last executing test programs: 6m30.870789342s ago: executing program 4 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000580)=""/17, 0x11}, {0x0}], 0x3, &(0x7f0000000700)=""/70, 0x46}, 0x80000000}], 0x1, 0x0, &(0x7f00000007c0)={0x77359400}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x49c09af425efe604, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f00000000c0)) 6m28.553756025s ago: executing program 4 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '7', ':', '7', '.', 'a'}}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7563f66d408ffb46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='f2fs_iostat_latency\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x79e}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) unshare(0x2040400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 6m27.499922482s ago: executing program 4 (id=214): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) dup(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000000000000000000008000000985731406a1c1f70f0370000000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x18) 6m26.021906051s ago: executing program 4 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000580)=""/17, 0x11}, {0x0}], 0x3, &(0x7f0000000700)=""/70, 0x46}, 0x80000000}], 0x1, 0x0, &(0x7f00000007c0)={0x77359400}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x49c09af425efe604, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r5, 0x0) 6m22.159753415s ago: executing program 4 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '7', ':', '7', '.', 'a'}}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7563f66d408ffb46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='f2fs_iostat_latency\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x79e}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) unshare(0x2040400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 6m19.78163258s ago: executing program 4 (id=231): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10000000}) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r1, r2, 0x8, 0x0, 0x0, 0xa, 0x81, 0x46d, 0x8, 0x3, 0x0, 0xffffffff, 'syz0\x00'}) shutdown(r2, 0x1) 6m4.019372257s ago: executing program 32 (id=231): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10000000}) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r1, r2, 0x8, 0x0, 0x0, 0xa, 0x81, 0x46d, 0x8, 0x3, 0x0, 0xffffffff, 'syz0\x00'}) shutdown(r2, 0x1) 6m0.658747207s ago: executing program 3 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000580)=""/17, 0x11}, {0x0}], 0x3, &(0x7f0000000700)=""/70, 0x46}, 0x80000000}], 0x1, 0x0, &(0x7f00000007c0)={0x77359400}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x49c09af425efe604, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r4, 0x0) 5m54.931739483s ago: executing program 3 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '7', ':', '7', '.', 'a'}}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7563f66d408ffb46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='f2fs_iostat_latency\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x79e}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) unshare(0x2040400) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) 5m53.206727003s ago: executing program 3 (id=296): mknod$loop(0x0, 0x44b0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) 5m52.248675349s ago: executing program 3 (id=299): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) getdents(r3, &(0x7f0000000300)=""/155, 0x9b) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 5m46.146674097s ago: executing program 3 (id=312): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x52c, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xffffffff, 0x89b, 0x8, 0x7fff, 0x2}, 0x14) r2 = syz_io_uring_setup(0x41f, &(0x7f000000a9c0)={0x0, 0x46b0}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r2, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 5m43.375410064s ago: executing program 3 (id=318): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m27.665359371s ago: executing program 33 (id=318): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m40.073833323s ago: executing program 1 (id=718): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendfile(r4, r4, 0x0, 0x6) 2m38.94757482s ago: executing program 1 (id=719): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x1, 0x0, {{@in6=@dev, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x1, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r6, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f0000000100)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 2m33.786668262s ago: executing program 1 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x111400, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2m32.193262422s ago: executing program 1 (id=738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) close(r0) 2m27.413544761s ago: executing program 1 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x111400, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2m26.499809127s ago: executing program 1 (id=752): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) 2m10.331673337s ago: executing program 34 (id=752): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) 10.984036212s ago: executing program 7 (id=1025): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x8, {0x8, 0x8, "8200279ea983"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10.485268775s ago: executing program 6 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '7', ':', '7', '.', 'a'}}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7563f66d408ffb46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='f2fs_iostat_latency\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x79e}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) unshare(0x2040400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) 10.052103638s ago: executing program 6 (id=1030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0xa, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local}}}}}}, 0x0) 9.886022919s ago: executing program 6 (id=1031): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) dup(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000008000000985731406a1c1f70f0370000000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x18) 9.885508449s ago: executing program 0 (id=1032): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@nodiscard}, {@fault_type={'fault_type', 0x3d, 0x291}}, {@acl}, {@alloc_mode_reuse}, {@jqfmt_vfsv0}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 9.511728301s ago: executing program 5 (id=1033): socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x60) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000b080)="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", 0x2000, &(0x7f0000006cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x18, 0x0, 0x0, {0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(r2, r3, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 8.738346266s ago: executing program 6 (id=1036): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) 8.286257099s ago: executing program 5 (id=1037): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@init_itable}, {@usrquota}]}, 0x1, 0x526, &(0x7f0000001b40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0xb7d4, 0x1001f0) fallocate(r0, 0x3, 0x4, 0x10000) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 6.838733768s ago: executing program 7 (id=1038): mknod$loop(0x0, 0x44b0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, 0x0, 0x800) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 6.759701358s ago: executing program 0 (id=1039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) openat$dir(0xffffffffffffff9c, 0x0, 0x46080, 0x1) 6.592074039s ago: executing program 6 (id=1041): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000003e80)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@compress_cache}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) keyctl$revoke(0x3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_misc(r0, &(0x7f00000001c0), 0x4) 5.660433335s ago: executing program 2 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "8bfb57", 0x8, 0x3a, 0xfe, @mcast2, @private1, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x7}}}}}}, 0x0) 5.451787827s ago: executing program 0 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x0, &(0x7f00000007c0)={0x77359400}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x10b942, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x49c09af425efe604, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r5, 0x0) 5.385621957s ago: executing program 2 (id=1045): mknod$loop(0x0, 0x44b0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) 4.417237283s ago: executing program 0 (id=1046): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlockall() 4.382583473s ago: executing program 5 (id=1047): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000001100)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000000)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) recvmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12141, 0x0) 4.279741093s ago: executing program 0 (id=1048): stat(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x1c04b, &(0x7f0000000580), 0x1, 0x751, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x4880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) 4.219366934s ago: executing program 5 (id=1049): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000002080)={0x30, 0x5, 0x0, {0x0, 0x0, 0xf, 0x9}}, 0x30) 3.25711909s ago: executing program 5 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r4, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) close(r4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") 3.115127611s ago: executing program 2 (id=1051): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.063797421s ago: executing program 7 (id=1052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '7', ':', '7', '.', 'a'}}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7563f66d408ffb46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='f2fs_iostat_latency\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x79e}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) unshare(0x2040400) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) 2.454420385s ago: executing program 7 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) utimes(&(0x7f0000000740)='./file0\x00', 0x0) 2.404936125s ago: executing program 7 (id=1054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) openat$dir(0xffffffffffffff9c, 0x0, 0x46080, 0x1) 919.752394ms ago: executing program 5 (id=1055): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r4) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB="000000000000008700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="000000222d02d1d2f84e6bb3c4a19965eaa0dbfacbeac1b7c5dd171ac26e2cb160b8ab7c7e48d7b12f2d40432760c76ce215ab97f2efcbef7e4dbecd2f35e72bda4ddbba5ccf370b87", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 910.229104ms ago: executing program 6 (id=1056): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(0x0, 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f0000000a00)=""/4096, 0x53, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1f, 0x80000000, 0x4, 0x6, 0x10341, r0, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, @void, @value, @value=r0}, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1001f0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x6c00, 0x0, 0x3) truncate(&(0x7f00000001c0)='./bus\x00', 0x8) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000500)={r5}) 821.663255ms ago: executing program 0 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x0, &(0x7f00000007c0)={0x77359400}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x49c09af425efe604, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r5, 0x0) 675.848606ms ago: executing program 7 (id=1058): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 675.592166ms ago: executing program 2 (id=1059): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000001100)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000000)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) recvmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12141, 0x0) 476.289507ms ago: executing program 2 (id=1060): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, &(0x7f0000000040)) 0s ago: executing program 2 (id=1061): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000500"/27], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendfile(r4, r4, 0x0, 0x6) kernel console output (not intermixed with test programs): executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 268.715305][ T26] audit: type=1326 audit(1732139018.019:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 269.513402][ T4806] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 270.156776][ T6431] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 270.230868][ T6454] loop2: detected capacity change from 0 to 256 [ 270.242156][ T6431] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 270.286057][ T6454] FAT-fs (loop2): Unrecognized mount option "UìÛŸ`Ü”£zÏÅcdepaPe=857" or missing value [ 271.372008][ T6470] netlink: 'syz.6.474': attribute type 32 has an invalid length. [ 273.020334][ T6497] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.378226][ T6511] loop2: detected capacity change from 0 to 512 [ 274.582719][ T6511] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.480: attempt to clear invalid blocks 1 len 1 [ 274.677710][ T6511] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.480: bg 0: block 343: padding at end of block bitmap is not set [ 274.741730][ T6511] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 274.794784][ T6511] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.480: invalid indirect mapped block 1819239214 (level 0) [ 274.868416][ T6511] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.480: invalid indirect mapped block 1819239214 (level 1) [ 274.933999][ T6511] EXT4-fs (loop2): 1 truncate cleaned up [ 274.960008][ T6511] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.710063][ T6524] loop1: detected capacity change from 0 to 512 [ 276.292582][ T6527] loop0: detected capacity change from 0 to 512 [ 277.507082][ T6524] EXT4-fs (loop1): Unrecognized mount option "euid<00000000000000000000" or missing value [ 277.569254][ T6527] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.736285][ T6527] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.859048][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.868038][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.875553][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.415719][ T6553] netlink: 84 bytes leftover after parsing attributes in process `syz.0.483'. [ 279.424622][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 279.433509][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 279.442298][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 280.202384][ T6558] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.131239][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 281.202675][ T6573] loop6: detected capacity change from 0 to 512 [ 281.310207][ T6578] netlink: 'syz.5.492': attribute type 32 has an invalid length. [ 281.487008][ T6573] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.494: attempt to clear invalid blocks 1 len 1 [ 281.657302][ T6573] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.494: bg 0: block 343: padding at end of block bitmap is not set [ 281.711938][ T6573] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 281.756659][ T6573] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.494: invalid indirect mapped block 1819239214 (level 0) [ 281.815758][ T6573] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.494: invalid indirect mapped block 1819239214 (level 1) [ 281.881541][ T6573] EXT4-fs (loop6): 1 truncate cleaned up [ 281.887202][ T6573] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.704359][ T6635] loop1: detected capacity change from 0 to 512 [ 286.132895][ T6635] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.214586][ T6635] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.440547][ T6650] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.621880][ T6655] netlink: 84 bytes leftover after parsing attributes in process `syz.1.501'. [ 286.631136][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 286.640106][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 286.648947][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 287.781292][ T5907] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 287.981624][ T5907] usb 2-1: device descriptor read/64, error -71 [ 288.281300][ T5907] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 289.297134][ T5907] usb 2-1: device descriptor read/64, error -71 [ 289.328504][ T6677] netlink: 'syz.2.509': attribute type 32 has an invalid length. [ 289.422198][ T5907] usb usb2-port1: attempt power cycle [ 289.752674][ T6685] loop1: detected capacity change from 0 to 2048 [ 289.850061][ T6685] EXT4-fs (loop1): Ignoring removed orlov option [ 289.937472][ T6685] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 292.640917][ T6739] netlink: 'syz.2.515': attribute type 32 has an invalid length. [ 292.798776][ T6744] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.367811][ T6752] loop0: detected capacity change from 0 to 128 [ 293.597365][ T6755] loop6: detected capacity change from 0 to 512 [ 293.611247][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 293.611263][ T26] audit: type=1800 audit(1732139044.129:215): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.519" name="bus" dev="loop0" ino=1048606 res=0 errno=0 [ 294.863194][ T6755] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 294.920771][ T6755] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.768536][ T6785] netlink: 84 bytes leftover after parsing attributes in process `syz.6.520'. [ 295.777442][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.520'. [ 295.786327][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.520'. [ 295.795105][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.520'. [ 296.396709][ T6788] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 296.515194][ T6792] netlink: 'syz.0.525': attribute type 32 has an invalid length. [ 296.602131][ T13] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 296.882803][ T26] audit: type=1326 audit(1732139047.369:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 297.918784][ T13] usb 7-1: device descriptor read/64, error -71 [ 297.981830][ T26] audit: type=1326 audit(1732139047.369:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 298.397037][ T26] audit: type=1326 audit(1732139047.369:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 298.639168][ T26] audit: type=1326 audit(1732139047.379:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 298.775905][ T26] audit: type=1326 audit(1732139047.379:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 298.956885][ T26] audit: type=1326 audit(1732139047.379:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 299.310369][ T26] audit: type=1326 audit(1732139047.379:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 300.145783][ T26] audit: type=1326 audit(1732139047.379:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 300.227131][ T26] audit: type=1326 audit(1732139047.379:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 300.268782][ T26] audit: type=1326 audit(1732139047.379:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 300.889687][ T26] audit: type=1326 audit(1732139047.379:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 300.922999][ T26] audit: type=1326 audit(1732139047.379:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 301.233247][ T6850] loop1: detected capacity change from 0 to 2048 [ 301.601387][ T26] audit: type=1326 audit(1732139047.389:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 301.710419][ T6854] netlink: 'syz.2.539': attribute type 32 has an invalid length. [ 301.780377][ T6856] loop5: detected capacity change from 0 to 512 [ 301.953417][ T6856] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.540: attempt to clear invalid blocks 1 len 1 [ 301.978995][ T6862] loop6: detected capacity change from 0 to 512 [ 301.996849][ T6870] loop0: detected capacity change from 0 to 256 [ 302.024266][ T6856] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.540: bg 0: block 343: padding at end of block bitmap is not set [ 302.053084][ T6856] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 302.076466][ T6870] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 302.103836][ T6856] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.540: invalid indirect mapped block 1819239214 (level 0) [ 302.107093][ T6862] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.481424][ T6878] serio: Serial port ptm0 [ 302.721848][ T6856] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.540: invalid indirect mapped block 1819239214 (level 1) [ 302.981370][ T6862] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.433286][ T6885] loop1: detected capacity change from 0 to 256 [ 303.558167][ T6856] EXT4-fs (loop5): 1 truncate cleaned up [ 303.596681][ T6856] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.661400][ T5907] Bluetooth: hci4: command 0x0406 tx timeout [ 304.241418][ T6894] netlink: 84 bytes leftover after parsing attributes in process `syz.6.541'. [ 304.250947][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.541'. [ 304.260058][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.541'. [ 304.268899][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.541'. [ 305.444598][ T6910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 305.967086][ T4806] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 306.846857][ T6927] loop6: detected capacity change from 0 to 256 [ 307.552588][ T6938] device wg2 entered promiscuous mode [ 309.541590][ T6948] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 309.917408][ T6950] netlink: 'syz.2.556': attribute type 32 has an invalid length. [ 310.574859][ T6955] loop0: detected capacity change from 0 to 512 [ 310.591801][ T6957] loop6: detected capacity change from 0 to 512 [ 310.680692][ T6957] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 310.715913][ T6955] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.558: attempt to clear invalid blocks 1 len 1 [ 310.761372][ T6957] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.779013][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 310.779026][ T26] audit: type=1326 audit(1732139061.319:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 310.827900][ T6955] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.558: bg 0: block 343: padding at end of block bitmap is not set [ 310.908910][ T6955] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 310.948822][ T6955] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.558: invalid indirect mapped block 1819239214 (level 0) [ 311.001303][ T26] audit: type=1326 audit(1732139061.349:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 311.040520][ T26] audit: type=1326 audit(1732139061.349:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 311.040561][ T6955] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.558: invalid indirect mapped block 1819239214 (level 1) [ 311.078131][ T26] audit: type=1326 audit(1732139061.349:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 311.119395][ T26] audit: type=1326 audit(1732139061.349:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 311.149360][ T6971] netlink: 84 bytes leftover after parsing attributes in process `syz.6.559'. [ 311.158677][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.559'. [ 311.167612][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.559'. [ 311.176550][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.559'. [ 311.442364][ T6955] EXT4-fs (loop0): 1 truncate cleaned up [ 311.491425][ T4806] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 311.557565][ T6955] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.683061][ T6974] loop5: detected capacity change from 0 to 2048 [ 311.815468][ T4806] usb 7-1: device descriptor read/64, error -71 [ 312.285470][ T6974] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 312.301292][ T4806] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 312.591811][ T4806] usb 7-1: device descriptor read/64, error -71 [ 312.712783][ T4806] usb usb7-port1: attempt power cycle [ 313.130292][ T26] audit: type=1326 audit(1732139063.489:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 313.228833][ T26] audit: type=1326 audit(1732139063.489:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 313.251884][ T4806] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 313.872767][ T4806] usb 7-1: device descriptor read/8, error -71 [ 314.031232][ T26] audit: type=1326 audit(1732139063.489:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 315.204243][ T26] audit: type=1326 audit(1732139063.489:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 315.228819][ T26] audit: type=1326 audit(1732139063.489:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 316.088491][ T7001] loop5: detected capacity change from 0 to 4096 [ 316.855004][ T7014] loop6: detected capacity change from 0 to 256 [ 316.915587][ T7018] netlink: 'syz.2.574': attribute type 32 has an invalid length. [ 317.046534][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.053407][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.577227][ T7023] loop0: detected capacity change from 0 to 512 [ 317.770401][ T7001] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 318.091014][ T7023] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 318.361413][ T7023] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.098471][ T7037] netlink: 84 bytes leftover after parsing attributes in process `syz.0.575'. [ 319.107503][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'. [ 319.116500][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 319.125367][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 320.874508][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 320.999296][ T7048] loop1: detected capacity change from 0 to 128 [ 321.064957][ T7053] netlink: 'syz.2.584': attribute type 32 has an invalid length. [ 323.029952][ T7068] loop1: detected capacity change from 0 to 512 [ 323.429171][ T7068] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.586: corrupted inode contents [ 323.444919][ T7068] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #16: comm syz.1.586: mark_inode_dirty error [ 323.457665][ T7068] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.586: corrupted inode contents [ 323.476039][ T7068] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.586: mark_inode_dirty error [ 323.488946][ T7068] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.586: corrupted inode contents [ 323.511847][ T7068] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 323.525000][ T7068] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.586: corrupted inode contents [ 323.538090][ T7068] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.586: mark_inode_dirty error [ 323.553690][ T7068] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 323.567915][ T7068] EXT4-fs (loop1): 1 truncate cleaned up [ 323.573685][ T7068] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 323.585335][ T7068] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.377236][ T7083] loop2: detected capacity change from 0 to 512 [ 325.422524][ T7086] loop0: detected capacity change from 0 to 256 [ 325.591308][ T4217] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 325.639255][ T7083] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.659850][ T7083] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.962053][ T7091] netlink: 84 bytes leftover after parsing attributes in process `syz.2.590'. [ 325.971077][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 325.980055][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 325.988897][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 326.132111][ T4217] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.231088][ T4217] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 326.499034][ T4217] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 326.534367][ T7093] netlink: 'syz.5.592': attribute type 32 has an invalid length. [ 326.551250][ T4217] usb 7-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 326.596992][ T4217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.642168][ T4217] usb 7-1: config 0 descriptor?? [ 326.698869][ T4217] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 326.811429][ T5907] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 327.006739][ T5907] usb 3-1: device descriptor read/64, error -71 [ 327.134236][ T4217] usb 7-1: USB disconnect, device number 13 [ 327.291265][ T5907] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 327.621496][ T5907] usb 3-1: device descriptor read/64, error -71 [ 327.742805][ T5907] usb usb3-port1: attempt power cycle [ 328.215485][ T5907] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 328.561361][ T5907] usb 3-1: device not accepting address 15, error -71 [ 328.997347][ T7116] netlink: 'syz.1.599': attribute type 32 has an invalid length. [ 329.959085][ T7129] 9pnet: Insufficient options for proto=fd [ 331.036197][ T7135] loop6: detected capacity change from 0 to 256 [ 331.069531][ T7137] loop0: detected capacity change from 0 to 512 [ 331.172032][ T7135] FAT-fs (loop6): Directory bread(block 64) failed [ 331.191427][ T7137] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.604: attempt to clear invalid blocks 1 len 1 [ 331.229712][ T7135] FAT-fs (loop6): Directory bread(block 65) failed [ 331.239239][ T7137] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.604: bg 0: block 343: padding at end of block bitmap is not set [ 331.260946][ T7135] FAT-fs (loop6): Directory bread(block 66) failed [ 331.288666][ T7135] FAT-fs (loop6): Directory bread(block 67) failed [ 331.298257][ T7137] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 331.313090][ T7135] FAT-fs (loop6): Directory bread(block 68) failed [ 331.329592][ T7135] FAT-fs (loop6): Directory bread(block 69) failed [ 331.349689][ T7135] FAT-fs (loop6): Directory bread(block 70) failed [ 331.369096][ T7137] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.604: invalid indirect mapped block 1819239214 (level 0) [ 331.390447][ T7135] FAT-fs (loop6): Directory bread(block 71) failed [ 331.401555][ T7135] FAT-fs (loop6): Directory bread(block 72) failed [ 331.428537][ T7135] FAT-fs (loop6): Directory bread(block 73) failed [ 331.442311][ T7137] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.604: invalid indirect mapped block 1819239214 (level 1) [ 331.505370][ T7137] EXT4-fs (loop0): 1 truncate cleaned up [ 331.521944][ T7137] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.080604][ T13] Bluetooth: hci5: command 0x0405 tx timeout [ 333.593497][ T7156] loop1: detected capacity change from 0 to 256 [ 333.874735][ T7158] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 334.742464][ T7168] loop1: detected capacity change from 0 to 256 [ 339.049865][ T7190] netlink: 'syz.1.620': attribute type 32 has an invalid length. [ 339.581611][ T5292] Bluetooth: hci5: command 0x0406 tx timeout [ 340.120328][ T7198] loop1: detected capacity change from 0 to 128 [ 340.284669][ T7205] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 340.317151][ T7207] serio: Serial port ptm0 [ 341.757830][ T7227] loop2: detected capacity change from 0 to 256 [ 343.774153][ T7241] netlink: 'syz.6.632': attribute type 32 has an invalid length. [ 345.064689][ T7252] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 345.538601][ T7257] loop5: detected capacity change from 0 to 512 [ 345.702792][ T7257] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.637: attempt to clear invalid blocks 1 len 1 [ 345.757913][ T7257] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.637: bg 0: block 343: padding at end of block bitmap is not set [ 345.864213][ T7257] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 345.957484][ T7257] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.637: invalid indirect mapped block 1819239214 (level 0) [ 346.001927][ T7257] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.637: invalid indirect mapped block 1819239214 (level 1) [ 346.040334][ T7257] EXT4-fs (loop5): 1 truncate cleaned up [ 346.085085][ T7257] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.618203][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 346.618218][ T26] audit: type=1326 audit(1732139097.149:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 346.704967][ T26] audit: type=1326 audit(1732139097.149:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 346.738699][ T26] audit: type=1326 audit(1732139097.149:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 346.941206][ T26] audit: type=1326 audit(1732139097.149:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 347.021199][ T26] audit: type=1326 audit(1732139097.149:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 347.124092][ T26] audit: type=1326 audit(1732139097.149:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 348.412831][ T26] audit: type=1326 audit(1732139097.149:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 348.625570][ T26] audit: type=1326 audit(1732139097.149:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 349.177928][ T26] audit: type=1326 audit(1732139097.149:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 349.246780][ T7289] loop1: detected capacity change from 0 to 256 [ 349.265404][ T26] audit: type=1326 audit(1732139097.149:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 349.293632][ T7291] netlink: 'syz.0.644': attribute type 32 has an invalid length. [ 350.272182][ T7295] netlink: 52 bytes leftover after parsing attributes in process `syz.5.645'. [ 350.343933][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.352760][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.383022][ T7297] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 352.559178][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 352.559194][ T26] audit: type=1326 audit(1732139103.099:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 352.691816][ T26] audit: type=1326 audit(1732139103.099:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 352.795988][ T26] audit: type=1326 audit(1732139103.099:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 352.904420][ T26] audit: type=1326 audit(1732139103.099:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 352.934436][ T26] audit: type=1326 audit(1732139103.099:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 352.962342][ T26] audit: type=1326 audit(1732139103.099:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 353.023114][ T26] audit: type=1326 audit(1732139103.099:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 353.126151][ T26] audit: type=1326 audit(1732139103.099:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 353.160798][ T26] audit: type=1326 audit(1732139103.099:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 353.234117][ T26] audit: type=1326 audit(1732139103.099:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 353.323975][ T7326] loop2: detected capacity change from 0 to 512 [ 353.822880][ T7326] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.655: attempt to clear invalid blocks 1 len 1 [ 354.012085][ T7326] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.655: bg 0: block 343: padding at end of block bitmap is not set [ 354.051057][ T7326] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 354.072157][ T7326] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.655: invalid indirect mapped block 1819239214 (level 0) [ 354.127225][ T7326] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.655: invalid indirect mapped block 1819239214 (level 1) [ 354.221843][ T7326] EXT4-fs (loop2): 1 truncate cleaned up [ 354.257448][ T7326] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 357.557001][ T7361] loop1: detected capacity change from 0 to 256 [ 358.961408][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 358.961426][ T26] audit: type=1326 audit(1732139109.499:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 359.521425][ T26] audit: type=1326 audit(1732139109.499:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 359.546586][ T26] audit: type=1326 audit(1732139109.499:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 359.663507][ T7380] serio: Serial port ptm0 [ 359.739246][ T26] audit: type=1326 audit(1732139109.499:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 360.125145][ T26] audit: type=1326 audit(1732139109.499:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 360.272851][ T26] audit: type=1326 audit(1732139109.499:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 360.647875][ T26] audit: type=1326 audit(1732139109.499:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 361.095311][ T26] audit: type=1326 audit(1732139109.499:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 361.445795][ T26] audit: type=1326 audit(1732139109.499:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 361.539344][ T26] audit: type=1326 audit(1732139109.499:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 362.570944][ T7393] loop1: detected capacity change from 0 to 4096 [ 362.606248][ T7398] loop2: detected capacity change from 0 to 512 [ 362.727756][ T7393] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 362.756847][ T7398] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.672: attempt to clear invalid blocks 1 len 1 [ 362.842886][ T7398] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.672: bg 0: block 343: padding at end of block bitmap is not set [ 362.872067][ T7398] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 362.902390][ T7398] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.672: invalid indirect mapped block 1819239214 (level 0) [ 362.938784][ T7398] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.672: invalid indirect mapped block 1819239214 (level 1) [ 362.969603][ T7398] EXT4-fs (loop2): 1 truncate cleaned up [ 363.023821][ T7398] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.552831][ T7408] netlink: 44 bytes leftover after parsing attributes in process `syz.1.673'. [ 365.739221][ T7418] loop1: detected capacity change from 0 to 2048 [ 365.930144][ T7418] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 366.900377][ T7438] loop5: detected capacity change from 0 to 4096 [ 368.017708][ T7438] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 369.054603][ T7453] netlink: 44 bytes leftover after parsing attributes in process `syz.0.686'. [ 369.842022][ T7456] loop0: detected capacity change from 0 to 512 [ 369.925650][ T7456] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.690: attempt to clear invalid blocks 1 len 1 [ 369.967644][ T7456] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.690: bg 0: block 343: padding at end of block bitmap is not set [ 370.081625][ T7456] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 370.107779][ T7456] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.690: invalid indirect mapped block 1819239214 (level 0) [ 370.156367][ T7456] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.690: invalid indirect mapped block 1819239214 (level 1) [ 370.212512][ T7456] EXT4-fs (loop0): 1 truncate cleaned up [ 370.221592][ T7456] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 371.947206][ T7487] loop1: detected capacity change from 0 to 128 [ 372.567410][ T7489] fuse: Bad value for 'fd' [ 374.537400][ T7505] netlink: 32 bytes leftover after parsing attributes in process `syz.6.700'. [ 374.546715][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.700'. [ 374.925551][ T7499] loop1: detected capacity change from 0 to 4096 [ 375.117749][ T7499] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 376.399811][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 376.399825][ T26] audit: type=1326 audit(1732139126.939:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 376.439405][ T7525] loop0: detected capacity change from 0 to 512 [ 376.569826][ T26] audit: type=1326 audit(1732139126.959:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 377.489887][ T26] audit: type=1326 audit(1732139126.959:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 377.888980][ T26] audit: type=1326 audit(1732139126.979:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9638887819 code=0x7ffc0000 [ 378.088626][ T7525] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.707: attempt to clear invalid blocks 1 len 1 [ 378.208125][ T7525] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.707: bg 0: block 343: padding at end of block bitmap is not set [ 378.292434][ T7525] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 378.317545][ T7525] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.707: invalid indirect mapped block 1819239214 (level 0) [ 378.383774][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.400379][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.875998][ T7525] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.707: invalid indirect mapped block 1819239214 (level 1) [ 378.928689][ T7525] EXT4-fs (loop0): 1 truncate cleaned up [ 378.941405][ T7525] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 378.974478][ T26] audit: type=1326 audit(1732139129.519:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 379.051211][ T26] audit: type=1326 audit(1732139129.519:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 379.141464][ T26] audit: type=1326 audit(1732139129.679:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 379.188175][ T26] audit: type=1326 audit(1732139129.729:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 379.297351][ T26] audit: type=1326 audit(1732139129.729:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 379.345901][ T26] audit: type=1326 audit(1732139129.729:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 379.401331][ T4249] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 379.627761][ T7560] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 379.691661][ T4249] usb 7-1: Using ep0 maxpacket: 32 [ 380.815780][ T7573] netlink: 'syz.1.719': attribute type 32 has an invalid length. [ 381.494559][ T7577] loop2: detected capacity change from 0 to 512 [ 382.060694][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 382.060709][ T26] audit: type=1326 audit(1732139132.519:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.064676][ T4249] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 382.071209][ T26] audit: type=1326 audit(1732139132.519:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.111171][ T4249] usb 7-1: config 4 has no interface number 0 [ 382.182336][ T4249] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.201468][ T7584] loop5: detected capacity change from 0 to 512 [ 382.221468][ T4249] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.222657][ T7577] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.720: iget: bad extended attribute block 1 [ 382.231863][ T4249] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 382.253009][ T4249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.273944][ T26] audit: type=1326 audit(1732139132.519:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.297062][ T4249] usb 7-1: can't set config #4, error -71 [ 382.305760][ T4249] usb 7-1: USB disconnect, device number 14 [ 382.312732][ T26] audit: type=1326 audit(1732139132.519:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.336248][ T26] audit: type=1326 audit(1732139132.519:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.358737][ T26] audit: type=1326 audit(1732139132.519:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.383380][ T7577] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.720: couldn't read orphan inode 15 (err -117) [ 382.396885][ T26] audit: type=1326 audit(1732139132.519:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.428441][ T7584] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 382.447481][ T7577] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 382.468973][ T26] audit: type=1326 audit(1732139132.519:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.498658][ T26] audit: type=1326 audit(1732139132.519:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.523237][ T26] audit: type=1326 audit(1732139132.519:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 382.546908][ T7580] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 13: comm syz.2.720: lblock 0 mapped to illegal pblock 13 (length 1) [ 382.547082][ T7584] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.860426][ T7596] netlink: 84 bytes leftover after parsing attributes in process `syz.5.723'. [ 382.869636][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.723'. [ 382.878598][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 382.887505][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 383.221416][ T5907] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 383.461440][ T5907] usb 6-1: device descriptor read/64, error -71 [ 383.841252][ T5907] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 384.031271][ T5907] usb 6-1: device descriptor read/64, error -71 [ 384.051022][ T7588] netlink: 32 bytes leftover after parsing attributes in process `syz.6.725'. [ 384.151993][ T5907] usb usb6-port1: attempt power cycle [ 384.351946][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.725'. [ 384.631593][ T5907] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 384.752591][ T5907] usb 6-1: device descriptor read/8, error -71 [ 385.022049][ T5907] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 385.266972][ T5907] usb 6-1: device descriptor read/8, error -71 [ 385.747928][ T5907] usb usb6-port1: unable to enumerate USB device [ 385.837051][ T7619] loop6: detected capacity change from 0 to 512 [ 387.580029][ T7619] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.734: attempt to clear invalid blocks 1 len 1 [ 387.651679][ T7619] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.734: bg 0: block 343: padding at end of block bitmap is not set [ 387.731663][ T7619] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 388.763538][ T7642] netlink: 32 bytes leftover after parsing attributes in process `syz.2.740'. [ 389.321851][ T7619] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.734: invalid indirect mapped block 1819239214 (level 0) [ 389.433425][ T7619] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.734: invalid indirect mapped block 1819239214 (level 1) [ 389.511413][ T7619] EXT4-fs (loop6): 1 truncate cleaned up [ 389.517080][ T7619] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.568961][ T7644] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 389.737284][ T7646] loop2: detected capacity change from 0 to 512 [ 390.070849][ T7646] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 390.315361][ T7646] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.178914][ T7662] loop0: detected capacity change from 0 to 4096 [ 392.333771][ T7662] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 393.269903][ T7673] xt_hashlimit: size too large, truncated to 1048576 [ 395.764119][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 395.764133][ T26] audit: type=1326 audit(1732139146.309:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 395.774117][ T7690] loop2: detected capacity change from 0 to 512 [ 395.803483][ T26] audit: type=1326 audit(1732139146.309:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce113819 code=0x7ffc0000 [ 395.836809][ T7690] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.754: attempt to clear invalid blocks 1 len 1 [ 395.859878][ T7690] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.754: bg 0: block 343: padding at end of block bitmap is not set [ 395.875187][ T7690] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 395.884727][ T7690] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.754: invalid indirect mapped block 1819239214 (level 0) [ 395.905536][ T7690] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.754: invalid indirect mapped block 1819239214 (level 1) [ 395.921833][ T7690] EXT4-fs (loop2): 1 truncate cleaned up [ 395.927478][ T7690] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.762188][ T7709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 399.793730][ T7709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 399.805238][ T7709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.540272][ T7711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.755'. [ 404.089443][ T7727] loop2: detected capacity change from 0 to 4096 [ 404.199213][ T7727] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 404.851386][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'. [ 404.988308][ T7740] loop2: detected capacity change from 0 to 256 [ 405.290793][ T7746] loop5: detected capacity change from 0 to 512 [ 405.425471][ T7746] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.768: attempt to clear invalid blocks 1 len 1 [ 405.493740][ T7746] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.768: bg 0: block 343: padding at end of block bitmap is not set [ 405.606225][ T7746] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 405.735734][ T7746] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.768: invalid indirect mapped block 1819239214 (level 0) [ 405.774147][ T7746] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.768: invalid indirect mapped block 1819239214 (level 1) [ 406.058474][ T7746] EXT4-fs (loop5): 1 truncate cleaned up [ 406.080444][ T7746] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 408.781321][ T7765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.771'. [ 409.372705][ T7771] netlink: 'syz.0.774': attribute type 32 has an invalid length. [ 409.395102][ T7769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.049619][ T7784] loop5: detected capacity change from 0 to 4096 [ 412.223378][ T7784] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 412.438130][ T7786] chnl_net:caif_netlink_parms(): no params data found [ 412.701287][ T4217] Bluetooth: hci0: command 0x0409 tx timeout [ 412.801066][ T7812] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.962846][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.969929][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.990774][ T7786] device bridge_slave_0 entered promiscuous mode [ 413.113664][ T7815] netlink: 32 bytes leftover after parsing attributes in process `syz.5.783'. [ 413.414496][ T1279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.712695][ T7817] loop2: detected capacity change from 0 to 256 [ 413.731755][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.738832][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.786233][ T7786] device bridge_slave_1 entered promiscuous mode [ 413.826045][ T7786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.854029][ T7786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.870855][ T7820] netlink: 'syz.5.786': attribute type 32 has an invalid length. [ 413.905667][ T1279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.980032][ T7786] team0: Port device team_slave_0 added [ 414.015662][ T7786] team0: Port device team_slave_1 added [ 414.066306][ T7823] loop6: detected capacity change from 0 to 512 [ 414.087824][ T1279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.475954][ T7823] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.782: attempt to clear invalid blocks 1 len 1 [ 414.722428][ T7823] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.782: bg 0: block 343: padding at end of block bitmap is not set [ 414.781903][ T4217] Bluetooth: hci0: command 0x041b tx timeout [ 414.808299][ T1279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.821949][ T7823] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 414.880906][ T7823] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.782: invalid indirect mapped block 1819239214 (level 0) [ 414.896461][ T7830] netlink: 'syz.5.787': attribute type 32 has an invalid length. [ 414.906586][ T7823] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.782: invalid indirect mapped block 1819239214 (level 1) [ 414.920882][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.932278][ T7823] EXT4-fs (loop6): 1 truncate cleaned up [ 414.941579][ T7823] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 415.121288][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.868257][ T7786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.932114][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.939064][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.414253][ T7786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.435835][ T7845] loop5: detected capacity change from 0 to 512 [ 416.529393][ T7847] loop0: detected capacity change from 0 to 512 [ 416.777304][ T7845] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.789: iget: bad extended attribute block 1 [ 416.861404][ T4806] Bluetooth: hci0: command 0x040f tx timeout [ 417.056817][ T7786] device hsr_slave_0 entered promiscuous mode [ 417.084468][ T7847] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.792: corrupted inode contents [ 417.107458][ T7845] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.789: couldn't read orphan inode 15 (err -117) [ 417.143657][ T7858] loop6: detected capacity change from 0 to 256 [ 417.159223][ T7786] device hsr_slave_1 entered promiscuous mode [ 417.177908][ T7847] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.792: mark_inode_dirty error [ 417.201942][ T7845] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 417.223827][ T7786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.247429][ T7786] Cannot create hsr debugfs directory [ 417.260518][ T7847] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.792: corrupted inode contents [ 417.338116][ T7847] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.792: mark_inode_dirty error [ 417.397691][ T7844] EXT4-fs error (device loop5): ext4_map_blocks:628: inode #2: block 13: comm syz.5.789: lblock 0 mapped to illegal pblock 13 (length 1) [ 417.446107][ T7847] Quota error (device loop0): write_blk: dquota write failed [ 417.477920][ T7847] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 417.498435][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.789'. [ 417.523525][ T7847] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.792: Failed to acquire dquot type 0 [ 417.581837][ T7847] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.792: corrupted inode contents [ 417.641057][ T7847] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz.0.792: mark_inode_dirty error [ 417.748186][ T7847] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.792: corrupted inode contents [ 417.794615][ T7847] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.792: mark_inode_dirty error [ 417.820329][ T7847] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.792: corrupted inode contents [ 417.854627][ T7847] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 417.864921][ T7786] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 417.872130][ T7847] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.792: corrupted inode contents [ 417.885956][ T7847] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.792: mark_inode_dirty error [ 417.918661][ T7786] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 417.934799][ T7847] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 417.983787][ T7869] loop5: detected capacity change from 0 to 128 [ 418.029542][ T7847] EXT4-fs (loop0): 1 truncate cleaned up [ 418.037136][ T7847] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 418.054654][ T7847] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.036047][ T5907] Bluetooth: hci0: command 0x0419 tx timeout [ 419.043389][ T7786] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 419.107767][ T7786] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 422.413415][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.467363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.481864][ T7908] syz.6.802[7908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.481957][ T7908] syz.6.802[7908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.498555][ T7912] loop0: detected capacity change from 0 to 512 [ 423.165552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.273204][ T7786] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.281016][ T7912] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.803: attempt to clear invalid blocks 1 len 1 [ 423.415803][ T7786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.427163][ T7786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.464270][ T7912] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.803: bg 0: block 343: padding at end of block bitmap is not set [ 423.483544][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 423.512041][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 423.543337][ T7912] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 423.618496][ T7934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.804'. [ 423.641387][ T7912] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.803: invalid indirect mapped block 1819239214 (level 0) [ 423.693360][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.700468][ T5055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.917778][ T7912] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.803: invalid indirect mapped block 1819239214 (level 1) [ 424.080678][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 424.167910][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.263837][ T7912] EXT4-fs (loop0): 1 truncate cleaned up [ 424.269621][ T7912] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 424.293682][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.300784][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.416362][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 424.448466][ T7942] loop2: detected capacity change from 0 to 256 [ 424.482444][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 424.543434][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 424.565385][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.605333][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 424.652730][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.700989][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 424.740339][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.765661][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 424.796295][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.839308][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 424.851963][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.880463][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.858310][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.940800][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.687600][ T7959] loop6: detected capacity change from 0 to 256 [ 426.886476][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.189918][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.208690][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.224180][ T7986] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 428.263756][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.287668][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.307066][ T7786] device veth0_vlan entered promiscuous mode [ 428.365087][ T1279] device hsr_slave_0 left promiscuous mode [ 428.418640][ T1279] device hsr_slave_1 left promiscuous mode [ 428.451383][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.458833][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.499909][ T7993] loop2: detected capacity change from 0 to 512 [ 428.507985][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.525580][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.555780][ T1279] device bridge_slave_1 left promiscuous mode [ 428.569534][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.579196][ T1279] device bridge_slave_0 left promiscuous mode [ 428.597877][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.626780][ T1279] device veth1_macvtap left promiscuous mode [ 428.708474][ T1279] device veth0_macvtap left promiscuous mode [ 428.801988][ T1279] device veth1_vlan left promiscuous mode [ 428.807808][ T1279] device veth0_vlan left promiscuous mode [ 428.873243][ T7993] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.813: corrupted inode contents [ 428.913970][ T7993] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.813: mark_inode_dirty error [ 428.934579][ T7993] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.813: corrupted inode contents [ 430.116410][ T8004] netlink: 32 bytes leftover after parsing attributes in process `syz.6.815'. [ 430.351780][ T7993] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.813: mark_inode_dirty error [ 430.462223][ T7993] Quota error (device loop2): write_blk: dquota write failed [ 430.469700][ T7993] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 430.561501][ T7993] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.813: Failed to acquire dquot type 0 [ 430.678665][ T7993] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.813: corrupted inode contents [ 430.713311][ T7993] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.813: mark_inode_dirty error [ 430.857278][ T7993] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.813: corrupted inode contents [ 430.945179][ T7993] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.813: mark_inode_dirty error [ 430.991686][ T7993] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.813: corrupted inode contents [ 431.132592][ T7993] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 431.232543][ T7993] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.813: corrupted inode contents [ 431.539477][ T7993] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.813: mark_inode_dirty error [ 431.702767][ T7993] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 431.713632][ T7993] EXT4-fs (loop2): 1 truncate cleaned up [ 431.719289][ T7993] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 431.741525][ T7993] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.598321][ T8018] loop6: detected capacity change from 0 to 256 [ 432.723391][ T1279] team0 (unregistering): Port device team_slave_1 removed [ 432.819461][ T1279] team0 (unregistering): Port device team_slave_0 removed [ 432.918335][ T1279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.998053][ T1279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.254209][ T1279] bond0 (unregistering): Released all slaves [ 433.360256][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.549545][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.128502][ T7786] device veth1_vlan entered promiscuous mode [ 434.167265][ T8025] netlink: 'syz.5.821': attribute type 32 has an invalid length. [ 434.406404][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 434.506461][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.584891][ T7786] device veth0_macvtap entered promiscuous mode [ 434.678474][ T7786] device veth1_macvtap entered promiscuous mode [ 434.725278][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.735908][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.746101][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.756665][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.766616][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.777263][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.787457][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.801488][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.819925][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.838184][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 434.849114][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 434.899854][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 434.927872][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.949325][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.962381][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.978659][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.000868][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.029462][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.069896][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.121188][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.164682][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.173866][ T8043] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 435.178451][ T7786] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.568944][ T8048] loop5: detected capacity change from 0 to 512 [ 435.581263][ T7786] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.653399][ T7786] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.695171][ T7786] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.795991][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.805077][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 435.806097][ T8048] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.824: attempt to clear invalid blocks 1 len 1 [ 435.873971][ T8048] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.824: bg 0: block 343: padding at end of block bitmap is not set [ 435.976284][ T8059] loop0: detected capacity change from 0 to 256 [ 436.014443][ T8048] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 436.046958][ T8048] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.824: invalid indirect mapped block 1819239214 (level 0) [ 436.103999][ T8048] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.824: invalid indirect mapped block 1819239214 (level 1) [ 437.540237][ T8048] EXT4-fs (loop5): 1 truncate cleaned up [ 437.562102][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.570121][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.601351][ T8048] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 437.860747][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 437.863888][ T5055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.202128][ T5055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.524435][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 439.089417][ T8075] loop2: detected capacity change from 0 to 512 [ 439.613796][ T8075] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.829: corrupted inode contents [ 439.668969][ T8086] loop7: detected capacity change from 0 to 512 [ 439.702047][ T8075] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.829: mark_inode_dirty error [ 439.824161][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.830965][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.897128][ T8075] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.829: corrupted inode contents [ 439.940836][ T8086] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 440.019016][ T8086] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.046713][ T8075] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.829: mark_inode_dirty error [ 440.082710][ T8075] Quota error (device loop2): write_blk: dquota write failed [ 440.130874][ T8075] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 440.196395][ T8075] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.829: Failed to acquire dquot type 0 [ 440.290075][ T8075] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.829: corrupted inode contents [ 440.366515][ T8101] netlink: 84 bytes leftover after parsing attributes in process `syz.7.773'. [ 440.375581][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.7.773'. [ 440.384606][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.773'. [ 440.393525][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.773'. [ 440.482668][ T8075] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.829: mark_inode_dirty error [ 440.711709][ T5907] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 440.733752][ T8075] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.829: corrupted inode contents [ 440.897891][ T8075] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.829: mark_inode_dirty error [ 440.931864][ T8075] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.829: corrupted inode contents [ 440.971224][ T5907] usb 8-1: device descriptor read/64, error -71 [ 440.978336][ T8075] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 441.033763][ T8075] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.829: corrupted inode contents [ 441.061724][ T8075] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.829: mark_inode_dirty error [ 441.111010][ T8075] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 441.125303][ T8075] EXT4-fs (loop2): 1 truncate cleaned up [ 441.134893][ T8075] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 441.181656][ T8075] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.241334][ T5907] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 441.611500][ T5907] usb 8-1: device descriptor read/64, error -71 [ 441.801708][ T5907] usb usb8-port1: attempt power cycle [ 442.451348][ T5907] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 442.552261][ T5907] usb 8-1: device descriptor read/8, error -71 [ 443.645200][ T8133] netlink: 'syz.2.834': attribute type 32 has an invalid length. [ 443.709156][ T8132] netlink: 'syz.7.833': attribute type 32 has an invalid length. [ 445.174910][ T8141] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 445.598497][ T8152] loop6: detected capacity change from 0 to 256 [ 446.560931][ T8159] loop5: detected capacity change from 0 to 256 [ 449.038771][ T8169] loop7: detected capacity change from 0 to 512 [ 449.593147][ T8169] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.844: iget: bad extended attribute block 1 [ 449.872323][ T8169] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.844: couldn't read orphan inode 15 (err -117) [ 450.019668][ T8169] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 450.883179][ T8169] EXT4-fs error (device loop7): ext4_map_blocks:628: inode #2: block 13: comm syz.7.844: lblock 0 mapped to illegal pblock 13 (length 1) [ 450.930758][ T8187] loop0: detected capacity change from 0 to 512 [ 450.972733][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.844'. [ 451.123092][ T8187] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.847: attempt to clear invalid blocks 1 len 1 [ 451.261881][ T8174] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 451.294452][ T8187] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.847: bg 0: block 343: padding at end of block bitmap is not set [ 451.686783][ T8187] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 451.771560][ T8187] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.847: invalid indirect mapped block 1819239214 (level 0) [ 451.786663][ T8187] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.847: invalid indirect mapped block 1819239214 (level 1) [ 451.906638][ T8187] EXT4-fs (loop0): 1 truncate cleaned up [ 451.943615][ T8187] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 452.466043][ T8206] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 452.778697][ T8215] loop2: detected capacity change from 0 to 512 [ 453.359016][ T8215] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 453.464148][ T8227] loop7: detected capacity change from 0 to 256 [ 453.488244][ T8215] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.082400][ T8234] netlink: 84 bytes leftover after parsing attributes in process `syz.2.843'. [ 454.091305][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'. [ 454.100145][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 454.109038][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 454.676526][ T8228] loop5: detected capacity change from 0 to 4096 [ 454.889412][ T8228] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 455.488088][ T4219] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 457.426064][ T8264] loop2: detected capacity change from 0 to 256 [ 457.518033][ T8267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 461.166546][ T8298] loop0: detected capacity change from 0 to 512 [ 461.186783][ T8301] loop2: detected capacity change from 0 to 256 [ 461.822436][ T8298] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 461.852767][ T8298] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.386203][ T8313] netlink: 84 bytes leftover after parsing attributes in process `syz.0.869'. [ 462.395823][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 462.404792][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 462.413593][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 462.721318][ T4219] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 464.464929][ T8334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 464.788085][ T8338] loop2: detected capacity change from 0 to 256 [ 466.046572][ T8348] loop7: detected capacity change from 0 to 512 [ 466.282069][ T8354] loop0: detected capacity change from 0 to 128 [ 466.324133][ T8348] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #3: comm syz.7.879: corrupted inode contents [ 466.356161][ T8348] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #3: comm syz.7.879: mark_inode_dirty error [ 466.399410][ T8348] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #3: comm syz.7.879: corrupted inode contents [ 466.528226][ T8348] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #3: comm syz.7.879: mark_inode_dirty error [ 466.742418][ T8348] Quota error (device loop7): write_blk: dquota write failed [ 466.749899][ T8348] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 466.796327][ T8348] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.879: Failed to acquire dquot type 0 [ 466.842714][ T8348] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.879: corrupted inode contents [ 466.961232][ T8369] serio: Serial port ptm0 [ 467.148689][ T8348] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #16: comm syz.7.879: mark_inode_dirty error [ 467.398446][ T8373] loop0: detected capacity change from 0 to 256 [ 467.431688][ T8348] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.879: corrupted inode contents [ 467.505673][ T8348] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.879: mark_inode_dirty error [ 467.568607][ T8348] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.879: corrupted inode contents [ 467.666021][ T8348] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 467.871433][ T8348] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.879: corrupted inode contents [ 467.934950][ T8348] EXT4-fs error (device loop7): ext4_truncate:4272: inode #16: comm syz.7.879: mark_inode_dirty error [ 468.004978][ T8348] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 468.075768][ T8348] EXT4-fs (loop7): 1 truncate cleaned up [ 468.104439][ T8348] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 468.115585][ T8348] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.281629][ T26] audit: type=1326 audit(1732139219.689:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 470.447230][ T26] audit: type=1326 audit(1732139219.689:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 470.506325][ T26] audit: type=1326 audit(1732139219.829:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 470.534334][ T26] audit: type=1326 audit(1732139219.829:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 470.573182][ T8400] loop2: detected capacity change from 0 to 512 [ 470.608348][ T26] audit: type=1326 audit(1732139219.829:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 470.738797][ T8408] loop0: detected capacity change from 0 to 512 [ 470.797739][ T26] audit: type=1326 audit(1732139219.989:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 470.880172][ T26] audit: type=1326 audit(1732139219.989:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 471.761155][ T26] audit: type=1326 audit(1732139219.989:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 471.898176][ T26] audit: type=1326 audit(1732139220.119:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 472.078826][ T26] audit: type=1326 audit(1732139220.119:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 473.141272][ T26] audit: type=1326 audit(1732139220.119:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 473.163908][ T26] audit: type=1326 audit(1732139220.249:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 473.201146][ T26] audit: type=1326 audit(1732139220.249:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 473.316577][ T8433] loop6: detected capacity change from 0 to 256 [ 473.441237][ T8439] serio: Serial port ptm0 [ 473.518073][ T26] audit: type=1326 audit(1732139220.249:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 473.725863][ T8408] EXT4-fs: failed to create workqueue [ 473.765950][ T8408] EXT4-fs (loop0): mount failed [ 475.368095][ T8458] loop7: detected capacity change from 0 to 1024 [ 475.599183][ T8458] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 475.612140][ T8458] EXT4-fs (loop7): orphan cleanup on readonly fs [ 475.628022][ T8458] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 475.644714][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.651425][ T8458] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #3: comm syz.7.889: mark_inode_dirty error [ 475.672819][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.679863][ T8458] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.889: Invalid block bitmap block 3 in block_group 0 [ 475.696149][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.703039][ T8458] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 475.714866][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.721614][ T8458] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #3: comm syz.7.889: mark_inode_dirty error [ 475.734871][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.741709][ T8458] Quota error (device loop7): write_blk: dquota write failed [ 475.749482][ T8458] EXT4-fs error (device loop7): ext4_map_blocks:628: inode #3: block 1: comm syz.7.889: lblock 6 mapped to illegal pblock 1 (length 1) [ 475.766349][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.773595][ T8458] Quota error (device loop7): write_blk: dquota write failed [ 475.781543][ T8458] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 475.791637][ T8458] EXT4-fs error (device loop7): ext4_map_blocks:628: inode #3: block 48: comm syz.7.889: lblock 0 mapped to illegal pblock 48 (length 1) [ 475.817708][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.824501][ T8458] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.889: Failed to acquire dquot type 0 [ 475.837560][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.844428][ T8458] EXT4-fs error (device loop7): ext4_map_blocks:628: inode #3: block 49: comm syz.7.889: lblock 1 mapped to illegal pblock 49 (length 1) [ 475.861859][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.868719][ T8458] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.889: Failed to acquire dquot type 0 [ 475.888528][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.895302][ T8458] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 475.907841][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.914508][ T8458] EXT4-fs error (device loop7): ext4_evict_inode:282: inode #15: comm syz.7.889: mark_inode_dirty error [ 475.927681][ T8458] EXT4-fs (loop7): Remounting filesystem read-only [ 475.934483][ T8458] EXT4-fs warning (device loop7): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 475.945057][ T8458] EXT4-fs (loop7): 1 orphan inode deleted [ 476.354945][ T8458] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,grpid,errors=remount-ro,abort,noblock_validity,barrier,min_batch_time=0x0000000000000577,. Quota mode: none. [ 477.066474][ T8465] loop2: detected capacity change from 0 to 256 [ 479.391636][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 479.391652][ T26] audit: type=1326 audit(1732139229.909:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 479.598753][ T26] audit: type=1326 audit(1732139229.909:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 479.622967][ T26] audit: type=1326 audit(1732139229.909:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 479.647000][ T26] audit: type=1326 audit(1732139229.909:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 479.692851][ T26] audit: type=1326 audit(1732139229.909:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 479.786475][ T26] audit: type=1326 audit(1732139229.909:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 480.916974][ T26] audit: type=1326 audit(1732139229.909:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 481.054533][ T26] audit: type=1326 audit(1732139229.909:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 481.101211][ T26] audit: type=1326 audit(1732139229.909:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 481.311155][ T26] audit: type=1326 audit(1732139229.909:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 482.011692][ T8513] loop6: detected capacity change from 0 to 512 [ 482.343474][ T8513] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 482.359972][ T8527] loop0: detected capacity change from 0 to 256 [ 482.384355][ T8513] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.586322][ T8533] loop7: detected capacity change from 0 to 256 [ 482.593537][ T4176] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 482.635745][ T8534] netlink: 84 bytes leftover after parsing attributes in process `syz.6.907'. [ 482.644799][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.907'. [ 482.653777][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.907'. [ 482.662611][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.907'. [ 486.246739][ T4176] usb 3-1: device descriptor read/all, error -71 [ 486.574048][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 490.242668][ T8580] device wg2 entered promiscuous mode [ 490.631164][ T8589] loop6: detected capacity change from 0 to 128 [ 490.975427][ T8596] loop0: detected capacity change from 0 to 256 [ 491.355479][ T8606] loop7: detected capacity change from 0 to 512 [ 491.537269][ T8606] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 491.562438][ T8606] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.723177][ T4249] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 491.809736][ T8618] netlink: 84 bytes leftover after parsing attributes in process `syz.7.925'. [ 491.818692][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.7.925'. [ 491.827971][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.925'. [ 491.836871][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.925'. [ 492.111178][ T4257] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 492.312264][ T4257] usb 8-1: device descriptor read/64, error -71 [ 492.554527][ T4249] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.577455][ T4249] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 492.582300][ T4257] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 492.617378][ T4249] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 492.651156][ T4249] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 492.660218][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.700733][ T4249] usb 3-1: config 0 descriptor?? [ 492.738525][ T8642] loop5: detected capacity change from 0 to 1024 [ 492.763973][ T4249] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 492.815417][ T4257] usb 8-1: device descriptor read/64, error -71 [ 492.882914][ T8642] EXT4-fs (loop5): Test dummy encryption mode enabled [ 492.900170][ T8642] EXT4-fs (loop5): Ignoring removed orlov option [ 492.905394][ T4176] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 492.951413][ T4257] usb usb8-port1: attempt power cycle [ 492.963119][ T8642] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 493.108430][ T1110] usb 3-1: USB disconnect, device number 20 [ 493.206972][ T4176] usb 1-1: Using ep0 maxpacket: 8 [ 493.226777][ T8642] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 493.240047][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 493.240061][ T26] audit: type=1326 audit(1732139243.779:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.6.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 493.287096][ T26] audit: type=1800 audit(1732139243.789:400): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.929" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 493.335500][ T26] audit: type=1326 audit(1732139243.819:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.6.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 493.378373][ T26] audit: type=1326 audit(1732139243.819:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.6.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 493.408092][ T4257] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 493.428212][ T26] audit: type=1326 audit(1732139243.819:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 493.471004][ T26] audit: type=1326 audit(1732139243.819:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 493.501482][ T4176] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 493.510309][ T26] audit: type=1326 audit(1732139243.819:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 493.510625][ T4176] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 493.542949][ T4176] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.552473][ T4257] usb 8-1: device descriptor read/8, error -71 [ 493.553928][ T26] audit: type=1326 audit(1732139243.819:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 493.580795][ T26] audit: type=1326 audit(1732139243.819:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 493.801893][ T26] audit: type=1326 audit(1732139243.819:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353d94c819 code=0x7ffc0000 [ 493.824908][ T4176] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.869021][ T4176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.012540][ T4176] usb 1-1: Product: syz [ 494.076830][ T4176] usb 1-1: Manufacturer: syz [ 494.249731][ T4176] usb 1-1: SerialNumber: syz [ 494.442106][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 494.448637][ T8680] netlink: 'syz.6.934': attribute type 32 has an invalid length. [ 495.416312][ T4176] usb 1-1: 0:2 : does not exist [ 495.440500][ T4176] usb 1-1: USB disconnect, device number 11 [ 495.479253][ T8687] device pim6reg1 entered promiscuous mode [ 495.651349][ T8687] loop6: detected capacity change from 0 to 16 [ 495.719473][ T8687] erofs: (device loop6): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 495.743790][ T7881] udevd[7881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.157198][ T8699] loop0: detected capacity change from 0 to 256 [ 496.520049][ T8707] loop2: detected capacity change from 0 to 128 [ 497.770622][ T8720] loop6: detected capacity change from 0 to 512 [ 498.003648][ T8730] loop7: detected capacity change from 0 to 512 [ 498.105979][ T8720] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 498.125474][ T8730] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.945: attempt to clear invalid blocks 1 len 1 [ 498.135599][ T8720] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.159784][ T8730] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.945: bg 0: block 343: padding at end of block bitmap is not set [ 498.378417][ T8730] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 498.514065][ T8730] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.945: invalid indirect mapped block 1819239214 (level 0) [ 498.851952][ T8730] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.945: invalid indirect mapped block 1819239214 (level 1) [ 498.922277][ T8730] EXT4-fs (loop7): 1 truncate cleaned up [ 498.927946][ T8730] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 500.490166][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 500.490180][ T26] audit: type=1326 audit(1732139251.029:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 500.561832][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.947'. [ 500.606147][ T26] audit: type=1326 audit(1732139251.029:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 500.675289][ T26] audit: type=1326 audit(1732139251.069:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 500.781146][ T8763] loop0: detected capacity change from 0 to 256 [ 500.895293][ T26] audit: type=1326 audit(1732139251.069:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 501.302413][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.308978][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.571439][ T26] audit: type=1326 audit(1732139251.069:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 501.687682][ T26] audit: type=1326 audit(1732139251.079:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 501.750722][ T26] audit: type=1326 audit(1732139251.079:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 501.824862][ T26] audit: type=1326 audit(1732139251.079:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 501.889023][ T26] audit: type=1326 audit(1732139251.089:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 501.912479][ T26] audit: type=1326 audit(1732139251.089:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 502.906397][ T8772] loop0: detected capacity change from 0 to 256 [ 505.921501][ T8792] loop6: detected capacity change from 0 to 2048 [ 505.943977][ T8794] loop5: detected capacity change from 0 to 512 [ 505.986381][ T8792] EXT4-fs (loop6): Ignoring removed orlov option [ 506.029278][ T8794] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.958: attempt to clear invalid blocks 1 len 1 [ 506.101986][ T8792] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 506.239015][ T8804] loop7: detected capacity change from 0 to 512 [ 506.274435][ T8794] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.958: bg 0: block 343: padding at end of block bitmap is not set [ 506.322401][ T8794] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 506.550727][ T8794] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.958: invalid indirect mapped block 1819239214 (level 0) [ 506.839934][ T8804] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 506.966440][ T8804] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.014912][ T8794] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.958: invalid indirect mapped block 1819239214 (level 1) [ 507.090833][ T8794] EXT4-fs (loop5): 1 truncate cleaned up [ 507.110883][ T8794] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 507.213655][ T8809] netlink: 84 bytes leftover after parsing attributes in process `syz.7.962'. [ 507.222654][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.7.962'. [ 507.231581][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.7.962'. [ 507.240339][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.7.962'. [ 507.944536][ T8816] serio: Serial port ptm0 [ 507.948980][ T5292] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 508.171222][ T5292] usb 8-1: device descriptor read/64, error -71 [ 508.441290][ T5292] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 508.661225][ T5292] usb 8-1: device descriptor read/64, error -71 [ 508.791894][ T5292] usb usb8-port1: attempt power cycle [ 509.596179][ T8834] loop2: detected capacity change from 0 to 256 [ 511.510369][ T8850] loop6: detected capacity change from 0 to 1024 [ 511.703165][ T8850] EXT4-fs (loop6): Ignoring removed orlov option [ 511.709871][ T8850] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 511.913994][ T8850] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 512.581187][ T4221] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 513.469690][ T8863] loop2: detected capacity change from 0 to 512 [ 513.534184][ T8863] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.977: attempt to clear invalid blocks 1 len 1 [ 513.562735][ T8863] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.977: bg 0: block 343: padding at end of block bitmap is not set [ 513.623465][ T8863] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 513.667328][ T8868] device pim6reg1 entered promiscuous mode [ 513.697132][ T8863] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.977: invalid indirect mapped block 1819239214 (level 0) [ 513.750494][ T8863] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.977: invalid indirect mapped block 1819239214 (level 1) [ 513.800666][ T8863] EXT4-fs (loop2): 1 truncate cleaned up [ 513.831326][ T8863] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 515.324123][ T8881] serio: Serial port ptm0 [ 516.263444][ T8850] syz.6.973 (8850) used greatest stack depth: 18840 bytes left [ 516.759082][ T8888] loop2: detected capacity change from 0 to 512 [ 516.867704][ T8888] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.890849][ T8893] loop6: detected capacity change from 0 to 256 [ 516.957678][ T8888] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 517.030927][ T8888] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.985: corrupted inode contents [ 517.147273][ T8888] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #2: comm syz.2.985: mark_inode_dirty error [ 517.178164][ T8888] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.985: corrupted inode contents [ 517.657130][ T8913] loop2: detected capacity change from 0 to 128 [ 518.048689][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 518.048704][ T26] audit: type=1326 audit(1732139268.579:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 518.143666][ T26] audit: type=1326 audit(1732139268.579:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2427394819 code=0x7ffc0000 [ 519.082243][ T8922] serio: Serial port ptm0 [ 519.536501][ T8927] loop2: detected capacity change from 0 to 512 [ 520.137547][ T8927] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.996: attempt to clear invalid blocks 1 len 1 [ 520.317545][ T8927] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.996: bg 0: block 343: padding at end of block bitmap is not set [ 520.390378][ T8927] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 520.562622][ T8927] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.996: invalid indirect mapped block 1819239214 (level 0) [ 520.794074][ T8927] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.996: invalid indirect mapped block 1819239214 (level 1) [ 521.114431][ T8927] EXT4-fs (loop2): 1 truncate cleaned up [ 521.120103][ T8927] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.221418][ T4176] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 522.461385][ T4176] usb 1-1: Using ep0 maxpacket: 16 [ 522.631606][ T4176] usb 1-1: config 0 has no interfaces? [ 522.822853][ T4176] usb 1-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 522.847579][ T4176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.871483][ T4176] usb 1-1: Product: syz [ 522.879263][ T4176] usb 1-1: Manufacturer: syz [ 522.889483][ T4176] usb 1-1: SerialNumber: syz [ 522.908129][ T4176] usb 1-1: config 0 descriptor?? [ 523.167633][ T4176] usb 1-1: USB disconnect, device number 12 [ 523.709714][ T8969] device wg2 left promiscuous mode [ 523.975220][ T8969] device wg2 entered promiscuous mode [ 524.444029][ T8982] loop0: detected capacity change from 0 to 256 [ 525.043288][ T8984] loop7: detected capacity change from 0 to 512 [ 525.093898][ T26] audit: type=1107 audit(1732139275.639:430): pid=8975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='3¹Ÿ€+ÿ’3iá.Ê7J\£U@G' [ 525.177502][ T8981] loop5: detected capacity change from 0 to 8192 [ 525.206819][ T8984] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.1014: attempt to clear invalid blocks 1 len 1 [ 525.292102][ T8981] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 525.351823][ T8984] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1014: bg 0: block 343: padding at end of block bitmap is not set [ 525.416267][ T26] audit: type=1800 audit(1732139275.959:431): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1013" name="bus" dev="loop5" ino=1048673 res=0 errno=0 [ 525.446837][ T8984] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 525.467087][ T8984] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1014: invalid indirect mapped block 1819239214 (level 0) [ 525.536619][ T8984] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1014: invalid indirect mapped block 1819239214 (level 1) [ 525.573031][ T8984] EXT4-fs (loop7): 1 truncate cleaned up [ 525.628184][ T8984] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 525.652286][ T8968] loop2: detected capacity change from 0 to 40427 [ 525.711267][ T8968] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 525.763512][ T8968] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 525.840177][ T8968] F2FS-fs (loop2): invalid crc value [ 525.923438][ T5324] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 525.949241][ T5324] FAT-fs (loop5): Filesystem has been set read-only [ 525.965846][ T8968] F2FS-fs (loop2): Found nat_bits in checkpoint [ 526.167572][ T9002] loop5: detected capacity change from 0 to 1024 [ 526.180499][ T8968] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 526.194625][ T8968] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 526.311312][ T9002] EXT4-fs (loop5): Ignoring removed nobh option [ 526.336510][ T9002] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 527.026827][ T9002] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 527.784530][ T9015] loop7: detected capacity change from 0 to 4096 [ 527.842622][ T9015] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 528.547839][ T26] audit: type=1326 audit(1732139279.089:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.7.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3dcd819 code=0x7ffc0000 [ 528.650324][ T26] audit: type=1326 audit(1732139279.149:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.7.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbf3dcd819 code=0x7ffc0000 [ 528.674708][ T26] audit: type=1326 audit(1732139279.149:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.7.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3dcd819 code=0x7ffc0000 [ 528.697560][ T26] audit: type=1326 audit(1732139279.149:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.7.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3dcd819 code=0x7ffc0000 [ 529.098852][ T26] audit: type=1326 audit(1732139279.149:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.7.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbf3dcd819 code=0x7ffc0000 [ 529.229635][ T9037] loop5: detected capacity change from 0 to 512 [ 529.246313][ T26] audit: type=1326 audit(1732139279.149:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.7.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3dcd819 code=0x7ffc0000 [ 529.276043][ T5292] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 529.324367][ T26] audit: type=1326 audit(1732139279.149:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.7.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3dcd819 code=0x7ffc0000 [ 529.347006][ T26] audit: type=1326 audit(1732139279.149:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.7.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbf3dcd819 code=0x7ffc0000 [ 529.525007][ T9037] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1026: iget: bad extended attribute block 1 [ 529.543124][ T9037] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1026: couldn't read orphan inode 15 (err -117) [ 529.559562][ T9037] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 529.587331][ T9037] EXT4-fs error (device loop5): ext4_map_blocks:628: inode #2: block 13: comm syz.5.1026: lblock 0 mapped to illegal pblock 13 (length 1) [ 529.633437][ T5292] usb 8-1: Using ep0 maxpacket: 16 [ 529.659976][ T9048] Illegal XDP return value 4294967274, expect packet loss! [ 529.683123][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1026'. [ 529.751427][ T5292] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.786740][ T5292] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.804239][ T5292] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 529.818543][ T9050] loop6: detected capacity change from 0 to 512 [ 530.146577][ T5292] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.160586][ T5292] usb 8-1: config 0 descriptor?? [ 530.214751][ T9050] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1031: attempt to clear invalid blocks 1 len 1 [ 530.237088][ T9050] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1031: bg 0: block 343: padding at end of block bitmap is not set [ 530.288570][ T9050] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 530.334220][ T9050] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1031: invalid indirect mapped block 1819239214 (level 0) [ 530.404540][ T9056] loop5: detected capacity change from 0 to 4096 [ 530.419960][ T9050] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1031: invalid indirect mapped block 1819239214 (level 1) [ 530.437593][ T9060] loop2: detected capacity change from 0 to 128 [ 530.463842][ T9050] EXT4-fs (loop6): 1 truncate cleaned up [ 530.469630][ T9050] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 530.605521][ T9056] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 530.634410][ T9053] loop0: detected capacity change from 0 to 40427 [ 530.650890][ T9060] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 530.664053][ T9060] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 530.682970][ T5292] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.7-1/input0 [ 530.709884][ T9053] F2FS-fs (loop0): invalid crc value [ 530.771883][ T9053] F2FS-fs (loop0): Found nat_bits in checkpoint [ 530.909207][ T9053] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 530.923425][ T5292] usb 8-1: USB disconnect, device number 13 [ 532.982869][ T9076] loop5: detected capacity change from 0 to 512 [ 533.532809][ T9076] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.1037: corrupted inode contents [ 533.592750][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 533.592764][ T26] audit: type=1326 audit(1732139284.139:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 533.621632][ T9076] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #3: comm syz.5.1037: mark_inode_dirty error [ 533.719579][ T9076] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.1037: corrupted inode contents [ 533.961253][ T26] audit: type=1326 audit(1732139284.169:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 534.011584][ T9076] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.1037: mark_inode_dirty error [ 534.103268][ T9076] Quota error (device loop5): write_blk: dquota write failed [ 534.120935][ T26] audit: type=1326 audit(1732139284.169:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc799a9a1b0 code=0x7ffc0000 [ 534.168383][ T9076] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 534.193508][ T9076] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.1037: Failed to acquire dquot type 0 [ 534.206542][ T26] audit: type=1326 audit(1732139284.169:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc799a9d047 code=0x7ffc0000 [ 534.285848][ T9076] EXT4-fs (loop5): 1 orphan inode deleted [ 534.317321][ T26] audit: type=1326 audit(1732139284.169:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 534.352668][ T9076] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,usrquota,,errors=continue. Quota mode: writeback. [ 534.408607][ T9076] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.429637][ T26] audit: type=1326 audit(1732139284.169:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc799a9d047 code=0x7ffc0000 [ 534.547902][ T5292] Bluetooth: hci0: command 0x0406 tx timeout [ 535.216215][ T26] audit: type=1326 audit(1732139284.169:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc799a9a4aa code=0x7ffc0000 [ 535.310932][ T26] audit: type=1326 audit(1732139284.169:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc799a9b819 code=0x7ffc0000 [ 535.421395][ T9108] loop0: detected capacity change from 0 to 2048 [ 535.538676][ T9078] loop6: detected capacity change from 0 to 40427 [ 535.595644][ T9108] EXT4-fs error (device loop0): ext4_fill_super:4841: inode #2: comm syz.0.1048: casefold flag without casefold feature [ 535.635247][ T9108] EXT4-fs (loop0): get root inode failed [ 535.640916][ T9108] EXT4-fs (loop0): mount failed [ 535.648078][ T9078] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 535.655460][ T9078] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 535.719915][ T9078] F2FS-fs (loop6): invalid crc value [ 535.969567][ T9078] F2FS-fs (loop6): Found nat_bits in checkpoint [ 536.593040][ T9078] F2FS-fs (loop6): Start checkpoint disabled! [ 537.145386][ T9129] capability: warning: `syz.5.1050' uses 32-bit capabilities (legacy support in use) [ 537.162000][ T9129] loop5: detected capacity change from 0 to 512 [ 537.236871][ T9129] EXT4-fs (loop5): Test dummy encryption mode enabled [ 537.456897][ T9129] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:163: inode #12: comm syz.5.1050: inline data xattr refers to an external xattr inode [ 537.474290][ T9129] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1050: couldn't read orphan inode 12 (err -117) [ 538.344526][ T9129] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 538.851653][ T9140] device wg2 left promiscuous mode [ 539.452969][ T9152] loop6: detected capacity change from 0 to 1024 [ 539.571187][ T9152] EXT4-fs (loop6): Test dummy encryption mode enabled [ 539.605141][ T9152] EXT4-fs (loop6): Ignoring removed orlov option [ 539.693532][ T7881] [ 539.695891][ T7881] ====================================================== [ 539.702898][ T7881] WARNING: possible circular locking dependency detected [ 539.709900][ T7881] 5.15.173-syzkaller #0 Not tainted [ 539.715082][ T7881] ------------------------------------------------------ [ 539.722082][ T7881] udevd/7881 is trying to acquire lock: [ 539.727615][ T7881] ffff88801f6be9b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 539.736489][ T7881] [ 539.736489][ T7881] but task is already holding lock: [ 539.743824][ T7881] ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 539.752661][ T7881] [ 539.752661][ T7881] which lock already depends on the new lock. [ 539.752661][ T7881] [ 539.763034][ T7881] [ 539.763034][ T7881] the existing dependency chain (in reverse order) is: [ 539.772016][ T7881] [ 539.772016][ T7881] -> #2 (&base->lock){-.-.}-{2:2}: [ 539.779279][ T7881] lock_acquire+0x1db/0x4f0 [ 539.784276][ T7881] _raw_spin_lock_irqsave+0xd1/0x120 [ 539.790053][ T7881] lock_timer_base+0x120/0x260 [ 539.795308][ T7881] __mod_timer+0x1d6/0xeb0 [ 539.800215][ T7881] queue_delayed_work_on+0x156/0x250 [ 539.805992][ T7881] kvfree_call_rcu+0x50e/0x8a0 [ 539.811247][ T7881] rtnl_register_internal+0x443/0x530 [ 539.817109][ T7881] rtnl_register+0x32/0x70 [ 539.822015][ T7881] ip_rt_init+0x2e6/0x390 [ 539.826835][ T7881] ip_init+0xa/0x20 [ 539.831134][ T7881] inet_init+0x27c/0x390 [ 539.835868][ T7881] do_one_initcall+0x22b/0x7a0 [ 539.841125][ T7881] do_initcall_level+0x157/0x210 [ 539.846570][ T7881] do_initcalls+0x49/0x90 [ 539.851391][ T7881] kernel_init_freeable+0x425/0x5c0 [ 539.857084][ T7881] kernel_init+0x19/0x290 [ 539.861906][ T7881] ret_from_fork+0x1f/0x30 [ 539.866819][ T7881] [ 539.866819][ T7881] -> #1 (krc.lock){..-.}-{2:2}: [ 539.873823][ T7881] lock_acquire+0x1db/0x4f0 [ 539.878818][ T7881] _raw_spin_lock+0x2a/0x40 [ 539.883903][ T7881] kvfree_call_rcu+0x1b5/0x8a0 [ 539.889161][ T7881] trie_delete_elem+0x520/0x690 [ 539.894504][ T7881] 0xffffffffa0090991 [ 539.898995][ T7881] bpf_trace_run3+0x1d1/0x380 [ 539.904164][ T7881] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 539.910292][ T7881] kmem_cache_free+0x1ce/0x1f0 [ 539.915546][ T7881] do_sys_openat2+0x202/0x4f0 [ 539.920715][ T7881] __x64_sys_creat+0x11f/0x160 [ 539.925968][ T7881] do_syscall_64+0x3b/0xb0 [ 539.930878][ T7881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 539.937262][ T7881] [ 539.937262][ T7881] -> #0 (&trie->lock){..-.}-{2:2}: [ 539.944525][ T7881] validate_chain+0x1649/0x5930 [ 539.949869][ T7881] __lock_acquire+0x1295/0x1ff0 [ 539.955210][ T7881] lock_acquire+0x1db/0x4f0 [ 539.960205][ T7881] _raw_spin_lock_irqsave+0xd1/0x120 [ 539.965979][ T7881] trie_delete_elem+0x90/0x690 [ 539.971235][ T7881] bpf_prog_2c29ac5cdc6b1842+0x3a/0xbe0 [ 539.977288][ T7881] bpf_trace_run3+0x1d1/0x380 [ 539.982455][ T7881] enqueue_timer+0x3ae/0x540 [ 539.987549][ T7881] __mod_timer+0xa60/0xeb0 [ 539.992457][ T7881] queue_delayed_work_on+0x156/0x250 [ 539.998231][ T7881] fsnotify_put_mark+0x5f3/0x700 [ 540.003660][ T7881] __se_sys_inotify_rm_watch+0x16c/0x230 [ 540.009783][ T7881] do_syscall_64+0x3b/0xb0 [ 540.014692][ T7881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.021078][ T7881] [ 540.021078][ T7881] other info that might help us debug this: [ 540.021078][ T7881] [ 540.031279][ T7881] Chain exists of: [ 540.031279][ T7881] &trie->lock --> krc.lock --> &base->lock [ 540.031279][ T7881] [ 540.042971][ T7881] Possible unsafe locking scenario: [ 540.042971][ T7881] [ 540.050393][ T7881] CPU0 CPU1 [ 540.055726][ T7881] ---- ---- [ 540.061082][ T7881] lock(&base->lock); [ 540.065122][ T7881] lock(krc.lock); [ 540.071419][ T7881] lock(&base->lock); [ 540.077990][ T7881] lock(&trie->lock); [ 540.082030][ T7881] [ 540.082030][ T7881] *** DEADLOCK *** [ 540.082030][ T7881] [ 540.090141][ T7881] 2 locks held by udevd/7881: [ 540.094806][ T7881] #0: ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 540.104097][ T7881] #1: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 540.113373][ T7881] [ 540.113373][ T7881] stack backtrace: [ 540.119238][ T7881] CPU: 1 PID: 7881 Comm: udevd Not tainted 5.15.173-syzkaller #0 [ 540.126932][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 540.136964][ T7881] Call Trace: [ 540.140227][ T7881] [ 540.143137][ T7881] dump_stack_lvl+0x1e3/0x2d0 [ 540.147793][ T7881] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 540.153421][ T7881] ? print_circular_bug+0x12b/0x1a0 [ 540.158595][ T7881] check_noncircular+0x2f8/0x3b0 [ 540.163509][ T7881] ? add_chain_block+0x850/0x850 [ 540.168420][ T7881] ? lockdep_lock+0x11f/0x2a0 [ 540.173072][ T7881] ? validate_chain+0x112/0x5930 [ 540.177990][ T7881] ? _find_first_zero_bit+0xcf/0xf0 [ 540.183171][ T7881] validate_chain+0x1649/0x5930 [ 540.188004][ T7881] ? rcu_read_lock_sched_held+0x89/0x130 [ 540.193617][ T7881] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 540.199577][ T7881] ? reacquire_held_locks+0x660/0x660 [ 540.204960][ T7881] ? look_up_lock_class+0x77/0x120 [ 540.210073][ T7881] ? register_lock_class+0x100/0x9a0 [ 540.215332][ T7881] ? is_dynamic_key+0x1f0/0x1f0 [ 540.220153][ T7881] ? mark_lock+0x98/0x340 [ 540.224452][ T7881] __lock_acquire+0x1295/0x1ff0 [ 540.229276][ T7881] lock_acquire+0x1db/0x4f0 [ 540.233751][ T7881] ? trie_delete_elem+0x90/0x690 [ 540.238663][ T7881] ? mark_lock+0x98/0x340 [ 540.242979][ T7881] ? read_lock_is_recursive+0x10/0x10 [ 540.248337][ T7881] ? __lock_acquire+0x1295/0x1ff0 [ 540.253336][ T7881] _raw_spin_lock_irqsave+0xd1/0x120 [ 540.258594][ T7881] ? trie_delete_elem+0x90/0x690 [ 540.263519][ T7881] ? _raw_spin_lock+0x40/0x40 [ 540.268168][ T7881] ? read_lock_is_recursive+0x10/0x10 [ 540.273512][ T7881] trie_delete_elem+0x90/0x690 [ 540.278250][ T7881] ? __cant_sleep+0x270/0x270 [ 540.282895][ T7881] ? do_raw_spin_lock+0x14a/0x370 [ 540.287891][ T7881] ? __lock_acquire+0x1ff0/0x1ff0 [ 540.292890][ T7881] bpf_prog_2c29ac5cdc6b1842+0x3a/0xbe0 [ 540.298407][ T7881] bpf_trace_run3+0x1d1/0x380 [ 540.303076][ T7881] ? bpf_trace_run2+0x340/0x340 [ 540.307895][ T7881] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 540.313771][ T7881] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 540.319216][ T7881] ? _raw_spin_lock+0x40/0x40 [ 540.323873][ T7881] enqueue_timer+0x3ae/0x540 [ 540.328442][ T7881] __mod_timer+0xa60/0xeb0 [ 540.332847][ T7881] ? mod_timer_pending+0x20/0x20 [ 540.337766][ T7881] ? queue_delayed_work_on+0xfc/0x250 [ 540.343114][ T7881] ? lockdep_hardirqs_off+0x70/0x100 [ 540.348459][ T7881] ? __queue_delayed_work+0x16b/0x210 [ 540.353805][ T7881] queue_delayed_work_on+0x156/0x250 [ 540.359065][ T7881] ? delayed_work_timer_fn+0x80/0x80 [ 540.364327][ T7881] ? do_raw_spin_unlock+0x137/0x8b0 [ 540.369499][ T7881] fsnotify_put_mark+0x5f3/0x700 [ 540.374425][ T7881] ? put_ucounts+0x69/0x280 [ 540.378902][ T7881] ? __fsnotify_recalc_mask+0x550/0x550 [ 540.384418][ T7881] ? inotify_remove_from_idr+0x1b7/0x590 [ 540.390020][ T7881] ? dec_ucount+0x17a/0x1a0 [ 540.394584][ T7881] __se_sys_inotify_rm_watch+0x16c/0x230 [ 540.400187][ T7881] do_syscall_64+0x3b/0xb0 [ 540.404573][ T7881] ? clear_bhb_loop+0x15/0x70 [ 540.409220][ T7881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.415086][ T7881] RIP: 0033:0x7f6359177f77 [ 540.419475][ T7881] Code: 73 01 c3 48 8b 0d b1 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 ff 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 [ 540.439064][ T7881] RSP: 002b:00007ffc4a38a198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff [ 540.447452][ T7881] RAX: ffffffffffffffda RBX: 00005601ab5e3120 RCX: 00007f6359177f77 [ 540.455396][ T7881] RDX: 0000000000000007 RSI: 0000000000000707 RDI: 0000000000000007 [ 540.463337][ T7881] RBP: 00005601b8d44d20 R08: 0000000000000006 R09: d563c21f7846ae44 [ 540.471292][ T7881] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000707 [ 540.479237][ T7881] R13: 00007ffc4a38a1a8 R14: 0000000003938700 R15: 00005601ab5e3160 [ 540.487199][ T7881] [ 540.509161][ T9152] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.