451.966:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ac8b8e929 code=0x7ffc0000 [ 238.550765][ T7420] loop2: detected capacity change from 0 to 512 [ 238.588369][ T7420] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 238.725409][ T30] audit: type=1326 audit(1750699451.966:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8b8e929 code=0x7ffc0000 [ 238.746432][ T7420] EXT4-fs (loop2): 1 truncate cleaned up [ 238.748794][ T30] audit: type=1326 audit(1750699451.966:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8b8e929 code=0x7ffc0000 [ 238.776886][ T30] audit: type=1326 audit(1750699451.966:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2ac8b8e929 code=0x7ffc0000 [ 238.795948][ T7420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.799929][ T30] audit: type=1326 audit(1750699451.966:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac8b8e929 code=0x7ffc0000 [ 239.880319][ T5889] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 240.123879][ T5889] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 240.174497][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.219381][ T5889] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 240.272424][ T5889] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 240.289816][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.323679][ T5889] usb 2-1: Manufacturer: syz [ 240.355921][ T5889] usb 2-1: config 0 descriptor?? [ 240.378642][ T5889] igorplugusb 2-1:0.0: endpoint incorrect [ 240.668556][ T5981] kernel write not supported for file /ppp (pid: 5981 comm: kworker/1:8) [ 241.346496][ T5981] usb 2-1: USB disconnect, device number 7 [ 241.891893][ T7453] loop2: detected capacity change from 0 to 16 [ 242.214374][ T7453] erofs (device loop2): mounted with root inode @ nid 36. [ 242.328090][ T7453] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 242.438224][ T7453] erofs (device loop2): failed to decompress -46 in[60, 4036] out[1851] [ 242.457826][ T7453] erofs (device loop2): read error -117 @ 43 of nid 36 [ 244.153219][ T7447] loop1: detected capacity change from 0 to 32768 [ 244.459348][ T7447] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 244.462005][ T7447] (syz.1.434,7447,1):ocfs2_initialize_super:2227 ERROR: status = -12 [ 244.835655][ T7447] (syz.1.434,7447,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 244.976162][ T7475] loop3: detected capacity change from 0 to 256 [ 245.313963][ T7477] loop2: detected capacity change from 0 to 512 [ 245.424940][ T7477] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.728537][ T7477] EXT4-fs (loop2): 1 truncate cleaned up [ 246.732598][ T7477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.958979][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.501474][ T7519] loop3: detected capacity change from 0 to 2048 [ 249.512453][ T7519] udf: Unknown parameter 'nost' [ 250.107961][ T7527] xt_socket: unknown flags 0x40 [ 252.688084][ T7550] loop4: detected capacity change from 0 to 512 [ 253.289318][ T7550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.314804][ T7550] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.586677][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.868944][ T7567] loop1: detected capacity change from 0 to 2048 [ 254.907599][ T7567] udf: Unknown parameter 'nost' [ 254.963841][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'. [ 255.211287][ T7574] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 255.967799][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.974135][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.630960][ T7585] xt_socket: unknown flags 0x40 [ 257.472987][ T7593] loop3: detected capacity change from 0 to 512 [ 257.479574][ T7592] netlink: 'syz.1.472': attribute type 12 has an invalid length. [ 257.546820][ T7593] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 257.598717][ T7593] EXT4-fs (loop3): 1 truncate cleaned up [ 257.620619][ T7593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.491807][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.452280][ T7610] loop3: detected capacity change from 0 to 256 [ 259.470623][ T7590] loop4: detected capacity change from 0 to 40427 [ 259.508149][ T7610] FAT-fs (loop3): bogus number of FAT sectors [ 259.530151][ T7610] FAT-fs (loop3): Can't find a valid FAT filesystem [ 259.542779][ T7590] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 259.602203][ T7590] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 259.675555][ T7590] F2FS-fs (loop4): invalid crc value [ 260.718823][ T7590] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 262.158718][ T7628] loop4: detected capacity change from 0 to 2048 [ 262.211082][ T7628] udf: Unknown parameter 'nost' [ 262.933869][ T7638] xt_socket: unknown flags 0x40 [ 263.405853][ T7642] loop4: detected capacity change from 0 to 512 [ 263.459502][ T7642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 263.519824][ T7642] EXT4-fs (loop4): 1 truncate cleaned up [ 263.527483][ T7642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.210438][ T7658] loop3: detected capacity change from 0 to 256 [ 264.832526][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.054844][ T5981] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 266.237688][ T7671] ip6gre1: entered allmulticast mode [ 266.287020][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.318588][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.349900][ T5981] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 266.386878][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.421659][ T5981] usb 4-1: config 0 descriptor?? [ 266.765023][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 266.916973][ T5981] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 266.940075][ T5981] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input10 [ 267.922523][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 267.922540][ T30] audit: type=1326 audit(1750699484.596:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df258e929 code=0x7ffc0000 [ 267.967475][ T5981] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 268.181101][ T30] audit: type=1326 audit(1750699484.596:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df258e929 code=0x7ffc0000 [ 268.231792][ T7693] loop1: detected capacity change from 0 to 512 [ 268.280249][ T7693] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 268.306497][ T30] audit: type=1326 audit(1750699484.596:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f0df258e929 code=0x7ffc0000 [ 268.353438][ T7693] EXT4-fs (loop1): 1 truncate cleaned up [ 268.376407][ T30] audit: type=1326 audit(1750699484.596:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df258e929 code=0x7ffc0000 [ 268.402241][ T30] audit: type=1326 audit(1750699484.596:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df258e929 code=0x7ffc0000 [ 268.456479][ T7693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.700332][ T7699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.743314][ T5981] usb 4-1: USB disconnect, device number 7 [ 270.196619][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.288386][ T7703] netlink: 'syz.4.496': attribute type 4 has an invalid length. [ 270.579613][ T7714] overlayfs: conflicting lowerdir path [ 271.928457][ T7724] overlayfs: failed to resolve './file0': -2 [ 272.014496][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.040034][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.048832][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.066061][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.075429][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.124908][ T5981] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 272.289929][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.316236][ T5981] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.372827][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.406880][ T5981] usb 1-1: config 0 descriptor?? [ 272.574207][ T7736] loop3: detected capacity change from 0 to 512 [ 272.640434][ T7736] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 272.725626][ T7736] EXT4-fs (loop3): 1 truncate cleaned up [ 272.781263][ T7736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.842505][ T5981] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 272.920690][ T5981] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input11 [ 273.550532][ T7725] chnl_net:caif_netlink_parms(): no params data found [ 273.875677][ T5981] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 273.891311][ T5981] usb 1-1: USB disconnect, device number 7 [ 273.914687][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 273.933062][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.119473][ T43] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 274.129819][ T5842] Bluetooth: hci5: command tx timeout [ 274.268896][ T7751] loop4: detected capacity change from 0 to 128 [ 274.409468][ T30] audit: type=1804 audit(1750699491.026:1218): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.515" name="/newroot/103/file2/file0" dev="loop4" ino=1048616 res=1 errno=0 [ 274.448192][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.472656][ T43] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 274.515207][ T43] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 274.523432][ T43] usb 2-1: Manufacturer: syz [ 274.587259][ T43] usb 2-1: config 0 descriptor?? [ 274.728307][ T43] igorplugusb 2-1:0.0: endpoint incorrect [ 274.819021][ T7755] fido_id[7755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 275.285315][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'. [ 275.400797][ T7764] loop4: detected capacity change from 0 to 512 [ 276.141592][ T5910] usb 2-1: USB disconnect, device number 8 [ 277.135887][ T5842] Bluetooth: hci5: command tx timeout [ 278.135641][ T7764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.148436][ T7764] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.211577][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.253950][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.724853][ T7725] bridge_slave_0: entered allmulticast mode [ 278.733047][ T7725] bridge_slave_0: entered promiscuous mode [ 278.813644][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 279.127641][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.169454][ T5842] Bluetooth: hci5: command tx timeout [ 279.214481][ T6043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.265847][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.315710][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.376577][ T7725] bridge_slave_1: entered allmulticast mode [ 279.384239][ T7725] bridge_slave_1: entered promiscuous mode [ 279.571972][ T30] audit: type=1326 audit(1750699496.226:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 279.606908][ T30] audit: type=1326 audit(1750699496.246:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 280.251747][ T7790] loop3: detected capacity change from 0 to 512 [ 280.270338][ T7790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 280.289299][ T6043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.329859][ T7792] loop1: detected capacity change from 0 to 1024 [ 280.363990][ T7790] EXT4-fs (loop3): 1 truncate cleaned up [ 280.387019][ T7790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.391485][ T7792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.416945][ T7792] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.440504][ T7787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.739388][ T7725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.080255][ T7800] block device autoloading is deprecated and will be removed. [ 281.133425][ T7800] syz.0.529: attempt to access beyond end of device [ 281.133425][ T7800] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 281.227364][ T6043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.245720][ T5842] Bluetooth: hci5: command tx timeout [ 281.261249][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.289850][ T7725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.641360][ T6043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.715517][ T7725] team0: Port device team_slave_0 added [ 281.758370][ T7725] team0: Port device team_slave_1 added [ 281.956508][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.975882][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.039112][ T7725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.078245][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.089281][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.128089][ T7725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.521855][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.527892][ T7725] hsr_slave_0: entered promiscuous mode [ 282.549289][ T7725] hsr_slave_1: entered promiscuous mode [ 282.574768][ T7725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.592688][ T7725] Cannot create hsr debugfs directory [ 282.872795][ T7824] loop1: detected capacity change from 0 to 2048 [ 282.898620][ T7824] ext4: Unknown parameter 'smackfshat' [ 284.041844][ T6043] bridge_slave_1: left allmulticast mode [ 284.055396][ T6043] bridge_slave_1: left promiscuous mode [ 284.081739][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.157611][ T6043] bridge_slave_0: left allmulticast mode [ 284.163307][ T6043] bridge_slave_0: left promiscuous mode [ 284.204196][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.981901][ T7863] loop0: detected capacity change from 0 to 256 [ 285.953303][ T7871] tipc: Failed to remove unknown binding: 66,1,1/0:52265596/52265598 [ 285.985928][ T7871] tipc: Failed to remove unknown binding: 66,1,1/0:52265596/52265598 [ 286.144451][ T7873] loop0: detected capacity change from 0 to 1024 [ 286.156130][ T7873] EXT4-fs: Ignoring removed nobh option [ 286.168764][ T7873] EXT4-fs: Ignoring removed bh option [ 286.249404][ T7873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.301367][ T7878] loop3: detected capacity change from 0 to 4096 [ 286.320511][ T7878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.332726][ T7878] EXT4-fs (loop3): Test dummy encryption mode enabled [ 286.366503][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.423277][ T7878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.510005][ T6043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.552032][ T6043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.563943][ T6043] bond0 (unregistering): Released all slaves [ 286.582814][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.974953][ T6043] tipc: Left network mode [ 287.339906][ T7898] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 287.997110][ T7897] loop1: detected capacity change from 0 to 512 [ 288.071409][ T7897] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 289.287240][ T7901] loop4: detected capacity change from 0 to 256 [ 289.448278][ T7901] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 290.844661][ T7912] loop1: detected capacity change from 0 to 256 [ 292.614524][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 293.251318][ T7918] loop4: detected capacity change from 0 to 1024 [ 293.286926][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.295054][ T7912] batadv_slave_0: entered promiscuous mode [ 293.513851][ T7918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.694725][ T30] audit: type=1326 audit(1750699510.346:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 293.914496][ T30] audit: type=1326 audit(1750699510.346:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 293.980417][ T30] audit: type=1326 audit(1750699510.346:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 294.029256][ T30] audit: type=1326 audit(1750699510.346:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 294.431641][ T7936] loop1: detected capacity change from 0 to 512 [ 294.461872][ T7936] EXT4-fs: Ignoring removed nobh option [ 295.093763][ T7936] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.564: iget: bad i_size value: 38620345925642 [ 295.136586][ T7936] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.564: couldn't read orphan inode 15 (err -117) [ 295.168688][ T7936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.190684][ T7936] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.564: iget: bad i_size value: 38620345925642 [ 295.212392][ T7936] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.564: iget: bad i_size value: 38620345925642 [ 295.260005][ T7923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.291263][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.504959][ T7940] loop1: detected capacity change from 0 to 512 [ 295.524844][ T7940] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 295.619153][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.666341][ T7725] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.883036][ T6043] hsr_slave_0: left promiscuous mode [ 295.902029][ T6043] hsr_slave_1: left promiscuous mode [ 295.925608][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.951059][ T7947] loop1: detected capacity change from 0 to 2048 [ 296.156863][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.764388][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.780905][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.870013][ T7947] loop1: detected capacity change from 0 to 512 [ 296.884003][ T6043] veth0_macvtap: left promiscuous mode [ 296.912615][ T7947] EXT4-fs (loop1): bad geometry: block count 204800 exceeds size of device (256 blocks) [ 296.959047][ T6043] veth1_vlan: left promiscuous mode [ 297.003075][ T6043] veth0_vlan: left promiscuous mode [ 297.114510][ T30] audit: type=1326 audit(1750699513.786:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 297.189610][ T30] audit: type=1326 audit(1750699513.786:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 297.220346][ T30] audit: type=1326 audit(1750699513.786:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 298.031152][ T30] audit: type=1326 audit(1750699513.786:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 298.137120][ T30] audit: type=1326 audit(1750699513.786:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 298.407066][ T30] audit: type=1326 audit(1750699513.786:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 299.259785][ T7978] loop0: detected capacity change from 0 to 2048 [ 299.281227][ T7978] EXT4-fs: test_dummy_encryption requires encrypt feature [ 299.322443][ T7978] evm: overlay not supported [ 299.363399][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 299.363415][ T30] audit: type=1326 audit(1750699516.036:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.0.574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0df258e929 code=0x0 [ 299.662055][ T6043] team0 (unregistering): Port device team_slave_1 removed [ 299.701608][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 299.738032][ T6043] team0 (unregistering): Port device team_slave_0 removed [ 300.222756][ T7985] loop0: detected capacity change from 0 to 1024 [ 300.325068][ T7985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.482270][ T7725] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 300.500766][ T7725] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 300.512966][ T7725] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.896784][ T8001] loop3: detected capacity change from 0 to 256 [ 301.993471][ T8001] FAT-fs (loop3): Directory bread(block 64) failed [ 302.013780][ T8001] FAT-fs (loop3): Directory bread(block 65) failed [ 302.038203][ T8001] FAT-fs (loop3): Directory bread(block 66) failed [ 302.060350][ T8001] FAT-fs (loop3): Directory bread(block 67) failed [ 302.093358][ T8001] FAT-fs (loop3): Directory bread(block 68) failed [ 302.116977][ T8001] FAT-fs (loop3): Directory bread(block 69) failed [ 302.137337][ T8001] FAT-fs (loop3): Directory bread(block 70) failed [ 302.155325][ T8001] FAT-fs (loop3): Directory bread(block 71) failed [ 302.170260][ T8001] FAT-fs (loop3): Directory bread(block 72) failed [ 302.190820][ T8001] FAT-fs (loop3): Directory bread(block 73) failed [ 302.478124][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.918099][ T8007] loop4: detected capacity change from 0 to 2048 [ 303.046938][ T7725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.196763][ T7725] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.225902][ T8015] loop0: detected capacity change from 0 to 256 [ 303.296783][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.303931][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.409081][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.416282][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.783658][ T5981] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 303.814187][ T7725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.961862][ T5981] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.017825][ T5981] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 304.061774][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.295297][ T5981] usb 2-1: Product: syz [ 304.299511][ T5981] usb 2-1: Manufacturer: syz [ 304.304107][ T5981] usb 2-1: SerialNumber: syz [ 304.543167][ T5981] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 304.745319][ T5981] usb 2-1: USB disconnect, device number 9 [ 304.770711][ T5981] usblp0: removed [ 304.896471][ T7725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.823181][ T7725] veth0_vlan: entered promiscuous mode [ 305.880389][ T7725] veth1_vlan: entered promiscuous mode [ 305.936198][ T8077] loop4: detected capacity change from 0 to 512 [ 305.977732][ T8077] EXT4-fs: Ignoring removed mblk_io_submit option [ 305.990381][ T7725] veth0_macvtap: entered promiscuous mode [ 306.027812][ T8077] ext4: Unknown parameter 'seclabel' [ 306.071082][ T7725] veth1_macvtap: entered promiscuous mode [ 306.199057][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.251808][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.399195][ T6536] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.525593][ T30] audit: type=1326 audit(1750699523.096:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 306.587334][ T6536] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.608111][ T6536] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.677056][ T30] audit: type=1326 audit(1750699523.106:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 306.847055][ T6536] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.872060][ T30] audit: type=1326 audit(1750699523.106:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 306.913344][ T30] audit: type=1326 audit(1750699523.106:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 306.938959][ T30] audit: type=1326 audit(1750699523.106:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 306.962283][ T30] audit: type=1326 audit(1750699523.106:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 306.985173][ T30] audit: type=1326 audit(1750699523.106:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 307.033468][ T30] audit: type=1326 audit(1750699523.106:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 307.287135][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.338691][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.380649][ T30] audit: type=1326 audit(1750699523.106:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 307.415806][ T30] audit: type=1326 audit(1750699523.106:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 307.501312][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.539039][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.774705][ T5981] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 307.829300][ T8109] overlayfs: conflicting lowerdir path [ 307.941596][ T5981] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.018638][ T5981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 308.039009][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.264714][ T5981] usb 4-1: Product: syz [ 308.268918][ T5981] usb 4-1: Manufacturer: syz [ 308.273514][ T5981] usb 4-1: SerialNumber: syz [ 308.507223][ T5981] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 308.572352][ T8128] xt_hashlimit: size too large, truncated to 1048576 [ 308.702881][ T5981] usb 4-1: USB disconnect, device number 8 [ 308.735486][ T5981] usblp0: removed [ 310.039695][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.606'. [ 310.133624][ T8160] loop3: detected capacity change from 0 to 256 [ 310.889560][ T8171] loop5: detected capacity change from 0 to 512 [ 310.942896][ T8171] ext3: Bad value for 'resgid' [ 310.962591][ T8171] ext3: Bad value for 'resgid' [ 311.062367][ T8174] loop0: detected capacity change from 0 to 256 [ 311.244627][ T8174] FAT-fs (loop0): Directory bread(block 64) failed [ 311.251328][ T8174] FAT-fs (loop0): Directory bread(block 65) failed [ 311.258786][ T8174] FAT-fs (loop0): Directory bread(block 66) failed [ 311.265504][ T8174] FAT-fs (loop0): Directory bread(block 67) failed [ 311.272631][ T8174] FAT-fs (loop0): Directory bread(block 68) failed [ 311.279295][ T8174] FAT-fs (loop0): Directory bread(block 69) failed [ 311.286555][ T8174] FAT-fs (loop0): Directory bread(block 70) failed [ 311.293171][ T8174] FAT-fs (loop0): Directory bread(block 71) failed [ 311.300704][ T8174] FAT-fs (loop0): Directory bread(block 72) failed [ 311.307740][ T8174] FAT-fs (loop0): Directory bread(block 73) failed [ 312.685181][ T5889] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 312.845138][ T5889] usb 6-1: device descriptor read/64, error -71 [ 313.081257][ T5910] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 313.089042][ T5889] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 313.244884][ T5889] usb 6-1: device descriptor read/64, error -71 [ 313.278132][ T5910] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.306948][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 313.326520][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.356953][ T5910] usb 5-1: Product: syz [ 313.361260][ T5910] usb 5-1: Manufacturer: syz [ 313.394109][ T5889] usb usb6-port1: attempt power cycle [ 313.399846][ T5910] usb 5-1: SerialNumber: syz [ 313.738471][ T5910] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 313.775237][ T5889] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 313.806417][ T5889] usb 6-1: device descriptor read/8, error -71 [ 313.940071][ T24] usb 5-1: USB disconnect, device number 2 [ 313.952446][ T8192] loop0: detected capacity change from 0 to 40427 [ 313.961468][ T24] usblp0: removed [ 313.979023][ T8192] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 314.014538][ T8192] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 314.039213][ T8192] F2FS-fs (loop0): invalid crc value [ 314.056804][ T5889] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 314.096207][ T5889] usb 6-1: device descriptor read/8, error -71 [ 314.213352][ T5942] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 314.224078][ T5889] usb usb6-port1: unable to enumerate USB device [ 314.357230][ T8192] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 314.364309][ T8192] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 314.383458][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.394902][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 314.412936][ T5942] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 314.422241][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.435620][ T5942] usb 2-1: config 0 descriptor?? [ 314.443564][ T8204] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 314.898355][ T5942] hid-rmi 0003:0461:4E72.0006: item fetching failed at offset 2/5 [ 314.907124][ T5942] hid-rmi 0003:0461:4E72.0006: parse failed [ 314.913164][ T5942] hid-rmi 0003:0461:4E72.0006: probe with driver hid-rmi failed with error -22 [ 315.675234][ T5889] usb 2-1: USB disconnect, device number 10 [ 315.886350][ T8240] loop3: detected capacity change from 0 to 1024 [ 315.907758][ T5832] syz-executor: attempt to access beyond end of device [ 315.907758][ T5832] loop0: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 315.960844][ T5832] syz-executor: attempt to access beyond end of device [ 315.960844][ T5832] loop0: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 315.989309][ T8240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 316.030978][ T5832] syz-executor: attempt to access beyond end of device [ 316.030978][ T5832] loop0: rw=2051, sector=81920, nr_sectors = 8056 limit=40427 [ 316.060257][ T8240] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.094241][ T5832] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5 [ 316.128896][ T5832] F2FS-fs (loop0): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 316.144697][ T5832] F2FS-fs (loop0): Issue discard(10240, 10240, 1007) failed, ret: -5 [ 316.205406][ T8240] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm syz.3.622: lblock 1 mapped to illegal pblock 1 (length 7) [ 316.375906][ T8240] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117 [ 316.585190][ T8240] EXT4-fs (loop3): This should not happen!! Data will be lost [ 316.585190][ T8240] [ 317.090837][ T8259] loop1: detected capacity change from 0 to 256 [ 317.097962][ T3421] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 1) [ 317.169099][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.174523][ T3421] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 317.175876][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.377323][ T3421] EXT4-fs (loop3): This should not happen!! Data will be lost [ 317.377323][ T3421] [ 317.431173][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 318.850916][ T8243] loop5: detected capacity change from 0 to 40427 [ 319.645557][ T8288] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.632'. [ 319.701571][ T8288] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.632'. [ 319.738219][ T8294] overlayfs: missing 'workdir' [ 319.777491][ T8288] netlink: 584 bytes leftover after parsing attributes in process `syz.0.632'. [ 319.782824][ T8294] overlayfs: conflicting lowerdir path [ 320.014787][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 320.187892][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.212313][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.242743][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 320.261473][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 320.281495][ T9] usb 1-1: SerialNumber: syz [ 320.547589][ T9] usb 1-1: 0:2 : does not exist [ 320.562773][ T9] usb 1-1: unit 255 not found! [ 320.622327][ T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 320.778505][ T9] usb 1-1: USB disconnect, device number 8 [ 321.824177][ T8021] udevd[8021]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.039431][ T8328] syz.5.643: attempt to access beyond end of device [ 322.039431][ T8328] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 322.074833][ T8328] FAT-fs (loop11): unable to read boot sector [ 322.763726][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 322.763745][ T30] audit: type=1326 audit(1750699539.436:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 323.066301][ T30] audit: type=1326 audit(1750699539.436:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 323.090695][ T30] audit: type=1326 audit(1750699539.446:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 323.116936][ T30] audit: type=1326 audit(1750699539.446:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 323.169473][ T30] audit: type=1326 audit(1750699539.446:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 323.608489][ T30] audit: type=1326 audit(1750699539.446:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 323.711978][ T30] audit: type=1326 audit(1750699539.446:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 323.737305][ T30] audit: type=1326 audit(1750699539.446:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 323.760382][ T30] audit: type=1326 audit(1750699539.446:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 323.788027][ T30] audit: type=1326 audit(1750699539.446:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 324.245109][ T8361] loop0: detected capacity change from 0 to 1024 [ 324.263119][ T8361] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.280008][ T8361] EXT4-fs: Ignoring removed bh option [ 324.348126][ T8361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.601399][ T8376] loop4: detected capacity change from 0 to 256 [ 324.626841][ T8376] exfat: Deprecated parameter 'utf8' [ 324.636110][ T8374] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 324.668723][ T8376] exfat: Deprecated parameter 'namecase' [ 324.695122][ T8376] exfat: Deprecated parameter 'namecase' [ 324.726303][ T8376] exfat: Deprecated parameter 'utf8' [ 324.762592][ T8380] loop3: detected capacity change from 0 to 512 [ 324.781134][ T8376] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 324.905027][ T8380] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.653: casefold flag without casefold feature [ 324.954264][ T8380] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.653: couldn't read orphan inode 15 (err -117) [ 324.986701][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.996540][ T8387] loop5: detected capacity change from 0 to 256 [ 325.020661][ T8387] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.040350][ T8380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.122595][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.582451][ T8403] loop0: detected capacity change from 0 to 32768 [ 326.674979][ T8403] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 326.894340][ T8416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.333639][ T5832] ocfs2: Unmounting device (7,0) on (node local) [ 327.522406][ T8420] loop5: detected capacity change from 0 to 256 [ 327.650689][ T8420] FAT-fs (loop5): Directory bread(block 64) failed [ 327.675888][ T8420] FAT-fs (loop5): Directory bread(block 65) failed [ 327.704845][ T8420] FAT-fs (loop5): Directory bread(block 66) failed [ 327.711411][ T8420] FAT-fs (loop5): Directory bread(block 67) failed [ 327.758944][ T8420] FAT-fs (loop5): Directory bread(block 68) failed [ 327.795599][ T8420] FAT-fs (loop5): Directory bread(block 69) failed [ 327.815505][ T8420] FAT-fs (loop5): Directory bread(block 70) failed [ 327.838814][ T8420] FAT-fs (loop5): Directory bread(block 71) failed [ 327.854842][ T8420] FAT-fs (loop5): Directory bread(block 72) failed [ 327.874542][ T8408] loop3: detected capacity change from 0 to 40427 [ 327.884537][ T8420] FAT-fs (loop5): Directory bread(block 73) failed [ 327.896848][ T8408] F2FS-fs (loop3): Unrecognized mount option "whint_mode=user-based" or missing value [ 328.174713][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 328.317550][ T8430] loop3: detected capacity change from 0 to 2048 [ 328.344691][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 328.398597][ T43] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 328.408723][ T8430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.417657][ T43] usb 1-1: config 0 has no interface number 0 [ 328.454369][ T43] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 328.485843][ T43] usb 1-1: config 0 interface 196 has no altsetting 0 [ 328.515195][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 328.544653][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.552697][ T43] usb 1-1: Product: syz [ 328.584741][ T43] usb 1-1: Manufacturer: syz [ 328.603896][ T43] usb 1-1: SerialNumber: syz [ 328.615363][ T8430] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 328.639834][ T43] usb 1-1: config 0 descriptor?? [ 328.639839][ T8418] loop1: detected capacity change from 0 to 40427 [ 328.643520][ T8418] F2FS-fs (loop1): build fault injection rate: 690 [ 328.666296][ T8424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.684029][ T8430] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 328.706589][ T8418] F2FS-fs (loop1): Image doesn't support compression [ 328.746756][ T8418] F2FS-fs (loop1): build fault injection type: 0x2 [ 328.754688][ T8430] EXT4-fs (loop3): This should not happen!! Data will be lost [ 328.754688][ T8430] [ 328.798909][ T8418] F2FS-fs (loop1): invalid crc value [ 328.798908][ T8430] EXT4-fs (loop3): Total free blocks count 0 [ 328.840619][ T8430] EXT4-fs (loop3): Free/Dirty block details [ 328.842850][ T8418] F2FS-fs (loop1): Mismatch valid blocks 4 vs. 6 [ 328.868423][ T8430] EXT4-fs (loop3): free_blocks=2415919504 [ 328.873279][ T8418] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 328.917922][ T8430] EXT4-fs (loop3): dirty_blocks=32 [ 328.923205][ T8430] EXT4-fs (loop3): Block reservation details [ 328.949399][ T8430] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 329.092830][ T43] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 329.120725][ T43] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 329.158211][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.345070][ T5910] usb 1-1: USB disconnect, device number 9 [ 330.211374][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 331.174864][ T5942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 331.376368][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.410246][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.441922][ T5942] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 331.482520][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.524513][ T5942] usb 2-1: config 0 descriptor?? [ 331.625616][ T8461] loop3: detected capacity change from 0 to 32768 [ 331.727329][ T8461] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 331.749313][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'. [ 331.941406][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 332.209042][ T5942] holtek_kbd 0003:04D9:A055.0007: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 332.377094][ T8500] netlink: 64 bytes leftover after parsing attributes in process `syz.0.686'. [ 332.381997][ T5942] usb 2-1: USB disconnect, device number 11 [ 332.501530][ T8498] fido_id[8498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 332.571545][ T8500] syz.0.686 (8500) used greatest stack depth: 19936 bytes left [ 333.304986][ T5981] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 333.654158][ T5981] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 333.693696][ T8518] loop1: detected capacity change from 0 to 2048 [ 333.702002][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.729716][ T5981] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 333.789550][ T5981] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 333.811202][ T8518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.830260][ T5981] usb 1-1: Manufacturer: syz [ 333.946291][ T5981] usb 1-1: config 0 descriptor?? [ 333.972216][ T8518] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.995642][ T5981] igorplugusb 1-1:0.0: endpoint incorrect [ 334.092959][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 334.092977][ T30] audit: type=1800 audit(1750699550.766:1299): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.689" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 334.203786][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.504942][ T120] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 334.668301][ T120] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.717528][ T120] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 334.740531][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.778429][ T120] usb 4-1: Product: syz [ 334.792870][ T120] usb 4-1: Manufacturer: syz [ 334.805294][ T120] usb 4-1: SerialNumber: syz [ 334.845191][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 335.037639][ T120] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 335.083766][ T120] usb 4-1: USB disconnect, device number 9 [ 335.099357][ T8547] loop4: detected capacity change from 0 to 1024 [ 335.750133][ T8547] EXT4-fs: Ignoring removed orlov option [ 335.885399][ T8547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.896905][ T120] usblp0: removed [ 335.996216][ T5910] usb 1-1: USB disconnect, device number 10 [ 336.084851][ T8547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.171820][ T8561] loop1: detected capacity change from 0 to 1024 [ 336.213276][ T8561] EXT4-fs: Ignoring removed i_version option [ 336.256264][ T8561] EXT4-fs: inline encryption not supported [ 336.262152][ T8561] ext2: Unknown parameter 'smackfsroot' [ 336.424757][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 336.638535][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.672000][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.722573][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 336.762630][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.936674][ T8579] loop5: detected capacity change from 0 to 512 [ 337.057215][ T8579] EXT4-fs (loop5): Test dummy encryption mode enabled [ 337.102328][ T8579] EXT4-fs error (device loop5): __ext4_iget:5379: inode #11: block 1: comm syz.5.698: invalid block [ 337.130989][ T8579] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.698: couldn't read orphan inode 11 (err -117) [ 337.162442][ T8579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.746148][ T43] usb 5-1: config 0 descriptor?? [ 338.166596][ T8557] loop0: detected capacity change from 0 to 32768 [ 338.282523][ T8557] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 338.648104][ T43] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 338.655000][ T43] arvo 0003:1E7D:30D4.0008: item fetching failed at offset 5/7 [ 338.663269][ T43] arvo 0003:1E7D:30D4.0008: parse failed [ 338.700274][ T43] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -22 [ 338.778699][ T5832] ocfs2: Unmounting device (7,0) on (node local) [ 338.823955][ T7725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.057712][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 340.344481][ T5910] usb 5-1: USB disconnect, device number 3 [ 340.548697][ T8607] loop1: detected capacity change from 0 to 512 [ 340.556895][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.874790][ T8607] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 340.943748][ T8607] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 341.024832][ T8607] System zones: 0-1, 15-15, 18-18, 34-34 [ 341.030826][ T8607] EXT4-fs (loop1): orphan cleanup on readonly fs [ 341.140513][ T8607] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 341.231273][ T8607] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 341.455092][ T8607] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 341.598912][ T8607] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.702: bad orphan inode 16 [ 341.906517][ T8607] ext4_test_bit(bit=15, block=18) = 1 [ 341.956147][ T5981] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 342.113063][ T8607] is_bad_inode(inode)=0 [ 342.201520][ T8607] NEXT_ORPHAN(inode)=0 [ 342.206066][ T8607] max_ino=32 [ 342.209276][ T8607] i_nlink=2 [ 342.214128][ T8607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 342.266458][ T5981] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 342.324716][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.347900][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.366001][ T5981] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 342.404649][ T5981] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 342.412686][ T5981] usb 1-1: Manufacturer: syz [ 342.488996][ T5981] usb 1-1: config 0 descriptor?? [ 342.536990][ T5981] igorplugusb 1-1:0.0: endpoint incorrect [ 342.835075][ T8635] loop1: detected capacity change from 0 to 256 [ 342.994133][ T8635] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 343.464640][ T5942] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 343.656404][ T5942] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.672808][ T5942] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 343.685204][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.703692][ T5942] usb 6-1: Product: syz [ 343.732042][ T5942] usb 6-1: Manufacturer: syz [ 343.754546][ T5942] usb 6-1: SerialNumber: syz [ 343.996800][ T8631] loop3: detected capacity change from 0 to 40427 [ 344.035868][ T8631] F2FS-fs (loop3): build fault injection rate: 771 [ 344.052575][ T8631] F2FS-fs (loop3): invalid crc value [ 344.065710][ T5942] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 344.147282][ T5942] usb 6-1: USB disconnect, device number 6 [ 344.203820][ T5942] usblp0: removed [ 344.209145][ T8631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 344.240628][ T30] audit: type=1800 audit(1750699560.916:1300): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.706" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 344.243452][ T8655] f2fs_ckpt-7:3: attempt to access beyond end of device [ 344.243452][ T8655] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 344.455911][ T120] usb 1-1: USB disconnect, device number 11 [ 344.469150][ T8655] CPU: 0 UID: 0 PID: 8655 Comm: f2fs_ckpt-7:3 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 344.469178][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.469195][ T8655] Call Trace: [ 344.469203][ T8655] [ 344.469212][ T8655] dump_stack_lvl+0x189/0x250 [ 344.469244][ T8655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.469264][ T8655] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 344.469284][ T8655] ? __pfx_queue_work_on+0x10/0x10 [ 344.469309][ T8655] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 344.469327][ T8655] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 344.469347][ T8655] ? f2fs_hw_is_readonly+0x39b/0x470 [ 344.469377][ T8655] f2fs_handle_critical_error+0x37c/0x540 [ 344.469408][ T8655] f2fs_write_end_io+0x495/0x810 [ 344.469423][ T8655] ? blkg_put+0x22/0x240 [ 344.469464][ T8655] __submit_merged_bio+0x27a/0x6a0 [ 344.469496][ T8655] __submit_merged_write_cond+0x255/0x530 [ 344.469529][ T8655] f2fs_write_data_pages+0x261d/0x3000 [ 344.469600][ T8655] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 344.469713][ T8655] ? __lock_acquire+0xab9/0xd20 [ 344.469745][ T8655] ? do_raw_spin_lock+0x121/0x290 [ 344.469777][ T8655] ? do_raw_spin_unlock+0x122/0x240 [ 344.469795][ T8655] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 344.469821][ T8655] do_writepages+0x32b/0x550 [ 344.469858][ T8655] ? do_raw_spin_unlock+0x122/0x240 [ 344.469882][ T8655] filemap_fdatawrite+0x199/0x240 [ 344.469905][ T8655] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 344.469987][ T8655] ? do_raw_spin_unlock+0x122/0x240 [ 344.470011][ T8655] f2fs_sync_dirty_inodes+0x31f/0x830 [ 344.470047][ T8655] f2fs_write_checkpoint+0x95a/0x1df0 [ 344.470094][ T8655] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 344.470161][ T8655] ? down_write+0x162/0x1f0 [ 344.470183][ T8655] ? __pfx_down_write+0x10/0x10 [ 344.470206][ T8655] ? __pfx___schedule+0x10/0x10 [ 344.470234][ T8655] __checkpoint_and_complete_reqs+0xd9/0x3b0 [ 344.470259][ T8655] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 344.470297][ T8655] issue_checkpoint_thread+0xd9/0x260 [ 344.470319][ T8655] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 344.470337][ T8655] ? __pfx_autoremove_wake_function+0x10/0x10 [ 344.470358][ T8655] ? __kthread_parkme+0x7b/0x200 [ 344.470382][ T8655] ? __kthread_parkme+0x1a1/0x200 [ 344.470414][ T8655] kthread+0x711/0x8a0 [ 344.470436][ T8655] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 344.470454][ T8655] ? __pfx_kthread+0x10/0x10 [ 344.470474][ T8655] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.470492][ T8655] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.470509][ T8655] ? __pfx_kthread+0x10/0x10 [ 344.470529][ T8655] ret_from_fork+0x3fc/0x770 [ 344.470555][ T8655] ? __pfx_ret_from_fork+0x10/0x10 [ 344.470590][ T8655] ? __switch_to_asm+0x39/0x70 [ 344.470605][ T8655] ? __switch_to_asm+0x33/0x70 [ 344.470620][ T8655] ? __pfx_kthread+0x10/0x10 [ 344.470639][ T8655] ret_from_fork_asm+0x1a/0x30 [ 344.470677][ T8655] [ 344.470685][ T8655] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 346.624051][ T8659] loop0: detected capacity change from 0 to 32768 [ 346.749673][ T8659] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 346.972202][ T5832] ocfs2: Unmounting device (7,0) on (node local) [ 347.315274][ T8685] loop5: detected capacity change from 0 to 256 [ 347.478342][ T8685] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 348.937097][ T8705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.721'. [ 348.975021][ T8705] unsupported nlmsg_type 40 [ 349.398516][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 351.085714][ T8730] loop5: detected capacity change from 0 to 8192 [ 352.918818][ T8738] loop0: detected capacity change from 0 to 256 [ 353.054203][ T8738] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 353.470772][ T8728] loop3: detected capacity change from 0 to 32768 [ 353.508208][ T8744] loop5: detected capacity change from 0 to 256 [ 353.753677][ T8742] loop1: detected capacity change from 0 to 40427 [ 353.821832][ T8742] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 353.844904][ T8728] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 353.844973][ T8728] (syz.3.726,8728,1):ocfs2_initialize_super:2227 ERROR: status = -12 [ 353.882922][ T8742] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 353.939787][ T8728] (syz.3.726,8728,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 353.944803][ T8744] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d) [ 353.989916][ T8742] F2FS-fs (loop1): invalid crc value [ 354.046405][ T8744] exFAT-fs (loop5): failed to load alloc-bitmap [ 354.062635][ T8744] exFAT-fs (loop5): failed to recognize exfat type [ 354.110975][ T8742] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 354.459163][ T8764] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 354.504694][ T8764] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 354.523705][ T8766] overlayfs: conflicting lowerdir path [ 354.545977][ T8742] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 354.553210][ T8742] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 354.588917][ T8742] F2FS-fs (loop1): Found FS corruption, run fsck to fix. [ 357.069396][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 357.235835][ T8793] loop1: detected capacity change from 0 to 256 [ 357.283971][ T8793] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 358.950246][ T8814] loop0: detected capacity change from 0 to 256 [ 359.036473][ T30] audit: type=1326 audit(1750699575.706:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 359.059258][ T30] audit: type=1326 audit(1750699575.706:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 359.097798][ T30] audit: type=1326 audit(1750699575.706:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 359.164016][ T8814] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 359.167950][ T30] audit: type=1326 audit(1750699575.706:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 359.199148][ T30] audit: type=1326 audit(1750699575.706:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 359.224045][ T30] audit: type=1326 audit(1750699575.706:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 359.589322][ T5882] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 360.215313][ T30] audit: type=1326 audit(1750699575.706:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 360.492510][ T8828] loop3: detected capacity change from 0 to 512 [ 360.933364][ T8828] ext4: Unknown parameter 'nouser_xattr' [ 362.056266][ T5882] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 362.066646][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.079934][ T5882] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 362.111738][ T30] audit: type=1326 audit(1750699575.706:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 362.209079][ T5882] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 362.217580][ T5882] usb 2-1: Manufacturer: syz [ 362.226323][ T5882] usb 2-1: config 0 descriptor?? [ 362.233330][ T5882] usb 2-1: can't set config #0, error -71 [ 362.247021][ T5882] usb 2-1: USB disconnect, device number 12 [ 362.272495][ T30] audit: type=1326 audit(1750699575.706:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe31978e929 code=0x7ffc0000 [ 362.307785][ T8833] loop3: detected capacity change from 0 to 256 [ 362.601130][ T8833] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 363.351354][ T30] audit: type=1326 audit(1750699575.776:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3197858e7 code=0x7ffc0000 [ 364.369549][ T8854] loop4: detected capacity change from 0 to 256 [ 364.430815][ T8854] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 364.473812][ T8854] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 364.741485][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 366.030897][ T8870] netlink: 9 bytes leftover after parsing attributes in process `syz.5.768'. [ 366.137271][ T8870] gretap0: entered promiscuous mode [ 366.178085][ T8874] netlink: 5 bytes leftover after parsing attributes in process `syz.5.768'. [ 366.233552][ T8874] 0ªX¹¦D: renamed from gretap0 [ 366.245344][ T8874] 0ªX¹¦D: left promiscuous mode [ 366.262086][ T8874] 0ªX¹¦D: entered allmulticast mode [ 366.334201][ T8874] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 366.625438][ T5981] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 366.808069][ T5981] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 366.858761][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.891507][ T5981] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 366.935427][ T5981] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 366.943539][ T5981] usb 1-1: Manufacturer: syz [ 367.008885][ T5981] usb 1-1: config 0 descriptor?? [ 367.045448][ T5981] igorplugusb 1-1:0.0: endpoint incorrect [ 367.246688][ T8882] loop5: detected capacity change from 0 to 512 [ 367.446276][ T8882] EXT4-fs: Ignoring removed i_version option [ 367.926672][ T8882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.984164][ T8882] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.395075][ T5981] usb 1-1: USB disconnect, device number 12 [ 369.875323][ T8910] loop4: detected capacity change from 0 to 1024 [ 370.002045][ T8910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.829150][ T8882] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 370.911355][ T8922] loop1: detected capacity change from 0 to 256 [ 370.973679][ T8922] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 370.995350][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 371.587525][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.846318][ T8937] gretap0: entered promiscuous mode [ 372.852639][ T8937] macsec1: entered promiscuous mode [ 372.954066][ T8937] gretap0: left promiscuous mode [ 373.276694][ T8939] loop0: detected capacity change from 0 to 512 [ 373.385460][ T8939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.518484][ T8939] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.552099][ T7725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.281738][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.525026][ T5882] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 374.876466][ T8957] xt_bpf: check failed: parse error [ 375.124687][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 376.811251][ T5882] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 376.843219][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.860847][ T5882] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 376.919478][ T5882] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 376.938203][ T5882] usb 6-1: Manufacturer: syz [ 376.955154][ T5882] usb 6-1: config 0 descriptor?? [ 377.882786][ T5882] usb 6-1: can't set config #0, error -71 [ 377.992060][ T8978] loop1: detected capacity change from 0 to 512 [ 378.053379][ T8978] ext3: Bad value for 'resgid' [ 378.094969][ T8978] ext3: Bad value for 'resgid' [ 378.950602][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.956992][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.105111][ T5882] usb 6-1: USB disconnect, device number 7 [ 379.911673][ T8992] loop3: detected capacity change from 0 to 256 [ 379.973862][ T8992] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 381.044066][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 383.144069][ T8998] loop1: detected capacity change from 0 to 40427 [ 383.194967][ T8998] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 383.243384][ T8998] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 383.346996][ T8998] F2FS-fs (loop1): invalid crc value [ 383.995180][ T5981] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 384.015391][ T8998] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 384.386959][ T5981] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 384.448188][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.492401][ T9027] loop3: detected capacity change from 0 to 512 [ 384.534325][ T5981] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 384.578602][ T9027] ext3: Bad value for 'resgid' [ 384.583507][ T9027] ext3: Bad value for 'resgid' [ 384.602989][ T5981] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 384.658897][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 384.658914][ T30] audit: type=1326 audit(1750699601.336:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 384.658929][ T5981] usb 6-1: Manufacturer: syz [ 384.728037][ T30] audit: type=1326 audit(1750699601.406:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 384.973294][ T30] audit: type=1326 audit(1750699601.406:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 385.608527][ T30] audit: type=1326 audit(1750699601.406:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 385.632670][ T5981] usb 6-1: config 0 descriptor?? [ 385.637953][ T30] audit: type=1326 audit(1750699601.406:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 385.664317][ T5981] igorplugusb 6-1:0.0: endpoint incorrect [ 385.674273][ T30] audit: type=1326 audit(1750699601.406:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 385.696706][ T30] audit: type=1326 audit(1750699601.406:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 385.730894][ T30] audit: type=1326 audit(1750699601.406:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 385.799475][ T30] audit: type=1326 audit(1750699601.406:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 385.844285][ T30] audit: type=1326 audit(1750699601.636:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 386.384025][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 387.004793][ T24] usb 6-1: USB disconnect, device number 8 [ 387.542680][ T9063] netlink: 'syz.4.821': attribute type 13 has an invalid length. [ 387.571622][ T9063] netlink: 'syz.4.821': attribute type 17 has an invalid length. [ 387.633181][ T9065] syz.4.821 (9065): attempted to duplicate a private mapping with mremap. This is not supported. [ 388.671858][ T9069] loop4: detected capacity change from 0 to 256 [ 388.952464][ T9069] exfat: Deprecated parameter 'namecase' [ 389.014766][ T9069] exfat: Bad value for 'uid' [ 389.042758][ T9069] exfat: Bad value for 'uid' [ 389.193061][ T9065] binder: 9059:9065 ioctl c0306201 200000000c00 returned -14 [ 389.207416][ T9075] loop1: detected capacity change from 0 to 512 [ 389.246356][ T9075] ext3: Bad value for 'resgid' [ 389.281245][ T9075] ext3: Bad value for 'resgid' [ 389.503906][ T9063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.961237][ T9098] netlink: 96 bytes leftover after parsing attributes in process `syz.3.826'. [ 391.504771][ T5882] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 391.712149][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.743803][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.792291][ T5882] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 391.843314][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.880051][ T5882] usb 1-1: config 0 descriptor?? [ 392.550834][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 392.630904][ T9108] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 392.704968][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 392.704986][ T30] audit: type=1326 audit(1750699609.376:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 392.789332][ T9110] loop1: detected capacity change from 0 to 512 [ 392.854013][ T30] audit: type=1326 audit(1750699609.376:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 392.902029][ T5882] usb 1-1: string descriptor 0 read error: -22 [ 392.931197][ T30] audit: type=1326 audit(1750699609.416:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 392.933532][ T9110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.968479][ T9110] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.976961][ T5882] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 392.991372][ T30] audit: type=1326 audit(1750699609.416:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 393.017504][ T30] audit: type=1326 audit(1750699609.426:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 393.040094][ T30] audit: type=1326 audit(1750699609.426:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 393.062727][ T30] audit: type=1326 audit(1750699609.426:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 393.085728][ T5882] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 393.093830][ T5882] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 393.143402][ T5882] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 393.145240][ T30] audit: type=1326 audit(1750699609.426:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f238238e929 code=0x7ffc0000 [ 393.193940][ T5882] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 393.238229][ T5882] usb 1-1: USB disconnect, device number 13 [ 393.310499][ T30] audit: type=1326 audit(1750699609.426:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f238238e963 code=0x7ffc0000 [ 393.333617][ T30] audit: type=1326 audit(1750699609.436:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f238238d3df code=0x7ffc0000 [ 393.441727][ T9116] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1235772060 (1235772060 ns) > initial count (604852057 ns). Using initial count to start timer. [ 395.167748][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.213150][ T9135] loop5: detected capacity change from 0 to 256 [ 395.348200][ T9135] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 396.076448][ T9131] loop0: detected capacity change from 0 to 40427 [ 396.122980][ T9131] F2FS-fs (loop0): invalid crc value [ 396.318804][ T9150] veth0: entered promiscuous mode [ 396.329614][ T9150] veth0: left promiscuous mode [ 397.383194][ T9131] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 398.464002][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 398.931228][ T9171] loop5: detected capacity change from 0 to 512 [ 399.020218][ T9169] loop4: detected capacity change from 0 to 256 [ 399.042406][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 399.052610][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.061900][ T9169] batadv_slave_0: entered promiscuous mode [ 399.180011][ T9171] EXT4-fs (loop5): 1 orphan inode deleted [ 399.221136][ T6540] __quota_error: 51 callbacks suppressed [ 399.221155][ T6540] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 399.256392][ T9171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.270086][ T6540] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 1 [ 399.314214][ T9171] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.473267][ T7725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.039253][ T9204] loop0: detected capacity change from 0 to 256 [ 401.154308][ T9204] FAT-fs (loop0): Directory bread(block 64) failed [ 401.189493][ T9204] FAT-fs (loop0): Directory bread(block 65) failed [ 401.204869][ T9204] FAT-fs (loop0): Directory bread(block 66) failed [ 401.223051][ T9204] FAT-fs (loop0): Directory bread(block 67) failed [ 401.244169][ T9204] FAT-fs (loop0): Directory bread(block 68) failed [ 401.267042][ T9204] FAT-fs (loop0): Directory bread(block 69) failed [ 401.273695][ T9204] FAT-fs (loop0): Directory bread(block 70) failed [ 401.304160][ T9204] FAT-fs (loop0): Directory bread(block 71) failed [ 401.335109][ T9204] FAT-fs (loop0): Directory bread(block 72) failed [ 401.341669][ T9204] FAT-fs (loop0): Directory bread(block 73) failed [ 403.307735][ T9214] loop3: detected capacity change from 0 to 128 [ 403.376608][ T9214] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.573384][ T9214] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 403.684242][ T9214] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 18: comm syz.3.861: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 403.708392][ T9214] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem [ 403.807360][ T5826] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.421720][ T9224] loop5: detected capacity change from 0 to 128 [ 404.568023][ T9224] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.634025][ T9224] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.207606][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 405.326619][ T7725] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.390214][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.403628][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.420263][ T9] usb 5-1: Product: syz [ 405.424463][ T9] usb 5-1: Manufacturer: syz [ 405.429535][ T9] usb 5-1: SerialNumber: syz [ 406.644779][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 407.758820][ T9] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 407.789325][ T9263] IPv6: NLM_F_REPLACE set, but no existing node found! [ 407.796942][ T9] cdc_ncm 5-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048 [ 407.817852][ T9] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 408.669624][ T9] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 408.759312][ T9] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 408.868678][ T9] usb 5-1: USB disconnect, device number 4 [ 408.904062][ T9] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 410.411411][ T9284] overlayfs: missing 'lowerdir' [ 412.520778][ T9306] loop5: detected capacity change from 0 to 512 [ 412.565196][ T9306] EXT4-fs (loop5): Test dummy encryption mode enabled [ 412.573307][ T9309] loop3: detected capacity change from 0 to 512 [ 412.579824][ T9306] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 412.605840][ T9306] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.887: bad orphan inode 131083 [ 412.669543][ T9309] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 412.705741][ T9306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.728522][ T9309] EXT4-fs (loop3): 1 truncate cleaned up [ 412.746504][ T9309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.285069][ T9315] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 413.908284][ T9315] overlayfs: missing 'lowerdir' [ 413.916050][ T30] audit: type=1800 audit(1750699630.566:1448): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.887" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 415.184842][ T7725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.743765][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.609672][ T9331] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 416.734750][ T9331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 417.328748][ T9353] loop5: detected capacity change from 0 to 512 [ 417.350224][ T9353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 417.477810][ T9353] EXT4-fs (loop5): 1 truncate cleaned up [ 417.525597][ T9353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.546502][ T7725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.654839][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'. [ 419.724277][ T9379] loop1: detected capacity change from 0 to 512 [ 419.817225][ T9379] EXT4-fs (loop1): 1 orphan inode deleted [ 419.823842][ T9380] veth1_macvtap: left promiscuous mode [ 419.833471][ T9379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.848825][ T9380] macsec0: entered allmulticast mode [ 419.924758][ T6536] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 419.945314][ T9379] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.985605][ T6536] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 420.007163][ T9379] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.908: iget: bad i_size value: 360287970189639690 [ 420.192602][ T9389] loop3: detected capacity change from 0 to 1024 [ 420.207096][ T9389] EXT4-fs: Ignoring removed nobh option [ 420.225521][ T9389] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 420.273924][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.274840][ T9389] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.911: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 420.332692][ T9389] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.911: couldn't read orphan inode 11 (err -117) [ 420.428197][ T9390] netlink: 'syz.0.910': attribute type 12 has an invalid length. [ 420.460478][ T9389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.594196][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.780919][ T9401] loop1: detected capacity change from 0 to 512 [ 420.816346][ T9401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 420.887337][ T9401] EXT4-fs (loop1): 1 truncate cleaned up [ 420.919200][ T9401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.835784][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.214443][ T9439] loop4: detected capacity change from 0 to 256 [ 425.266572][ T9444] loop3: detected capacity change from 0 to 1024 [ 425.270809][ T9439] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 425.313603][ T9439] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 425.624843][ T9444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.754699][ T9439] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 425.849809][ T9444] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.209164][ T9449] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 427.267160][ T9449] EXT4-fs (loop3): Remounting filesystem read-only [ 427.721227][ T9462] loop5: detected capacity change from 0 to 512 [ 427.786562][ T9462] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 427.906904][ T9462] EXT4-fs (loop5): 1 truncate cleaned up [ 427.918333][ T9464] netlink: 'syz.0.928': attribute type 12 has an invalid length. [ 427.928078][ T9462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.973594][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.561357][ T9484] loop1: detected capacity change from 0 to 256 [ 428.577249][ T9484] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 428.587988][ T9484] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 428.624914][ T9484] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 430.002492][ T7725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.260160][ T9489] tipc: Started in network mode [ 430.265145][ T9489] tipc: Node identity 7365725f69643d3, cluster identity 4711 [ 430.272571][ T9489] tipc: Enabling of bearer rejected, failed to enable media [ 432.210676][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 432.440767][ T9516] loop1: detected capacity change from 0 to 512 [ 432.669969][ T9516] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 432.784154][ T9516] EXT4-fs (loop1): 1 truncate cleaned up [ 432.811607][ T9516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.268706][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 434.230193][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 434.237811][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 434.254667][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 434.301796][ T9523] netlink: 'syz.5.944': attribute type 12 has an invalid length. [ 434.508013][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 434.515873][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 434.523285][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 434.531258][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 434.543171][ T9] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 434.556871][ T9] hid-generic 00A0:0008:0003.000A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 434.844398][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.343254][ T9533] fido_id[9533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 437.075025][ T5882] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 437.486722][ T9565] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.573913][ T5882] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 437.908950][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.929618][ T5882] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 437.945982][ T5882] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 437.954017][ T5882] usb 2-1: Manufacturer: syz [ 437.984912][ T5882] usb 2-1: config 0 descriptor?? [ 438.000282][ T5882] igorplugusb 2-1:0.0: endpoint incorrect [ 438.134903][ T5981] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 438.269287][ T9577] loop5: detected capacity change from 0 to 256 [ 438.312426][ T5981] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 438.317002][ T9577] exfat: Bad value for 'uid' [ 438.329197][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.353315][ T9577] exfat: Bad value for 'uid' [ 438.356196][ T5981] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 438.404941][ T5981] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 438.413225][ T5981] usb 1-1: Manufacturer: syz [ 438.447338][ T5981] usb 1-1: config 0 descriptor?? [ 438.468381][ T5981] igorplugusb 1-1:0.0: endpoint incorrect [ 438.809896][ T9] usb 2-1: USB disconnect, device number 13 [ 438.999074][ T9583] fuse: Invalid rootmode [ 440.105370][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.111807][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.417183][ T9] usb 1-1: USB disconnect, device number 14 [ 441.161082][ T9600] loop0: detected capacity change from 0 to 512 [ 441.339908][ T9600] EXT4-fs (loop0): 1 orphan inode deleted [ 441.371457][ T6044] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 441.395537][ T9600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.423233][ T6044] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 441.444095][ T9600] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.463077][ T9600] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.969: iget: bad i_size value: 360287970189639690 [ 441.526170][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.592303][ T9605] loop4: detected capacity change from 0 to 8192 [ 441.942716][ T9605] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 441.994100][ T9605] FAT-fs (loop4): Filesystem has been set read-only [ 442.019586][ T9605] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 442.062826][ T9605] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 442.123518][ T9605] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 442.269498][ T9596] loop1: detected capacity change from 0 to 40427 [ 442.283503][ T9596] F2FS-fs (loop1): build fault injection rate: 690 [ 442.650454][ T9596] F2FS-fs (loop1): invalid crc value [ 443.504253][ T9631] netlink: 'syz.0.977': attribute type 13 has an invalid length. [ 443.529403][ T9631] netlink: 'syz.0.977': attribute type 17 has an invalid length. [ 443.568241][ T9632] loop0: detected capacity change from 0 to 256 [ 443.605518][ T9632] exfat: Deprecated parameter 'namecase' [ 443.611238][ T9632] exfat: Bad value for 'uid' [ 443.664954][ T9632] exfat: Bad value for 'uid' [ 443.687556][ T9632] binder: 9629:9632 ioctl c0306201 200000000c00 returned -14 [ 443.959990][ T9631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.338356][ T9641] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 445.006349][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 445.322929][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 445.362971][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.416588][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 445.442821][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 445.495484][ T9] usb 2-1: Manufacturer: syz [ 445.535777][ T9] usb 2-1: config 0 descriptor?? [ 446.056895][ T9] igorplugusb 2-1:0.0: endpoint incorrect [ 446.289266][ T9665] loop4: detected capacity change from 0 to 256 [ 446.392033][ T30] audit: type=1804 audit(1750699663.066:1449): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.989" name="/newroot/195/file1/file0" dev="loop4" ino=1048712 res=1 errno=0 [ 447.054070][ T9] usb 2-1: USB disconnect, device number 14 [ 447.267016][ T9674] loop5: detected capacity change from 0 to 128 [ 447.298851][ T9676] netlink: 'syz.1.990': attribute type 13 has an invalid length. [ 447.397210][ T9676] netlink: 'syz.1.990': attribute type 17 has an invalid length. [ 447.399690][ T9678] loop1: detected capacity change from 0 to 256 [ 447.425772][ T9678] exfat: Deprecated parameter 'namecase' [ 447.452309][ T9678] exfat: Bad value for 'uid' [ 447.486715][ T9678] exfat: Bad value for 'uid' [ 447.525675][ T9678] binder: 9671:9678 ioctl c0306201 200000000c00 returned -14 [ 447.700446][ T9676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.865300][ T3078] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 449.092657][ T9698] loop3: detected capacity change from 0 to 8192 [ 449.196838][ T3078] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 449.422587][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.430121][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.494712][ T3078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.516101][ T3078] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 449.534722][ T3078] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 449.543594][ T3078] usb 2-1: Manufacturer: syz [ 449.596004][ T3078] usb 2-1: config 0 descriptor?? [ 449.621968][ T3078] igorplugusb 2-1:0.0: endpoint incorrect [ 449.826162][ T9710] loop0: detected capacity change from 0 to 256 [ 449.933027][ T30] audit: type=1804 audit(1750699666.606:1450): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1003" name="/newroot/214/file1/file0" dev="loop0" ino=1048714 res=1 errno=0 [ 450.081368][ T9696] loop5: detected capacity change from 0 to 40427 [ 450.817087][ T9696] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(15) root(3) [ 450.836157][ T3078] usb 2-1: USB disconnect, device number 15 [ 450.894663][ T9696] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 450.965880][ T9722] loop3: detected capacity change from 0 to 256 [ 450.975031][ T9696] F2FS-fs (loop5): Unrecognized mount option "whint_mode=off" or missing value [ 451.160458][ T9722] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 451.346201][ T9733] netlink: 'syz.1.1008': attribute type 13 has an invalid length. [ 451.392690][ T9733] netlink: 'syz.1.1008': attribute type 17 has an invalid length. [ 451.452482][ T9734] loop1: detected capacity change from 0 to 256 [ 451.506657][ T9734] exfat: Deprecated parameter 'namecase' [ 451.550083][ T9733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.590328][ T9738] overlayfs: missing 'workdir' [ 451.634728][ T9734] exfat: Bad value for 'uid' [ 451.639362][ T9734] exfat: Bad value for 'uid' [ 451.720209][ T9728] binder: 9727:9728 ioctl c0306201 200000000c00 returned -14 [ 454.088322][ T9758] loop0: detected capacity change from 0 to 256 [ 454.139125][ T9758] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.401127][ T30] audit: type=1800 audit(1750699671.066:1451): pid=9758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1017" name="file2" dev="loop0" ino=1048716 res=0 errno=0 [ 454.634916][ T5942] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 454.813055][ T9760] xt_socket: unknown flags 0x40 [ 454.936231][ T5942] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 454.981951][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.018847][ T5942] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 455.044631][ T5942] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 455.064610][ T5942] usb 5-1: Manufacturer: syz [ 455.101939][ T5942] usb 5-1: config 0 descriptor?? [ 455.118417][ T5942] igorplugusb 5-1:0.0: endpoint incorrect [ 455.465576][ T9770] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 456.003983][ T9777] overlayfs: missing 'workdir' [ 456.337886][ T9783] loop3: detected capacity change from 0 to 1024 [ 456.383758][ T9783] EXT4-fs: Ignoring removed orlov option [ 456.389677][ T9783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.597404][ T5882] usb 5-1: USB disconnect, device number 5 [ 457.696825][ T9783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.081703][ T9798] loop1: detected capacity change from 0 to 256 [ 459.160468][ T9798] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.201076][ T9807] netlink: 'syz.5.1029': attribute type 13 has an invalid length. [ 459.245761][ T9807] netlink: 'syz.5.1029': attribute type 17 has an invalid length. [ 459.330261][ T9808] loop5: detected capacity change from 0 to 256 [ 459.341393][ T30] audit: type=1800 audit(1750699676.006:1452): pid=9798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1028" name="file2" dev="loop1" ino=1048718 res=0 errno=0 [ 459.362340][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.374995][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 459.409281][ T9807] 0ªX¹¦D: left allmulticast mode [ 459.416330][ T9808] exfat: Deprecated parameter 'namecase' [ 459.422033][ T9808] exfat: Bad value for 'uid' [ 459.429323][ T9808] exfat: Bad value for 'uid' [ 459.460809][ T9808] binder: 9805:9808 ioctl c0306201 200000000c00 returned -14 [ 459.582521][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.639849][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.650829][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 459.660420][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.688465][ T9] usb 4-1: config 0 descriptor?? [ 459.697568][ T9815] loop1: detected capacity change from 0 to 512 [ 459.727549][ T9815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 459.759149][ T9807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.786567][ T9817] overlayfs: missing 'workdir' [ 459.807837][ T9815] EXT4-fs (loop1): 1 truncate cleaned up [ 459.833790][ T9815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.138618][ T9822] netlink: 'syz.5.1035': attribute type 1 has an invalid length. [ 460.141517][ T9] hid_parser_main: 5 callbacks suppressed [ 460.141537][ T9] arvo 0003:1E7D:30D4.000B: unknown main item tag 0x0 [ 460.162572][ T9] arvo 0003:1E7D:30D4.000B: item fetching failed at offset 5/7 [ 460.189298][ T9] arvo 0003:1E7D:30D4.000B: parse failed [ 460.246494][ T9] arvo 0003:1E7D:30D4.000B: probe with driver arvo failed with error -22 [ 460.439827][ T24] usb 4-1: USB disconnect, device number 10 [ 461.550248][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.616561][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.134838][ T5882] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 462.374446][ T9847] loop0: detected capacity change from 0 to 256 [ 462.473469][ T9847] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.896168][ T9848] veth0_vlan: entered allmulticast mode [ 463.076632][ T5882] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 463.105315][ T30] audit: type=1800 audit(1750699679.776:1453): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1042" name="file2" dev="loop0" ino=1048720 res=0 errno=0 [ 463.126336][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.139777][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.232135][ T9855] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 463.609043][ T9844] veth0_vlan: left promiscuous mode [ 463.650894][ T9844] veth0_vlan: entered promiscuous mode [ 463.665469][ T5882] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 463.676487][ T5882] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 463.684507][ T5882] usb 5-1: Manufacturer: syz [ 463.770202][ T5882] usb 5-1: config 0 descriptor?? [ 463.809301][ T5882] igorplugusb 5-1:0.0: endpoint incorrect [ 464.121195][ T9868] loop1: detected capacity change from 0 to 512 [ 464.134022][ T9868] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 464.161501][ T9870] netlink: 'syz.0.1047': attribute type 13 has an invalid length. [ 464.185250][ T9870] netlink: 'syz.0.1047': attribute type 17 has an invalid length. [ 464.302882][ T9870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.304824][ T9872] loop0: detected capacity change from 0 to 256 [ 464.326389][ T9872] exfat: Deprecated parameter 'namecase' [ 464.330324][ T9868] EXT4-fs (loop1): 1 truncate cleaned up [ 464.332135][ T9872] exfat: Bad value for 'uid' [ 464.342341][ T9872] exfat: Bad value for 'uid' [ 464.369160][ T9868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.157325][ T5942] usb 5-1: USB disconnect, device number 6 [ 465.281470][ T9866] binder: 9865:9866 ioctl c0306201 200000000c00 returned -14 [ 465.408632][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.694443][ T9894] loop1: detected capacity change from 0 to 512 [ 466.728869][ T9894] EXT4-fs (loop1): Test dummy encryption mode enabled [ 466.819008][ T9897] loop4: detected capacity change from 0 to 256 [ 466.912471][ T9894] EXT4-fs error (device loop1): __ext4_iget:5379: inode #11: block 1: comm syz.1.1052: invalid block [ 466.940832][ T9894] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1052: couldn't read orphan inode 11 (err -117) [ 467.074859][ T9894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.362301][ T9897] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 467.493817][ T30] audit: type=1800 audit(1750699684.156:1454): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1055" name="file2" dev="loop4" ino=1048722 res=0 errno=0 [ 468.245510][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 468.257441][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 468.265889][ C1] CPU: 1 UID: 0 PID: 9908 Comm: syz.4.1058 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 468.277355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.287423][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 468.292803][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 468.312505][ C1] RSP: 0018:ffffc90000a08b90 EFLAGS: 00010246 [ 468.318563][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802d60da00 [ 468.326520][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff8880516c36f0 [ 468.334567][ C1] RBP: 0000000000000001 R08: ffff8880516c3683 R09: 1ffff1100a2d86d0 [ 468.342528][ C1] R10: dffffc0000000000 R11: ffffed100a2d86d1 R12: 1ffff1100a2d86dd [ 468.350492][ C1] R13: ffffffff81a83684 R14: ffff8880516c36e8 R15: dffffc0000000000 [ 468.358453][ C1] FS: 00007fe31a5646c0(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 468.367367][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.373967][ C1] CR2: 00002000001be000 CR3: 00000000530c2000 CR4: 00000000003526f0 [ 468.381938][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 468.389915][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 468.398045][ C1] Call Trace: [ 468.401315][ C1] [ 468.404291][ C1] ? __pfx_delayed_put_pid+0x10/0x10 [ 468.409567][ C1] put_pid+0x9c/0x130 [ 468.413541][ C1] rcu_core+0xca5/0x1710 [ 468.417778][ C1] ? __pfx_rcu_core+0x10/0x10 [ 468.422443][ C1] ? sched_balance_domains+0x121/0x9e0 [ 468.427892][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 468.433339][ C1] handle_softirqs+0x283/0x870 [ 468.438102][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 468.442856][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 468.448131][ C1] __irq_exit_rcu+0xca/0x1f0 [ 468.452708][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 468.457895][ C1] irq_exit_rcu+0x9/0x30 [ 468.462128][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 468.467753][ C1] [ 468.470663][ C1] [ 468.473576][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 468.479547][ C1] RIP: 0010:do_user_addr_fault+0x1ae/0x1390 [ 468.485518][ C1] Code: 1b 48 89 de 48 81 e6 00 02 00 00 31 ff e8 fa 2f 4c 00 48 81 e3 00 02 00 00 0f 84 79 0e 00 00 e8 98 bd 53 00 fb 4c 89 7c 24 38 <0f> 1f 44 00 00 e8 f8 2a 4c 00 44 89 f6 83 e6 40 31 ff 48 89 74 24 [ 468.505112][ C1] RSP: 0018:ffffc9000d7e7ae8 EFLAGS: 00000282 [ 468.511171][ C1] RAX: 5cadce53cced0100 RBX: 0000000000000200 RCX: 5cadce53cced0100 [ 468.519127][ C1] RDX: 0000000000000000 RSI: ffffffff8d991910 RDI: ffffffff8be322c0 [ 468.527096][ C1] RBP: dffffc0000000000 R08: ffffffff8fa18cf7 R09: 1ffffffff1f4319e [ 468.535054][ C1] R10: dffffc0000000000 R11: fffffbfff1f4319f R12: ffffc9000d7e7bd8 [ 468.543008][ C1] R13: 00002000001be000 R14: 0000000000000000 R15: ffff88802d60da00 [ 468.550979][ C1] ? do_user_addr_fault+0x1a8/0x1390 [ 468.556434][ C1] ? rcu_is_watching+0x15/0xb0 [ 468.561200][ C1] ? trace_page_fault_kernel+0x84/0x1e0 [ 468.566755][ C1] exc_page_fault+0x76/0xf0 [ 468.571274][ C1] asm_exc_page_fault+0x26/0x30 [ 468.576134][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 468.581957][ C1] Code: ff 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 468.601571][ C1] RSP: 0018:ffffc9000d7e7c80 EFLAGS: 00050202 [ 468.607637][ C1] RAX: 00007ffffffff001 RBX: 00000000001fefe4 RCX: 00000000000425e4 [ 468.615599][ C1] RDX: 0000000000000001 RSI: 00002000001be000 RDI: ffff88803c1bca00 [ 468.623557][ C1] RBP: 0000200000001600 R08: 0000000000000003 R09: 0000000000000004 [ 468.631508][ C1] R10: dffffc0000000000 R11: ffffed100783fdfc R12: ffff888059542000 [ 468.639548][ C1] R13: 0000000000000000 R14: ffff88803c000000 R15: 0000200000001600 [ 468.647513][ C1] _copy_from_user+0x7a/0xb0 [ 468.652102][ C1] vmemdup_user+0x59/0xd0 [ 468.656416][ C1] map_lookup_and_delete_elem+0x33a/0x870 [ 468.662124][ C1] ? bpf_lsm_bpf+0x9/0x20 [ 468.666702][ C1] __sys_bpf+0x4ca/0x860 [ 468.670931][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 468.675689][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 468.680871][ C1] ? rcu_is_watching+0x15/0xb0 [ 468.685623][ C1] __x64_sys_bpf+0x7c/0x90 [ 468.690034][ C1] do_syscall_64+0xfa/0x3b0 [ 468.694562][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.699762][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.705817][ C1] ? clear_bhb_loop+0x60/0xb0 [ 468.710571][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.716451][ C1] RIP: 0033:0x7fe31978e929 [ 468.720862][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.740453][ C1] RSP: 002b:00007fe31a564038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.748853][ C1] RAX: ffffffffffffffda RBX: 00007fe3199b5fa0 RCX: 00007fe31978e929 [ 468.756817][ C1] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000015 [ 468.764806][ C1] RBP: 00007fe319810b39 R08: 0000000000000000 R09: 0000000000000000 [ 468.772792][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.780759][ C1] R13: 0000000000000000 R14: 00007fe3199b5fa0 R15: 00007ffe8719ca48 [ 468.788732][ C1] [ 468.791753][ C1] Modules linked in: [ 468.795763][ C1] ---[ end trace 0000000000000000 ]--- [ 468.801221][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 468.806623][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 468.826255][ C1] RSP: 0018:ffffc90000a08b90 EFLAGS: 00010246 [ 468.832336][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802d60da00 [ 468.840346][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff8880516c36f0 [ 468.848353][ C1] RBP: 0000000000000001 R08: ffff8880516c3683 R09: 1ffff1100a2d86d0 [ 468.856350][ C1] R10: dffffc0000000000 R11: ffffed100a2d86d1 R12: 1ffff1100a2d86dd [ 468.864326][ C1] R13: ffffffff81a83684 R14: ffff8880516c36e8 R15: dffffc0000000000 [ 468.872327][ C1] FS: 00007fe31a5646c0(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 468.881287][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.887907][ C1] CR2: 00002000001be000 CR3: 00000000530c2000 CR4: 00000000003526f0 [ 468.895924][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 468.903910][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 468.911919][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 468.919429][ C1] Kernel Offset: disabled [ 468.923739][ C1] Rebooting in 86400 seconds..