last executing test programs: 17m6.379757515s ago: executing program 3 (id=1993): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) 17m6.256930478s ago: executing program 3 (id=1995): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x458, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x1}, 0x0, 0x2a0, 0x2e8, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x101) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)={0x73, 0x1, '\x00', [@ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x3}]}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 17m5.377756614s ago: executing program 3 (id=2001): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d7, &(0x7f0000000840)="$eJzslj3PEkEQx/+7dznAaEwsbSwkUQuPu0ONDYk0VhYmvhALE4mcBDklAQohMegnsLezsPcLmGjrhzBoow1W2tic2ZfjVsIBD6/FM7/kmfvvPbtzszObWUAQxLHl+7c/4/h35UcewEkUkdPvf1rpHG7M/5r/9fLzrZu1Nw/ff8mN3cI8n3G8+vdtAJ+qFvrTtf+vLurnXfCpvgeOS1rXwOBq/Qgc97UOwfBA66eG7oj5rvukFYXu407UEMITxhcmEKY8G9/kNUPDiI8Z/+8Nhu16FIXdHYpl+ZtUOSpGfGa9XKhoPSN/Pjh8rctguKP1deSS3KiUGPs/a6f+rYX7d7DrjIhQjrDqzKnMUjkA1gsDYNuqPV7pI7vLM5QhLEiRVHRLnq097UIc9CVzYO89q2yzZK5Ti4831JrkTTxSYznndIbDeLTiJxysk420P8XvGC4Y/Um1krfyqhElLPUGw8utZ/Vm2AyfB0H5mnfF864GJdmIlF3Q/wqyP51I/c+9kwQOc/Ci3u93fWWn40DZeR2Xy/7HcfG8GoviOjN+84Zm+s+WT3kU2h8yoycIgjgc58D+xho7Efo2gfFb9/YBYyQIgiAIgiAIgiAIYjP+BQAA//++S0Wu") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioperm(0x0, 0x4, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f00000005c0)=ANY=[], 0x2, 0x1e3, &(0x7f0000000b40)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380)={0x0, 0xf52}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 17m4.450720561s ago: executing program 3 (id=2005): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x1}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}, @common=@unspec=@time={{0x38}, {0xfffffffc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000080017"], 0x24}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x3925, 0x8, 0x9, "8bdffb70f0ffffff"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x101) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)={0x73, 0x1, '\x00', [@ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x3}]}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) unshare(0x22020600) 17m3.38287941s ago: executing program 3 (id=2007): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) 17m3.293554572s ago: executing program 3 (id=2009): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001007c2a26c7c752be501cd66ed5c596fd75588dd4c213acbebe8b8f6ebe0e7e307baed77459f907c3485eb1b3ac01fb31118f58d6b6d9ac5bd78ae491349a2da5b928ba927b46840a8a2c19b2d5acc50782dbeb6b090a6ac68d95098f1ea025dbc4073c2f154ff045f99a4282d8a697ba9f201eef24249910eb9257a72a3a1086dbdf973df132e5f8d71a6d9a9af07b3ecbe6c2537a5c946d062ce78a6c8e01d52e84f4ab9f6e7cf95575a7cf6710b39556fc2281027bcc3d5a8ef13a2e05f61da61b91ea12cd54ff8e55c2c09eba67ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) 16m47.833830245s ago: executing program 32 (id=2009): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001007c2a26c7c752be501cd66ed5c596fd75588dd4c213acbebe8b8f6ebe0e7e307baed77459f907c3485eb1b3ac01fb31118f58d6b6d9ac5bd78ae491349a2da5b928ba927b46840a8a2c19b2d5acc50782dbeb6b090a6ac68d95098f1ea025dbc4073c2f154ff045f99a4282d8a697ba9f201eef24249910eb9257a72a3a1086dbdf973df132e5f8d71a6d9a9af07b3ecbe6c2537a5c946d062ce78a6c8e01d52e84f4ab9f6e7cf95575a7cf6710b39556fc2281027bcc3d5a8ef13a2e05f61da61b91ea12cd54ff8e55c2c09eba67ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) 9.459599293s ago: executing program 1 (id=5001): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) 9.097582769s ago: executing program 2 (id=5003): pipe(&(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xfffffffd) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) io_getevents(0x0, 0x1, 0x0, 0x0, &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340), 0x3, 0x44a, &(0x7f0000000400)="$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") 7.671054671s ago: executing program 0 (id=5007): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "26ecf4574b6044ae6540296c32c0fb29259fcfc0a14d456240570c506bca4a89d86dbfa9c62a2de94981efaeb4d900e355befa1ffb0c2dddfc6e2cc876d94152", 0x12}, 0x48, 0xfffffffffffffff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\''], 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000540)="34288a4e", 0x4}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r8 = request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='\x00', r0) keyctl$get_security(0x11, r8, &(0x7f0000000100)=""/55, 0x37) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x8f) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES8=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.651158461s ago: executing program 2 (id=5008): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") (fail_nth: 1) r2 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f00000000c0), 0x0, 0x1000000000000, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) getpid() 7.649684871s ago: executing program 1 (id=5009): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001007c2a26c7c752be501cd66ed5c596fd75588dd4c213acbebe8b8f6ebe0e7e307baed77459f907c3485eb1b3ac01fb31118f58d6b6d9ac5bd78ae491349a2da5b928ba927b46840a8a2c19b2d5acc50782dbeb6b090a6ac68d95098f1ea025dbc4073c2f154ff045f99a4282d8a697ba9f201eef24249910eb9257a72a3a1086dbdf973df132e5f8d71a6d9a9af07b3ecbe6c2537a5c946d062ce78a6c8e01d52e84f4ab9f6e7cf95575a7cf6710b39556fc2281027bcc3d5a8ef13a2e05f61da61b91ea12cd54ff8e55c2c09eba67ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./mnt\x00', 0x4d108b97ecb7755a, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') 6.704133856s ago: executing program 2 (id=5010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd0fffc02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000002380)={[{@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@data_journal}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@block_validity}]}, 0x0, 0x5fd, &(0x7f00000004c0)="$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") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 5.1329548s ago: executing program 0 (id=5013): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYBLOB="00000000000000000000000000000000000001007c2a26c7c752be501cd66ed5c596fd75588dd4c213acbebe8b8f6ebe0e7e307baed77459f907c3485eb1b3ac01fb31118f58d6b6d9ac5bd78ae491349a2da5b928ba927b46840a8a2c19b2d5acc50782dbeb6b090a6ac68d95098f1ea025dbc4073c2f154ff045f99a4282d8a697ba9f201eef24249910eb9257a72a3a1086dbdf973df132e5f8d71a6d9a9af07b3ecbe6c2537a5c946d062ce78a6c8e01d52e84f4ab9f6e7cf95575a7cf6710b39556fc2281027bcc3d5a8ef13a2e05f61da61b91ea12cd54ff8e55c2c09eba67ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') 4.730202466s ago: executing program 1 (id=5015): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") r2 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f00000000c0), 0x0, 0x1000000000000, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) getpid() 4.060368577s ago: executing program 2 (id=5016): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x4840) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r2, 0x0, 0x0) r6 = socket(0x10, 0x3, 0xc) write(r6, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) 3.81874456s ago: executing program 4 (id=5017): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001007c2a26c7c752be501cd66ed5c596fd75588dd4c213acbebe8b8f6ebe0e7e307baed77459f907c3485eb1b3ac01fb31118f58d6b6d9ac5bd78ae491349a2da5b928ba927b46840a8a2c19b2d5acc50782dbeb6b090a6ac68d95098f1ea025dbc4073c2f154ff045f99a4282d8a697ba9f201eef24249910eb9257a72a3a1086dbdf973df132e5f8d71a6d9a9af07b3ecbe6c2537a5c946d062ce78a6c8e01d52e84f4ab9f6e7cf95575a7cf6710b39556fc2281027bcc3d5a8ef1", @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./mnt\x00', 0x4d108b97ecb7755a, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) 3.705391952s ago: executing program 0 (id=5018): pipe(&(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xfffffffd) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340), 0x3, 0x44a, &(0x7f0000000400)="$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") 3.688511592s ago: executing program 5 (id=5019): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) 3.005904653s ago: executing program 1 (id=5020): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x4840) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r2, 0x0, 0x0) r6 = socket(0x10, 0x3, 0xc) write(r6, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) 2.757935267s ago: executing program 4 (id=5021): pipe(&(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xfffffffd) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @broadcast}}}}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000005b0d5507895a000d0000000000000018", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.613126069s ago: executing program 5 (id=5022): getresgid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@fsmagic={'fsmagic', 0x3d, 0x9c00000000000000}}, {@euid_lt}, {@obj_user={'obj_user', 0x3d, 'task\x00'}}]}) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (fail_nth: 1) 2.167599716s ago: executing program 0 (id=5023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_GROUP={0x8, 0x1b, 0xa}]}, 0x4c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1fffffe}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x21e4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x80, 0x1a, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c008}, 0x48800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001400010025bd7000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000bb449d316612134170fa9610727c58"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.805377712s ago: executing program 2 (id=5024): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES32], 0xfd, 0x1505, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) rt_tgsigqueueinfo(r4, r0, 0x1a, &(0x7f0000000440)={0x30, 0x4, 0x4}) 1.716449153s ago: executing program 5 (id=5025): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x1e, 0x37, 0x1, {0x0, 0x8000000000000000, 0xfff}}, 0x1e) 1.683514674s ago: executing program 4 (id=5026): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x1e, 0x37, 0x1, {0x0, 0x8000000000000000, 0xfff}}, 0x1e) 1.505622476s ago: executing program 5 (id=5027): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000010c0)=ANY=[@ANYBLOB="a8", @ANYRES16=r2, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='xprtrdma_decode_seg\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, 0x0, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1.412004088s ago: executing program 1 (id=5028): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYBLOB="00000000000000000000000000000000000001007c2a26c7c752be501cd66ed5c596fd75588dd4c213acbebe8b8f6ebe0e7e307baed77459f907c3485eb1b3ac01fb31118f58d6b6d9ac5bd78ae491349a2da5b928ba927b46840a8a2c19b2d5acc50782dbeb6b090a6ac68d95098f1ea025dbc4073c2f154ff045f99a4282d8a697ba9f201eef24249910eb9257a72a3a1086dbdf973df132e5f8d71a6d9a9af07b3ecbe6c2537a5c946d062ce78a6c8e01d52e84f4ab9f6e7cf95575a7cf6710b39556fc2281027bcc3d5a8ef13a2e05f61da61b91ea12cd54ff8e55c2c09eba67ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') 1.384533278s ago: executing program 4 (id=5029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.226468301s ago: executing program 0 (id=5030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd0fffc02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000002380)={[{@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@data_journal}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@block_validity}]}, 0x0, 0x5fd, &(0x7f00000004c0)="$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") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 1.089622013s ago: executing program 4 (id=5031): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000010c0)=ANY=[@ANYBLOB="a8", @ANYRES16=r2, @ANYBLOB="000427bd7000fddbdf250e0000004c000680040002004100040067636d28616573290000000000000000000000000000000000000000000000001900000098bcfef104d88759f785cca438bb8cd96df3f0eff4a8c6c943000000a400028004000400060003800800020005000000080002000300000008000100fb0d00002400038008000200004000000800010001000080080001000500000008000200ff07000008000100060000004c00038008000200b10c000008000100000000000800020000000080080001007791000008000200fbffffff08000200be00000008000200080000000800010008000000080002000500000004000400040004005800048024000780080001000e000000080001000f000000080001001e000000080001001a00000000000780000001001b000000000003000900000024000780080003009acd000008000200a30300000800040000000000080003003cf9ffff7c0005801c0002800800020004000000080003000000000008000300040000004c000280080003000080000008000200ffff0000080003000100008008000200020000000800030001000000080003000900000008000400ed000000080001001400000008000400070000000800010075647000080001007564700014000380080001000400000008000300070000005c0004800000078000000300dd33000000000100140000001300010062726f6164636173742d6c696e6b00002c00078008000400fcffffff08000300010000000800040006000000080001000100000008000400040000000c000780080001000b0000002400038008000200f00900000800030007000000080002007b52000008000300020000003c000280040004002c000380080001000101000008000100060000000800010001000000080001000100000008000200080000000400040004000400"], 0x2a8}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='xprtrdma_decode_seg\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, 0x0, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1.052697303s ago: executing program 5 (id=5032): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) 878.055636ms ago: executing program 2 (id=5033): setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x54) socket$inet_tcp(0x2, 0x1, 0x0) getresgid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") r0 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@fsmagic={'fsmagic', 0x3d, 0x9c00000000000000}}, {@euid_lt}, {@obj_user={'obj_user', 0x3d, 'task\x00'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) 451.707783ms ago: executing program 1 (id=5034): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x54) socket$inet_tcp(0x2, 0x1, 0x0) getresgid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@fsmagic={'fsmagic', 0x3d, 0x9c00000000000000}}, {@euid_lt}, {@obj_user={'obj_user', 0x3d, 'task\x00'}}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$cgroup_ro(r5, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 245.566266ms ago: executing program 0 (id=5035): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x54) socket$inet_tcp(0x2, 0x1, 0x0) getresgid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f00000001c0), 0x0, 0x101840) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@fsmagic={'fsmagic', 0x3d, 0x9c00000000000000}}, {@euid_lt}, {@obj_user={'obj_user', 0x3d, 'task\x00'}}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff63, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$cgroup_ro(r7, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 11.554409ms ago: executing program 5 (id=5036): prlimit64(0x0, 0xe, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) 0s ago: executing program 4 (id=5037): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001007c2a26c7c752be501cd66ed5c596fd75588dd4c213acbebe8b8f6ebe0e7e307baed77459f907c3485eb1b3ac01fb31118f58d6b6d9ac5bd78ae491349a2da5b928ba927b46840a8a2c19b2d5acc50782dbeb6b090a6ac68d95098f1ea025dbc4073c2f154ff045f99a4282d8a697ba9f201eef24249910eb9257a72a3a1086dbdf973df132e5f8d71a6d9a9af07b3ecbe6c2537a5c946d062ce78a6c8e01d52e84f4ab9f6e7cf95575a7cf6710b39556fc2281027bcc3d5a8ef13a2e05f61da61b91ea12cd54ff8e55c2c09eba67ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./mnt\x00', 0x4d108b97ecb7755a, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') kernel console output (not intermixed with test programs): EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1464.588590][T21129] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1464.658885][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1464.776955][T21141] syz.5.4700: attempt to access beyond end of device [ 1464.776955][T21141] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1465.722299][T21143] syz.2.4703[21143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1465.722387][T21143] syz.2.4703[21143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1465.736107][T21143] loop2: detected capacity change from 0 to 128 [ 1465.874857][T21148] loop0: detected capacity change from 0 to 1024 [ 1465.955950][T21148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1466.037719][T21134] loop1: detected capacity change from 0 to 40427 [ 1466.042646][T21148] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1466.056449][T21148] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1466.074787][T21148] EXT4-fs error (device loop0): ext4_get_journal_inode:5710: comm syz.0.4705: inode #1: comm syz.0.4705: iget: illegal inode # [ 1466.081289][T21159] loop2: detected capacity change from 0 to 512 [ 1466.114197][T21134] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1466.114595][T21159] EXT4-fs: Ignoring removed mblk_io_submit option [ 1466.226937][T21159] EXT4-fs: Ignoring removed bh option [ 1466.233209][T21148] EXT4-fs (loop0): no journal found [ 1466.308594][T21159] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1466.358911][T21159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1466.379374][T21134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1466.459101][ T8814] syz-executor: attempt to access beyond end of device [ 1466.459101][ T8814] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1466.459180][T21159] EXT4-fs (loop2): 1 truncate cleaned up [ 1466.482948][T21159] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1467.021980][T21166] syz.1.4702: attempt to access beyond end of device [ 1467.021980][T21166] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1467.063768][T21171] loop5: detected capacity change from 0 to 1024 [ 1467.097494][T21171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1467.116962][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1467.125301][T21171] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1467.162485][T21171] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1467.207968][T13204] syz-executor: attempt to access beyond end of device [ 1467.207968][T13204] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1467.270779][T21176] syz.4.4709[21176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1467.271407][T21176] syz.4.4709[21176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1467.332832][T21176] loop4: detected capacity change from 0 to 128 [ 1467.480463][T21171] EXT4-fs error (device loop5): ext4_get_journal_inode:5710: comm syz.5.4708: inode #1: comm syz.5.4708: iget: illegal inode # [ 1467.534447][T21176] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1467.544857][T21176] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1468.255714][T21171] EXT4-fs (loop5): no journal found [ 1468.456979][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1469.139686][T21187] syz.4.4713[21187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1469.140385][T21187] syz.4.4713[21187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1469.206262][T21187] loop4: detected capacity change from 0 to 128 [ 1469.306537][T21185] loop2: detected capacity change from 0 to 1024 [ 1469.427854][T21185] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1469.656181][T21185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1470.136706][ T1073] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1470.147873][T21186] loop4: detected capacity change from 0 to 128 [ 1470.164891][T21193] loop0: detected capacity change from 0 to 256 [ 1470.186805][T21193] exfat: Unknown parameter '’’’’’’’’’’’’’’’’’’0xffffffffffffffff’’’’' [ 1470.196171][T21186] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1470.206432][T21186] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1470.287819][ T1908] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1470.303637][T21199] syz.1.4711[21199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1470.303718][T21199] syz.1.4711[21199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1470.318241][T21199] loop1: detected capacity change from 0 to 128 [ 1470.404683][ T1073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1470.405980][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1470.429927][T21202] loop1: detected capacity change from 0 to 128 [ 1470.445240][T21202] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1470.455152][T21202] ext4 filesystem being mounted at /322/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1470.462731][T21205] loop4: detected capacity change from 0 to 16 [ 1470.489887][T21205] erofs: (device loop4): mounted with root inode @ nid 36. [ 1470.561443][T21207] loop0: detected capacity change from 0 to 512 [ 1470.647623][T21207] EXT4-fs: Ignoring removed mblk_io_submit option [ 1470.656265][T21207] EXT4-fs: Ignoring removed bh option [ 1470.669435][T21207] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1470.697056][T21207] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1470.713244][T21207] EXT4-fs (loop0): 1 truncate cleaned up [ 1470.722131][T21207] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1471.226570][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1471.235271][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1472.573418][T21233] syz.1.4720[21233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1472.573501][T21233] syz.1.4720[21233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1472.589030][T21233] loop1: detected capacity change from 0 to 128 [ 1472.709660][T21233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1472.719249][T21233] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1473.723965][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1474.062244][T21239] syz.2.4724[21239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1474.062332][T21239] syz.2.4724[21239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1474.067716][T21242] loop5: detected capacity change from 0 to 128 [ 1474.176539][T21243] loop2: detected capacity change from 0 to 128 [ 1474.283974][T21245] loop5: detected capacity change from 0 to 128 [ 1474.356273][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1474.377912][T21243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1474.391552][T21245] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1474.402177][T21245] ext4 filesystem being mounted at /526/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1474.544409][T21243] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1475.185914][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1475.205878][T21250] loop1: detected capacity change from 0 to 16 [ 1475.253295][T21250] erofs: (device loop1): mounted with root inode @ nid 36. [ 1475.258991][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1475.341553][T21256] loop5: detected capacity change from 0 to 512 [ 1475.414557][T21256] EXT4-fs: Ignoring removed mblk_io_submit option [ 1475.467173][T21256] EXT4-fs: Ignoring removed bh option [ 1475.497193][T21256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1475.786293][T21261] loop0: detected capacity change from 0 to 128 [ 1475.795002][T21260] device veth47 entered promiscuous mode [ 1475.880709][T21261] loop0: detected capacity change from 0 to 128 [ 1475.944124][T21261] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1475.954427][T21261] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1476.084653][T21256] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1476.300084][T21266] loop2: detected capacity change from 0 to 512 [ 1476.322075][T21256] EXT4-fs (loop5): 1 truncate cleaned up [ 1476.334759][T21256] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1476.354432][T21266] EXT4-fs: Ignoring removed mblk_io_submit option [ 1476.395562][T21266] EXT4-fs: Ignoring removed bh option [ 1476.446327][T21266] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1476.491407][T21266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1476.530621][T21266] EXT4-fs (loop2): 1 truncate cleaned up [ 1476.556994][T21266] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1476.727907][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1476.905934][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1477.100020][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1477.130952][T21289] loop5: detected capacity change from 0 to 40427 [ 1477.183752][T21289] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1477.230448][T21289] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1478.024676][T21306] device veth41 entered promiscuous mode [ 1478.236872][T21311] loop1: detected capacity change from 0 to 40427 [ 1478.255267][T21311] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1478.308237][T21311] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1478.347364][T21319] syz.2.4738[21319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1478.347867][T21319] syz.2.4738[21319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1478.452797][T21319] loop2: detected capacity change from 0 to 128 [ 1478.580560][T21319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1478.591045][T21319] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.386571][T21322] loop0: detected capacity change from 0 to 512 [ 1479.393269][T21322] EXT4-fs: Ignoring removed mblk_io_submit option [ 1479.425171][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1479.448817][T21324] loop4: detected capacity change from 0 to 16 [ 1479.454150][T21322] EXT4-fs: Ignoring removed bh option [ 1479.467100][T21324] erofs: (device loop4): mounted with root inode @ nid 36. [ 1479.484678][T21328] loop5: detected capacity change from 0 to 512 [ 1479.491910][T21328] EXT4-fs: Ignoring removed mblk_io_submit option [ 1479.498891][T21328] EXT4-fs: Ignoring removed bh option [ 1479.594413][T21328] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1479.607351][T21322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1479.630806][T21326] loop2: detected capacity change from 0 to 40427 [ 1479.739433][T21328] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1479.798864][T21329] syz.1.4737: attempt to access beyond end of device [ 1479.798864][T21329] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1479.861207][T21322] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1479.880173][T21326] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1479.920999][T21322] EXT4-fs (loop0): 1 truncate cleaned up [ 1479.922101][T21326] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1479.926987][T21328] EXT4-fs (loop5): 1 truncate cleaned up [ 1479.935050][T21322] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1479.952037][T21328] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1480.070911][T13204] syz-executor: attempt to access beyond end of device [ 1480.070911][T13204] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1480.113897][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1480.213673][T21339] loop0: detected capacity change from 0 to 1024 [ 1480.224290][T21343] syz.2.4742: attempt to access beyond end of device [ 1480.224290][T21343] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1480.251224][T21339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1480.311583][T21345] loop1: detected capacity change from 0 to 256 [ 1480.318112][T21339] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1480.322777][T21347] loop4: detected capacity change from 0 to 512 [ 1480.348643][T21345] exfat: Unknown parameter '’’’’’’’’’’’’’’’’’’0xffffffffffffffff’’’’' [ 1480.357549][T21339] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1480.373181][T21347] EXT4-fs: Ignoring removed mblk_io_submit option [ 1480.386537][T21339] EXT4-fs error (device loop0): ext4_get_journal_inode:5710: comm syz.0.4744: inode #1: comm syz.0.4744: iget: illegal inode # [ 1480.406451][T21347] EXT4-fs: Ignoring removed bh option [ 1480.425030][T21347] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1480.444755][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1480.454115][T21339] EXT4-fs (loop0): no journal found [ 1480.456470][T21347] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1480.470694][ T1073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1480.514778][T21347] EXT4-fs (loop4): 1 truncate cleaned up [ 1480.520637][T21347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1480.691906][T21350] loop5: detected capacity change from 0 to 1024 [ 1480.733664][T21350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1480.756607][T21350] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1480.777397][T21350] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1480.787388][T21350] EXT4-fs error (device loop5): ext4_get_journal_inode:5710: comm syz.5.4746: inode #1: comm syz.5.4746: iget: illegal inode # [ 1480.801146][T21350] EXT4-fs (loop5): no journal found [ 1480.835462][T13391] syz-executor: attempt to access beyond end of device [ 1480.835462][T13391] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1481.018284][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1481.130706][T21361] loop2: detected capacity change from 0 to 1024 [ 1481.188950][T21361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1481.216279][T21361] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1481.276602][T21361] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1481.286509][T21361] EXT4-fs error (device loop2): ext4_get_journal_inode:5710: comm syz.2.4747: inode #1: comm syz.2.4747: iget: illegal inode # [ 1481.300814][T21365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1481.806574][T21361] EXT4-fs (loop2): no journal found [ 1482.402677][T21371] loop4: detected capacity change from 0 to 512 [ 1482.432679][T21371] EXT4-fs: Ignoring removed mblk_io_submit option [ 1482.454430][T21377] loop2: detected capacity change from 0 to 512 [ 1482.476864][T21371] EXT4-fs: Ignoring removed bh option [ 1482.486320][T21377] EXT4-fs: Ignoring removed mblk_io_submit option [ 1482.547263][T21371] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1482.560372][T21371] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1482.687784][T21377] EXT4-fs: Ignoring removed bh option [ 1483.141404][T21380] device veth53 entered promiscuous mode [ 1483.161365][T21377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1483.173642][T21371] EXT4-fs (loop4): 1 truncate cleaned up [ 1483.186516][T21371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1483.209249][T21377] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1483.289990][T21377] EXT4-fs (loop2): 1 truncate cleaned up [ 1483.330279][T21377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1483.381490][T21385] loop0: detected capacity change from 0 to 128 [ 1483.395119][T21388] loop1: detected capacity change from 0 to 16 [ 1483.416549][T21388] erofs: (device loop1): mounted with root inode @ nid 36. [ 1483.424690][ T1073] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1483.438711][T21389] syz.5.4752[21389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1483.438794][T21389] syz.5.4752[21389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1483.476719][T21390] loop0: detected capacity change from 0 to 128 [ 1483.543830][T21389] loop5: detected capacity change from 0 to 128 [ 1483.554806][T21390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1483.564905][T21390] ext4 filesystem being mounted at /362/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1483.857575][T21389] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1483.898214][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1483.914552][T21389] ext4 filesystem being mounted at /531/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1483.927507][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1484.026911][T21400] loop2: detected capacity change from 0 to 16 [ 1484.037502][T21400] erofs: (device loop2): mounted with root inode @ nid 36. [ 1484.124163][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1484.436196][T21403] loop1: detected capacity change from 0 to 512 [ 1484.460164][T21403] EXT4-fs: Ignoring removed mblk_io_submit option [ 1484.481691][T21403] EXT4-fs: Ignoring removed bh option [ 1484.487725][T21403] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1484.492312][T21405] loop0: detected capacity change from 0 to 1024 [ 1484.499252][T21403] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1484.520669][T21405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1484.537450][T21403] EXT4-fs (loop1): 1 truncate cleaned up [ 1484.543325][T21405] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1484.554482][T21403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1484.573908][T21405] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1484.611656][T21405] EXT4-fs error (device loop0): ext4_get_journal_inode:5710: comm syz.0.4758: inode #1: comm syz.0.4758: iget: illegal inode # [ 1484.643726][T21405] EXT4-fs (loop0): no journal found [ 1484.978777][T21414] loop4: detected capacity change from 0 to 128 [ 1485.017614][ T1073] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1485.068802][T21416] loop4: detected capacity change from 0 to 128 [ 1485.085482][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1485.123331][T21416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1485.132373][T21416] ext4 filesystem being mounted at /365/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1485.562906][T21423] loop2: detected capacity change from 0 to 40427 [ 1485.580876][T21423] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1485.626686][T21423] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1485.756289][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1485.801146][T21430] loop4: detected capacity change from 0 to 1024 [ 1485.967603][T21430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1486.071723][T21430] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1486.083095][T21430] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1486.092903][T21430] EXT4-fs error (device loop4): ext4_get_journal_inode:5710: comm syz.4.4763: inode #1: comm syz.4.4763: iget: illegal inode # [ 1486.106685][T21430] EXT4-fs (loop4): no journal found [ 1486.313864][T21437] loop1: detected capacity change from 0 to 128 [ 1486.325815][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1486.379540][T21437] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1486.388529][T21437] ext4 filesystem being mounted at /333/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1486.643596][T21442] device veth43 entered promiscuous mode [ 1486.704874][T21444] loop5: detected capacity change from 0 to 512 [ 1486.735430][T21444] EXT4-fs: Ignoring removed mblk_io_submit option [ 1486.750003][T21444] EXT4-fs: Ignoring removed bh option [ 1486.755963][T21444] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1486.767432][T21444] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1486.786699][T21444] EXT4-fs (loop5): 1 truncate cleaned up [ 1486.795558][T21444] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1486.824462][T21447] loop2: detected capacity change from 0 to 512 [ 1486.847287][T21447] EXT4-fs: Ignoring removed mblk_io_submit option [ 1486.866317][T21447] EXT4-fs: Ignoring removed bh option [ 1486.880170][T21447] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1486.915324][T21447] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1486.929577][T21447] EXT4-fs (loop2): 1 truncate cleaned up [ 1486.935360][T21447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1487.073404][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1487.150848][T21456] loop4: detected capacity change from 0 to 128 [ 1487.170977][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1488.209964][ T322] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1488.239341][T21459] loop5: detected capacity change from 0 to 16 [ 1488.250075][T21459] erofs: (device loop5): mounted with root inode @ nid 36. [ 1488.261606][T21456] loop4: detected capacity change from 0 to 128 [ 1488.332259][T21456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1488.341006][T21456] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1488.414968][T21461] loop1: detected capacity change from 0 to 40427 [ 1488.443497][T21461] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1488.781057][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1488.788088][T21461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1488.799614][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1488.967974][T21478] loop0: detected capacity change from 0 to 256 [ 1488.975513][T21473] loop4: detected capacity change from 0 to 128 [ 1488.982676][T21478] exfat: Unknown parameter '’’’’’’’’’’’’’’’’’’0xffffffffffffffff’’’’' [ 1489.037063][ T1073] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1489.047951][T21473] loop4: detected capacity change from 0 to 128 [ 1489.048038][ T1073] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1489.381916][ T322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1489.413556][T21473] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1489.426702][T21473] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1489.564252][T21486] loop1: detected capacity change from 0 to 512 [ 1489.571016][T21486] EXT4-fs: Ignoring removed mblk_io_submit option [ 1489.577674][T21486] EXT4-fs: Ignoring removed bh option [ 1489.583573][T21486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1489.595078][T21486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1489.608111][T21486] EXT4-fs (loop1): 1 truncate cleaned up [ 1489.614040][T21486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1489.937069][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1489.944811][T21492] loop2: detected capacity change from 0 to 1024 [ 1489.990647][T21492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1490.008739][T21492] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1490.026078][T21492] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1490.044326][T21492] EXT4-fs error (device loop2): ext4_get_journal_inode:5710: comm syz.2.4778: inode #1: comm syz.2.4778: iget: illegal inode # [ 1490.084308][T21492] EXT4-fs (loop2): no journal found [ 1490.125494][T21494] loop0: detected capacity change from 0 to 128 [ 1490.144896][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1490.199033][T21494] loop0: detected capacity change from 0 to 128 [ 1490.206527][T21500] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1490.501559][T21494] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1490.516681][T21494] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1490.624160][T21507] loop1: detected capacity change from 0 to 512 [ 1490.631018][T21507] EXT4-fs: Ignoring removed mblk_io_submit option [ 1490.637792][T21507] EXT4-fs: Ignoring removed bh option [ 1490.650637][T21507] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1490.663837][T21508] loop5: detected capacity change from 0 to 128 [ 1490.675620][T21508] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1490.684367][T21508] ext4 filesystem being mounted at /535/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1490.690343][T21507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1490.715767][T21507] EXT4-fs (loop1): 1 truncate cleaned up [ 1490.721602][T21507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1490.773146][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1490.940149][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1490.998619][T21526] syz.0.4783[21526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1490.999317][T21526] syz.0.4783[21526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1491.034002][T21526] loop0: detected capacity change from 0 to 128 [ 1491.204538][T21526] loop0: detected capacity change from 0 to 128 [ 1491.279682][T21526] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1491.290653][T21526] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1491.951114][T21532] loop1: detected capacity change from 0 to 16 [ 1491.966603][T21532] erofs: (device loop1): mounted with root inode @ nid 36. [ 1491.989206][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1491.996723][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1492.056080][T21534] loop5: detected capacity change from 0 to 16 [ 1492.128420][T21534] erofs: (device loop5): mounted with root inode @ nid 36. [ 1492.165383][T21536] loop2: detected capacity change from 0 to 128 [ 1492.374901][T21541] loop0: detected capacity change from 0 to 40427 [ 1493.092239][T21536] loop2: detected capacity change from 0 to 128 [ 1493.122230][T21541] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1493.183362][T21536] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1493.196199][T21536] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1493.213199][T21541] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1493.360557][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1493.728796][T21573] syz.0.4787: attempt to access beyond end of device [ 1493.728796][T21573] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1493.756240][T21572] loop4: detected capacity change from 0 to 40427 [ 1493.787578][T21572] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1493.834349][T21572] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1494.100125][T21579] syz.4.4792: attempt to access beyond end of device [ 1494.100125][T21579] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1494.393278][T21581] loop1: detected capacity change from 0 to 1024 [ 1494.467634][T21581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1494.489410][T21581] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1494.502910][T13109] syz-executor: attempt to access beyond end of device [ 1494.502910][T13109] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1494.507244][T21581] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1494.529907][T21586] loop2: detected capacity change from 0 to 512 [ 1494.536572][T21586] EXT4-fs: Ignoring removed mblk_io_submit option [ 1494.543306][T21581] EXT4-fs error (device loop1): ext4_get_journal_inode:5710: comm syz.1.4793: inode #1: comm syz.1.4793: iget: illegal inode # [ 1494.556969][T21586] EXT4-fs: Ignoring removed bh option [ 1494.562750][T21586] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1494.574555][T21581] EXT4-fs (loop1): no journal found [ 1494.604668][T21586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1494.642981][T21586] EXT4-fs (loop2): 1 truncate cleaned up [ 1494.648766][T21586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1494.788333][T12647] syz-executor: attempt to access beyond end of device [ 1494.788333][T12647] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1494.834119][T21592] loop1: detected capacity change from 0 to 1024 [ 1494.835501][T21595] loop4: detected capacity change from 0 to 512 [ 1494.873727][T21595] EXT4-fs: Ignoring removed mblk_io_submit option [ 1494.882635][T21592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1494.887391][T21595] EXT4-fs: Ignoring removed bh option [ 1494.899624][T21597] overlayfs: failed to resolve './file1': -2 [ 1494.906201][T21595] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1494.916624][T21592] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1494.921046][T21595] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1494.941248][T21592] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1494.953689][T21592] EXT4-fs error (device loop1): ext4_get_journal_inode:5710: comm syz.1.4797: inode #1: comm syz.1.4797: iget: illegal inode # [ 1494.967089][T21592] EXT4-fs (loop1): no journal found [ 1494.974689][T21595] EXT4-fs (loop4): 1 truncate cleaned up [ 1494.980845][T21595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1495.484547][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1495.563882][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1495.633036][T21610] loop4: detected capacity change from 0 to 16 [ 1495.718790][T21611] overlayfs: failed to resolve './file1': -2 [ 1495.826166][T21610] erofs: (device loop4): mounted with root inode @ nid 36. [ 1496.042301][T21614] loop1: detected capacity change from 0 to 512 [ 1496.054714][T21614] EXT4-fs: Ignoring removed mblk_io_submit option [ 1496.065902][T21614] EXT4-fs: Ignoring removed bh option [ 1496.638487][T21614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1496.656282][T21614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1497.008516][T21632] loop0: detected capacity change from 0 to 256 [ 1497.041355][T21632] exfat: Unknown parameter '’’’’’’’’’’’’’’’’’’0xffffffffffffffff’’’’' [ 1497.052164][T21614] EXT4-fs (loop1): 1 truncate cleaned up [ 1497.065275][T21614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1497.099585][T21637] loop5: detected capacity change from 0 to 1024 [ 1497.108455][T21637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1497.129320][T21637] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1497.155173][T21637] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1497.176090][T21637] EXT4-fs error (device loop5): ext4_get_journal_inode:5710: comm syz.5.4805: inode #1: comm syz.5.4805: iget: illegal inode # [ 1497.191173][T21637] EXT4-fs (loop5): no journal found [ 1497.381275][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1497.758502][T21649] loop2: detected capacity change from 0 to 1024 [ 1497.776323][T21649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1497.785206][T21649] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1497.796537][T21649] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1497.806247][T21649] EXT4-fs error (device loop2): ext4_get_journal_inode:5710: comm syz.2.4807: inode #1: comm syz.2.4807: iget: illegal inode # [ 1497.820805][T21649] EXT4-fs (loop2): no journal found [ 1498.522320][T21658] device veth37 entered promiscuous mode [ 1498.548920][T21663] loop2: detected capacity change from 0 to 512 [ 1498.559991][T21663] EXT4-fs: Ignoring removed mblk_io_submit option [ 1498.576457][T21663] EXT4-fs: Ignoring removed bh option [ 1498.597229][T21663] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1498.636477][T21663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1498.667171][T21663] EXT4-fs (loop2): 1 truncate cleaned up [ 1498.672985][T21663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1498.916271][T21670] device veth65 entered promiscuous mode [ 1499.979838][T21680] loop5: detected capacity change from 0 to 16 [ 1500.010097][T21681] loop0: detected capacity change from 0 to 128 [ 1500.047650][T21680] erofs: (device loop5): mounted with root inode @ nid 36. [ 1500.077212][T21683] overlayfs: failed to resolve './file1': -2 [ 1500.089080][T21685] loop4: detected capacity change from 0 to 512 [ 1500.110553][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1500.125995][T21685] EXT4-fs: Ignoring removed mblk_io_submit option [ 1500.147471][T21685] EXT4-fs: Ignoring removed bh option [ 1500.163536][T21681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1500.173107][T21681] ext4 filesystem being mounted at /373/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1500.206468][T21685] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1500.503288][T21685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1500.547041][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1500.554234][T21685] EXT4-fs (loop4): 1 truncate cleaned up [ 1500.566614][T21685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1500.728090][T21694] loop0: detected capacity change from 0 to 40427 [ 1500.858033][T21694] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1500.916856][T21694] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1500.935657][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1501.781079][T21718] loop2: detected capacity change from 0 to 40427 [ 1501.889337][T21718] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1502.018075][T21734] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1502.237397][T21718] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1502.522078][T21748] syz.2.4823: attempt to access beyond end of device [ 1502.522078][T21748] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1502.824050][T13391] syz-executor: attempt to access beyond end of device [ 1502.824050][T13391] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1502.836832][T21750] loop0: detected capacity change from 0 to 512 [ 1502.877984][T21750] EXT4-fs: Ignoring removed mblk_io_submit option [ 1502.884474][T21750] EXT4-fs: Ignoring removed bh option [ 1502.906847][T21750] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1502.953035][T21750] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1502.973588][T21752] loop4: detected capacity change from 0 to 16 [ 1502.987867][T21750] EXT4-fs (loop0): 1 truncate cleaned up [ 1503.004165][T21752] erofs: (device loop4): mounted with root inode @ nid 36. [ 1503.011698][T21750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1503.049957][T21757] loop2: detected capacity change from 0 to 1024 [ 1503.066558][T21757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1503.075618][T21757] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1503.086812][T21757] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1503.096537][T21757] EXT4-fs error (device loop2): ext4_get_journal_inode:5710: comm syz.2.4829: inode #1: comm syz.2.4829: iget: illegal inode # [ 1503.154655][T21757] EXT4-fs (loop2): no journal found [ 1503.614326][T21764] loop5: detected capacity change from 0 to 512 [ 1503.629525][T21764] EXT4-fs: Ignoring removed mblk_io_submit option [ 1503.636396][T21764] EXT4-fs: Ignoring removed bh option [ 1503.642387][T21764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1503.665115][T21764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1504.035872][T21764] EXT4-fs (loop5): 1 truncate cleaned up [ 1504.058069][T21764] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1504.082159][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1504.146162][T21773] loop1: detected capacity change from 0 to 256 [ 1504.167925][T21770] loop4: detected capacity change from 0 to 128 [ 1504.176951][T21773] exfat: Unknown parameter '’’’’’’’’’’’’’’’’’’0xffffffffffffffff’’’’' [ 1504.194020][ T322] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1504.206750][T21770] loop4: detected capacity change from 0 to 128 [ 1504.244580][T21770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1504.255051][T21777] syz.2.4833[21777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1504.255130][T21777] syz.2.4833[21777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1504.268438][T21777] loop2: detected capacity change from 0 to 128 [ 1504.287461][T21770] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.315174][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1504.323168][T21777] loop2: detected capacity change from 0 to 128 [ 1504.378996][T21777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1504.388010][T21777] ext4 filesystem being mounted at /365/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1505.076859][T21785] syz.4.4836[21785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1505.076996][T21785] syz.4.4836[21785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1505.227645][T21785] loop4: detected capacity change from 0 to 128 [ 1506.851567][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1506.873495][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1507.032981][T21790] loop4: detected capacity change from 0 to 16 [ 1507.039850][T21790] erofs: (device loop4): mounted with root inode @ nid 36. [ 1507.069070][T21793] loop2: detected capacity change from 0 to 1024 [ 1507.083808][T21793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1507.132646][T21797] syz.1.4839[21797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1507.133342][T21797] syz.1.4839[21797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1507.201084][T21797] loop1: detected capacity change from 0 to 128 [ 1507.235620][T21798] loop0: detected capacity change from 0 to 128 [ 1507.371747][T21797] loop1: detected capacity change from 0 to 128 [ 1507.396198][T21798] loop0: detected capacity change from 0 to 128 [ 1507.502332][T21798] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1507.515988][T21797] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1507.526719][T21798] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1507.680603][T21797] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.222815][T21793] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1508.237418][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1508.275779][T21793] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1508.287051][T21793] EXT4-fs error (device loop2): ext4_get_journal_inode:5710: comm syz.2.4837: inode #1: comm syz.2.4837: iget: illegal inode # [ 1508.345375][T21810] loop1: detected capacity change from 0 to 128 [ 1508.731614][T21793] EXT4-fs (loop2): no journal found [ 1509.554405][T21810] loop1: detected capacity change from 0 to 128 [ 1509.603087][T21810] EXT4-fs mount: 1 callbacks suppressed [ 1509.603107][T21810] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1509.619134][T21810] ext4 filesystem being mounted at /348/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1509.767789][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1510.690476][T21851] loop1: detected capacity change from 0 to 256 [ 1510.699203][T21848] loop4: detected capacity change from 0 to 1024 [ 1510.721704][T21851] exfat: Unknown parameter '’’’’’’’’’’’’’’’’’’0xffffffffffffffff’’’’' [ 1510.722886][T21848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1510.767943][T21848] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1510.792495][T21848] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1510.816418][T21848] EXT4-fs error (device loop4): ext4_get_journal_inode:5710: comm syz.4.4849: inode #1: comm syz.4.4849: iget: illegal inode # [ 1510.846577][T21848] EXT4-fs (loop4): no journal found [ 1510.860988][T21846] loop5: detected capacity change from 0 to 40427 [ 1510.899350][T21846] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1510.987111][T21846] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1511.006101][T21853] loop0: detected capacity change from 0 to 40427 [ 1511.069298][T21853] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1511.598865][T21868] syz.5.4848: attempt to access beyond end of device [ 1511.598865][T21868] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1512.016747][ T8814] syz-executor: attempt to access beyond end of device [ 1512.016747][ T8814] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1512.041663][T21873] loop4: detected capacity change from 0 to 512 [ 1512.042419][T21875] loop1: detected capacity change from 0 to 256 [ 1512.054479][T21853] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1512.066804][T21875] exfat: Unknown parameter '’’’’’’’’’’’’’’’’’’0xffffffffffffffff’’’’' [ 1512.086817][T21873] EXT4-fs: Ignoring removed mblk_io_submit option [ 1512.093301][T21873] EXT4-fs: Ignoring removed bh option [ 1512.109551][T21873] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1512.126471][T21873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1512.137359][ T1073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1512.270021][T21873] EXT4-fs (loop4): 1 truncate cleaned up [ 1512.278074][T21873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1512.440016][T21883] syz.0.4851: attempt to access beyond end of device [ 1512.440016][T21883] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1513.022039][T12647] syz-executor: attempt to access beyond end of device [ 1513.022039][T12647] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1513.242487][T21888] loop5: detected capacity change from 0 to 16 [ 1513.268179][T21888] erofs: (device loop5): mounted with root inode @ nid 36. [ 1513.345312][T21890] loop1: detected capacity change from 0 to 128 [ 1513.514775][T21893] loop1: detected capacity change from 0 to 128 [ 1513.590432][T21893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1513.600867][T21893] ext4 filesystem being mounted at /352/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1514.266450][T21870] loop2: detected capacity change from 0 to 40427 [ 1514.356231][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1514.373193][T21870] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1514.408008][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1514.454305][T21899] loop1: detected capacity change from 0 to 1024 [ 1514.469833][T21899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1514.484040][T21870] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1514.541721][T21899] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1514.597994][T21899] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1514.630209][T21899] EXT4-fs error (device loop1): ext4_get_journal_inode:5710: comm syz.1.4861: inode #1: comm syz.1.4861: iget: illegal inode # [ 1514.635326][T21905] loop0: detected capacity change from 0 to 40427 [ 1514.678125][T21899] EXT4-fs (loop1): no journal found [ 1514.720703][T21905] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1514.754195][T21905] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1515.236130][T21910] syz.2.4854: attempt to access beyond end of device [ 1515.236130][T21910] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1515.896402][T13391] syz-executor: attempt to access beyond end of device [ 1515.896402][T13391] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1516.287947][T21933] syz.4.4863[21933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1516.288568][T21933] syz.4.4863[21933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1516.349615][T21933] loop4: detected capacity change from 0 to 128 [ 1516.449671][T21933] loop4: detected capacity change from 0 to 128 [ 1516.597535][T21933] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1516.608371][T21933] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.370139][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1517.381455][T21939] loop2: detected capacity change from 0 to 1024 [ 1517.391925][T21939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1517.425953][T21939] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1517.444683][T21944] loop0: detected capacity change from 0 to 512 [ 1517.468388][T21939] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1517.480519][T21944] EXT4-fs: Ignoring removed mblk_io_submit option [ 1517.500667][T21944] EXT4-fs: Ignoring removed bh option [ 1517.501638][T21939] EXT4-fs error (device loop2): ext4_get_journal_inode:5710: comm syz.2.4862: inode #1: comm syz.2.4862: iget: illegal inode # [ 1517.519431][T21944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1517.536587][T21939] EXT4-fs (loop2): no journal found [ 1517.542018][T21944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1517.572815][T21944] EXT4-fs (loop0): 1 truncate cleaned up [ 1517.586424][T21944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1517.830530][T21950] syz.5.4867[21950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1517.830610][T21950] syz.5.4867[21950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1517.848132][T21950] loop5: detected capacity change from 0 to 128 [ 1517.890550][T21950] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1517.899383][T21950] ext4 filesystem being mounted at /551/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.958355][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1518.149318][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1518.528585][T21983] loop4: detected capacity change from 0 to 1024 [ 1518.550767][T21983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1518.583500][T21983] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1518.614857][T21983] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1518.649623][T21983] EXT4-fs error (device loop4): ext4_get_journal_inode:5710: comm syz.4.4871: inode #1: comm syz.4.4871: iget: illegal inode # [ 1518.688720][T21986] syz.0.4869[21986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1518.688806][T21986] syz.0.4869[21986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1518.700084][T21983] EXT4-fs (loop4): no journal found [ 1518.752004][T21988] loop0: detected capacity change from 0 to 128 [ 1519.038252][T21990] loop2: detected capacity change from 0 to 40427 [ 1519.080464][T21990] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1519.125914][T21990] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1519.678888][T22014] loop1: detected capacity change from 0 to 128 [ 1519.738098][ T1073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1519.789905][T22017] loop1: detected capacity change from 0 to 128 [ 1519.813812][T22017] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1519.822846][T22017] ext4 filesystem being mounted at /356/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.425387][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1520.432232][T22023] loop0: detected capacity change from 0 to 16 [ 1520.460932][T22023] erofs: (device loop0): mounted with root inode @ nid 36. [ 1520.685864][T22021] loop5: detected capacity change from 0 to 40427 [ 1520.744061][T22032] loop4: detected capacity change from 0 to 16 [ 1520.758842][T22032] erofs: (device loop4): mounted with root inode @ nid 36. [ 1520.776926][T22021] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1520.892762][T22021] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1520.924512][T22025] loop1: detected capacity change from 0 to 40427 [ 1521.208666][T22027] loop2: detected capacity change from 0 to 40427 [ 1521.238253][T22025] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1521.358943][T22027] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1521.472016][T22046] syz.5.4876: attempt to access beyond end of device [ 1521.472016][T22046] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1521.701210][T22025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1521.764382][ T8814] syz-executor: attempt to access beyond end of device [ 1521.764382][ T8814] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1521.786772][T22027] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1521.893779][T22053] syz.4.4881[22053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1521.894417][T22053] syz.4.4881[22053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1521.941252][T22053] loop4: detected capacity change from 0 to 128 [ 1522.045324][T22054] syz.1.4879: attempt to access beyond end of device [ 1522.045324][T22054] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1522.334508][T13204] syz-executor: attempt to access beyond end of device [ 1522.334508][T13204] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1522.376517][T22053] loop4: detected capacity change from 0 to 128 [ 1522.481781][T22053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1522.492071][T22053] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1523.143323][T22057] syz.2.4877: attempt to access beyond end of device [ 1523.143323][T22057] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1523.245254][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1523.506505][T13391] syz-executor: attempt to access beyond end of device [ 1523.506505][T13391] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1523.529366][T22063] loop5: detected capacity change from 0 to 512 [ 1523.607995][T22063] EXT4-fs: Ignoring removed mblk_io_submit option [ 1523.614755][T22063] EXT4-fs: Ignoring removed bh option [ 1523.632967][T22063] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1523.819937][T22067] loop4: detected capacity change from 0 to 128 [ 1523.892192][T22063] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1523.905739][T22067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1523.920148][T22067] ext4 filesystem being mounted at /393/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1523.947473][T22063] EXT4-fs (loop5): 1 truncate cleaned up [ 1523.953290][T22063] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1524.142307][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1524.183549][T22075] loop0: detected capacity change from 0 to 1024 [ 1524.195538][T22075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1524.211639][T22075] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1524.231502][T22075] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1524.241805][T22075] EXT4-fs error (device loop0): ext4_get_journal_inode:5710: comm syz.0.4887: inode #1: comm syz.0.4887: iget: illegal inode # [ 1524.256196][T22075] EXT4-fs (loop0): no journal found [ 1524.280053][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1524.348957][T22079] loop4: detected capacity change from 0 to 128 [ 1524.389080][T22079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1524.398024][T22079] ext4 filesystem being mounted at /394/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1524.900058][T22093] loop1: detected capacity change from 0 to 131072 [ 1524.908319][T22093] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1524.916483][T22093] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1524.954235][T22093] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1525.049290][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1525.072934][T22093] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1525.080109][T22093] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1525.112366][T22093] serio: Serial port ptm0 [ 1525.124673][T22105] loop5: detected capacity change from 0 to 128 [ 1525.177698][ T1908] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1525.212522][T22110] loop0: detected capacity change from 0 to 512 [ 1525.220969][T22110] EXT4-fs: Ignoring removed mblk_io_submit option [ 1525.230292][T22112] loop5: detected capacity change from 0 to 128 [ 1525.238298][T22111] syz.1.4889[22111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1525.238402][T22111] syz.1.4889[22111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1525.253689][T22112] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1525.265570][T22110] EXT4-fs: Ignoring removed bh option [ 1525.280484][T22112] ext4 filesystem being mounted at /557/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1525.280874][T22110] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1525.304198][T22110] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1525.330102][T22102] loop2: detected capacity change from 0 to 40427 [ 1525.343573][T22110] EXT4-fs (loop0): 1 truncate cleaned up [ 1525.350796][T22110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1525.378314][T22102] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1525.434132][T22102] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1525.726175][T22122] syz.2.4891: attempt to access beyond end of device [ 1525.726175][T22122] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1525.944747][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1526.012857][T13391] syz-executor: attempt to access beyond end of device [ 1526.012857][T13391] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1526.050169][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1526.161677][T22129] loop0: detected capacity change from 0 to 128 [ 1526.253066][ T1073] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1526.268602][T22129] loop0: detected capacity change from 0 to 128 [ 1526.268812][ T1073] I/O error, dev loop0, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1526.290493][T22129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1526.292273][T22124] loop5: detected capacity change from 0 to 40427 [ 1526.305977][T22129] ext4 filesystem being mounted at /388/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1526.307096][T22130] loop1: detected capacity change from 0 to 128 [ 1526.363416][T22124] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1526.370033][ T1908] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1526.423568][T22124] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1526.433828][T22147] loop1: detected capacity change from 0 to 128 [ 1526.474979][T22147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1526.484551][T22147] ext4 filesystem being mounted at /360/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1526.754117][T22151] syz.5.4895: attempt to access beyond end of device [ 1526.754117][T22151] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1526.947736][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1527.021635][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1527.027625][ T8814] syz-executor: attempt to access beyond end of device [ 1527.027625][ T8814] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1527.042985][T22153] loop4: detected capacity change from 0 to 512 [ 1527.057097][T22153] EXT4-fs: Ignoring removed mblk_io_submit option [ 1527.063585][T22153] EXT4-fs: Ignoring removed bh option [ 1527.090157][T22153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1527.102097][T22153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1527.194407][T22153] EXT4-fs (loop4): 1 truncate cleaned up [ 1527.204494][T22153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1527.271134][T22167] loop5: detected capacity change from 0 to 1024 [ 1527.318851][T22167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1527.345726][T22167] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1527.377699][T22167] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1527.402688][T22167] EXT4-fs error (device loop5): ext4_get_journal_inode:5710: comm syz.5.4903: inode #1: comm syz.5.4903: iget: illegal inode # [ 1527.425179][T22167] EXT4-fs (loop5): no journal found [ 1527.545116][T22175] FAULT_INJECTION: forcing a failure. [ 1527.545116][T22175] name failslab, interval 1, probability 0, space 0, times 1 [ 1527.557852][T22175] CPU: 1 PID: 22175 Comm: syz.2.4904 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1527.567765][T22175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1527.577854][T22175] Call Trace: [ 1527.581150][T22175] [ 1527.584092][T22175] __dump_stack+0x21/0x24 [ 1527.588563][T22175] dump_stack_lvl+0xee/0x150 [ 1527.593176][T22175] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1527.598225][T22175] dump_stack+0x15/0x24 [ 1527.602399][T22175] should_fail_ex+0x3d4/0x520 [ 1527.607151][T22175] ? getname_flags+0xb9/0x500 [ 1527.611911][T22175] __should_failslab+0xac/0xf0 [ 1527.616737][T22175] should_failslab+0x9/0x20 [ 1527.621295][T22175] kmem_cache_alloc+0x3b/0x330 [ 1527.626110][T22175] getname_flags+0xb9/0x500 [ 1527.630635][T22175] __x64_sys_rmdir+0x3c/0x50 [ 1527.635237][T22175] x64_sys_call+0x68e/0x9a0 [ 1527.639753][T22175] do_syscall_64+0x4c/0xa0 [ 1527.644199][T22175] ? clear_bhb_loop+0x15/0x70 [ 1527.648971][T22175] ? clear_bhb_loop+0x15/0x70 [ 1527.653676][T22175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1527.659661][T22175] RIP: 0033:0x7f5ac578e929 [ 1527.664116][T22175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1527.683750][T22175] RSP: 002b:00007f5ac6537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1527.692200][T22175] RAX: ffffffffffffffda RBX: 00007f5ac59b6160 RCX: 00007f5ac578e929 [ 1527.700200][T22175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 1527.708192][T22175] RBP: 00007f5ac6537090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.716260][T22175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1527.724230][T22175] R13: 0000000000000000 R14: 00007f5ac59b6160 R15: 00007ffe451121f8 [ 1527.732212][T22175] [ 1527.750600][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1527.790195][T22176] FAULT_INJECTION: forcing a failure. [ 1527.790195][T22176] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1527.804622][T22176] CPU: 1 PID: 22176 Comm: syz.1.4905 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1527.814636][T22176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1527.824714][T22176] Call Trace: [ 1527.828012][T22176] [ 1527.830964][T22176] __dump_stack+0x21/0x24 [ 1527.835324][T22176] dump_stack_lvl+0xee/0x150 [ 1527.839946][T22176] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1527.845000][T22176] ? __stack_depot_save+0x36/0x480 [ 1527.850230][T22176] dump_stack+0x15/0x24 [ 1527.854419][T22176] should_fail_ex+0x3d4/0x520 [ 1527.859134][T22176] should_fail_alloc_page+0x61/0x90 [ 1527.864419][T22176] prepare_alloc_pages+0x148/0x5f0 [ 1527.869572][T22176] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 1527.874812][T22176] ? kstrtouint_from_user+0xf7/0x150 [ 1527.880196][T22176] __alloc_pages+0x115/0x3a0 [ 1527.884826][T22176] ? __cfi___alloc_pages+0x10/0x10 [ 1527.889971][T22176] ? __kasan_check_write+0x14/0x20 [ 1527.895117][T22176] ? proc_fail_nth_write+0x17a/0x1f0 [ 1527.900533][T22176] __folio_alloc+0x12/0x40 [ 1527.904982][T22176] handle_mm_fault+0x18ef/0x2640 [ 1527.910021][T22176] ? __cfi_handle_mm_fault+0x10/0x10 [ 1527.910222][ T28] audit: type=1400 audit(1749696168.377:265): avc: denied { write } for pid=22177 comm="syz.4.4906" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1527.915331][T22176] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 1527.915364][T22176] ? __kasan_check_write+0x14/0x20 [ 1527.946415][T22178] loop4: detected capacity change from 0 to 512 [ 1527.948825][T22176] ? fput+0x154/0x1a0 [ 1527.959071][T22176] ? ksys_write+0x1eb/0x240 [ 1527.963703][T22176] do_user_addr_fault+0x905/0x1050 [ 1527.968850][T22176] exc_page_fault+0x51/0xb0 [ 1527.973383][T22176] asm_exc_page_fault+0x27/0x30 [ 1527.978274][T22176] RIP: 0033:0x7fdcbb85a33b [ 1527.982706][T22176] Code: 00 00 00 48 8d 3d fd 2b 19 00 48 89 c1 31 c0 e8 fb 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1528.002327][T22176] RSP: 002b:00007fdcbc81efb0 EFLAGS: 00010202 [ 1528.008409][T22176] RAX: 0000000000000000 RBX: 00007fdcbbbb6080 RCX: 0000000000000000 [ 1528.016392][T22176] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000680 [ 1528.024374][T22176] RBP: 00007fdcbc820090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.032355][T22176] R10: 0000200000000680 R11: 0000000000000000 R12: 0000000000000001 [ 1528.040329][T22176] R13: 0000000000000000 R14: 00007fdcbbbb6080 R15: 00007fffdfb4bf48 [ 1528.048315][T22176] [ 1528.055758][T22176] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1528.127570][T22182] process 'syz.0.4907' launched './file1' with NULL argv: empty string added [ 1528.136954][ T28] audit: type=1400 audit(1749696168.617:266): avc: denied { execute } for pid=22179 comm="syz.0.4907" name="file1" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1528.161175][ T28] audit: type=1400 audit(1749696168.637:267): avc: denied { execute_no_trans } for pid=22179 comm="syz.0.4907" path="/390/file1" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1528.232924][ T28] audit: type=1400 audit(1749696168.707:268): avc: denied { unmount } for pid=13391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1528.311783][T22191] loop1: detected capacity change from 0 to 128 [ 1528.331564][T22192] loop5: detected capacity change from 0 to 128 [ 1528.340416][T22192] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1528.349180][T22192] ext4 filesystem being mounted at /561/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.360806][ T1073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1528.376414][ T4021] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1528.412924][T22195] loop1: detected capacity change from 0 to 128 [ 1528.423129][T22197] syz.2.4910[22197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1528.423207][T22197] syz.2.4910[22197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1528.436215][T22195] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1528.457284][T22195] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.473073][T22197] loop2: detected capacity change from 0 to 128 [ 1528.500970][T22197] loop2: detected capacity change from 0 to 128 [ 1528.535187][T22197] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1528.556690][T22197] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.567275][ T4021] usb 5-1: Using ep0 maxpacket: 16 [ 1528.576889][ T4021] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1528.604825][ T4021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1528.616703][ T4021] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1528.629850][ T4021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 1528.645073][ T4021] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1528.656260][ T4021] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1528.671840][ T4021] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1528.682033][ T4021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1528.690906][ T4021] usb 5-1: SerialNumber: syz [ 1528.701607][T22178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1528.718885][ T4021] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 1528.849239][T22201] loop0: detected capacity change from 0 to 128 [ 1528.886983][ T1073] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1528.888686][T22201] loop0: detected capacity change from 0 to 128 [ 1528.896976][ T1073] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1528.936583][ T1073] Buffer I/O error on dev loop0, logical block 0, async page read [ 1528.973453][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1528.980287][T22201] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1528.989117][T22201] ext4 filesystem being mounted at /391/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1529.040562][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1529.196526][T22204] loop5: detected capacity change from 0 to 40427 [ 1529.223001][T22204] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1529.268719][T22204] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1529.471828][T22213] syz.5.4912: attempt to access beyond end of device [ 1529.471828][T22213] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1529.504417][ T4021] usb 5-1: USB disconnect, device number 6 [ 1529.664846][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1529.776860][T22218] loop4: detected capacity change from 0 to 1024 [ 1529.789668][T22218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1529.804073][T22218] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1529.815252][T22218] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1529.825265][T22218] EXT4-fs error (device loop4): ext4_get_journal_inode:5710: comm syz.4.4915: inode #1: comm syz.4.4915: iget: illegal inode # [ 1529.853171][T22218] EXT4-fs (loop4): no journal found [ 1529.906493][ T8814] syz-executor: attempt to access beyond end of device [ 1529.906493][ T8814] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1529.922021][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1530.126262][T22226] loop1: detected capacity change from 0 to 16 [ 1530.174169][T22224] syz.2.4916[22224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1530.174782][T22224] syz.2.4916[22224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1530.424900][T22226] erofs: (device loop1): mounted with root inode @ nid 36. [ 1530.445349][T22228] loop2: detected capacity change from 0 to 128 [ 1530.463029][T22228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1530.471850][T22228] ext4 filesystem being mounted at /379/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1530.813067][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1530.867335][ T28] audit: type=1400 audit(1749696171.347:269): avc: denied { bind } for pid=22246 comm="syz.2.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1530.890854][T22247] IPv6: sit1: Disabled Multicast RS [ 1531.510242][T22253] loop0: detected capacity change from 0 to 8192 [ 1532.301313][T22269] loop0: detected capacity change from 0 to 128 [ 1532.347957][T22271] loop5: detected capacity change from 0 to 128 [ 1532.392115][ T28] audit: type=1400 audit(1749696172.867:270): avc: denied { ioctl } for pid=22272 comm="syz.1.4926" path="socket:[77825]" dev="sockfs" ino=77825 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1532.515101][T22271] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1532.524050][T22271] ext4 filesystem being mounted at /564/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.538925][ T1073] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1532.550826][ T28] audit: type=1400 audit(1749696172.987:271): avc: denied { connect } for pid=22272 comm="syz.1.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1532.573064][T22269] loop0: detected capacity change from 0 to 128 [ 1532.587804][T22278] netlink: 'syz.1.4926': attribute type 5 has an invalid length. [ 1532.595745][T22278] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4926'. [ 1532.651462][T22269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1532.660613][T22269] ext4 filesystem being mounted at /394/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.707576][T22282] syz.4.4927[22282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1532.707743][T22282] syz.4.4927[22282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1532.785762][T22282] loop4: detected capacity change from 0 to 128 [ 1532.899982][T22286] FAULT_INJECTION: forcing a failure. [ 1532.899982][T22286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1532.913174][T22286] CPU: 1 PID: 22286 Comm: syz.1.4928 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1532.923091][T22286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1532.933164][T22286] Call Trace: [ 1532.936453][T22286] [ 1532.939396][T22286] __dump_stack+0x21/0x24 [ 1532.943748][T22286] dump_stack_lvl+0xee/0x150 [ 1532.948360][T22286] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1532.953405][T22286] ? __schedule+0xb8f/0x14e0 [ 1532.958057][T22286] dump_stack+0x15/0x24 [ 1532.962235][T22286] should_fail_ex+0x3d4/0x520 [ 1532.966933][T22286] should_fail+0xb/0x10 [ 1532.971108][T22286] should_fail_usercopy+0x1a/0x20 [ 1532.976150][T22286] _copy_from_user+0x1e/0xc0 [ 1532.980754][T22286] ___sys_sendmsg+0x155/0x290 [ 1532.985522][T22286] ? __sys_sendmsg+0x270/0x270 [ 1532.990316][T22286] ? __fdget+0x19c/0x220 [ 1532.994662][T22286] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1532.999613][T22286] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1533.005090][T22286] ? __kasan_check_write+0x14/0x20 [ 1533.010227][T22286] ? fpregs_restore_userregs+0x128/0x260 [ 1533.015881][T22286] ? switch_fpu_return+0xe/0x10 [ 1533.020741][T22286] x64_sys_call+0x171/0x9a0 [ 1533.025249][T22286] do_syscall_64+0x4c/0xa0 [ 1533.029671][T22286] ? clear_bhb_loop+0x15/0x70 [ 1533.034352][T22286] ? clear_bhb_loop+0x15/0x70 [ 1533.039039][T22286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1533.044962][T22286] RIP: 0033:0x7fdcbb98e929 [ 1533.049394][T22286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1533.069002][T22286] RSP: 002b:00007fdcbc7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1533.077419][T22286] RAX: ffffffffffffffda RBX: 00007fdcbbbb6160 RCX: 00007fdcbb98e929 [ 1533.085390][T22286] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 1533.093447][T22286] RBP: 00007fdcbc7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1533.101429][T22286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1533.109416][T22286] R13: 0000000000000000 R14: 00007fdcbbbb6160 R15: 00007fffdfb4bf48 [ 1533.117404][T22286] [ 1533.161955][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1533.171745][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1533.172175][ T1073] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1533.238090][T22282] loop4: detected capacity change from 0 to 128 [ 1533.254632][ T28] audit: type=1400 audit(1749696173.727:272): avc: denied { remount } for pid=22287 comm="syz.5.4930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1533.278464][T22282] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1533.290048][T22282] ext4 filesystem being mounted at /400/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.323981][T22293] loop2: detected capacity change from 0 to 512 [ 1533.331412][T22293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1533.412787][T22293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1533.422053][T22293] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.514988][T22297] syz.0.4929[22297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1533.515403][T22297] syz.0.4929[22297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1533.545030][T22297] loop0: detected capacity change from 0 to 128 [ 1533.738091][T22298] loop0: detected capacity change from 0 to 128 [ 1533.794983][T22298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1533.805441][T22298] ext4 filesystem being mounted at /395/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.431927][ T19] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 1534.441526][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1534.451719][T22302] FAULT_INJECTION: forcing a failure. [ 1534.451719][T22302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.498591][T22302] CPU: 1 PID: 22302 Comm: syz.1.4932 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1534.508543][T22302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1534.518619][T22302] Call Trace: [ 1534.521916][T22302] [ 1534.524863][T22302] __dump_stack+0x21/0x24 [ 1534.529219][T22302] dump_stack_lvl+0xee/0x150 [ 1534.533844][T22302] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1534.538913][T22302] dump_stack+0x15/0x24 [ 1534.543119][T22302] should_fail_ex+0x3d4/0x520 [ 1534.547831][T22302] should_fail+0xb/0x10 [ 1534.552019][T22302] should_fail_usercopy+0x1a/0x20 [ 1534.557069][T22302] _copy_to_user+0x1e/0x90 [ 1534.561514][T22302] simple_read_from_buffer+0xe9/0x160 [ 1534.566985][T22302] proc_fail_nth_read+0x19a/0x210 [ 1534.572048][T22302] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1534.577625][T22302] ? security_file_permission+0x94/0xb0 [ 1534.583261][T22302] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1534.588830][T22302] vfs_read+0x26e/0x8c0 [ 1534.593016][T22302] ? __cfi_vfs_read+0x10/0x10 [ 1534.596452][ T19] usb 6-1: device descriptor read/64, error -71 [ 1534.597715][T22302] ? __kasan_check_write+0x14/0x20 [ 1534.609075][T22302] ? mutex_lock+0x8d/0x1a0 [ 1534.613541][T22302] ? __cfi_mutex_lock+0x10/0x10 [ 1534.618425][T22302] ? __fdget_pos+0x2cd/0x380 [ 1534.623134][T22302] ? ksys_read+0x71/0x240 [ 1534.627493][T22302] ksys_read+0x140/0x240 [ 1534.631766][T22302] ? __cfi_ksys_read+0x10/0x10 [ 1534.636554][T22302] ? fpregs_restore_userregs+0x128/0x260 [ 1534.642215][T22302] __x64_sys_read+0x7b/0x90 [ 1534.646770][T22302] x64_sys_call+0x2f/0x9a0 [ 1534.651209][T22302] do_syscall_64+0x4c/0xa0 [ 1534.655645][T22302] ? clear_bhb_loop+0x15/0x70 [ 1534.660334][T22302] ? clear_bhb_loop+0x15/0x70 [ 1534.665025][T22302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1534.670952][T22302] RIP: 0033:0x7fdcbb98d33c [ 1534.675386][T22302] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1534.695120][T22302] RSP: 002b:00007fdcbc820030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1534.703561][T22302] RAX: ffffffffffffffda RBX: 00007fdcbbbb6080 RCX: 00007fdcbb98d33c [ 1534.711553][T22302] RDX: 000000000000000f RSI: 00007fdcbc8200a0 RDI: 0000000000000006 [ 1534.719539][T22302] RBP: 00007fdcbc820090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.727534][T22302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1534.735527][T22302] R13: 0000000000000000 R14: 00007fdcbbbb6080 R15: 00007fffdfb4bf48 [ 1534.743525][T22302] [ 1534.751207][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1534.804897][T22310] loop2: detected capacity change from 0 to 1024 [ 1534.896031][ T19] usb 6-1: device descriptor read/64, error -71 [ 1534.906484][T22310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1534.918404][T22310] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1534.929743][T22310] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1534.939772][T22310] EXT4-fs error (device loop2): ext4_get_journal_inode:5710: comm syz.2.4934: inode #1: comm syz.2.4934: iget: illegal inode # [ 1535.010025][T22316] syz.1.4935[22316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1535.010783][T22316] syz.1.4935[22316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1535.082353][T22316] loop1: detected capacity change from 0 to 128 [ 1535.196875][T22310] EXT4-fs (loop2): no journal found [ 1535.229517][T22308] input: syz0 as /devices/virtual/input/input4 [ 1535.419386][ T28] audit: type=1400 audit(1749696175.897:273): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=9113 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1535.619021][ T28] audit: type=1400 audit(1749696175.917:274): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=9113 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1535.785125][ T28] audit: type=1400 audit(1749696175.917:275): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=9113 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1535.989135][ T1073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1536.033053][T22314] loop1: detected capacity change from 0 to 128 [ 1536.121142][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1536.134383][T22314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1536.136518][ T19] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1536.150436][T22314] ext4 filesystem being mounted at /369/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1536.153630][T22321] loop0: detected capacity change from 0 to 16 [ 1536.169577][T22321] erofs: (device loop0): mounted with root inode @ nid 36. [ 1536.352891][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1536.684901][T22353] loop1: detected capacity change from 0 to 128 [ 1536.715636][T22353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1536.724951][T22353] ext4 filesystem being mounted at /370/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1537.154187][T22367] FAULT_INJECTION: forcing a failure. [ 1537.154187][T22367] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.174738][T22367] CPU: 0 PID: 22367 Comm: syz.5.4945 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1537.184698][T22367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1537.184718][T22367] Call Trace: [ 1537.184725][T22367] [ 1537.184733][T22367] __dump_stack+0x21/0x24 [ 1537.205346][T22367] dump_stack_lvl+0xee/0x150 [ 1537.209970][T22367] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1537.215027][T22367] ? __kasan_check_write+0x14/0x20 [ 1537.220165][T22367] ? mutex_unlock+0x89/0x220 [ 1537.224779][T22367] dump_stack+0x15/0x24 [ 1537.228955][T22367] should_fail_ex+0x3d4/0x520 [ 1537.233671][T22367] ? getname_flags+0xb9/0x500 [ 1537.238385][T22367] __should_failslab+0xac/0xf0 [ 1537.243174][T22367] should_failslab+0x9/0x20 [ 1537.247705][T22367] kmem_cache_alloc+0x3b/0x330 [ 1537.252500][T22367] ? __cfi_ksys_write+0x10/0x10 [ 1537.257381][T22367] getname_flags+0xb9/0x500 [ 1537.261903][T22367] ? debug_smp_processor_id+0x17/0x20 [ 1537.267299][T22367] __x64_sys_unlink+0x3c/0x50 [ 1537.271991][T22367] x64_sys_call+0x958/0x9a0 [ 1537.276592][T22367] do_syscall_64+0x4c/0xa0 [ 1537.281020][T22367] ? clear_bhb_loop+0x15/0x70 [ 1537.285712][T22367] ? clear_bhb_loop+0x15/0x70 [ 1537.290396][T22367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1537.296307][T22367] RIP: 0033:0x7fdbe5b8e929 [ 1537.300759][T22367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1537.320371][T22367] RSP: 002b:00007fdbe6a28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1537.328828][T22367] RAX: ffffffffffffffda RBX: 00007fdbe5db5fa0 RCX: 00007fdbe5b8e929 [ 1537.336903][T22367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1537.344885][T22367] RBP: 00007fdbe6a28090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.352855][T22367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1537.360830][T22367] R13: 0000000000000000 R14: 00007fdbe5db5fa0 R15: 00007ffe59d16b78 [ 1537.368813][T22367] [ 1537.431314][T22371] xt_hashlimit: size too large, truncated to 1048576 [ 1537.498677][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1537.537063][T22373] syz.5.4947[22373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1537.537145][T22373] syz.5.4947[22373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1537.550253][T22373] loop5: detected capacity change from 0 to 128 [ 1537.640704][T22379] loop5: detected capacity change from 0 to 1024 [ 1537.657129][T22379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1537.676630][T22379] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1537.702472][T22379] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1537.713225][T22379] EXT4-fs error (device loop5): ext4_get_journal_inode:5710: comm syz.5.4950: inode #1: comm syz.5.4950: iget: illegal inode # [ 1537.731899][T22379] EXT4-fs (loop5): no journal found [ 1537.876747][T22386] loop4: detected capacity change from 0 to 1024 [ 1537.908053][T22377] loop2: detected capacity change from 0 to 40427 [ 1537.917282][T22386] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1537.927249][T22386] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1537.952616][T22377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1537.960768][T22386] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1537.975908][T22386] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28 [ 1537.989445][T22386] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1537.989445][T22386] [ 1537.999294][T22386] EXT4-fs (loop4): Total free blocks count 0 [ 1538.005418][T22386] EXT4-fs (loop4): Free/Dirty block details [ 1538.011483][T22386] EXT4-fs (loop4): free_blocks=4293918720 [ 1538.017472][T22386] EXT4-fs (loop4): dirty_blocks=16 [ 1538.022751][T22386] EXT4-fs (loop4): Block reservation details [ 1538.028908][T22386] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1538.043020][T22377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1538.063773][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1538.095358][T22395] loop0: detected capacity change from 0 to 16 [ 1538.121677][T22395] erofs: (device loop0): mounted with root inode @ nid 36. [ 1538.152140][ T28] audit: type=1400 audit(1749696178.627:276): avc: denied { create } for pid=22397 comm="syz.4.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1538.172359][ T28] audit: type=1400 audit(1749696178.637:277): avc: denied { bind } for pid=22397 comm="syz.4.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1538.262694][T22399] syz.2.4949: attempt to access beyond end of device [ 1538.262694][T22399] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1538.502288][T13391] syz-executor: attempt to access beyond end of device [ 1538.502288][T13391] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1538.565120][ T28] audit: type=1400 audit(1749696179.037:278): avc: denied { create } for pid=22402 comm="syz.1.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1538.614658][ T28] audit: type=1400 audit(1749696179.077:279): avc: denied { accept } for pid=22402 comm="syz.1.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1538.656400][ T19] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1538.848304][ T19] usb 5-1: not running at top speed; connect to a high speed hub [ 1538.858984][ T19] usb 5-1: config 1 has an invalid descriptor of length 16, skipping remainder of the config [ 1538.877665][ T19] usb 5-1: config 1 interface 0 altsetting 149 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1538.912930][ T19] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1539.039826][T22418] FAULT_INJECTION: forcing a failure. [ 1539.039826][T22418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1539.092699][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1539.103969][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.114141][ T19] usb 5-1: Product: syz [ 1539.121567][ T19] usb 5-1: Manufacturer: Š [ 1539.127217][ T19] usb 5-1: SerialNumber: syz [ 1539.166136][T22418] CPU: 0 PID: 22418 Comm: syz.1.4957 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1539.176169][T22418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1539.186251][T22418] Call Trace: [ 1539.189554][T22418] [ 1539.192506][T22418] __dump_stack+0x21/0x24 [ 1539.196862][T22418] dump_stack_lvl+0xee/0x150 [ 1539.201475][T22418] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1539.206523][T22418] ? __stack_depot_save+0x36/0x480 [ 1539.211661][T22418] dump_stack+0x15/0x24 [ 1539.215840][T22418] should_fail_ex+0x3d4/0x520 [ 1539.220539][T22418] should_fail_alloc_page+0x61/0x90 [ 1539.225755][T22418] prepare_alloc_pages+0x148/0x5f0 [ 1539.230888][T22418] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 1539.236109][T22418] ? kstrtouint_from_user+0xf7/0x150 [ 1539.241417][T22418] __alloc_pages+0x115/0x3a0 [ 1539.246026][T22418] ? __cfi___alloc_pages+0x10/0x10 [ 1539.251161][T22418] ? __kasan_check_write+0x14/0x20 [ 1539.256295][T22418] ? proc_fail_nth_write+0x17a/0x1f0 [ 1539.261613][T22418] __folio_alloc+0x12/0x40 [ 1539.266052][T22418] handle_mm_fault+0x18ef/0x2640 [ 1539.271020][T22418] ? __cfi_handle_mm_fault+0x10/0x10 [ 1539.276332][T22418] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 1539.281555][T22418] ? __kasan_check_write+0x14/0x20 [ 1539.286695][T22418] ? fput+0x154/0x1a0 [ 1539.290695][T22418] ? ksys_write+0x1eb/0x240 [ 1539.295234][T22418] do_user_addr_fault+0x905/0x1050 [ 1539.300377][T22418] exc_page_fault+0x51/0xb0 [ 1539.304901][T22418] asm_exc_page_fault+0x27/0x30 [ 1539.309768][T22418] RIP: 0033:0x7fdcbb85a33b [ 1539.314201][T22418] Code: 00 00 00 48 8d 3d fd 2b 19 00 48 89 c1 31 c0 e8 fb 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1539.333820][T22418] RSP: 002b:00007fdcbc7fdfb0 EFLAGS: 00010202 [ 1539.339911][T22418] RAX: 0000000000000000 RBX: 00007fdcbbbb6160 RCX: 0000000000000000 [ 1539.347907][T22418] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000680 [ 1539.355906][T22418] RBP: 00007fdcbc7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.363920][T22418] R10: 0000200000000680 R11: 0000000000000000 R12: 0000000000000001 [ 1539.371915][T22418] R13: 0000000000000000 R14: 00007fdcbbbb6160 R15: 00007fffdfb4bf48 [ 1539.379917][T22418] [ 1539.387903][T22398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4952'. [ 1539.396936][ T28] audit: type=1400 audit(1749696179.867:280): avc: denied { write } for pid=22397 comm="syz.4.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1539.417521][T22418] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1539.479562][ T28] audit: type=1400 audit(1749696179.907:281): avc: denied { write } for pid=22419 comm="syz.0.4958" name="file0" dev="tmpfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1539.543350][T22422] loop0: detected capacity change from 0 to 512 [ 1539.561921][T22422] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1539.568840][T22422] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1539.720784][T22422] EXT4-fs (loop0): 1 truncate cleaned up [ 1539.726604][T22422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1540.058776][ T28] audit: type=1400 audit(1749696179.907:282): avc: denied { open } for pid=22419 comm="syz.0.4958" path="/401/file0" dev="tmpfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1540.159844][ T28] audit: type=1400 audit(1749696179.907:283): avc: denied { ioctl } for pid=22419 comm="syz.0.4958" path="/401/file0" dev="tmpfs" ino=2462 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1540.306081][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1540.327371][ T19] usb 5-1: USB disconnect, device number 7 [ 1540.375917][T22430] loop2: detected capacity change from 0 to 128 [ 1540.425481][T22429] syz.0.4960[22429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1540.425563][T22429] syz.0.4960[22429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1540.436544][T22430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1540.449878][T22429] loop0: detected capacity change from 0 to 128 [ 1540.457796][T22430] ext4 filesystem being mounted at /389/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.497650][ T1073] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1540.508655][T22429] loop0: detected capacity change from 0 to 128 [ 1540.531058][T22429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1540.539941][T22429] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.592391][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1540.761784][T22438] loop0: detected capacity change from 0 to 128 [ 1540.817117][ T1073] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1540.869790][T22440] loop0: detected capacity change from 0 to 128 [ 1540.886260][T22440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1540.895055][T22440] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1541.022008][T22442] overlayfs: failed to resolve './file1': -2 [ 1541.067372][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1541.288096][T22451] loop5: detected capacity change from 0 to 1024 [ 1541.451837][ T28] audit: type=1400 audit(1749696181.907:284): avc: denied { link } for pid=22446 comm="syz.1.4964" name="#c1" dev="tmpfs" ino=2232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1541.591297][T22451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1541.610338][T22451] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1541.623242][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1541.656482][T22451] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1541.683182][ T28] audit: type=1400 audit(1749696181.907:285): avc: denied { rename } for pid=22446 comm="syz.1.4964" name="#c2" dev="tmpfs" ino=2232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1541.685198][T22451] EXT4-fs error (device loop5): ext4_get_journal_inode:5710: comm syz.5.4965: inode #1: comm syz.5.4965: iget: illegal inode # [ 1541.726826][T22451] EXT4-fs (loop5): no journal found [ 1541.925768][T22459] loop4: detected capacity change from 0 to 256 [ 1541.935445][T22459] exfat: Unknown parameter '’’’’’’’’’’’’’’’’’’0xffffffffffffffff’’’’' [ 1542.334240][T22465] loop2: detected capacity change from 0 to 1024 [ 1542.384198][T22465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1542.394686][T22465] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1542.406285][ T1073] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1542.411185][T22465] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1542.425700][T22465] EXT4-fs error (device loop2): ext4_get_journal_inode:5710: comm syz.2.4970: inode #1: comm syz.2.4970: iget: illegal inode # [ 1542.439129][T22465] EXT4-fs (loop2): no journal found [ 1543.020487][ T28] audit: type=1400 audit(1749696183.157:286): avc: denied { write } for pid=22461 comm="syz.1.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1543.449120][T22482] loop1: detected capacity change from 0 to 1024 [ 1544.089424][T22479] syz.0.4972[22479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1544.089511][T22479] syz.0.4972[22479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1544.102534][T22479] loop0: detected capacity change from 0 to 128 [ 1544.147657][T22485] loop4: detected capacity change from 0 to 1024 [ 1544.185870][T22482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1544.194527][T22482] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1544.213253][ T322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1544.235828][T22482] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1544.253788][T22485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1544.262579][T22485] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1544.287517][T22482] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1544.301214][T22479] loop0: detected capacity change from 0 to 128 [ 1544.301276][ T322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1544.307993][T22482] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1544.307993][T22482] [ 1544.321216][T22485] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1544.342037][T22482] EXT4-fs (loop1): Total free blocks count 0 [ 1544.342034][T22485] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28 [ 1544.342063][T22485] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1544.342063][T22485] [ 1544.362148][T22482] EXT4-fs (loop1): Free/Dirty block details [ 1544.382507][T22479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1544.391243][T22479] ext4 filesystem being mounted at /405/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1544.401872][T22482] EXT4-fs (loop1): free_blocks=4293918720 [ 1544.407791][T22482] EXT4-fs (loop1): dirty_blocks=16 [ 1544.407889][T22485] EXT4-fs (loop4): Total free blocks count 0 [ 1544.413496][T22482] EXT4-fs (loop1): Block reservation details [ 1544.434006][T22485] EXT4-fs (loop4): Free/Dirty block details [ 1544.440056][T22485] EXT4-fs (loop4): free_blocks=4293918720 [ 1544.445923][T22485] EXT4-fs (loop4): dirty_blocks=16 [ 1544.451251][T22485] EXT4-fs (loop4): Block reservation details [ 1544.457375][T22485] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1544.468792][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1544.488915][T22482] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1544.511616][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1544.521986][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1545.024850][T22510] FAULT_INJECTION: forcing a failure. [ 1545.024850][T22510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1545.038264][T22510] CPU: 1 PID: 22510 Comm: syz.4.4978 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1545.048190][T22510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1545.058259][T22510] Call Trace: [ 1545.061561][T22510] [ 1545.064508][T22510] __dump_stack+0x21/0x24 [ 1545.068908][T22510] dump_stack_lvl+0xee/0x150 [ 1545.073523][T22510] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1545.078575][T22510] ? finish_task_switch+0x16b/0x7b0 [ 1545.083800][T22510] ? __switch_to_asm+0x3a/0x60 [ 1545.088605][T22510] dump_stack+0x15/0x24 [ 1545.092781][T22510] should_fail_ex+0x3d4/0x520 [ 1545.097481][T22510] should_fail_alloc_page+0x61/0x90 [ 1545.102700][T22510] prepare_alloc_pages+0x148/0x5f0 [ 1545.107836][T22510] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 1545.113052][T22510] ? __kasan_check_read+0x11/0x20 [ 1545.118099][T22510] ? preempt_schedule_irq+0xbb/0x110 [ 1545.123435][T22510] __alloc_pages+0x115/0x3a0 [ 1545.128049][T22510] ? __cfi___alloc_pages+0x10/0x10 [ 1545.133177][T22510] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1545.138828][T22510] ? handle_mm_fault+0xbaf/0x2640 [ 1545.143961][T22510] __folio_alloc+0x12/0x40 [ 1545.148400][T22510] handle_mm_fault+0x18ef/0x2640 [ 1545.153364][T22510] ? __cfi_handle_mm_fault+0x10/0x10 [ 1545.158673][T22510] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 1545.163903][T22510] ? do_user_addr_fault+0x1cc/0x1050 [ 1545.169209][T22510] do_user_addr_fault+0x905/0x1050 [ 1545.174354][T22510] exc_page_fault+0x51/0xb0 [ 1545.178876][T22510] asm_exc_page_fault+0x27/0x30 [ 1545.183741][T22510] RIP: 0033:0x7fa3a205a33b [ 1545.188165][T22510] Code: 00 00 00 48 8d 3d fd 2b 19 00 48 89 c1 31 c0 e8 fb 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1545.207785][T22510] RSP: 002b:00007fa3a2f53fb0 EFLAGS: 00010202 [ 1545.213881][T22510] RAX: 0000000000000000 RBX: 00007fa3a23b6160 RCX: 0000000000000000 [ 1545.221862][T22510] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000680 [ 1545.230024][T22510] RBP: 00007fa3a2f55090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.238013][T22510] R10: 0000200000000680 R11: 0000000000000000 R12: 0000000000000001 [ 1545.246001][T22510] R13: 0000000000000000 R14: 00007fa3a23b6160 R15: 00007ffc75b95738 [ 1545.254088][T22510] [ 1545.257436][T22510] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1545.317545][T22510] loop4: detected capacity change from 0 to 512 [ 1545.336735][T22510] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1545.343605][T22510] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1545.511124][T22510] EXT4-fs (loop4): 1 truncate cleaned up [ 1545.517015][T22510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1545.704711][T22513] loop1: detected capacity change from 0 to 1024 [ 1545.745916][T22513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1545.755900][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1545.807920][T22513] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1545.839013][T22513] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1545.848872][T22513] EXT4-fs error (device loop1): ext4_get_journal_inode:5710: comm syz.1.4980: inode #1: comm syz.1.4980: iget: illegal inode # [ 1545.876369][T22513] EXT4-fs (loop1): no journal found [ 1547.116002][T22548] syz.1.4985[22548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1547.118286][T22548] syz.1.4985[22548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1547.371945][T22548] loop1: detected capacity change from 0 to 128 [ 1547.459992][T22547] loop2: detected capacity change from 0 to 512 [ 1548.029406][T22550] loop1: detected capacity change from 0 to 128 [ 1548.329473][T22550] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1548.366544][T22547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1548.385451][T22547] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1550.526651][T22550] ext4 filesystem being mounted at /379/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1550.616088][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1551.349498][T22560] loop1: detected capacity change from 0 to 256 [ 1551.403493][T22560] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4988'. [ 1551.447442][T22560] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1551.543196][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1551.566407][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1551.695956][T22574] capability: warning: `syz.2.4992' uses deprecated v2 capabilities in a way that may be insecure [ 1551.725503][T22561] loop4: detected capacity change from 0 to 40427 [ 1551.741443][T22561] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1551.816433][T22561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1551.901216][T22586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4992'. [ 1551.911543][T22586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4992'. [ 1552.040103][T22589] syz.4.4990: attempt to access beyond end of device [ 1552.040103][T22589] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1552.258464][ T28] audit: type=1400 audit(1749696192.397:287): avc: denied { read } for pid=22572 comm="syz.2.4992" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1552.283158][T13109] syz-executor: attempt to access beyond end of device [ 1552.283158][T13109] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1552.283547][ T28] audit: type=1400 audit(1749696192.397:288): avc: denied { open } for pid=22572 comm="syz.2.4992" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1552.335241][ T28] audit: type=1400 audit(1749696192.397:289): avc: denied { ioctl } for pid=22572 comm="syz.2.4992" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1552.437511][T22595] loop1: detected capacity change from 0 to 1024 [ 1552.480272][T22595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1552.502441][T22595] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1552.536205][T22595] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1552.571850][T22595] EXT4-fs error (device loop1): ext4_get_journal_inode:5710: comm syz.1.4997: inode #1: comm syz.1.4997: iget: illegal inode # [ 1552.595154][T22595] EXT4-fs (loop1): no journal found [ 1552.637862][T22602] loop5: detected capacity change from 0 to 128 [ 1552.711396][T22602] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1552.720160][T22602] ext4 filesystem being mounted at /577/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1552.757225][T22608] FAULT_INJECTION: forcing a failure. [ 1552.757225][T22608] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.769971][T22608] CPU: 0 PID: 22608 Comm: syz.2.4999 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1552.779892][T22608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1552.789967][T22608] Call Trace: [ 1552.793263][T22608] [ 1552.796210][T22608] __dump_stack+0x21/0x24 [ 1552.800560][T22608] dump_stack_lvl+0xee/0x150 [ 1552.805160][T22608] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1552.810200][T22608] ? __cfi_vfs_write+0x10/0x10 [ 1552.814975][T22608] dump_stack+0x15/0x24 [ 1552.819138][T22608] should_fail_ex+0x3d4/0x520 [ 1552.823820][T22608] __should_failslab+0xac/0xf0 [ 1552.828596][T22608] ? __se_sys_memfd_create+0xf2/0x3b0 [ 1552.834047][T22608] should_failslab+0x9/0x20 [ 1552.838557][T22608] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1552.844018][T22608] ? ksys_write+0x1eb/0x240 [ 1552.848527][T22608] ? __se_sys_memfd_create+0xf2/0x3b0 [ 1552.853905][T22608] __kmalloc+0xa1/0x1e0 [ 1552.858065][T22608] ? strnlen_user+0x10d/0x190 [ 1552.862755][T22608] __se_sys_memfd_create+0xf2/0x3b0 [ 1552.867962][T22608] __x64_sys_memfd_create+0x5b/0x70 [ 1552.873170][T22608] x64_sys_call+0x235/0x9a0 [ 1552.877686][T22608] do_syscall_64+0x4c/0xa0 [ 1552.882109][T22608] ? clear_bhb_loop+0x15/0x70 [ 1552.886802][T22608] ? clear_bhb_loop+0x15/0x70 [ 1552.891514][T22608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1552.897426][T22608] RIP: 0033:0x7f5ac578e929 [ 1552.901848][T22608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.921469][T22608] RSP: 002b:00007f5ac6557e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1552.929883][T22608] RAX: ffffffffffffffda RBX: 000000000000044b RCX: 00007f5ac578e929 [ 1552.937858][T22608] RDX: 00007f5ac6557ef0 RSI: 0000000000000000 RDI: 00007f5ac58114cc [ 1552.945836][T22608] RBP: 00002000000004c0 R08: 00007f5ac6557bb7 R09: 00007f5ac6557e40 [ 1552.953808][T22608] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 1552.961780][T22608] R13: 00007f5ac6557ef0 R14: 00007f5ac6557eb0 R15: 0000200000000280 [ 1552.969764][T22608] [ 1553.046538][ T8000] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1553.237630][ T8000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.247734][ T8000] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1553.257113][ T8000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.269299][ T8000] usb 5-1: config 0 descriptor?? [ 1553.312874][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1553.590220][T22621] overlayfs: failed to resolve './file1': -2 [ 1553.825489][ T8000] nintendo 0003:057E:200E.0005: unbalanced delimiter at end of report description [ 1553.835802][ T8000] nintendo 0003:057E:200E.0005: HID parse failed [ 1553.842531][ T8000] nintendo 0003:057E:200E.0005: probe - fail = -22 [ 1553.849575][ T8000] nintendo: probe of 0003:057E:200E.0005 failed with error -22 [ 1553.866708][T22629] block device autoloading is deprecated and will be removed. [ 1554.028195][T22632] loop0: detected capacity change from 0 to 512 [ 1554.048975][T22632] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1554.055934][T22632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1554.182133][T22632] EXT4-fs (loop0): 1 truncate cleaned up [ 1554.221447][T22632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1555.035369][ T8000] usb 5-1: USB disconnect, device number 8 [ 1555.046078][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1555.073908][T22637] FAULT_INJECTION: forcing a failure. [ 1555.073908][T22637] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.086901][T22637] CPU: 1 PID: 22637 Comm: syz.2.5008 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1555.096822][T22637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1555.106920][T22637] Call Trace: [ 1555.110224][T22637] [ 1555.113176][T22637] __dump_stack+0x21/0x24 [ 1555.117535][T22637] dump_stack_lvl+0xee/0x150 [ 1555.122155][T22637] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1555.127209][T22637] ? __cfi_vfs_write+0x10/0x10 [ 1555.132006][T22637] dump_stack+0x15/0x24 [ 1555.136194][T22637] should_fail_ex+0x3d4/0x520 [ 1555.140895][T22637] __should_failslab+0xac/0xf0 [ 1555.145722][T22637] ? __se_sys_memfd_create+0xf2/0x3b0 [ 1555.151124][T22637] should_failslab+0x9/0x20 [ 1555.155653][T22637] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1555.161045][T22637] ? ksys_write+0x1eb/0x240 [ 1555.165571][T22637] ? __se_sys_memfd_create+0xf2/0x3b0 [ 1555.170971][T22637] __kmalloc+0xa1/0x1e0 [ 1555.175155][T22637] ? strnlen_user+0x10d/0x190 [ 1555.179858][T22637] __se_sys_memfd_create+0xf2/0x3b0 [ 1555.185095][T22637] __x64_sys_memfd_create+0x5b/0x70 [ 1555.190324][T22637] x64_sys_call+0x235/0x9a0 [ 1555.194854][T22637] do_syscall_64+0x4c/0xa0 [ 1555.199297][T22637] ? clear_bhb_loop+0x15/0x70 [ 1555.203995][T22637] ? clear_bhb_loop+0x15/0x70 [ 1555.208700][T22637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1555.214633][T22637] RIP: 0033:0x7f5ac578e929 [ 1555.219068][T22637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.238696][T22637] RSP: 002b:00007f5ac6578e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1555.247138][T22637] RAX: ffffffffffffffda RBX: 0000000000005514 RCX: 00007f5ac578e929 [ 1555.255134][T22637] RDX: 00007f5ac6578ef0 RSI: 0000000000000000 RDI: 00007f5ac58114cc [ 1555.263129][T22637] RBP: 000020000000b2c0 R08: 00007f5ac6578bb7 R09: 00007f5ac6578e40 [ 1555.271122][T22637] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 1555.279118][T22637] R13: 00007f5ac6578ef0 R14: 00007f5ac6578eb0 R15: 00002000000004c0 [ 1555.287120][T22637] [ 1555.379253][T22635] loop5: detected capacity change from 0 to 40427 [ 1555.398982][T22635] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1555.932620][T22645] syz.1.5009[22645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1555.932710][T22645] syz.1.5009[22645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1555.945874][T22645] loop1: detected capacity change from 0 to 128 [ 1556.052759][T22635] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1556.916894][T22655] syz.5.5006: attempt to access beyond end of device [ 1556.916894][T22655] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1557.274272][T22656] loop2: detected capacity change from 0 to 1024 [ 1557.283644][ T322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1557.317236][T22656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1557.329985][T22656] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1557.347482][T22660] loop1: detected capacity change from 0 to 128 [ 1557.504997][ T8814] syz-executor: attempt to access beyond end of device [ 1557.504997][ T8814] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1557.527137][T22656] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1557.538722][T22660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1557.547730][T22660] ext4 filesystem being mounted at /385/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1557.556448][T22656] EXT4-fs error (device loop2): ext4_get_journal_inode:5710: comm syz.2.5010: inode #1: comm syz.2.5010: iget: illegal inode # [ 1557.589211][T22656] EXT4-fs (loop2): no journal found [ 1557.639261][T22667] loop4: detected capacity change from 0 to 1024 [ 1557.646615][T22667] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 1557.657528][T22667] EXT4-fs (loop4): invalid journal inode [ 1557.663303][T22667] EXT4-fs (loop4): can't get journal size [ 1557.727926][T22667] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.5014: blocks 48-48 from inode overlap system zone [ 1557.762605][T22667] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1557.776563][T22667] EXT4-fs (loop4): mount failed [ 1557.808190][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1557.832307][T22673] loop5: detected capacity change from 0 to 16 [ 1557.842001][T22673] erofs: (device loop5): mounted with root inode @ nid 36. [ 1557.852846][T22675] loop0: detected capacity change from 0 to 128 [ 1557.985202][T22674] loop1: detected capacity change from 0 to 40427 [ 1558.702432][T22675] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1558.702489][T22674] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1558.844398][T22675] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1558.924666][T22674] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1559.024445][T12647] EXT4-fs (loop0): unmounting filesystem. [ 1559.088209][T22693] loop4: detected capacity change from 0 to 128 [ 1559.269223][T22699] syz.1.5015: attempt to access beyond end of device [ 1559.269223][T22699] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1559.662081][ T1908] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1559.671909][ T28] audit: type=1400 audit(1749696199.827:290): avc: denied { read } for pid=22671 comm="syz.1.5015" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1559.695363][T22704] loop4: detected capacity change from 0 to 128 [ 1559.697389][ T1908] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1559.710901][ T1908] Buffer I/O error on dev loop4, logical block 0, async page read [ 1559.722405][T13204] syz-executor: attempt to access beyond end of device [ 1559.722405][T13204] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1559.741336][T22704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1559.750589][T22704] ext4 filesystem being mounted at /417/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1559.772789][T22708] overlayfs: failed to resolve './file1': -2 [ 1559.965882][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1560.157729][T22715] loop5: detected capacity change from 0 to 512 [ 1560.196005][ T28] audit: type=1326 audit(1749696200.667:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22712 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a218e929 code=0x7ffc0000 [ 1560.247881][ T28] audit: type=1326 audit(1749696200.667:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22712 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a218e929 code=0x7ffc0000 [ 1560.259516][T22715] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1560.272014][ T28] audit: type=1326 audit(1749696200.667:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22712 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3a218e929 code=0x7ffc0000 [ 1560.299732][T22715] System zones: 0-2, 18-18, 34-35 [ 1560.316917][ T28] audit: type=1326 audit(1749696200.667:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22712 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a218e929 code=0x7ffc0000 [ 1560.340702][ T28] audit: type=1326 audit(1749696200.667:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22712 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a218e929 code=0x7ffc0000 [ 1560.341447][T22715] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1560.375713][ T28] audit: type=1326 audit(1749696200.697:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22712 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3a218e929 code=0x7ffc0000 [ 1560.459800][ T28] audit: type=1400 audit(1749696200.697:297): avc: denied { ioctl } for pid=22712 comm="syz.4.5021" path="socket:[77821]" dev="sockfs" ino=77821 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1560.476547][T22715] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1560.515825][ T28] audit: type=1326 audit(1749696200.707:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22712 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a218e929 code=0x7ffc0000 [ 1560.608530][ T28] audit: type=1326 audit(1749696200.707:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22712 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3a218e929 code=0x7ffc0000 [ 1560.983619][T22738] loop2: detected capacity change from 0 to 256 [ 1560.999318][T22738] exfat: Unknown parameter '’’’’’’’’’’’’’’’’’’0xffffffffffffffff’’’’' [ 1561.009197][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1561.089122][T22740] loop5: detected capacity change from 0 to 1024 [ 1561.107014][T22742] loop4: detected capacity change from 0 to 1024 [ 1561.124059][T22740] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1561.140501][T22740] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1561.172067][T22742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1561.181647][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1561.186541][T22742] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1561.214929][T22742] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1561.230238][T22742] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1561.242643][T22742] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1561.242643][T22742] [ 1561.245112][T22750] loop5: detected capacity change from 0 to 512 [ 1561.252333][T22742] EXT4-fs (loop4): Total free blocks count 0 [ 1561.264926][T22742] EXT4-fs (loop4): Free/Dirty block details [ 1561.271728][T22742] EXT4-fs (loop4): free_blocks=4293918720 [ 1561.284173][T22742] EXT4-fs (loop4): dirty_blocks=16 [ 1561.291588][T22750] EXT4-fs: Ignoring removed mblk_io_submit option [ 1561.296418][T22742] EXT4-fs (loop4): Block reservation details [ 1561.304479][T22750] EXT4-fs: Ignoring removed bh option [ 1561.310764][T22742] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1561.325978][T22750] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1561.337986][T22750] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1561.349112][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1561.358487][T22750] EXT4-fs (loop5): 1 truncate cleaned up [ 1561.364269][T22750] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1561.520816][T22761] loop1: detected capacity change from 0 to 128 [ 1561.537118][T22759] loop0: detected capacity change from 0 to 1024 [ 1561.545923][T22761] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1561.552207][T22759] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1561.563362][T22761] ext4 filesystem being mounted at /388/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1561.605915][T22759] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1561.612621][T22764] loop4: detected capacity change from 0 to 512 [ 1561.618513][T22759] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1561.628218][T22764] EXT4-fs: Ignoring removed mblk_io_submit option [ 1561.639687][T22764] EXT4-fs: Ignoring removed bh option [ 1561.645547][T22759] EXT4-fs error (device loop0): ext4_get_journal_inode:5710: comm syz.0.5030: inode #1: comm syz.0.5030: iget: illegal inode # [ 1561.645578][T22764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1561.670502][T22759] EXT4-fs (loop0): no journal found [ 1561.671222][T22764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1561.681840][ T8814] EXT4-fs (loop5): unmounting filesystem. [ 1561.687576][T22764] EXT4-fs (loop4): 1 truncate cleaned up [ 1561.701746][T22764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1561.860043][T22769] loop2: detected capacity change from 0 to 512 [ 1562.188432][T22774] overlayfs: failed to resolve './file1': -2 [ 1562.275874][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1562.440651][T22769] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1562.456648][T22769] System zones: 0-2, 18-18, 34-35 [ 1562.464696][T22769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1562.483624][T22769] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1562.488677][T22778] loop1: detected capacity change from 0 to 512 [ 1562.576992][T22780] loop0: detected capacity change from 0 to 512 [ 1562.593601][T22778] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1562.601784][T22778] System zones: 0-2, 18-18, 34-35 [ 1562.607754][T22778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1562.616761][T22778] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1562.732179][T22784] ------------[ cut here ]------------ [ 1562.737861][T22784] kernel BUG at fs/buffer.c:2714! [ 1562.752732][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1562.791270][T22784] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1562.797400][T22784] CPU: 1 PID: 22784 Comm: kmmpd-loop0 Not tainted 6.1.138-syzkaller-00005-g5b2e204a7b75 #0 [ 1562.807404][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1562.817482][T22784] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 1562.822968][T22784] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 18 3c e8 ff e9 b0 fe ff ff e8 2e e5 a3 ff 0f 0b e8 27 e5 a3 ff <0f> 0b e8 20 e5 a3 ff 0f 0b e8 19 e5 a3 ff 0f 0b e8 12 e5 a3 ff 0f [ 1562.842595][T22784] RSP: 0018:ffffc90001bafca0 EFLAGS: 00010293 [ 1562.848698][T22784] RAX: ffffffff81cc0be9 RBX: 0000000000000000 RCX: ffff88811ad71440 [ 1562.856699][T22784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1562.864695][T22784] RBP: ffffc90001bafcf0 R08: dffffc0000000000 R09: ffffed10230e02d3 [ 1562.872697][T22784] R10: ffffed10230e02d3 R11: 1ffff110230e02d2 R12: 0000000000000000 [ 1562.880701][T22784] R13: 1ffff110230e02d2 R14: ffff888118701690 R15: 0000000000003801 [ 1562.888704][T22784] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1562.897655][T22784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1562.904269][T22784] CR2: 00007fdcbc81ff98 CR3: 00000001104e2000 CR4: 00000000003506a0 [ 1562.912271][T22784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1562.920259][T22784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1562.928259][T22784] Call Trace: [ 1562.931552][T22784] [ 1562.934509][T22784] submit_bh+0x1f/0x30 [ 1562.938606][T22784] write_mmp_block_thawed+0x34a/0x4c0 [ 1562.944092][T22784] ? read_mmp_block+0x6d0/0x6d0 [ 1562.948980][T22784] ? finish_task_switch+0x16b/0x7b0 [ 1562.954207][T22784] ? __switch_to_asm+0x3a/0x60 [ 1562.959003][T22784] write_mmp_block+0x138/0x2b0 [ 1562.963792][T22784] kmmpd+0x3ce/0x950 [ 1562.967720][T22784] kthread+0x281/0x320 [ 1562.971817][T22784] ? __cfi_kmmpd+0x10/0x10 [ 1562.976259][T22784] ? __cfi_kthread+0x10/0x10 [ 1562.980877][T22784] ret_from_fork+0x1f/0x30 [ 1562.985322][T22784] [ 1562.988361][T22784] Modules linked in: [ 1563.066675][T22784] ---[ end trace 0000000000000000 ]--- [ 1563.081729][T22784] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 1563.098818][T22784] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 18 3c e8 ff e9 b0 fe ff ff e8 2e e5 a3 ff 0f 0b e8 27 e5 a3 ff <0f> 0b e8 20 e5 a3 ff 0f 0b e8 19 e5 a3 ff 0f 0b e8 12 e5 a3 ff 0f [ 1563.178926][T22808] syz.4.5037[22808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1563.179554][T22808] syz.4.5037[22808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1563.208871][T22808] loop4: detected capacity change from 0 to 128 [ 1563.333618][T22809] loop4: detected capacity change from 0 to 128 [ 1563.371948][T13204] EXT4-fs (loop1): unmounting filesystem. [ 1563.429792][T22809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1563.439990][T22809] ext4 filesystem being mounted at /422/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1563.724786][T22784] RSP: 0018:ffffc90001bafca0 EFLAGS: 00010293 [ 1563.947126][T22784] RAX: ffffffff81cc0be9 RBX: 0000000000000000 RCX: ffff88811ad71440 [ 1563.991100][T22784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1564.001307][T13391] EXT4-fs (loop2): unmounting filesystem. [ 1564.036505][T22784] RBP: ffffc90001bafcf0 R08: dffffc0000000000 R09: ffffed10230e02d3 [ 1564.068581][T22784] R10: ffffed10230e02d3 R11: 1ffff110230e02d2 R12: 0000000000000000 [ 1564.096113][T22784] R13: 1ffff110230e02d2 R14: ffff888118701690 R15: 0000000000003801 [ 1564.123470][T22784] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1564.142964][T22784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1564.149846][T22784] CR2: 00007fe86d5d7000 CR3: 0000000121640000 CR4: 00000000003506a0 [ 1564.157980][T22784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1564.158761][T13109] EXT4-fs (loop4): unmounting filesystem. [ 1564.165972][T22784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1564.165991][T22784] Kernel panic - not syncing: Fatal exception [ 1564.172002][T22784] Kernel Offset: disabled [ 1564.190371][T22784] Rebooting in 86400 seconds..