last executing test programs: 9m20.943272585s ago: executing program 32 (id=49): socket$pptp(0x18, 0x1, 0x2) io_setup(0xa0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB="00c200140000000002000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 8m50.862675187s ago: executing program 1 (id=235): openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24048800) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x208902) ioctl$TCXONC(r5, 0x5608, 0x2) 8m50.418008422s ago: executing program 33 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 8m50.005501337s ago: executing program 1 (id=238): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x484, &(0x7f0000000b80)={[], [{@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x80000000}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@flag='nolazytime'}]}, 0x0, 0x43b, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x45, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x700, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 8m49.05956396s ago: executing program 1 (id=241): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'r\x00'}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8001, 0x5, @loopback, 0xfffffffe}, 0x1c) write$cgroup_devices(r1, &(0x7f0000000200)={'a', ' *:* ', 'w\x00'}, 0x8) 8m49.02456946s ago: executing program 1 (id=242): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 8m48.922904821s ago: executing program 1 (id=243): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x21085e, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}]}, 0x1, 0x516, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$incfs(&(0x7f0000000300)='./bus\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000500), 0xc802, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 8m47.43656798s ago: executing program 1 (id=246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x413, 0x100000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800020000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0xfffffffc, 0x0, 0xa, 0x1, 0x3, 0x42}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) 8m42.566012332s ago: executing program 34 (id=200): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x82000, 0x23) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002780)=@newtaction={0x14, 0x30, 0x2, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x100) sendto(r2, &(0x7f0000002a40), 0x0, 0x10, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) pipe2$9p(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000020c0)={0x4, 0x0, &(0x7f0000001080)=[@enter_looper], 0x1000, 0x0, &(0x7f00000010c0)="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"}) 8m35.898603556s ago: executing program 35 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000005000000090000000100", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nomblk_io_submit}, {@noquota}, {@abort}, {@noload}, {@bsdgroups}]}, 0x64, 0x50d, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") r6 = add_key$keyring(&(0x7f0000000900), 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r7], 0x20) add_key$fscrypt_provisioning(&(0x7f0000000780), &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x29, r6) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m32.311514192s ago: executing program 36 (id=246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x413, 0x100000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800020000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0xfffffffc, 0x0, 0xa, 0x1, 0x3, 0x42}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) 8m4.193197029s ago: executing program 5 (id=396): socketpair(0x3, 0x5, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x804) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xd0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8m1.566242432s ago: executing program 5 (id=401): io_setup(0xa0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB="00c2001400000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 8m1.464436983s ago: executing program 5 (id=403): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)=ANY=[], 0x190) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f0000000080)='./file1\x00', 0x64042, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13) 7m57.739891721s ago: executing program 5 (id=420): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x484, &(0x7f0000000b80)={[], [{@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x80000000}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@flag='nolazytime'}]}, 0x0, 0x43b, &(0x7f00000010c0)="$eJzs3MtvG8UfAPDv2knf/SW/qjz6AAIFEfFImrSUHriAQOIAEhIcyjEkaRXqNqgJEq0iCAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAuLZyM1t5NbNdO49TJFvz5SNvO7I418/Xu2DM7WQfQt0bSf5KIfRHxW0QM1bPNBUbq/91aWZr+a2VpOolq9c0/k1q5mytL03nR/HV788xAROnTJI60qXfh8pXzU5XK7KUsP7544b3xhctXnp27MHVu9tzsxcnTp0+emHj+1ORzPYkzjevm4Q/njx569e1rr0+fufbOT98kefwtcfTIyHoHn6hWe1xdsfY3pJOBAhtCV8r1bhqDtf4/FOVYO3lD8conhTYO2FLVarV6f+fDy1XgPyyJolsAFCP/ok/nv/m2TUOPe8KNF+sToDTuW9lWPzIQpazMYMv8tpdGIuLM8t9fpltszX0IAIAm36Xjn2fajf9K0Xhf6H/ZGspwRPw/Ig5ExKmIOBgR90XUyj4QEQ92WX/rIsnt45/S9U0FtkHp+O+FbG2refyXj/5iuJzl9tfiH0zOzlVmj2fvyWgM7kzzE+vU8f3Lv37e6Vjj+C/d0vrzsWDWjusDO5tfMzO1OHU3MTe68XHE4YF28SerKwFJRByKiMObrGPuqa+Pdjp25/jX0YN1pupXEU/Wz/9ytMSfS9ZfnxzfFZXZ4+P5VXG7n3+5+kan+u8q/h5Iz/+ettf/avzDSeN67UL3dVz9/bOOc5rNXv87krea9n0wtbh4aSJiR/JavdGN+ydbyk2ulU/jHz3Wvv8fiLV34khEpBfxQxHxcEQ8krX90Yh4LCKOrRP/jy89/u7m499aafwzXZ3/tcSOaN3TPlE+/8O3TZUOdxN/ev5P1lKj2Z6NfP5tpF2bu5oBAADg36cUEfsiKY2tpkulsbH63/AfjD2lyvzC4tNn59+/OFN/RmA4Bkv5na6hhvuhE9m0Ps9PtuRPZPeNvyjvruXHpucrM0UHD31ub4f+n/qjXHTrgC3neS3oX/o/9C/9H/qX/g/9q03/311EO4Dt1+77/6MC2gFsv5b+b9kP+oj5P/Qv/R/6l/4PfWlhd9z5IXmJIhOxq/3PLxSciNK90IxqF7/1INFNouhPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN74JwAA//+eq+R7") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x45, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x700, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 7m55.128997444s ago: executing program 5 (id=424): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x21085e, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}]}, 0x1, 0x516, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$incfs(&(0x7f0000000300)='./bus\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000500), 0xc802, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 7m54.477563252s ago: executing program 5 (id=428): io_setup(0xa0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB="00c2001400000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 7m39.071131218s ago: executing program 37 (id=428): io_setup(0xa0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB="00c2001400000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 7m35.980263336s ago: executing program 9 (id=494): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x6, 0x0, r4, 0x1b4b8370, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={0xffffffffffffffff, r5}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1164420, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xee01) 7m33.116661223s ago: executing program 9 (id=502): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7m33.018375884s ago: executing program 3 (id=507): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) 7m31.452290924s ago: executing program 9 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setitimer(0x1, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000768bb2a84f00000085000087ac41ab7612e6b8c753008600000095eab62d1d450b92217d00"/49], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m29.546695578s ago: executing program 3 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") splice(r4, 0x0, r2, &(0x7f00000001c0), 0x6, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 7m29.530390098s ago: executing program 9 (id=514): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x6, 0x0, r4, 0x1b4b8370, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={0xffffffffffffffff, r5}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1164420, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xee01) 7m28.442954872s ago: executing program 9 (id=521): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x21085e, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}]}, 0x1, 0x516, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$incfs(&(0x7f0000000300)='./bus\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000500), 0xc802, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 7m27.080695349s ago: executing program 3 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0xfdef) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpriority(0x1, 0xe6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x19, 0x3d00, 0x1575}) unshare(0x62040200) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000380)={[{@nombcache}, {@noload}, {@commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006119c4000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0x6) 7m25.737143956s ago: executing program 9 (id=531): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7m24.943308297s ago: executing program 3 (id=534): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 7m24.812751618s ago: executing program 3 (id=535): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 7m24.726823149s ago: executing program 3 (id=536): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x8, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000200)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x2, &(0x7f0000000300)={0x7}) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 7m24.69589262s ago: executing program 38 (id=536): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x8, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000200)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x2, &(0x7f0000000300)={0x7}) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 7m10.696887177s ago: executing program 39 (id=531): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7m1.526457954s ago: executing program 6 (id=625): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="04", 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ee", 0x1}], 0x1, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48) 7m1.020682s ago: executing program 6 (id=627): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 6m59.860553855s ago: executing program 6 (id=631): newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x100) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) 6m56.602779966s ago: executing program 6 (id=644): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_btf_id_by_name$bpf_lsm(&(0x7f00000004c0)='bpf_lsm_task_free\x00') 6m54.910722758s ago: executing program 6 (id=652): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) io_setup(0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x7, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) recvmsg$unix(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r1], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x90, 0x0, &(0x7f0000000440)={0x0, 0x4, [0x7b5, 0x987, 0xce8, 0xa89]}) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf943", 0x44, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 6m53.735876502s ago: executing program 6 (id=662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x2c0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x100, 0x1004, 0x0, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffff, 0xffffffff00000000, 0x4, 0x4, 0x7, 0x5, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x80000000, 0xfffffffffffffc00, 0x2, 0xb, 0x2, 0xcdc, 0x8, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53a, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x2, 0x40000000000006, 0xb, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) syz_usb_connect(0x5, 0xb6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m38.309965678s ago: executing program 40 (id=662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x2c0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x100, 0x1004, 0x0, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffff, 0xffffffff00000000, 0x4, 0x4, 0x7, 0x5, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x80000000, 0xfffffffffffffc00, 0x2, 0xb, 0x2, 0xcdc, 0x8, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53a, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x2, 0x40000000000006, 0xb, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) syz_usb_connect(0x5, 0xb6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.710712534s ago: executing program 7 (id=2154): r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000000)={0x10, {{0x29, 0x0, 0x3000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x301000c, &(0x7f0000000340)={[{@uuid_null}], [{@appraise}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000b0000000a00000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001380)="96be8a7feca9b1a8fbee7536d4baf4c914ed9a500f9eaa461123f0b53e5977cd4707a9e105a24f15f5f127f54d3977c937eeedf980b68234", &(0x7f0000001680), 0x8000, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) gettid() newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r7, r7, r7) getpid() 10.980754523s ago: executing program 7 (id=2158): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) 9.385492073s ago: executing program 7 (id=2163): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) ioprio_get$pid(0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB="0300000000d5db0000e33a0184e523c198fb", @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) syz_clone3(&(0x7f0000000700)={0xa40ab800, &(0x7f00000000c0), &(0x7f0000000240), 0x0, {0x2c}, &(0x7f0000000640)=""/182, 0xb6, &(0x7f0000000380)=""/100, 0x0, 0x0, {r0}}, 0x58) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000001780)={&(0x7f0000000780)=""/4096, 0x1000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) shutdown(r5, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x1}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 8.277730437s ago: executing program 2 (id=2164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r5, &(0x7f0000001fc0)=""/4079, 0xfef) 8.276653397s ago: executing program 8 (id=2165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 8.272838457s ago: executing program 4 (id=2166): open(&(0x7f0000000080)='./file0\x00', 0x400, 0x168) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) unshare(0x60000480) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 6.605680127s ago: executing program 2 (id=2167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="04000000040000000300"/21], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") splice(r5, &(0x7f0000000180)=0x2, r2, &(0x7f00000001c0), 0x6, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$FUSE(r7, &(0x7f0000002300)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 6.494806029s ago: executing program 0 (id=2168): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) 6.42413007s ago: executing program 7 (id=2169): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$incfs(r3, 0x0, 0x10b441, 0x0) 5.673093679s ago: executing program 0 (id=2170): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 5.485739771s ago: executing program 8 (id=2171): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x2040400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000105"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x10, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = dup2(r2, r2) write$P9_RLERRORu(r3, &(0x7f0000000000)={0x12, 0x7, 0x2, {{0x5, 'N#&,{'}, 0x3cc}}, 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz71Rw0AQBeCnQ0gioBUSOqAHEopBKZUQ0Ae9uAaPPeuR/NeB7eD7gpt7N+9mZ8N9tWxr8V+pLsmwHHPLW6bkJW0tffRTltynxlQyX77XuD91fp6/h7RNxjV9vXe7quuY1+TpePvtz29dPv9utSYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLJDAAAA//+4SRWs") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x4c6c00, 0x1b1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) 5.025021518s ago: executing program 2 (id=2172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000580)="17800000020001767cf26395fc52c7f34e6c9a32010000008a066ac4147ac713411cce62c3e503be8cecff3f0000000300000a0001df157c", 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) ptrace(0x10, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x10c000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.868648509s ago: executing program 4 (id=2173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000801000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000040)=[{r7, 0x40}], 0x1, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x8001, 0x2, 0x9, 0x40020, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x2, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.711213861s ago: executing program 7 (id=2174): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 4.710187401s ago: executing program 0 (id=2175): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000002000000020000000d"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000003580), 0x80000, 0x0) read(r6, &(0x7f00000035c0)=""/200, 0xc8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket(0x10, 0x3, 0x0) 3.461485967s ago: executing program 4 (id=2176): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) getresuid(&(0x7f0000001ec0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, 0x0, 0x0, 0x10, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) dup2(r4, r4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4006}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9}}, 0x18}}, 0x0) 3.460576957s ago: executing program 0 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f", @ANYRES32, @ANYBLOB="0000cc12", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x32, 0x871a15abc695fb3d}, 0x14}}, 0x0) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r5) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xe) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.953554113s ago: executing program 7 (id=2178): r0 = userfaultfd(0x80001) syz_usb_connect(0x5, 0x52b, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x8, 0x48, 0x27, 0x10, 0x2040, 0x4901, 0x67dc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x519, 0x3, 0x40, 0x1, 0xa8, 0x6e, [{{0x9, 0x4, 0xd, 0x0, 0x0, 0x35, 0xb8, 0x54, 0x7}}, {{0x9, 0x4, 0x54, 0xf, 0x2, 0xe, 0x1, 0x0, 0xe, [], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x5, 0x9a, 0x16}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x7, 0xf6, 0x4, [@generic={0x84, 0x5, "99edb917b77bd3ad8fe740da0c754df45107a71f18065c90d0f004f76f6bc658ac070511981085cf59813c3d120d1b926f1c0bee5edc715640754751b1ebd68cdd923b4f10a98fc90affac986e883816a95ebab1ff748364e4522d282e1b53aae1689e708f87c4813b58b3a0080650bbd375ba0b0f8e56b641e7ef55abb599febaa5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0x8c, 0x4, 0xe, 0x7c, 0x27, 0x4e, 0x3, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "18"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x0, 0x32}, {0x6, 0x24, 0x1a, 0x6, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1a, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0xfffd, 0x1ff}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0xca, 0x24, 0x13, 0x15, "9d9136dab05bc88c472da02a085e686022b21aec50e9bd55c8b41dce8b0a946d83c877e687663cab43cb6a55cbc7243e262c394ee5d1e6578d1ae516496fc4ad5701437905bd50043354a49c72080e5951c0393ad4b8f1a7f080ffbdbac641f2359158d6068f6921cdce39bf9eeb67fe3cbdfc993b71faf621e65d44b3360f9ee951374e597171a2954c39d1889bca6375cdbca52c845475ea2696b308affcd5d3829570d45d912d72c2571d7adf86fd0bd0b0296957b640a5a82ea369e5371bfe521d927a93"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x3, 0x5}]}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, 0x2, [0x2, 0x9], 0x7f}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0xb, 0x7, "4e9c1d7d"}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x3, "db2a88d31938"}]}], [{{0x9, 0x5, 0x7, 0xc, 0x10, 0x3, 0xa1, 0xd8}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x6, 0x5e, 0x8, [@generic={0x58, 0x3, "ef861f48781b424e0509e02bcd62e330424cc9d8f831a0f85aad82913dd1771ca61f8b5d9703d1c988fd9933c37e2a9235ea958b6186f21059ad61f53ea7e84988f3af7bfeab74d8b6c8a677362130e48e5304224369"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x6, 0x6, 0x4}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x84, 0x4, 0x4, [@generic={0x4a, 0x22, "8253648ceed1ba2c3cde450e73078b5295e37af144a81aa82be8d8727cdadd182d4c6e2ec8142fcc20a57f4936f5a59be3d0e5793c4da0911f6b2cc2240e5e06602f28d3df891aab"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x0, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x2ae}]}}, {{0x9, 0x5, 0x6, 0x0, 0x260, 0x8, 0x80, 0xfa}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x12, 0x4, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7, 0x7, 0x9, [@generic={0x27, 0x30, "adfc95ed864a82a661238ddb251e95ac1b8c19aa506390cc51aa0f1959868e8743f1d7bd1d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4d, 0x7f}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x81, 0x2, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}, @generic={0xd8, 0x3, "28d0777ccd3f86cd282db44d5b4712bf3218c409d05f526797fa84be7ec60eee1266fc4cdb1a5fde094b1554db3ebf4b15369b117d67c54d2cafd9b3c8155ec6eebf0ed668c6084526b832c7ba8e5949a5786f551df49a0aef2a832c559438ed1778cac1047fe2f0564966fd7db948b71393ef21f1a0a26ffef7cbaa6fc4735d599c95e9726713baae6e37caa8f54a7a145d779398fb23386e089ac4fd560324001fae5c1474d6efa2d75587229d914c3eae2a40d0c1e3d1432977444418dfc18274ff6eb462b65ee4fd708317dad51f54a797337cce"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x9, 0x3, 0x66}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x8, 0x0, 0x1, [@generic={0x1b, 0x10, "0f6b47647b54de7ab33f815726220f308e7a3a76839f69cf1b"}, @generic={0x4a, 0x31, "480c826046db3ff5197870d816b3657f593b3cf873f2f4865eafeeb123d362d4fd1f777efbd57739f5e6839afb473ef439152d5f53962a7f7789b603dbf40ad8ccf2f34cf7f809f7"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x3, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xa6, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x100}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x90, 0x81, 0xaa, [@generic={0x3, 0x31, "88"}, @generic={0x75, 0xe, "4eeb820d5393d4ff937563f8d8d481b08bba3999b56927bb65211fba964cb4960d49bee1a35fbbb7eba65004fe395af1408d41661bda4a8e97f7fc0ec34899a6bf64bc79adc591243c07ae2f276b7f635930fc2bd3c4da42e8366c0daa8d6a5a99a68c3399ebdd19a41891dd8502def654e8e2"}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x0, 0x9, 0x1, 0x10, 0x5}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x414}}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) 2.830621225s ago: executing program 2 (id=2179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000580)="17800000020001767cf26395fc52c7f34e6c9a32010000008a066ac4147ac713411cce62c3e503be8cecff3f0000000300000a0001df157cde", 0x39) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x10c000}) ioctl$KVM_NMI(r3, 0xae9a) 2.729609906s ago: executing program 8 (id=2180): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$rtc(&(0x7f0000000040), 0x3, 0x181300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) 1.756092578s ago: executing program 0 (id=2181): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.697675539s ago: executing program 4 (id=2182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="04000000040000000300"/21], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") splice(r5, &(0x7f0000000180)=0x2, r2, &(0x7f00000001c0), 0x6, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$FUSE(r7, &(0x7f0000002300)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 1.679203889s ago: executing program 8 (id=2183): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 1.62709653s ago: executing program 2 (id=2184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90a495, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@norecovery}, {@dax_always}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x6, 0x510, &(0x7f0000002740)="$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") ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.282030874s ago: executing program 8 (id=2185): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x18, &(0x7f0000004180)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@journal_checksum}, {@bh}, {@noquota}, {@data_journal}, {@dax}, {@nomblk_io_submit}, {@barrier_val}, {@orlov}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x300, 0x0, 0xfe, 0x6c, 0x0, @private=0x3, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2, [0x800]}, {}, {}, {0x8, 0x88be, 0x8}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x6558, 0x2000000}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c000000000000000000001801000000756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x40000000, 0x0) ptrace$cont(0x20, r6, 0xfffffffffffffffd, 0xd) 520.923523ms ago: executing program 0 (id=2186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f", @ANYRES32, @ANYBLOB="0000cc12", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x32, 0x871a15abc695fb3d}, 0x14}}, 0x0) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r5) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xe) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 520.530573ms ago: executing program 4 (id=2187): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[], 0x48) 432.325604ms ago: executing program 8 (id=2188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 403.279975ms ago: executing program 2 (id=2189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(0x0, 0x92) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) 0s ago: executing program 4 (id=2190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000554000/0x1000)=nil, 0x1000, 0x4, 0x28013, 0xffffffffffffffff, 0x929b6000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002cc0)=@newtaction={0x858, 0x30, 0xffff, 0x0, 0x0, {}, [{0x844, 0x1, [@m_police={0x840, 0x1, 0x0, 0x0, {{0xb}, {0x814, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xcff, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x80000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc192dfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b3, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xb, 0x1000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c692401, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4756, 0x4, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xd4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6d, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x858}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2, 0x4e22, 0x0, 0xa, 0x20, 0x20, 0x73, r4, r6}, {0x9, 0xc, 0x0, 0x10001, 0xd, 0x8, 0xffff, 0xa}, {0x3ff, 0x9, 0x101, 0xa}, 0x10, 0x6e6bb5, 0x2, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34fc, 0x3, 0x1, 0x3, 0x3, 0xaca4, 0x6}}, 0xe8) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) kernel console output (not intermixed with test programs): 080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue [ 465.527816][ T6887] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 465.566803][ T6887] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 465.575041][ T6887] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 465.607376][ T6887] EXT4-fs (loop7): 1 truncate cleaned up [ 465.613270][ T6887] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,noblock_validity, [ 465.779902][ T6887] EXT4-fs (loop7): re-mounted. Opts: (null) [ 465.787656][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 465.787669][ T23] audit: type=1326 audit(1746111393.320:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 466.586037][ T23] audit: type=1326 audit(1746111393.320:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 467.285088][ T6904] EXT4-fs (loop4): orphan cleanup on readonly fs [ 467.294169][ T6904] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 467.303873][ T6904] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 467.315053][ T6904] EXT4-fs (loop4): 1 truncate cleaned up [ 467.321283][ T6904] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 467.601184][ T23] audit: type=1326 audit(1746111393.330:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 467.953345][ T399] print_req_error: 46 callbacks suppressed [ 467.953376][ T399] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 468.031205][ T338] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 468.151639][ T338] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.163022][ T399] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.176686][ T338] buffer_io_error: 32 callbacks suppressed [ 468.176696][ T338] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 468.192064][ T399] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 468.202977][ T338] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.218843][ T338] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 468.298581][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 468.315730][ T23] audit: type=1326 audit(1746111395.840:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 468.321050][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 468.359026][ T338] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.484047][ T338] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 468.659141][ T23] audit: type=1326 audit(1746111396.000:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 468.713216][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.768939][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.775191][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 468.780978][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 468.805021][ T6929] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 468.815716][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 468.857827][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 469.736195][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 469.745868][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 470.063378][ T6938] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:455: comm syz.0.1722: Invalid block bitmap block 0 in block_group 0 [ 470.078417][ T6938] Quota error (device loop0): write_blk: dquota write failed [ 470.085887][ T6938] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 470.096948][ T6938] EXT4-fs error (device loop0): ext4_free_blocks:4795: comm syz.0.1722: Freeing blocks not in datazone - block = 0, count = 4096 [ 470.111423][ T6938] EXT4-fs error (device loop0): ext4_read_inode_bitmap:134: comm syz.0.1722: Invalid inode bitmap blk 0 in block_group 0 [ 470.124725][ T6938] EXT4-fs error (device loop0) in ext4_free_inode:352: Corrupt filesystem [ 470.133892][ T738] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 470.183350][ T6938] EXT4-fs (loop0): 1 orphan inode deleted [ 470.189149][ T6938] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 470.379548][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1722'. [ 471.519350][ T6957] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=6957 comm=syz.8.1724 [ 471.709677][ T6951] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 472.092202][ T6964] hub 2-0:1.0: USB hub found [ 472.097693][ T6964] hub 2-0:1.0: 1 port detected [ 472.718042][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 472.736243][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 472.963185][ T3215] print_req_error: 18 callbacks suppressed [ 472.963201][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 472.980953][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 473.029117][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 473.050247][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 473.086374][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 473.107134][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 473.202561][ T392] buffer_io_error: 12 callbacks suppressed [ 473.202582][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 473.232517][ T3215] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 474.180956][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.299784][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 474.371311][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.707872][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 474.831722][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.859922][ T6989] EXT4-fs (loop2): Ignoring removed bh option [ 474.932160][ T6989] EXT4-fs (loop2): dax option not supported [ 474.997308][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 475.055125][ T6982] EXT4-fs (loop7): orphan cleanup on readonly fs [ 475.066757][ T6982] Quota error (device loop7): find_tree_dqentry: Getting block too big (196613 >= 6) [ 475.076337][ T6982] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 475.086679][ T6982] EXT4-fs (loop7): 1 truncate cleaned up [ 475.092808][ T6982] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 475.260509][ T6994] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 475.716305][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 475.751678][ T338] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 475.834553][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 475.851825][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 475.860394][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 475.878532][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 477.782767][ T7017] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 477.838917][ T7017] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 478.003771][ T7017] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 478.056418][ T1871] print_req_error: 39 callbacks suppressed [ 478.056448][ T1871] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 478.150536][ T7017] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 478.177044][ T7017] System zones: 0-2, 18-18, 34-34 [ 478.191989][ T7017] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 478.259106][ T1871] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.505549][ T7017] EXT4-fs (loop0): 1 truncate cleaned up [ 478.512150][ T7017] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000a04d,errors=continue,,errors=continue [ 478.957996][ T1871] buffer_io_error: 25 callbacks suppressed [ 478.958008][ T1871] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 479.059328][ T7037] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,resuid=0x0000000000000000,,errors=continue [ 479.098670][ T338] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 479.111848][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 479.938110][ T18] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 480.099438][ T7057] EXT4-fs (loop2): orphan cleanup on readonly fs [ 480.108961][ T7057] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 480.118919][ T7057] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 480.130158][ T7057] EXT4-fs (loop2): 1 truncate cleaned up [ 480.136300][ T7057] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 480.298021][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 480.398356][ T338] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 480.472822][ T338] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.511415][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.555432][ T338] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 480.579198][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 480.629628][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.722369][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 480.742491][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.754695][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 480.764622][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 480.774772][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 481.319258][ T7062] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 481.326988][ T7062] EXT4-fs (loop0): Ignoring removed bh option [ 481.335029][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 481.340456][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 481.343965][ T7062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 481.381568][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 481.591278][ T7062] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 481.827905][ T7071] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 481.845427][ T7073] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 481.845516][ T7071] ext4 filesystem being mounted at /325/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 482.027544][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.7.1753 [ 483.156337][ T7098] tc_dump_action: action bad kind [ 483.370190][ T392] print_req_error: 18 callbacks suppressed [ 483.370207][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 483.390670][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 484.018319][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'. [ 484.107065][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.119090][ T338] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 484.125635][ T3215] buffer_io_error: 9 callbacks suppressed [ 484.125646][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 484.135366][ T399] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 484.217313][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.217361][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 484.218038][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.218078][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 484.218469][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.218508][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 484.218905][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.218958][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 484.228674][ T7109] hub 2-0:1.0: USB hub found [ 484.229316][ T7109] hub 2-0:1.0: 1 port detected [ 484.238290][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.238355][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 484.252555][ T338] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 484.253520][ T338] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 484.254248][ T338] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 484.254639][ T338] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 484.705645][ T7116] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,resuid=0x0000000000000000,,errors=continue [ 484.747267][ T7105] F2FS-fs (loop8): invalid crc value [ 484.803776][ T7105] F2FS-fs (loop8): recover fsync data on readonly fs [ 484.811145][ T7105] F2FS-fs (loop8): checkpoint=disable on readonly fs [ 485.046934][ T3066] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 485.387637][ T3066] usb 8-1: Using ep0 maxpacket: 16 [ 485.400758][ T7127] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 485.414201][ T7127] EXT4-fs (loop0): Ignoring removed bh option [ 485.426965][ T7127] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 485.457048][ T7127] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 485.507055][ T3066] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 485.515813][ T3066] usb 8-1: config 0 has an invalid descriptor of length 87, skipping remainder of the config [ 485.526626][ T3066] usb 8-1: config 0 has no interface number 0 [ 485.533281][ T3066] usb 8-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.707022][ T3066] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 485.720201][ T3066] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.737022][ T3066] usb 8-1: Product: syz [ 485.745367][ T3066] usb 8-1: Manufacturer: syz [ 485.750600][ T432] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 485.805973][ T3066] usb 8-1: SerialNumber: syz [ 485.818368][ T3066] usb 8-1: config 0 descriptor?? [ 486.358663][ T7136] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 486.579883][ T23] audit: type=1107 audit(1746111413.900:985): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 486.632433][ T7133] EXT4-fs (loop2): Test dummy encryption mode enabled [ 486.640239][ T7133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 486.651317][ T7133] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 486.661118][ T432] usb 9-1: device descriptor read/64, error 18 [ 487.519445][ T7149] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=7149 comm=syz.4.1768 [ 487.657261][ T3066] asix: probe of 8-1:0.251 failed with error -22 [ 487.672625][ T3066] usb 8-1: USB disconnect, device number 19 [ 488.396932][ T7156] tc_dump_action: action bad kind [ 488.862424][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1773'. [ 489.358070][ T7166] tc_dump_action: action bad kind [ 489.740247][ T392] print_req_error: 46 callbacks suppressed [ 489.740263][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 489.757817][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 489.769029][ T392] buffer_io_error: 32 callbacks suppressed [ 489.769039][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 489.846945][ T7170] hub 2-0:1.0: USB hub found [ 489.853537][ T7170] hub 2-0:1.0: 1 port detected [ 490.313205][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.336849][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 490.348142][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 490.373617][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.386507][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.399564][ T3215] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 490.416987][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 490.425156][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.436160][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 490.444311][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.473802][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 490.840446][ T7179] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 490.851042][ T7179] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 490.859658][ T7182] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 490.868464][ T7182] EXT4-fs (loop0): Ignoring removed bh option [ 490.874868][ T7182] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 490.885324][ T7182] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 490.893347][ T7179] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 490.902862][ T7179] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 490.915183][ T7179] System zones: 0-2, 18-18, 34-34 [ 490.918400][ T7188] fuse: Bad value for 'fd' [ 490.925146][ T7179] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 490.941101][ T7179] EXT4-fs (loop4): 1 truncate cleaned up [ 490.947001][ T7179] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000a04d,errors=continue,,errors=continue [ 490.962126][ T7181] EXT4-fs (loop7): Ignoring removed bh option [ 490.968577][ T7181] EXT4-fs (loop7): dax option not supported [ 491.105074][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 491.114932][ T338] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 491.128047][ T338] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 491.141023][ T338] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 491.158781][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 491.177585][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 493.003797][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'. [ 493.813918][ T432] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 493.822239][ T105] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 494.277067][ T432] usb 1-1: Using ep0 maxpacket: 8 [ 494.277086][ T105] usb 8-1: Using ep0 maxpacket: 16 [ 494.527457][ T432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.557249][ T105] usb 8-1: config 64 has an invalid interface number: 13 but max is 2 [ 494.591268][ T105] usb 8-1: config 64 has an invalid interface number: 84 but max is 2 [ 494.613843][ T432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.035864][ T105] usb 8-1: config 64 has an invalid interface number: 140 but max is 2 [ 495.044364][ T432] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 495.053953][ T105] usb 8-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 495.074502][ T432] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.097389][ T105] usb 8-1: config 64 has no interface number 0 [ 495.103580][ T105] usb 8-1: config 64 has no interface number 1 [ 495.110430][ T105] usb 8-1: config 64 has no interface number 2 [ 495.116627][ T105] usb 8-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 495.128462][ T432] usb 1-1: config 0 descriptor?? [ 495.133565][ T105] usb 8-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 495.144817][ T105] usb 8-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 495.158440][ T105] usb 8-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 495.172089][ T105] usb 8-1: config 64 interface 84 has no altsetting 0 [ 495.180087][ T105] usb 8-1: config 64 interface 140 has no altsetting 0 [ 495.212897][ T7228] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.222441][ T7228] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 495.237119][ T7228] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 495.246140][ T7228] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 495.254458][ T7228] System zones: 0-2, 18-18, 34-34 [ 495.260550][ T7228] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 495.293197][ T7233] fuse: Bad value for 'fd' [ 495.307321][ T7228] EXT4-fs (loop8): 1 truncate cleaned up [ 495.316941][ T7228] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x000000000000a04d,errors=continue,,errors=continue [ 495.417042][ T105] usb 8-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 495.425213][ T3215] print_req_error: 53 callbacks suppressed [ 495.425233][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 495.428450][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 495.452535][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.455276][ T105] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.476077][ T105] usb 8-1: Product: Д [ 495.480967][ T105] usb 8-1: Manufacturer: Ї [ 495.578453][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.590072][ T105] usb 8-1: SerialNumber: syz [ 495.601602][ T392] buffer_io_error: 38 callbacks suppressed [ 495.601622][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 495.627011][ T432] uclogic 0003:5543:0004.0012: No inputs registered, leaving [ 495.640044][ T432] uclogic 0003:5543:0004.0012: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 495.652260][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.674564][ T7238] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 495.686050][ T7238] EXT4-fs (loop2): Ignoring removed bh option [ 495.693699][ T7238] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 495.704267][ T7238] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 495.707002][ T105] usb 8-1: can't set config #64, error -71 [ 495.720455][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 495.750465][ T105] usb 8-1: USB disconnect, device number 20 [ 495.758900][ T3215] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 495.831198][ T432] usb 1-1: USB disconnect, device number 23 [ 495.874465][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 495.940322][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 495.952648][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.964907][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.976778][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 495.989926][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 496.002124][ T3215] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 496.009758][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 496.099291][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 496.108498][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 496.117172][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 496.125511][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 496.188621][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 496.858324][ T7255] tc_dump_action: action bad kind [ 497.382476][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 498.752063][ T432] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 498.781748][ T7281] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 498.789173][ T7281] EXT4-fs (loop2): Ignoring removed bh option [ 498.795289][ T7281] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 498.805650][ T7281] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 498.832900][ T7283] loop7: p1 p2 p3 p4 [ 498.837241][ T7283] loop7: p1 size 108922248 extends beyond EOD, truncated [ 498.844875][ T7283] loop7: p2 start 861536256 is beyond EOD, truncated [ 498.851763][ T7283] loop7: p3 start 851968 is beyond EOD, truncated [ 498.858234][ T7283] loop7: p4 size 65536 extends beyond EOD, truncated [ 498.866594][ T164] loop7: p1 p2 p3 p4 [ 498.870736][ T164] loop7: p1 size 108922248 extends beyond EOD, truncated [ 498.878341][ T164] loop7: p2 start 861536256 is beyond EOD, truncated [ 498.885157][ T164] loop7: p3 start 851968 is beyond EOD, truncated [ 498.891628][ T164] loop7: p4 size 65536 extends beyond EOD, truncated [ 498.986990][ T453] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 499.006955][ T432] usb 5-1: Using ep0 maxpacket: 16 [ 499.012524][ T7286] EXT4-fs (loop0): Unrecognized mount option "nodioread_nolock" or missing value [ 499.216974][ T432] usb 5-1: config 64 has an invalid interface number: 13 but max is 2 [ 499.225466][ T432] usb 5-1: config 64 has an invalid interface number: 84 but max is 2 [ 499.233938][ T432] usb 5-1: config 64 has an invalid interface number: 140 but max is 2 [ 499.242586][ T432] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 499.255320][ T432] usb 5-1: config 64 has no interface number 0 [ 499.261747][ T432] usb 5-1: config 64 has no interface number 1 [ 499.306908][ T453] usb 9-1: Using ep0 maxpacket: 16 [ 499.311275][ T432] usb 5-1: config 64 has no interface number 2 [ 499.336977][ T432] usb 5-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 499.340398][ T6524] udevd[6524]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 499.355960][ T432] usb 5-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 499.365132][ T399] udevd[399]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 499.983552][ T432] usb 5-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 499.998175][ T432] usb 5-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 500.011695][ T432] usb 5-1: config 64 interface 84 has no altsetting 0 [ 500.018654][ T432] usb 5-1: config 64 interface 140 has no altsetting 0 [ 500.327053][ T453] usb 9-1: config 64 has an invalid interface number: 13 but max is 2 [ 500.338710][ T453] usb 9-1: config 64 has an invalid interface number: 84 but max is 2 [ 500.355433][ T453] usb 9-1: config 64 has an invalid interface number: 140 but max is 2 [ 500.373205][ T453] usb 9-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 500.393886][ T453] usb 9-1: config 64 has no interface number 0 [ 500.400652][ T453] usb 9-1: config 64 has no interface number 1 [ 500.419921][ T453] usb 9-1: config 64 has no interface number 2 [ 500.426586][ T453] usb 9-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 500.438175][ T453] usb 9-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 500.450929][ T453] usb 9-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 500.464959][ T453] usb 9-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 500.466606][ T7308] EXT4-fs (loop7): Ignoring removed bh option [ 500.484657][ T453] usb 9-1: config 64 interface 84 has no altsetting 0 [ 500.491634][ T453] usb 9-1: config 64 interface 140 has no altsetting 0 [ 500.498979][ T7308] EXT4-fs (loop7): dax option not supported [ 500.527020][ T432] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 500.536223][ T432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.544312][ T432] usb 5-1: Product: Д [ 500.548490][ T432] usb 5-1: Manufacturer: Ї [ 500.553043][ T432] usb 5-1: SerialNumber: syz [ 500.668874][ T3215] udevd[3215]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 500.992803][ T338] udevd[338]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 501.022158][ T338] print_req_error: 67 callbacks suppressed [ 501.022175][ T338] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 501.022314][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 501.028381][ T338] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 501.062846][ T338] buffer_io_error: 47 callbacks suppressed [ 501.062865][ T338] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 501.207160][ T453] usb 9-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 501.378538][ T453] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.417587][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 501.428986][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 501.441951][ T453] usb 9-1: Product: Д [ 501.443186][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 501.446304][ T453] usb 9-1: Manufacturer: Ї [ 501.457393][ T432] uvcvideo: Found UVC 0.00 device Д (2040:4901) [ 501.463019][ T453] usb 9-1: SerialNumber: syz [ 501.469024][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 501.481562][ T432] uvcvideo: No valid video chain found. [ 501.487092][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 501.498568][ T453] usb 9-1: can't set config #64, error -71 [ 501.506717][ T453] usb 9-1: USB disconnect, device number 19 [ 501.507154][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 501.521007][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 501.534435][ T432] usb 5-1: USB disconnect, device number 20 [ 501.536960][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 501.548710][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 501.559802][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 501.579860][ T7317] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 501.681552][ T7317] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 501.686298][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 501.690189][ T7321] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 501.711770][ T338] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 501.727083][ T7321] ext4 filesystem being mounted at /236/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 501.737401][ T7317] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 501.755525][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 501.778413][ T7317] EXT4-fs (loop4): 1 truncate cleaned up [ 501.784107][ T7317] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,noblock_validity, [ 501.798566][ T338] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 501.815963][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 501.857171][ T7329] loop_reread_partitions: partition scan of loop8 () failed (rc=-16) [ 501.952833][ T7317] EXT4-fs (loop4): re-mounted. Opts: (null) [ 501.961124][ T23] audit: type=1326 audit(1746111429.490:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 501.988926][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 502.000038][ T1444] __loop_clr_fd: partition scan of loop8 failed (rc=-16) [ 502.066951][ T453] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 502.067253][ T23] audit: type=1326 audit(1746111429.490:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 502.098167][ T23] audit: type=1326 audit(1746111429.490:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 502.124304][ T7343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=7343 comm=syz.8.1820 [ 502.264208][ T7346] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 502.295449][ T7346] EXT4-fs (loop8): Ignoring removed bh option [ 502.306920][ T453] usb 1-1: Using ep0 maxpacket: 16 [ 502.310058][ T7346] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 502.337108][ T7346] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 502.368328][ T23] audit: type=1326 audit(1746111429.900:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 502.422158][ T23] audit: type=1326 audit(1746111429.930:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 502.535354][ T453] usb 1-1: unable to get BOS descriptor or descriptor too short [ 502.576940][ T23] audit: type=1326 audit(1746111430.020:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 502.627117][ T453] usb 1-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 502.657085][ T453] usb 1-1: config 1 interface 1 has no altsetting 0 [ 502.664003][ T23] audit: type=1326 audit(1746111430.020:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 502.708229][ T23] audit: type=1326 audit(1746111430.020:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 502.732152][ T23] audit: type=1326 audit(1746111430.020:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 502.776400][ T23] audit: type=1326 audit(1746111430.020:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892d56969 code=0x7ffc0000 [ 502.852452][ T453] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.865513][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.883396][ T453] usb 1-1: Product: syz [ 502.891777][ T453] usb 1-1: Manufacturer: syz [ 502.901772][ T453] usb 1-1: SerialNumber: syz [ 503.894561][ T7355] tc_dump_action: action bad kind [ 504.398515][ T7366] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:455: comm syz.8.1824: Invalid block bitmap block 0 in block_group 0 [ 504.413808][ T7366] EXT4-fs error (device loop8): ext4_free_blocks:4795: comm syz.8.1824: Freeing blocks not in datazone - block = 0, count = 4096 [ 504.428410][ T7366] EXT4-fs error (device loop8): ext4_read_inode_bitmap:134: comm syz.8.1824: Invalid inode bitmap blk 0 in block_group 0 [ 504.441745][ T7366] EXT4-fs error (device loop8) in ext4_free_inode:352: Corrupt filesystem [ 504.451141][ T7366] EXT4-fs (loop8): 1 orphan inode deleted [ 504.457192][ T7366] EXT4-fs (loop8): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 504.603889][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1824'. [ 505.078159][ T7371] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 505.100415][ T7371] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 505.110604][ T7371] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 505.120136][ T7371] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 505.128393][ T7371] System zones: 0-2, 18-18, 34-34 [ 505.134120][ T7371] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 505.149356][ T7371] EXT4-fs (loop7): 1 truncate cleaned up [ 505.155099][ T7371] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x000000000000a04d,errors=continue,,errors=continue [ 505.360451][ T453] usb 1-1: USB disconnect, device number 24 [ 505.378536][ T105] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 505.393366][ T7377] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,resuid=0x0000000000000000,,errors=continue [ 506.016089][ T105] usb 5-1: Using ep0 maxpacket: 16 [ 506.104994][ T3215] print_req_error: 51 callbacks suppressed [ 506.105011][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 506.108991][ T338] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 506.224308][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.247410][ T399] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 506.267044][ T399] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.278686][ T338] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.280859][ T6524] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 506.296927][ T399] buffer_io_error: 35 callbacks suppressed [ 506.296939][ T399] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 506.308305][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 506.315246][ T338] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 506.323872][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.336908][ T453] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 506.343501][ T105] usb 5-1: config 64 has an invalid interface number: 13 but max is 2 [ 506.359629][ T6524] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.400874][ T7396] tc_dump_action: action bad kind [ 506.617902][ T399] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.629842][ T105] usb 5-1: config 64 has an invalid interface number: 84 but max is 2 [ 506.639313][ T399] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 506.647965][ T105] usb 5-1: config 64 has an invalid interface number: 140 but max is 2 [ 506.656458][ T399] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 506.664532][ T105] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 506.674808][ T105] usb 5-1: config 64 has no interface number 0 [ 506.681026][ T105] usb 5-1: config 64 has no interface number 1 [ 506.687303][ T105] usb 5-1: config 64 has no interface number 2 [ 506.691242][ T399] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 506.693514][ T105] usb 5-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 506.712671][ T105] usb 5-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 506.716693][ T6524] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 506.724519][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 506.740035][ T399] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 506.748076][ T105] usb 5-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.763937][ T3215] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 506.772816][ T105] usb 5-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 506.788142][ T105] usb 5-1: config 64 interface 84 has no altsetting 0 [ 506.794932][ T105] usb 5-1: config 64 interface 140 has no altsetting 0 [ 506.880959][ T7399] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 506.888911][ T7399] EXT4-fs (loop7): Ignoring removed bh option [ 506.895394][ T7399] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 506.905452][ T453] usb 1-1: Using ep0 maxpacket: 16 [ 506.926668][ T7399] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 506.957317][ T105] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 506.976070][ T105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.984460][ T105] usb 5-1: Product: Д [ 506.988860][ T105] usb 5-1: Manufacturer: Ї [ 506.993388][ T105] usb 5-1: SerialNumber: syz [ 507.138869][ T453] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 507.206918][ T453] usb 1-1: config 0 has an invalid descriptor of length 87, skipping remainder of the config [ 507.223139][ T453] usb 1-1: config 0 has no interface number 0 [ 507.229343][ T453] usb 1-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 507.447401][ T453] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 507.466514][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.477499][ T453] usb 1-1: Product: syz [ 507.481908][ T453] usb 1-1: Manufacturer: syz [ 507.489185][ T453] usb 1-1: SerialNumber: syz [ 507.500147][ T453] usb 1-1: config 0 descriptor?? [ 507.558620][ T7409] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 507.568852][ T7409] ext4 filesystem being mounted at /323/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 507.607046][ T105] uvcvideo: Found UVC 0.00 device Д (2040:4901) [ 507.613718][ T105] uvcvideo: No valid video chain found. [ 507.659760][ T105] usb 5-1: USB disconnect, device number 21 [ 507.856985][ T432] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 507.953902][ T7422] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 508.386616][ T23] kauditd_printk_skb: 22 callbacks suppressed [ 508.489554][ T23] audit: type=1107 audit(1746111435.910:1015): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 508.727368][ T432] usb 9-1: Using ep0 maxpacket: 16 [ 510.057897][ T453] asix: probe of 1-1:0.251 failed with error -22 [ 510.106571][ T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 510.126748][ T453] usb 1-1: USB disconnect, device number 25 [ 510.522273][ T432] usb 9-1: unable to get BOS descriptor or descriptor too short [ 510.587035][ T432] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 510.594706][ T432] usb 9-1: can't read configurations, error -71 [ 510.644317][ T7430] EXT4-fs (loop7): Test dummy encryption mode enabled [ 510.651287][ T7430] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 510.661740][ T7430] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 511.146621][ T7433] EXT4-fs (loop2): Unrecognized mount option "nodioread_nolock" or missing value [ 511.217150][ T7438] EXT4-fs (loop4): Unrecognized mount option "nodioread_nolock" or missing value [ 511.731804][ T392] print_req_error: 38 callbacks suppressed [ 511.731821][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 511.742150][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 511.750800][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 511.771757][ T392] buffer_io_error: 26 callbacks suppressed [ 511.771766][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 512.667189][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 512.687030][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 512.707765][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 512.755099][ T3215] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 512.785279][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 512.796532][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 512.855988][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 512.866907][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 512.875080][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 512.885986][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 513.372424][ T7456] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 513.419798][ T7456] EXT4-fs (loop8): Ignoring removed bh option [ 513.433410][ T7470] fuse: Bad value for 'fd' [ 513.438000][ T432] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 513.452682][ T7456] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 513.486659][ T399] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 513.491731][ T7456] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 513.498328][ T399] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.505849][ T7470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1853'. [ 513.516401][ T399] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 513.538839][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 513.555757][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 513.564486][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 513.716946][ T432] usb 3-1: Using ep0 maxpacket: 16 [ 513.723406][ T7479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 513.840835][ T7484] EXT4-fs (loop8): Ignoring removed bh option [ 513.847233][ T7484] EXT4-fs (loop8): dax option not supported [ 513.936997][ T432] usb 3-1: config 64 has an invalid interface number: 13 but max is 2 [ 513.948226][ T432] usb 3-1: config 64 has an invalid interface number: 84 but max is 2 [ 513.975658][ T432] usb 3-1: config 64 has an invalid interface number: 140 but max is 2 [ 513.988732][ T432] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 514.133943][ T432] usb 3-1: config 64 has no interface number 0 [ 514.147425][ T432] usb 3-1: config 64 has no interface number 1 [ 514.159871][ T432] usb 3-1: config 64 has no interface number 2 [ 514.179581][ T432] usb 3-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 514.201386][ T432] usb 3-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 514.360531][ T432] usb 3-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 514.374158][ T432] usb 3-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 514.387520][ T432] usb 3-1: config 64 interface 84 has no altsetting 0 [ 514.394409][ T432] usb 3-1: config 64 interface 140 has no altsetting 0 [ 514.975313][ T432] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 514.994284][ T7478] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 515.009326][ T432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.017531][ T432] usb 3-1: Product: Д [ 515.021722][ T432] usb 3-1: Manufacturer: Ї [ 515.026300][ T432] usb 3-1: SerialNumber: syz [ 515.047613][ T7478] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 515.069807][ T7478] EXT4-fs (loop0): This should not happen!! Data will be lost [ 515.069807][ T7478] [ 515.080587][ T7478] EXT4-fs (loop0): Total free blocks count 0 [ 515.086622][ T7478] EXT4-fs (loop0): Free/Dirty block details [ 515.092682][ T7478] EXT4-fs (loop0): free_blocks=68451041280 [ 515.098604][ T7478] EXT4-fs (loop0): dirty_blocks=16 [ 515.103829][ T7478] EXT4-fs (loop0): Block reservation details [ 515.109923][ T7478] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 515.950204][ T7509] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 516.067018][ T432] uvcvideo: Found UVC 0.00 device Д (2040:4901) [ 516.073399][ T432] uvcvideo: No valid video chain found. [ 516.161495][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1862'. [ 516.389788][ T432] usb 3-1: USB disconnect, device number 22 [ 516.745984][ T3215] print_req_error: 68 callbacks suppressed [ 516.745995][ T3215] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 516.766886][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 516.779408][ T7520] EXT4-fs (loop2): Unrecognized mount option "nodioread_nolock" or missing value [ 516.780637][ T7522] fuse: Bad value for 'fd' [ 516.806720][ T7522] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1864'. [ 517.469271][ T7529] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 517.478608][ T7529] EXT4-fs (loop7): Ignoring removed bh option [ 517.485181][ T7529] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 517.495971][ T7529] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 517.540720][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 517.557294][ T399] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 517.578534][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.587057][ T399] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.623268][ T399] buffer_io_error: 49 callbacks suppressed [ 517.623294][ T399] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 517.638086][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 517.646343][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.657970][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 517.666249][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.677502][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 517.685979][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.688592][ T338] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 517.714859][ T3215] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 517.715333][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 517.731172][ T338] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 517.731307][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 517.739794][ T338] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 517.755619][ T338] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 518.124565][ T7554] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 518.766915][ T432] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 518.796899][ T359] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 518.835840][ T7569] fuse: Bad value for 'fd' [ 518.844157][ T7569] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1877'. [ 518.895348][ T7553] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 518.916738][ T7553] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 518.929497][ T7553] EXT4-fs (loop2): This should not happen!! Data will be lost [ 518.929497][ T7553] [ 518.949555][ T7553] EXT4-fs (loop2): Total free blocks count 0 [ 518.955554][ T7553] EXT4-fs (loop2): Free/Dirty block details [ 518.982003][ T7553] EXT4-fs (loop2): free_blocks=68451041280 [ 518.997006][ T7553] EXT4-fs (loop2): dirty_blocks=16 [ 519.007115][ T432] usb 5-1: Using ep0 maxpacket: 16 [ 519.017073][ T7553] EXT4-fs (loop2): Block reservation details [ 519.023356][ T7553] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 519.047380][ T359] usb 9-1: Using ep0 maxpacket: 8 [ 519.057659][ T7576] 9pnet: Insufficient options for proto=fd [ 519.119546][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 519.429105][ T359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.445540][ T359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.463736][ T359] usb 9-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 519.478354][ T432] usb 5-1: config 64 has an invalid interface number: 13 but max is 2 [ 519.490077][ T432] usb 5-1: config 64 has an invalid interface number: 84 but max is 2 [ 519.503949][ T359] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.514515][ T432] usb 5-1: config 64 has an invalid interface number: 140 but max is 2 [ 519.529297][ T432] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 519.571256][ T359] usb 9-1: config 0 descriptor?? [ 519.596077][ T432] usb 5-1: config 64 has no interface number 0 [ 519.602917][ T432] usb 5-1: config 64 has no interface number 1 [ 519.609414][ T432] usb 5-1: config 64 has no interface number 2 [ 519.616246][ T432] usb 5-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 519.627940][ T432] usb 5-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 519.639381][ T432] usb 5-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 519.653010][ T432] usb 5-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 519.666918][ T432] usb 5-1: config 64 interface 84 has no altsetting 0 [ 519.685860][ T432] usb 5-1: config 64 interface 140 has no altsetting 0 [ 520.251791][ T7587] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 520.259447][ T7587] EXT4-fs (loop0): Ignoring removed bh option [ 520.266139][ T7587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 520.278011][ T7587] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 520.358982][ T7597] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 520.367250][ T432] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 520.379423][ T432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.391455][ T432] usb 5-1: Product: Д [ 520.396214][ T432] usb 5-1: Manufacturer: Ї [ 520.401284][ T432] usb 5-1: SerialNumber: syz [ 520.468381][ T359] uclogic 0003:5543:0004.0013: No inputs registered, leaving [ 520.476754][ T359] uclogic 0003:5543:0004.0013: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.8-1/input0 [ 520.681135][ T453] usb 9-1: USB disconnect, device number 22 [ 520.817031][ T432] uvcvideo: Found UVC 0.00 device Д (2040:4901) [ 520.824462][ T432] uvcvideo: No valid video chain found. [ 520.867991][ T7611] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:455: comm syz.0.1887: Invalid block bitmap block 0 in block_group 0 [ 520.883200][ T7611] Quota error (device loop0): write_blk: dquota write failed [ 520.891018][ T7611] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 520.901618][ T7611] EXT4-fs error (device loop0): ext4_free_blocks:4795: comm syz.0.1887: Freeing blocks not in datazone - block = 0, count = 4096 [ 520.918293][ T7611] EXT4-fs error (device loop0): ext4_read_inode_bitmap:134: comm syz.0.1887: Invalid inode bitmap blk 0 in block_group 0 [ 520.931754][ T7611] EXT4-fs error (device loop0) in ext4_free_inode:352: Corrupt filesystem [ 520.940828][ T7611] EXT4-fs (loop0): 1 orphan inode deleted [ 520.946637][ T7611] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 521.131189][ T738] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 521.174095][ T432] usb 5-1: USB disconnect, device number 22 [ 521.474201][ T7615] fuse: Bad value for 'fd' [ 521.922898][ T7616] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1888'. [ 522.029067][ T392] print_req_error: 40 callbacks suppressed [ 522.029078][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 522.048126][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 522.074477][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.088148][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.099291][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.134234][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.165572][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.186804][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.196584][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 522.279774][ T3215] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.422545][ T7624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 523.220855][ T392] buffer_io_error: 38 callbacks suppressed [ 523.220919][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 523.252747][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 523.957454][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 524.011916][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 524.149797][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 524.167007][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 524.178278][ T7649] FAT-fs (loop7): Unrecognized mount option "" or missing value [ 524.304953][ T7621] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 524.353200][ T7621] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 524.417757][ T7621] EXT4-fs (loop2): This should not happen!! Data will be lost [ 524.417757][ T7621] [ 524.436941][ T7621] EXT4-fs (loop2): Total free blocks count 0 [ 524.447852][ T7656] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 524.448437][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 524.458250][ T7656] EXT4-fs (loop0): Ignoring removed bh option [ 524.508442][ T7656] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 524.523004][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1896'. [ 524.532118][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1896'. [ 524.621330][ T338] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 524.692099][ T7621] EXT4-fs (loop2): Free/Dirty block details [ 524.728483][ T7656] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 524.749714][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 524.758145][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 524.761708][ T7621] EXT4-fs (loop2): free_blocks=68451041280 [ 525.181391][ T7661] tc_dump_action: action bad kind [ 525.208247][ T7621] EXT4-fs (loop2): dirty_blocks=16 [ 525.221685][ T7621] EXT4-fs (loop2): Block reservation details [ 525.228355][ T7621] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 525.230060][ T7665] fuse: Bad value for 'fd' [ 525.254800][ T7665] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1900'. [ 525.526968][ T74] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 525.817070][ T74] usb 8-1: Using ep0 maxpacket: 16 [ 525.887671][ T7669] EXT4-fs (loop8): Test dummy encryption mode enabled [ 525.895541][ T7669] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 525.908482][ T7669] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 528.056271][ T7680] EXT4-fs (loop2): Test dummy encryption mode enabled [ 528.063583][ T7680] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 528.100764][ T7680] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 528.109199][ T74] usb 8-1: config 64 has an invalid interface number: 13 but max is 2 [ 528.124077][ T74] usb 8-1: config 64 has an invalid interface number: 84 but max is 2 [ 528.133408][ T74] usb 8-1: config 64 has an invalid interface number: 140 but max is 2 [ 528.142405][ T74] usb 8-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 528.153247][ T74] usb 8-1: config 64 has no interface number 0 [ 528.159775][ T74] usb 8-1: config 64 has no interface number 1 [ 528.166513][ T74] usb 8-1: config 64 has no interface number 2 [ 528.179489][ T74] usb 8-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 528.190733][ T74] usb 8-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 528.202345][ T74] usb 8-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.216988][ T74] usb 8-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 528.230420][ T74] usb 8-1: config 64 interface 84 has no altsetting 0 [ 528.237354][ T74] usb 8-1: config 64 interface 140 has no altsetting 0 [ 528.582082][ T392] print_req_error: 38 callbacks suppressed [ 528.582165][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 528.685789][ T6524] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 528.729212][ T7692] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:455: comm syz.0.1905: Invalid block bitmap block 0 in block_group 0 [ 528.744842][ T7692] Quota error (device loop0): write_blk: dquota write failed [ 528.752389][ T7692] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 528.762777][ T7692] EXT4-fs error (device loop0): ext4_free_blocks:4795: comm syz.0.1905: Freeing blocks not in datazone - block = 0, count = 4096 [ 528.779619][ T7692] EXT4-fs error (device loop0): ext4_read_inode_bitmap:134: comm syz.0.1905: Invalid inode bitmap blk 0 in block_group 0 [ 528.793639][ T7692] EXT4-fs error (device loop0) in ext4_free_inode:352: Corrupt filesystem [ 528.803183][ T5069] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 528.812986][ T7692] EXT4-fs (loop0): 1 orphan inode deleted [ 528.818796][ T7692] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 529.577176][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 529.598688][ T6524] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 529.618828][ T338] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 529.639835][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 529.659059][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 529.677609][ T338] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 529.689706][ T6524] buffer_io_error: 14 callbacks suppressed [ 529.689716][ T6524] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 529.876238][ T74] usb 8-1: string descriptor 0 read error: -71 [ 529.963077][ T74] usb 8-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 530.078212][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 530.092066][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 530.119573][ T74] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.143326][ T338] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 530.187094][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.201902][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.213576][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 530.222022][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 530.230477][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 530.247002][ T74] usb 8-1: can't set config #64, error -71 [ 530.259296][ T74] usb 8-1: USB disconnect, device number 21 [ 530.275661][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 530.294278][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 530.301943][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 530.347037][ T7709] fuse: Bad value for 'fd' [ 530.357353][ T7709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1911'. [ 531.635255][ T7710] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 531.767819][ T7716] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 531.775105][ T7716] EXT4-fs (loop4): Ignoring removed bh option [ 531.789053][ T7716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 531.857150][ T7716] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 531.890725][ T7714] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 532.310138][ T7729] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 532.323526][ T7729] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 532.340187][ T7729] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 532.350490][ T7729] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 532.360627][ T7729] System zones: 0-2, 18-18, 34-34 [ 532.367161][ T7729] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 532.390330][ T7729] EXT4-fs (loop2): 1 truncate cleaned up [ 532.406972][ T7729] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000a04d,errors=continue,,errors=continue [ 532.592286][ T7713] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 532.688789][ T7713] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 532.801212][ T7713] EXT4-fs (loop0): This should not happen!! Data will be lost [ 532.801212][ T7713] [ 532.822905][ T7713] EXT4-fs (loop0): Total free blocks count 0 [ 532.909552][ T7745] hub 2-0:1.0: USB hub found [ 532.915012][ T7745] hub 2-0:1.0: 1 port detected [ 533.617506][ T7713] EXT4-fs (loop0): Free/Dirty block details [ 533.646387][ T7713] EXT4-fs (loop0): free_blocks=68451041280 [ 533.674239][ T7713] EXT4-fs (loop0): dirty_blocks=16 [ 533.679998][ T7713] EXT4-fs (loop0): Block reservation details [ 533.686031][ T7713] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 533.787653][ T392] print_req_error: 62 callbacks suppressed [ 533.787668][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 533.820950][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 533.832455][ T7759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=7759 comm=syz.2.1922 [ 533.833914][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.856805][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.868424][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.989321][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 534.142239][ T7761] tc_dump_action: action bad kind [ 534.182474][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 534.197392][ T7756] EXT4-fs (loop4): Unrecognized mount option "nodioread_nolock" or missing value [ 534.251423][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 534.417919][ T392] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 534.432027][ T7766] EXT4-fs (loop2): Ignoring removed orlov option [ 534.824066][ T7773] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 534.850959][ T7777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1929'. [ 534.851391][ T7766] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue [ 534.881788][ T7773] EXT4-fs (loop8): Ignoring removed bh option [ 534.888559][ T7777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1929'. [ 534.906783][ T7773] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 534.947110][ T7773] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 535.300941][ T7784] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=7784 comm=syz.0.1927 [ 535.429419][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 535.453372][ T392] buffer_io_error: 50 callbacks suppressed [ 535.453383][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 535.477896][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 535.484180][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 535.493356][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 535.511371][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 535.531994][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 535.705285][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 535.705378][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 535.719810][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 535.731492][ T7793] fuse: Bad value for 'fd' [ 535.745767][ T7793] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1932'. [ 535.751759][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 536.707408][ T7804] hub 2-0:1.0: USB hub found [ 536.713704][ T7804] hub 2-0:1.0: 1 port detected [ 538.589762][ T7809] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 538.599304][ T7820] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 539.378706][ T392] print_req_error: 22 callbacks suppressed [ 539.378723][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 539.444074][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.476989][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.517022][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.546983][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.578275][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.672917][ T7816] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 539.692335][ T7830] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 539.708366][ T7816] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 539.726801][ T7830] EXT4-fs (loop0): Ignoring removed bh option [ 539.736969][ T7830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 539.777648][ T7830] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 539.792010][ T7816] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 539.802464][ T7816] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 539.810848][ T7816] System zones: 0-2, 18-18, 34-34 [ 539.819413][ T7816] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 539.929405][ T7816] EXT4-fs (loop7): 1 truncate cleaned up [ 539.953820][ T7816] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x000000000000a04d,errors=continue,,errors=continue [ 540.100588][ T392] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 540.134071][ T392] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.158812][ T1871] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 540.177205][ T399] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 540.235483][ T7808] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 540.291719][ T7808] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 540.348464][ T7808] EXT4-fs (loop4): This should not happen!! Data will be lost [ 540.348464][ T7808] [ 540.453275][ T7808] EXT4-fs (loop4): Total free blocks count 0 [ 540.465460][ T7808] EXT4-fs (loop4): Free/Dirty block details [ 540.519651][ T7808] EXT4-fs (loop4): free_blocks=68451041280 [ 540.580685][ T7808] EXT4-fs (loop4): dirty_blocks=16 [ 540.599148][ T392] buffer_io_error: 44 callbacks suppressed [ 540.599158][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 540.614950][ T7808] EXT4-fs (loop4): Block reservation details [ 540.617790][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 540.622143][ T7808] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 540.637749][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 540.646433][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 540.673499][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 540.685131][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 540.900904][ T3215] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 540.900992][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 540.922651][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 540.931441][ T392] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 544.012200][ T7896] kvm: pic: non byte write [ 544.228935][ T7910] fuse: Bad value for 'fd' [ 544.235082][ T7902] loop2: p1 p2 p3 p4 [ 544.267889][ T7902] loop2: p1 size 108922248 extends beyond EOD, truncated [ 544.321621][ T7902] loop2: p2 start 861536256 is beyond EOD, truncated [ 544.329452][ T7902] loop2: p3 start 851968 is beyond EOD, truncated [ 544.336116][ T7902] loop2: p4 size 65536 extends beyond EOD, truncated [ 545.737984][ T7915] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:455: comm syz.7.1962: Invalid block bitmap block 0 in block_group 0 [ 545.752472][ T7915] Quota error (device loop7): write_blk: dquota write failed [ 545.759974][ T7915] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 545.770423][ T7915] EXT4-fs error (device loop7): ext4_free_blocks:4795: comm syz.7.1962: Freeing blocks not in datazone - block = 0, count = 4096 [ 545.786905][ T7915] EXT4-fs error (device loop7): ext4_read_inode_bitmap:134: comm syz.7.1962: Invalid inode bitmap blk 0 in block_group 0 [ 545.800385][ T362] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 545.809721][ T7915] EXT4-fs error (device loop7) in ext4_free_inode:352: Corrupt filesystem [ 545.818846][ T7915] EXT4-fs (loop7): 1 orphan inode deleted [ 545.824633][ T7915] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 546.117548][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1962'. [ 547.609044][ T7924] EXT4-fs (loop0): Test dummy encryption mode enabled [ 547.615903][ T7924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 547.627074][ T7924] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 547.916753][ T399] print_req_error: 94 callbacks suppressed [ 547.916765][ T399] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 547.924026][ T392] udevd[392]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 547.936289][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 547.956650][ T338] udevd[338]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 547.967475][ T399] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.978766][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.989764][ T399] buffer_io_error: 32 callbacks suppressed [ 547.989774][ T399] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 547.991539][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 547.997182][ T7929] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resuid=0x0000000000000000,,errors=continue [ 548.003925][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.240576][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 548.281898][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.329682][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 548.363094][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.376959][ T359] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 548.403376][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 548.413076][ T3215] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.426031][ T3215] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 548.646909][ T359] usb 3-1: device descriptor read/64, error 18 [ 548.655024][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 548.669162][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 549.484536][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 550.017536][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 550.032802][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 550.041800][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 552.062042][ T7972] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 552.523942][ T7989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=7989 comm=syz.8.1982 [ 553.369931][ T8004] EXT4-fs (loop2): Unrecognized mount option "nodioread_nolock" or missing value [ 553.504602][ T392] print_req_error: 22 callbacks suppressed [ 553.504628][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 553.702409][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.716927][ T392] buffer_io_error: 14 callbacks suppressed [ 553.716937][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 553.731894][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.745096][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 553.754668][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.765589][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 553.773868][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.785205][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 553.794086][ T392] blk_update_request: I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.795510][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 553.805561][ T392] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 553.825206][ T3215] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.838831][ T3215] Buffer I/O error on dev loop8p4, logical block 0, async page read [ 553.911483][ T8009] EXT4-fs (loop7): Unrecognized mount option "nodioread_nolock" or missing value [ 554.329273][ T8011] loop8: p1 p2 p3 p4 [ 554.335942][ T8011] loop8: p1 size 108922248 extends beyond EOD, truncated [ 554.447284][ T8011] loop8: p2 start 861536256 is beyond EOD, truncated [ 554.456978][ T8011] loop8: p3 start 851968 is beyond EOD, truncated [ 554.467560][ T8011] loop8: p4 size 65536 extends beyond EOD, truncated [ 555.099935][ T8030] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 555.147539][ T392] udevd[392]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 555.159416][ T3215] udevd[3215]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 555.172352][ T8042] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,resuid=0x0000000000000000,,errors=continue [ 556.396360][ T432] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 556.677934][ T432] usb 9-1: Using ep0 maxpacket: 16 [ 556.688177][ T8064] EXT4-fs (loop2): Unrecognized mount option "nodioread_nolock" or missing value [ 556.931885][ T8068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8068 comm=syz.4.2000 [ 557.658008][ T432] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 557.666296][ T432] usb 9-1: config 0 has an invalid descriptor of length 87, skipping remainder of the config [ 557.676558][ T432] usb 9-1: config 0 has no interface number 0 [ 557.682768][ T432] usb 9-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 557.946024][ T8076] tc_dump_action: action bad kind [ 558.286982][ T432] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 558.332456][ T432] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.150280][ T432] usb 9-1: config 0 descriptor?? [ 559.200357][ T432] usb 9-1: can't set config #0, error -71 [ 559.220924][ T432] usb 9-1: USB disconnect, device number 23 [ 559.563109][ T8100] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 561.935282][ T8122] EXT4-fs (loop0): Test dummy encryption mode enabled [ 561.942974][ T8122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 561.956530][ T8122] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 562.187687][ T8130] hub 2-0:1.0: USB hub found [ 562.193289][ T8130] hub 2-0:1.0: 1 port detected [ 562.274532][ T8117] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 562.396600][ T8117] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 562.405296][ T8117] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 562.414470][ T8117] EXT4-fs (loop8): 1 truncate cleaned up [ 562.420574][ T8117] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,noblock_validity, [ 562.621802][ T8132] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 562.678438][ T8117] EXT4-fs (loop8): re-mounted. Opts: (null) [ 562.686419][ T23] audit: type=1326 audit(1746111490.210:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 562.723726][ T23] audit: type=1326 audit(1746111490.240:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 562.873873][ T23] audit: type=1326 audit(1746111490.240:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 563.786217][ T23] audit: type=1326 audit(1746111491.310:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 563.794498][ T8131] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 563.825557][ T8131] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 563.838837][ T8131] EXT4-fs (loop4): This should not happen!! Data will be lost [ 563.838837][ T8131] [ 563.848007][ T23] audit: type=1326 audit(1746111491.310:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 563.848835][ T8131] EXT4-fs (loop4): Total free blocks count 0 [ 563.900731][ T8131] EXT4-fs (loop4): Free/Dirty block details [ 563.913530][ T8131] EXT4-fs (loop4): free_blocks=68451041280 [ 563.925921][ T8131] EXT4-fs (loop4): dirty_blocks=16 [ 563.936742][ T8131] EXT4-fs (loop4): Block reservation details [ 563.951222][ T8168] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 563.972381][ T8131] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 563.986427][ T23] audit: type=1326 audit(1746111491.510:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 564.024535][ T23] audit: type=1326 audit(1746111491.510:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 564.077228][ T23] audit: type=1326 audit(1746111491.510:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 564.112559][ T23] audit: type=1326 audit(1746111491.520:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 564.172715][ T23] audit: type=1326 audit(1746111491.520:1025): auid=4294967295 uid=16877 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.8.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41899969 code=0x7ffc0000 [ 564.281289][ T8174] tc_dump_action: action bad kind [ 564.629612][ T8178] EXT4-fs (loop8): 1 orphan inode deleted [ 564.635528][ T8178] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 564.644982][ T8180] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 564.654322][ T8180] ext4 filesystem being mounted at /386/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 564.794631][ T8178] ext4 filesystem being mounted at /361/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 565.256513][ T8198] tc_dump_action: action bad kind [ 565.876917][ T432] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 567.727444][ T8219] hub 2-0:1.0: USB hub found [ 567.733756][ T8219] hub 2-0:1.0: 1 port detected [ 567.787064][ T432] usb 8-1: Using ep0 maxpacket: 16 [ 567.798554][ T8225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8225 comm=syz.0.2037 [ 567.816086][ T8223] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 567.893133][ T432] usb 8-1: device descriptor read/all, error -71 [ 568.317900][ T8231] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 568.344080][ T8235] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 568.367542][ T8231] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 568.382970][ T8231] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 568.393038][ T8231] EXT4-fs (loop2): 1 truncate cleaned up [ 568.399441][ T8231] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,noblock_validity, [ 568.421021][ T8231] EXT4-fs (loop2): re-mounted. Opts: (null) [ 568.997073][ T8222] EXT4-fs error (device loop8): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 569.012317][ T8222] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 569.025318][ T8222] EXT4-fs (loop8): This should not happen!! Data will be lost [ 569.025318][ T8222] [ 569.036878][ T8222] EXT4-fs (loop8): Total free blocks count 0 [ 569.042974][ T8222] EXT4-fs (loop8): Free/Dirty block details [ 569.049805][ T8222] EXT4-fs (loop8): free_blocks=68451041280 [ 569.055921][ T8222] EXT4-fs (loop8): dirty_blocks=16 [ 569.061432][ T8222] EXT4-fs (loop8): Block reservation details [ 569.075830][ T8222] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 569.457038][ T8265] tc_dump_action: action bad kind [ 570.735676][ T8277] hub 2-0:1.0: USB hub found [ 570.741237][ T8277] hub 2-0:1.0: 1 port detected [ 571.251387][ T8284] EXT4-fs (loop4): Unrecognized mount option "nodioread_nolock" or missing value [ 571.288012][ T8286] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 571.322581][ T8286] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 571.330725][ T8286] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 571.341026][ T8286] EXT4-fs (loop0): 1 truncate cleaned up [ 571.347194][ T8286] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,noblock_validity, [ 571.367797][ T8294] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 571.624630][ T8286] EXT4-fs (loop0): re-mounted. Opts: (null) [ 572.744837][ T8320] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 572.752980][ T8308] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 572.767326][ T8320] EXT4-fs (loop8): Ignoring removed bh option [ 572.775631][ T8320] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 572.888256][ T8320] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 573.978706][ T8339] hub 2-0:1.0: USB hub found [ 573.983466][ T8339] hub 2-0:1.0: 1 port detected [ 574.029788][ T8346] tc_dump_action: action bad kind [ 574.242408][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2069'. [ 575.465934][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2072'. [ 575.988698][ T8368] tc_dump_action: action bad kind [ 576.678490][ T8382] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8382 comm=syz.2.2078 [ 577.079951][ T8373] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 577.361363][ T8380] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 577.377454][ T8380] EXT4-fs (loop4): Ignoring removed bh option [ 577.383762][ T8380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 577.393934][ T8380] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 577.542441][ T8395] hub 2-0:1.0: USB hub found [ 577.547970][ T8395] hub 2-0:1.0: 1 port detected [ 578.878781][ T8405] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:455: comm syz.7.2081: Invalid block bitmap block 0 in block_group 0 [ 578.895515][ T8405] __quota_error: 4 callbacks suppressed [ 578.895536][ T8405] Quota error (device loop7): write_blk: dquota write failed [ 578.908630][ T8405] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 578.918952][ T8405] EXT4-fs error (device loop7): ext4_free_blocks:4795: comm syz.7.2081: Freeing blocks not in datazone - block = 0, count = 4096 [ 578.935018][ T8405] EXT4-fs error (device loop7): ext4_read_inode_bitmap:134: comm syz.7.2081: Invalid inode bitmap blk 0 in block_group 0 [ 578.948292][ T4501] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 578.959130][ T8405] EXT4-fs error (device loop7) in ext4_free_inode:352: Corrupt filesystem [ 578.969271][ T8405] EXT4-fs (loop7): 1 orphan inode deleted [ 578.975051][ T8405] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 579.174774][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2081'. [ 579.657170][ T23] audit: type=1400 audit(1746111507.180:1030): avc: denied { mount } for pid=8419 comm="syz.4.2085" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 579.964110][ T8397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 579.988820][ T8417] hub 2-0:1.0: USB hub found [ 579.993578][ T8417] hub 2-0:1.0: 1 port detected [ 580.021606][ T23] audit: type=1400 audit(1746111507.550:1031): avc: denied { create } for pid=8396 comm="syz.0.2080" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 580.532077][ T8431] EXT4-fs (loop4): Test dummy encryption mode enabled [ 580.539592][ T8431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 580.555477][ T8431] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 581.765164][ T8442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8442 comm=syz.4.2091 [ 582.262594][ T8446] EXT4-fs (loop2): Test dummy encryption mode enabled [ 582.270046][ T8446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 582.281398][ T8446] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 583.042184][ T8459] hub 2-0:1.0: USB hub found [ 583.057060][ T8459] hub 2-0:1.0: 1 port detected [ 583.527631][ T8458] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 583.548405][ T8458] EXT4-fs (loop2): Ignoring removed bh option [ 583.555946][ T8452] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 583.566924][ T8458] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 583.588366][ T8458] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 583.589942][ T8452] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 583.604273][ T8452] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 583.615847][ T8452] EXT4-fs (loop0): 1 truncate cleaned up [ 583.621768][ T8452] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,noblock_validity, [ 583.783070][ T23] audit: type=1326 audit(1746111511.310:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512b223969 code=0x7ffc0000 [ 583.867423][ T8452] EXT4-fs (loop0): re-mounted. Opts: (null) [ 583.869425][ T23] audit: type=1326 audit(1746111511.310:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512b223969 code=0x7ffc0000 [ 583.925632][ T23] audit: type=1326 audit(1746111511.340:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f512b223969 code=0x7ffc0000 [ 584.044217][ T8477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=8477 comm=syz.2.2099 [ 584.137278][ T8480] hub 2-0:1.0: USB hub found [ 584.142996][ T8480] hub 2-0:1.0: 1 port detected [ 584.524989][ T23] audit: type=1326 audit(1746111512.050:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512b223969 code=0x7ffc0000 [ 584.584900][ T23] audit: type=1326 audit(1746111512.050:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512b223969 code=0x7ffc0000 [ 584.626954][ T359] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 584.728651][ T8487] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 584.808147][ T8493] 9pnet: Could not find request transport: fd0x0000000000000003 [ 584.898265][ T8495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8495 comm=syz.0.2103 [ 584.916896][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 585.036984][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.485480][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.503656][ T359] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 585.522012][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.539246][ T359] usb 3-1: config 0 descriptor?? [ 586.112366][ T8514] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 586.119729][ T8514] EXT4-fs (loop4): Ignoring removed bh option [ 586.138883][ T8514] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 586.149600][ T8514] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 586.150011][ T8519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=8519 comm=syz.7.2110 [ 586.216910][ T762] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 586.641401][ T359] uclogic 0003:5543:0004.0014: No inputs registered, leaving [ 586.649613][ T359] uclogic 0003:5543:0004.0014: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 586.666896][ T762] usb 9-1: Using ep0 maxpacket: 16 [ 586.837579][ T331] usb 3-1: USB disconnect, device number 24 [ 586.867111][ T762] usb 9-1: config 64 has an invalid interface number: 13 but max is 2 [ 586.909148][ T8528] EXT4-fs (loop0): Unrecognized mount option "nodioread_nolock" or missing value [ 586.920406][ T762] usb 9-1: config 64 has an invalid interface number: 84 but max is 2 [ 586.929531][ T762] usb 9-1: config 64 has an invalid interface number: 140 but max is 2 [ 586.938280][ T762] usb 9-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 586.948566][ T762] usb 9-1: config 64 has no interface number 0 [ 586.954751][ T762] usb 9-1: config 64 has no interface number 1 [ 586.960963][ T762] usb 9-1: config 64 has no interface number 2 [ 586.967381][ T762] usb 9-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 586.978680][ T762] usb 9-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 586.989713][ T762] usb 9-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 587.012778][ T8531] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 587.060594][ T762] usb 9-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 587.074138][ T762] usb 9-1: config 64 interface 84 has no altsetting 0 [ 587.080999][ T762] usb 9-1: config 64 interface 140 has no altsetting 0 [ 587.393547][ T762] usb 9-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 587.480195][ T762] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.488470][ T762] usb 9-1: Product: Д [ 587.492614][ T762] usb 9-1: Manufacturer: Ї [ 587.497463][ T762] usb 9-1: SerialNumber: syz [ 587.528557][ T8543] 9pnet: Could not find request transport: fd0x0000000000000003 [ 588.120975][ T8552] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 588.167162][ T762] uvcvideo: Found UVC 0.00 device Д (2040:4901) [ 588.278791][ T762] uvcvideo: No valid video chain found. [ 588.326941][ T8552] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 588.342110][ T8552] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 588.353323][ T8552] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 588.363187][ T8552] System zones: 0-2, 18-18, 34-34 [ 588.375435][ T762] usb 9-1: USB disconnect, device number 24 [ 588.384780][ T8552] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 588.457510][ T8552] EXT4-fs (loop0): 1 truncate cleaned up [ 588.514724][ T8552] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000a04d,errors=continue,,errors=continue [ 589.812747][ T8577] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 590.037777][ T8583] EXT4-fs (loop8): Ignoring removed bh option [ 590.046451][ T8583] EXT4-fs (loop8): dax option not supported [ 590.487000][ T359] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 590.729635][ T359] usb 1-1: Using ep0 maxpacket: 8 [ 590.858692][ T8598] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 590.875674][ T8598] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 590.901074][ T8598] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 590.937236][ T8598] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 590.955245][ T8598] System zones: 0-2, 18-18, 34-34 [ 591.005966][ T8598] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 591.040356][ T8598] EXT4-fs (loop4): 1 truncate cleaned up [ 591.046958][ T8598] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000a04d,errors=continue,,errors=continue [ 591.067008][ T359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.073523][ T8608] EXT4-fs (loop8): Unrecognized mount option "nodioread_nolock" or missing value [ 591.078211][ T359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.090476][ T8600] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:455: comm syz.7.2128: Invalid block bitmap block 0 in block_group 0 [ 591.097966][ T359] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 591.120148][ T359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.129071][ T359] usb 1-1: config 0 descriptor?? [ 591.137539][ T8600] Quota error (device loop7): write_blk: dquota write failed [ 591.149696][ T8600] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 591.160521][ T8600] EXT4-fs error (device loop7): ext4_free_blocks:4795: comm syz.7.2128: Freeing blocks not in datazone - block = 0, count = 4096 [ 591.175812][ T8600] EXT4-fs error (device loop7): ext4_read_inode_bitmap:134: comm syz.7.2128: Invalid inode bitmap blk 0 in block_group 0 [ 591.188752][ T738] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 591.197761][ T8600] EXT4-fs error (device loop7) in ext4_free_inode:352: Corrupt filesystem [ 591.206746][ T8600] EXT4-fs (loop7): 1 orphan inode deleted [ 591.212615][ T8600] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 592.618816][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2128'. [ 592.658294][ T359] uclogic 0003:5543:0004.0015: No inputs registered, leaving [ 592.670893][ T359] uclogic 0003:5543:0004.0015: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 592.690510][ T8622] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 592.702187][ T8622] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 592.712069][ T8622] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 592.800694][ T8622] EXT4-fs (loop4): 1 truncate cleaned up [ 592.809539][ T8622] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,noblock_validity, [ 592.842762][ T8622] EXT4-fs (loop4): re-mounted. Opts: (null) [ 592.867294][ T105] usb 1-1: USB disconnect, device number 26 [ 593.160688][ T359] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 593.708695][ T359] usb 9-1: Using ep0 maxpacket: 16 [ 594.140460][ T8642] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 594.197056][ T359] usb 9-1: config 64 has an invalid interface number: 13 but max is 2 [ 594.205801][ T359] usb 9-1: config 64 has an invalid interface number: 84 but max is 2 [ 594.214338][ T359] usb 9-1: config 64 has an invalid interface number: 140 but max is 2 [ 594.275841][ T359] usb 9-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 594.286741][ T359] usb 9-1: config 64 has no interface number 0 [ 594.293677][ T359] usb 9-1: config 64 has no interface number 1 [ 594.300120][ T359] usb 9-1: config 64 has no interface number 2 [ 594.306714][ T359] usb 9-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 594.380410][ T8650] hub 2-0:1.0: USB hub found [ 594.386226][ T8650] hub 2-0:1.0: 1 port detected [ 594.624022][ T359] usb 9-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 594.635017][ T359] usb 9-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 594.653958][ T359] usb 9-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 594.667236][ T359] usb 9-1: config 64 interface 84 has no altsetting 0 [ 594.674004][ T359] usb 9-1: config 64 interface 140 has no altsetting 0 [ 594.837050][ T359] usb 9-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 594.846873][ T359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.848001][ T8658] EXT4-fs (loop7): Unrecognized mount option "nodioread_nolock" or missing value [ 594.856395][ T359] usb 9-1: Product: Д [ 595.186044][ T359] usb 9-1: Manufacturer: Ї [ 595.191395][ T359] usb 9-1: SerialNumber: syz [ 595.793471][ T8668] 9pnet: Insufficient options for proto=fd [ 595.936953][ T359] uvcvideo: Found UVC 0.00 device Д (2040:4901) [ 595.944480][ T359] uvcvideo: No valid video chain found. [ 597.970515][ T359] usb 9-1: USB disconnect, device number 25 [ 598.007911][ T8683] EXT4-fs (loop7): Test dummy encryption mode enabled [ 598.014912][ T8683] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 598.025172][ T8683] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 599.288124][ T8695] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 599.323007][ T8700] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 599.360943][ T8700] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 599.372861][ T8700] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 599.382142][ T8700] EXT4-fs (loop7): 1 truncate cleaned up [ 599.388052][ T8700] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,noblock_validity, [ 599.477615][ T8709] EXT4-fs (loop0): Unrecognized mount option "nodioread_nolock" or missing value [ 599.499106][ T8700] EXT4-fs (loop7): re-mounted. Opts: (null) [ 599.510437][ T23] audit: type=1326 audit(1746111527.040:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 599.553764][ T23] audit: type=1326 audit(1746111527.060:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 599.603440][ T23] audit: type=1326 audit(1746111527.060:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 599.781707][ T23] audit: type=1326 audit(1746111527.310:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 599.823743][ T23] audit: type=1326 audit(1746111527.330:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 599.871934][ T23] audit: type=1326 audit(1746111527.400:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 599.920351][ T23] audit: type=1326 audit(1746111527.400:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 599.960141][ T23] audit: type=1326 audit(1746111527.400:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 600.015245][ T23] audit: type=1326 audit(1746111527.400:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 600.039725][ T23] audit: type=1326 audit(1746111527.400:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff231be3969 code=0x7ffc0000 [ 600.983159][ T8719] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 601.049664][ T8725] EXT4-fs (loop7): 1 orphan inode deleted [ 601.055532][ T8725] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 601.064537][ T8725] ext4 filesystem being mounted at /411/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 601.396914][ T105] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 602.707109][ T105] usb 1-1: Using ep0 maxpacket: 16 [ 603.404778][ T105] usb 1-1: config 64 has an invalid interface number: 13 but max is 2 [ 604.354758][ T105] usb 1-1: config 64 has an invalid interface number: 84 but max is 2 [ 604.365035][ T105] usb 1-1: config 64 has an invalid interface number: 140 but max is 2 [ 604.374461][ T105] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 604.385963][ T105] usb 1-1: config 64 has no interface number 0 [ 604.394147][ T105] usb 1-1: config 64 has no interface number 1 [ 604.401580][ T105] usb 1-1: config 64 has no interface number 2 [ 604.655054][ T105] usb 1-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 604.710867][ T8753] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:455: comm syz.8.2165: Invalid block bitmap block 0 in block_group 0 [ 604.725344][ T8753] __quota_error: 24 callbacks suppressed [ 604.725363][ T8753] Quota error (device loop8): write_blk: dquota write failed [ 604.738523][ T8753] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 604.748707][ T8753] EXT4-fs error (device loop8): ext4_free_blocks:4795: comm syz.8.2165: Freeing blocks not in datazone - block = 0, count = 4096 [ 604.845501][ T8753] EXT4-fs error (device loop8): ext4_read_inode_bitmap:134: comm syz.8.2165: Invalid inode bitmap blk 0 in block_group 0 [ 604.859253][ T8753] EXT4-fs error (device loop8) in ext4_free_inode:352: Corrupt filesystem [ 604.868447][ T8753] EXT4-fs (loop8): 1 orphan inode deleted [ 604.874234][ T8753] EXT4-fs (loop8): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 604.933134][ T8770] 9pnet: Insufficient options for proto=fd [ 604.973855][ T105] usb 1-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 605.216136][ T8768] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 605.254774][ T8770] 9pnet: Insufficient options for proto=fd [ 605.261478][ T105] usb 1-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 605.284489][ T105] usb 1-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 605.301007][ T105] usb 1-1: config 64 interface 84 has no altsetting 0 [ 605.319959][ T105] usb 1-1: config 64 interface 140 has no altsetting 0 [ 605.379760][ T362] Quota error (device loop8): remove_tree: Getting block too big (0 >= 9) [ 605.406919][ T105] usb 1-1: string descriptor 0 read error: -71 [ 605.414451][ T105] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 605.427611][ T105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.471579][ T8765] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 605.720134][ T8779] hub 2-0:1.0: USB hub found [ 605.726863][ T8779] hub 2-0:1.0: 1 port detected [ 606.146913][ T105] usb 1-1: can't set config #64, error -71 [ 606.154886][ T105] usb 1-1: USB disconnect, device number 27 [ 606.712039][ T8793] fuse: Bad value for 'fd' [ 607.566291][ T8783] loop8: p1 p2 p3 p4 [ 607.571305][ T8783] loop8: p1 size 108922248 extends beyond EOD, truncated [ 607.731940][ T8810] tc_dump_action: action bad kind [ 607.995860][ T8783] loop8: p2 start 861536256 is beyond EOD, truncated [ 608.014400][ T8783] loop8: p3 start 851968 is beyond EOD, truncated [ 608.032352][ T8783] loop8: p4 size 65536 extends beyond EOD, truncated [ 608.877034][ T619] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 609.352931][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2183'. [ 609.379756][ T3215] udevd[3215]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 609.461860][ T8837] hub 2-0:1.0: USB hub found [ 609.477050][ T8837] hub 2-0:1.0: 1 port detected [ 609.563688][ T392] udevd[392]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 609.586917][ T619] usb 8-1: Using ep0 maxpacket: 16 [ 609.677930][ T8836] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 609.796904][ T619] usb 8-1: config 64 has an invalid interface number: 13 but max is 2 [ 609.808321][ T619] usb 8-1: config 64 has an invalid interface number: 84 but max is 2 [ 609.817435][ T619] usb 8-1: config 64 has an invalid interface number: 140 but max is 2 [ 609.825926][ T619] usb 8-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 609.836866][ T619] usb 8-1: config 64 has no interface number 0 [ 609.844008][ T619] usb 8-1: config 64 has no interface number 1 [ 609.850612][ T619] usb 8-1: config 64 has no interface number 2 [ 609.857248][ T619] usb 8-1: config 64 interface 84 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 609.868721][ T619] usb 8-1: config 64 interface 84 altsetting 15 has an invalid endpoint with address 0x99, skipping [ 609.879915][ T619] usb 8-1: config 64 interface 84 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 609.897459][ T8843] EXT4-fs (loop8): Ignoring removed bh option [ 609.909699][ T619] usb 8-1: config 64 interface 140 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 609.925551][ T8843] EXT4-fs (loop8): dax option not supported [ 609.932159][ T619] usb 8-1: config 64 interface 84 has no altsetting 0 [ 609.939320][ T619] usb 8-1: config 64 interface 140 has no altsetting 0 [ 610.437045][ T619] usb 8-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=67.dc [ 610.446499][ T619] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.525880][ T619] usb 8-1: Product: Д [ 610.530548][ T619] usb 8-1: Manufacturer: Ї [ 610.535077][ T619] usb 8-1: SerialNumber: syz [ 610.672427][ T8859] tc_dump_action: action bad kind [ 611.194846][ T8857] ================================================================== [ 611.202968][ T8857] BUG: KASAN: use-after-free in __ext4_iget+0x3ac/0x40d0 [ 611.209975][ T8857] Read of size 8 at addr ffff8881dd256c10 by task syz.8.2188/8857 [ 611.217751][ T8857] [ 611.220080][ T8857] CPU: 0 PID: 8857 Comm: syz.8.2188 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 611.229871][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 611.240004][ T8857] Call Trace: [ 611.243290][ T8857] __dump_stack+0x1e/0x20 [ 611.247607][ T8857] dump_stack+0x15b/0x1b8 [ 611.251921][ T8857] ? vprintk_default+0x28/0x30 [ 611.256672][ T8857] ? show_regs_print_info+0x18/0x18 [ 611.261938][ T8857] ? printk+0xcc/0x110 [ 611.265995][ T8857] ? __ext4_iget+0x3ac/0x40d0 [ 611.270660][ T8857] print_address_description+0x8d/0x4c0 [ 611.276196][ T8857] ? __ext4_iget+0x3ac/0x40d0 [ 611.280856][ T8857] __kasan_report+0xef/0x120 [ 611.285427][ T8857] ? __ext4_iget+0x3ac/0x40d0 [ 611.290088][ T8857] kasan_report+0x30/0x60 [ 611.294498][ T8857] __asan_report_load8_noabort+0x14/0x20 [ 611.300151][ T8857] __ext4_iget+0x3ac/0x40d0 [ 611.304668][ T8857] ? __kasan_check_write+0x14/0x20 [ 611.309795][ T8857] ? _raw_write_lock+0x8e/0xe0 [ 611.314543][ T8857] ? _raw_write_trylock+0x140/0x140 [ 611.319841][ T8857] ? __proc_create+0x564/0x8d0 [ 611.324664][ T8857] ? ext4_get_projid+0x140/0x140 [ 611.329632][ T8857] ? preempt_schedule_irq+0xbb/0x110 [ 611.335010][ T8857] ? preempt_schedule_notrace+0x110/0x110 [ 611.340822][ T8857] ? proc_register+0x34d/0x4e0 [ 611.345865][ T8857] ext4_enable_quotas+0x33b/0x6c0 [ 611.351116][ T8857] ext4_fill_super+0x7f7c/0x8670 [ 611.358117][ T8857] ? ext4_mount+0x40/0x40 [ 611.365723][ T8857] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 611.371360][ T8857] ? set_blocksize+0x1ab/0x3c0 [ 611.377405][ T8857] ? sb_set_blocksize+0xaa/0xf0 [ 611.382625][ T8857] mount_bdev+0x279/0x390 [ 611.387141][ T8857] ? ext4_mount+0x40/0x40 [ 611.391644][ T8857] ext4_mount+0x34/0x40 [ 611.396223][ T8857] legacy_get_tree+0xea/0x190 [ 611.400937][ T8857] ? ext4_lazyinit_thread+0xcc0/0xcc0 [ 611.406338][ T8857] vfs_get_tree+0x89/0x260 [ 611.410954][ T8857] do_new_mount+0x234/0x480 [ 611.415543][ T8857] do_mount+0x63a/0xd40 [ 611.419978][ T8857] ? retint_kernel+0x1b/0x1b [ 611.424580][ T8857] ? copy_mount_options+0x249/0x340 [ 611.429770][ T8857] ? copy_mount_string+0x30/0x30 [ 611.434693][ T8857] ? copy_mount_options+0x2cc/0x340 [ 611.440258][ T8857] ksys_mount+0xc5/0x100 [ 611.444503][ T8857] __x64_sys_mount+0xbf/0xd0 [ 611.449110][ T8857] do_syscall_64+0xcf/0x170 [ 611.453881][ T8857] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 611.459768][ T8857] RIP: 0033:0x7f5a4189b10a [ 611.464193][ T8857] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.484438][ T8857] RSP: 002b:00007f5a3febfe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 611.492931][ T8857] RAX: ffffffffffffffda RBX: 00007f5a3febfef0 RCX: 00007f5a4189b10a [ 611.500977][ T8857] RDX: 0000200000000140 RSI: 0000200000000480 RDI: 00007f5a3febfeb0 [ 611.508940][ T8857] RBP: 0000200000000140 R08: 00007f5a3febfef0 R09: 0000000000000004 [ 611.516983][ T8857] R10: 0000000000000004 R11: 0000000000000246 R12: 0000200000000480 [ 611.524989][ T8857] R13: 00007f5a3febfeb0 R14: 00000000000005fd R15: 00002000000002c0 [ 611.533850][ T8857] [ 611.536167][ T8857] Allocated by task 4118: [ 611.541097][ T8857] __kasan_kmalloc+0x162/0x200 [ 611.547205][ T8857] kasan_slab_alloc+0x12/0x20 [ 611.551997][ T8857] kmem_cache_alloc+0xe2/0x270 [ 611.556762][ T8857] f2fs_alloc_inode+0x26/0x3b0 [ 611.561510][ T8857] new_inode_pseudo+0x62/0x210 [ 611.566375][ T8857] new_inode+0x28/0x1e0 [ 611.570699][ T8857] f2fs_new_inode+0xd0/0x1410 [ 611.575562][ T8857] f2fs_mkdir+0x126/0x530 [ 611.580744][ T8857] vfs_mkdir+0x4c7/0x6a0 [ 611.585011][ T8857] do_mkdirat+0x14c/0x340 [ 611.589440][ T8857] __x64_sys_mkdirat+0x7b/0x90 [ 611.595159][ T8857] do_syscall_64+0xcf/0x170 [ 611.599663][ T8857] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 611.605626][ T8857] [ 611.608198][ T8857] Freed by task 17: [ 611.612016][ T8857] __kasan_slab_free+0x1c3/0x280 [ 611.616972][ T8857] kasan_slab_free+0xe/0x10 [ 611.621738][ T8857] slab_free_freelist_hook+0xb7/0x180 [ 611.627099][ T8857] kmem_cache_free+0x10c/0x2c0 [ 611.632098][ T8857] f2fs_free_inode+0x24/0x30 [ 611.636680][ T8857] i_callback+0x4c/0x70 [ 611.640847][ T8857] rcu_do_batch+0x446/0x980 [ 611.645370][ T8857] rcu_core+0x4bd/0xbd0 [ 611.649604][ T8857] rcu_core_si+0x9/0x10 [ 611.653813][ T8857] __do_softirq+0x236/0x660 [ 611.658393][ T8857] [ 611.660709][ T8857] The buggy address belongs to the object at ffff8881dd256750 [ 611.660709][ T8857] which belongs to the cache f2fs_inode_cache of size 1264 [ 611.675263][ T8857] The buggy address is located 1216 bytes inside of [ 611.675263][ T8857] 1264-byte region [ffff8881dd256750, ffff8881dd256c40) [ 611.688681][ T8857] The buggy address belongs to the page: [ 611.694299][ T8857] page:ffffea0007749400 refcount:1 mapcount:0 mapping:ffff8881f0844f00 index:0xffff8881dd2577a0 compound_mapcount: 0 [ 611.706509][ T8857] flags: 0x8000000000010200(slab|head) [ 611.711968][ T8857] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f0844f00 [ 611.720625][ T8857] raw: ffff8881dd2577a0 000000008017000a 00000001ffffffff 0000000000000000 [ 611.729208][ T8857] page dumped because: kasan: bad access detected [ 611.735602][ T8857] page_owner tracks the page as allocated [ 611.741335][ T8857] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 611.758758][ T8857] prep_new_page+0x35e/0x370 [ 611.763346][ T8857] get_page_from_freelist+0x1296/0x1310 [ 611.768873][ T8857] __alloc_pages_nodemask+0x202/0x4b0 [ 611.774229][ T8857] alloc_slab_page+0x3c/0x3b0 [ 611.778905][ T8857] new_slab+0x93/0x420 [ 611.782955][ T8857] ___slab_alloc+0x29e/0x420 [ 611.787526][ T8857] __slab_alloc+0x63/0xa0 [ 611.791941][ T8857] kmem_cache_alloc+0x12c/0x270 [ 611.796785][ T8857] f2fs_alloc_inode+0x26/0x3b0 [ 611.801963][ T8857] iget_locked+0x144/0x810 [ 611.806375][ T8857] f2fs_iget+0x55/0x4ac0 [ 611.810597][ T8857] f2fs_fill_super+0x44fc/0x7760 [ 611.815536][ T8857] mount_bdev+0x279/0x390 [ 611.819963][ T8857] f2fs_mount+0x34/0x40 [ 611.824163][ T8857] legacy_get_tree+0xea/0x190 [ 611.828836][ T8857] vfs_get_tree+0x89/0x260 [ 611.833233][ T8857] page_owner free stack trace missing [ 611.838580][ T8857] [ 611.840919][ T8857] Memory state around the buggy address: [ 611.846535][ T8857] ffff8881dd256b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.854589][ T8857] ffff8881dd256b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.862633][ T8857] >ffff8881dd256c00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 611.870800][ T8857] ^ [ 611.875384][ T8857] ffff8881dd256c80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 611.883426][ T8857] ffff8881dd256d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 611.891465][ T8857] ================================================================== [ 611.899507][ T8857] Disabling lock debugging due to kernel taint [ 611.905849][ T8857] EXT4-fs warning (device loop8): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 611.920606][ T8857] EXT4-fs (loop8): mount failed [ 612.050976][ T8857] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2188'. [ 613.140106][ T619] usb 8-1: can't set config #64, error -71 [ 613.148556][ T619] usb 8-1: USB disconnect, device number 24