last executing test programs: 7m1.876260919s ago: executing program 2 (id=85): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7m1.222076372s ago: executing program 2 (id=89): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x100001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 6m59.510491702s ago: executing program 2 (id=92): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x10100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840100001a"], 0x184}}, 0x0) 6m58.410947833s ago: executing program 2 (id=95): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@umask={'umask', 0x3d, 0x9}}, {@namecase}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5275}}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8011, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x808c20, &(0x7f0000000a40)=ANY=[], 0x1, 0x0, 0x0) 6m56.680459313s ago: executing program 2 (id=102): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m55.473711297s ago: executing program 2 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000001800)={0x1, 0x0, [{0xb3f, 0x3, 0x0, 0x0, @adapter={0x16f5cb90, 0x0, 0x0, 0x7, 0x7798}}]}) 6m51.407229656s ago: executing program 32 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000001800)={0x1, 0x0, [{0xb3f, 0x3, 0x0, 0x0, @adapter={0x16f5cb90, 0x0, 0x0, 0x7, 0x7798}}]}) 5m1.942576615s ago: executing program 4 (id=300): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)) 5m0.213723868s ago: executing program 4 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}}, 0x0) 4m59.459418618s ago: executing program 4 (id=304): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 4m58.136984321s ago: executing program 4 (id=309): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m53.776892217s ago: executing program 4 (id=313): openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47ba, 0x636d, 0x0, 0x0, 0x0) 4m53.058757438s ago: executing program 4 (id=317): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000140)={[{@bsdgroups}, {@noquota}, {@grpjquota}, {@grpjquota}, {@oldalloc}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'grpjquota='}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'oldalloc'}}, {@dont_hash}, {@seclabel}, {@flag='mand'}, {@audit}]}, 0x2, 0x504, &(0x7f0000000c00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000400)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 4m36.520502918s ago: executing program 33 (id=317): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000140)={[{@bsdgroups}, {@noquota}, {@grpjquota}, {@grpjquota}, {@oldalloc}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'grpjquota='}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'oldalloc'}}, {@dont_hash}, {@seclabel}, {@flag='mand'}, {@audit}]}, 0x2, 0x504, &(0x7f0000000c00)="$eJzs3c9vI1cdAPDvOPZusklxChxKJcoKirIVrJ00tI04lCAhOFWilAunEBIniuLEUey0m6hCqfgDkBC/BCdOXJA4IyTUPwEhVYI7QghUwbZIcACMZjzWLqnjONo4zsafj/Qyb2bezPe99c6zn9/IE8DYuh0RyxExERHPRUQ5317IUxx3UlruvftvrqUpifbN1/6WRJJv654r6SymssMmIiYj4mtfifhW8sG4zcOj7dV6vbafr1dbO3vV5uHR3a2d1c3aZm13eXHhxaWXll5Ymr+wtr78pT//8Ls///LLv/nsG39c+eudb6fVmsn3PdyOQRwPWK7T9FL2b9FVjIj98wS7wiby9pRGXREAAAaSfsb/cER8MiLe/8moawMAAAAMQ/sLM/HvJKINAAAAXFuF7B7YpFDJ7wWYiUKhUomYjoiPxq1CvdFsfWajcbC73rlXdjZKhY2tem0+v1d4NkpJur6Q5R+sP39ifTEinoyI75ensvXKWqO+PuovPwAAAGBMTJ8Y//+j3Bn/AwAAANfM7KgrAAAAAAyd8T8AAABcf6eO/5Pi5VYEAAAAGIavvvJKmtrd51+vv354sN14/e56rbld2TlYq6w19vcqm43GZvabff9st9t9z1dvNPY+F7sH96qtWrNVbR4erew0DnZbK9lzvVdq7fJltQwAAADoevITb/8hiYjjz09lKXUj31c6+/Dl4dYOGKbC+Yonw6oHcPkmRl0BYGTc4Avja4AxPnDNnTGw/8GJ9XN+bQAAAFwFcx97pPl/84HwGDOQh/Fl/h/Gl/l/GF/m/2HM3Ty7yORpO357wXUBAACGZiZLSaGSzwXORKFQqUQ8kT0WoJRsbNVr8xHxoYj4fbl0M11fGHWlAQAAAAAAAAAAAAAAAAAAAAAAAOAx024n0R7c9HkKAwAAAFdDROEvSf4g/7nyszMnvx+4kfyrnC0j4o2fvvaje6ut1v5Cuv3v5Sh2trd+nG9/vlsy9Y3sr+eLAgAAwOXrjtO743gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuEjv3X9zrZsuM+67X4yI2V7xizGZLSd/VY6IW+8nUXzouCQiJi4g/vFbEfFUr/hJWq2YzWtxMn4hIqZGHH/6AuLDOHs77X+W0+uvdOL6K8TtbNn7+ivm6VG9e/u0/q/Q7f+yfq5X//dE/1NPdjNPv/PL6qnx34p4uti7/+nGT3rFvzF4G7/59aOj0/a1fxYxd8b7Txq/2trZqzYPj+5u7axu1jZru4uLCy8uvbT0wtJ8dWOrXsv/9ozxvY//+r/92n+rZ/xO/3tq+yPi2QHb/5937t3/SJ/4dz7V+/V/qk/89P/Ep/P3gXT/XDd/3Mk/7Jlf/O6Zfu1fP6X9fV//iLgzYPufe/U7fxqwKABwCZqHR9ur9XptfyiZqYs4T/pRZ2g1fLwzjd3BCx9HxFWos8ylZl7NL/RsS7GbGeDwEXdMAADAhXvwof/knnNM8AAAAAAAAAAAAAAAAAAAAACPZOg/Qnbz/39ZYHJ0TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Ot/AQAA//+tuM+6") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000400)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 4m32.335576437s ago: executing program 1 (id=346): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd69394a090000320100000000100000000000ffff64010102ff020000000000000000000000000001"], 0x0) 4m31.09803357s ago: executing program 1 (id=349): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x47ba, 0x636d, 0x0, 0x0, 0x0) 4m29.917531151s ago: executing program 1 (id=350): bpf$PROG_LOAD(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000001200)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 4m28.451179606s ago: executing program 1 (id=353): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1824009, 0x0, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 4m27.789192742s ago: executing program 1 (id=354): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0xe) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) 4m24.562671079s ago: executing program 1 (id=355): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 4m6.960623679s ago: executing program 34 (id=355): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 3m15.923813405s ago: executing program 6 (id=450): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x40) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x42}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 3m15.27192065s ago: executing program 3 (id=452): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x28, 0x1, 0x53, 0xfffff014}]}, 0x10) 3m14.887163582s ago: executing program 6 (id=456): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 3m14.640579006s ago: executing program 3 (id=457): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000140)={[{@bsdgroups}, {@noquota}, {@grpjquota}, {@grpjquota}, {@oldalloc}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'grpjquota='}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'oldalloc'}}, {@dont_hash}, {@seclabel}, {@flag='mand'}, {@audit}]}, 0x2, 0x504, &(0x7f0000000c00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000400)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 3m13.943688461s ago: executing program 6 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) close(0x4) 3m12.943867987s ago: executing program 6 (id=461): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='io_uring_poll_arm\x00', r0, 0x0, 0x33f6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fallocate(r0, 0x0, 0xfea000, 0x2000402) pwritev2(r0, &(0x7f00000013c0), 0x0, 0xa, 0xb, 0x0) 3m9.939910367s ago: executing program 3 (id=465): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001e0005"], 0x18}}, 0x0) 3m9.359327117s ago: executing program 3 (id=468): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_cmd={0x49, 0x1, 0x8, 0x82e8, 0xfe, 0x2, 0xf8, 0x9, 0x5, 0x4, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0x8f2]}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r1, 0x6ce, 0x2f9, 0x7}) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/160) 3m8.686518145s ago: executing program 3 (id=471): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setitimer(0x0, 0x0, 0x0) 3m8.276014498s ago: executing program 6 (id=472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @mss={0x2, 0x443c}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x8) sendto$inet(r0, &(0x7f0000000280)="a6", 0x1, 0x24000041, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3m7.324892452s ago: executing program 3 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create(0x8) close_range(r3, r4, 0x0) 3m5.655179235s ago: executing program 6 (id=478): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) 2m51.441824498s ago: executing program 35 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create(0x8) close_range(r3, r4, 0x0) 2m48.672333998s ago: executing program 36 (id=478): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) 14.331218991s ago: executing program 5 (id=817): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000380)={[{@noload}, {@data_err_abort}, {@noinit_itable}, {@dioread_lock}, {@errors_remount}, {@minixdf}, {@data_err_ignore}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@delalloc}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") r1 = open(&(0x7f0000000080)='./file2\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) sendfile(r1, r1, 0x0, 0x800000009) 13.304924942s ago: executing program 7 (id=818): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r3, 0x0, 0x9, 0x10001) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0x863, 0x863, 0x0) 12.348643766s ago: executing program 8 (id=819): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 11.171851778s ago: executing program 7 (id=822): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r0}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x643, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r3, 0x2, 0x3, 0x5}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r4 = socket(0x1e, 0x4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 11.077020933s ago: executing program 9 (id=823): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0xc000, 0x5, 0xffffff4a, 0x7, 0x5, "1ac2bd79f0d4052f3fc29f8358bdad42e89700", 0x8, 0x80000000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 8.916267022s ago: executing program 5 (id=825): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) nanosleep(0x0, 0x0) 8.618745872s ago: executing program 0 (id=826): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_nanosleep(0xfffffffffffffffd, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.162941127s ago: executing program 9 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000011c0)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x6005}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x68, 0x0, 0x9, 0x88, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x3, 0x0}}}}}}}, 0x2e) 7.932178514s ago: executing program 8 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, 0x0) 7.829519434s ago: executing program 7 (id=829): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x5) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x49) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) 7.45451131s ago: executing program 9 (id=830): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.37173331s ago: executing program 0 (id=831): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000001480)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.size\x00', 0x0, 0x0) 7.066705755s ago: executing program 0 (id=832): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@fat=@debug}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_mixed}, {@utf8no}]}, 0x23, 0x34c, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc4}}) 6.85485959s ago: executing program 8 (id=833): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) dup(r11) sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)=ANY=[@ANYBLOB="54020000150001000000000000001000ff0200"/31, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001f00000000000a0010000000000000000000dc0008", @ANYRES16=r1, @ANYRESDEC=r3, @ANYBLOB="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", @ANYRESOCT=r11, @ANYRESOCT=r3], 0x254}}, 0x0) sendmsg$key(r9, 0x0, 0x2008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa000000000000791010000000000095000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r2, 0x0, 0x20048054) 6.290195295s ago: executing program 7 (id=834): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8900, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0xa080) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x10109000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x6, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009041000000e0156d872923f"], 0x0) 6.269276951s ago: executing program 5 (id=835): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="620ac4ff0000000271101e00000000009500000000000000061a59e5086d813a63ba8a6a0b1a75cfba3223e003f19c0a31af538487ff45e07820802a2ba0a82732885a6f82e6f0aefb1bdff5c31d4333cd22cc3c20ed9a233e3ab1e2f8b5b34c195d45c347e6c02c244fd153ff482c"], &(0x7f0000000480)='GPL\x00'}, 0x94) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 5.743616608s ago: executing program 0 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) 4.471426283s ago: executing program 9 (id=837): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x3, 0x34e, &(0x7f0000000900)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x20c00, 0x0) 3.095442974s ago: executing program 8 (id=838): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "6035ae734de721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x38}, 0x48, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 2.944082166s ago: executing program 0 (id=839): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000380), &(0x7f0000000580)=r6}, 0x20) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 2.614162003s ago: executing program 8 (id=840): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00'], 0x1, 0x26c, &(0x7f0000000340)="$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") ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.562305785s ago: executing program 7 (id=841): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) read$FUSE(r2, 0x0, 0x0) 2.376273778s ago: executing program 5 (id=842): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0xb4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 2.296608155s ago: executing program 0 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) 2.12777801s ago: executing program 9 (id=844): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x5) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x49) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) 1.711762547s ago: executing program 5 (id=845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 906.301878ms ago: executing program 7 (id=846): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@fat=@debug}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_mixed}, {@utf8no}]}, 0x23, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc4}}) 664.688129ms ago: executing program 9 (id=847): r0 = socket$inet6(0xa, 0x80002, 0x0) timer_create(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x220000c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200000, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}, {@dfltuid}, {@access_user}], [{@context={'context', 0x3d, 'user_u'}}]}}) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 605.074154ms ago: executing program 5 (id=848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x15, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100568186ddaf3856", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 8 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) kernel console output (not intermixed with test programs): HW filter on device bond0 [ 444.339238][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 444.468366][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.479309][ T2213] usb 6-1: config 0 descriptor?? [ 444.652862][ T3670] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.660364][ T3670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.686421][ T3670] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.694079][ T3670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.124622][ T2213] usbhid 6-1:0.0: can't add hid device: -71 [ 445.131201][ T2213] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 445.197023][ T2213] usb 6-1: USB disconnect, device number 3 [ 446.397395][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.050572][ T7388] loop3: detected capacity change from 0 to 1024 [ 447.285525][ T7388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 447.304139][ T7388] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.525904][ T7388] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.406: lblock 0 mapped to illegal pblock 0 (length 6) [ 447.551898][ T7388] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 447.565495][ T7388] EXT4-fs (loop3): This should not happen!! Data will be lost [ 447.565495][ T7388] [ 447.779504][ T3450] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 447.852625][ T3450] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 447.865395][ T3450] EXT4-fs (loop3): This should not happen!! Data will be lost [ 447.865395][ T3450] [ 447.972126][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 449.618710][ T7287] veth0_vlan: entered promiscuous mode [ 449.781474][ T7287] veth1_vlan: entered promiscuous mode [ 450.096576][ T7287] veth0_macvtap: entered promiscuous mode [ 450.139499][ T7287] veth1_macvtap: entered promiscuous mode [ 450.238316][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.291868][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.395539][ T3965] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.463552][ T3965] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.524767][ T3965] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.560811][ T3965] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.402593][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.410686][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.653844][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.661881][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.651876][ T11] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 452.938584][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.418'. [ 453.020600][ T7442] loop5: detected capacity change from 0 to 512 [ 453.118794][ T7442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.136663][ T7442] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.251130][ T11] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.260162][ T11] usb 7-1: config 0 has no interface number 0 [ 453.267496][ T11] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.279057][ T11] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.289458][ T11] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.302834][ T11] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 453.312135][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.491689][ T11] usb 7-1: config 0 descriptor?? [ 454.582196][ T7459] loop3: detected capacity change from 0 to 256 [ 454.734052][ T7459] FAT-fs (loop3): Directory bread(block 64) failed [ 454.741166][ T7459] FAT-fs (loop3): Directory bread(block 65) failed [ 454.748340][ T7459] FAT-fs (loop3): Directory bread(block 66) failed [ 454.757281][ T7459] FAT-fs (loop3): Directory bread(block 67) failed [ 454.764825][ T7459] FAT-fs (loop3): Directory bread(block 68) failed [ 454.776477][ T7459] FAT-fs (loop3): Directory bread(block 69) failed [ 454.784870][ T7459] FAT-fs (loop3): Directory bread(block 70) failed [ 454.791614][ T7459] FAT-fs (loop3): Directory bread(block 71) failed [ 454.798654][ T7459] FAT-fs (loop3): Directory bread(block 72) failed [ 454.805554][ T7459] FAT-fs (loop3): Directory bread(block 73) failed [ 455.048754][ T11] uclogic 0003:28BD:0042.0007: failed retrieving string descriptor #100: -71 [ 455.058040][ T11] uclogic 0003:28BD:0042.0007: failed retrieving pen parameters: -71 [ 455.066665][ T11] uclogic 0003:28BD:0042.0007: pen probing failed: -71 [ 455.077771][ T11] uclogic 0003:28BD:0042.0007: failed probing parameters: -71 [ 455.088215][ T11] uclogic 0003:28BD:0042.0007: probe with driver uclogic failed with error -71 [ 456.582734][ T7462] syz.3.423: attempt to access beyond end of device [ 456.582734][ T7462] loop3: rw=2051, sector=1224, nr_sectors = 64 limit=256 [ 456.612784][ T11] usb 7-1: USB disconnect, device number 2 [ 456.636071][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.129701][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.6.425'. [ 457.371117][ T7469] loop6: detected capacity change from 0 to 128 [ 457.404812][ T7469] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.419362][ T7469] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 461.375986][ T7156] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.542928][ T11] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 463.734485][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 463.786361][ T11] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.798426][ T11] usb 7-1: config 0 interface 0 has no altsetting 0 [ 463.805486][ T11] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 463.815073][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.960195][ T11] usb 7-1: config 0 descriptor?? [ 465.024053][ T11] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 465.031927][ T11] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 465.039921][ T11] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 465.047765][ T11] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 466.015784][ T11] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 466.097727][ T11] usb 7-1: USB disconnect, device number 3 [ 467.113769][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.122083][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.534645][ T7520] syzkaller0: entered promiscuous mode [ 467.540332][ T7520] syzkaller0: entered allmulticast mode [ 467.666518][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.677266][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.654877][ T7531] loop7: detected capacity change from 0 to 512 [ 468.674371][ T7531] EXT4-fs: Ignoring removed nobh option [ 469.053116][ T7531] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.375: iget: bad i_size value: 38620345925642 [ 469.135036][ T7531] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.375: couldn't read orphan inode 15 (err -117) [ 469.256763][ T7531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.373341][ T7535] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 469.714570][ T7540] Zero length message leads to an empty skb [ 469.762841][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 469.868423][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 470.065339][ T7287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.310916][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.318027][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.104241][ T7546] netlink: 68 bytes leftover after parsing attributes in process `syz.6.443'. [ 474.303274][ T7550] binfmt_misc: register: failed to install interpreter file ./file1 [ 477.699249][ T7567] syzkaller0: entered promiscuous mode [ 477.709811][ T7567] syzkaller0: entered allmulticast mode [ 478.209125][ T7577] loop3: detected capacity change from 0 to 512 [ 478.311835][ T7577] EXT4-fs: Ignoring removed oldalloc option [ 478.322008][ T7577] ext4: Unknown parameter 'rootcontext' [ 479.071324][ T7582] loop0: detected capacity change from 0 to 128 [ 479.229657][ T7582] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.388143][ T7582] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.863356][ T7588] loop6: detected capacity change from 0 to 512 [ 479.944978][ T7588] EXT4-fs: Ignoring removed bh option [ 479.950627][ T7588] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.121441][ T7588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.135038][ T7588] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 481.054823][ T7598] loop5: detected capacity change from 0 to 1024 [ 481.425453][ T7598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 481.438333][ T7598] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.836305][ T7598] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.464: lblock 0 mapped to illegal pblock 0 (length 6) [ 481.953300][ T7598] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 481.966318][ T7598] EXT4-fs (loop5): This should not happen!! Data will be lost [ 481.966318][ T7598] [ 482.562262][ T69] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 482.629234][ T69] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 482.642449][ T69] EXT4-fs (loop5): This should not happen!! Data will be lost [ 482.642449][ T69] [ 482.972581][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 483.064858][ T5801] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.042029][ T7614] syzkaller0: entered promiscuous mode [ 484.047867][ T7614] syzkaller0: entered allmulticast mode [ 484.111687][ T7156] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.226166][ T7617] loop5: detected capacity change from 0 to 512 [ 484.724972][ T30] audit: type=1326 audit(1764380464.109:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f4d8f749 code=0x7ffc0000 [ 484.747838][ T30] audit: type=1326 audit(1764380464.109:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f4d8f749 code=0x7ffc0000 [ 484.775441][ T30] audit: type=1326 audit(1764380464.139:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fb6f4d8f749 code=0x7ffc0000 [ 484.799452][ T30] audit: type=1326 audit(1764380464.149:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f4d8f749 code=0x7ffc0000 [ 484.822013][ T30] audit: type=1326 audit(1764380464.149:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f4d8f749 code=0x7ffc0000 [ 486.784610][ T7630] loop5: detected capacity change from 0 to 512 [ 486.797146][ T7630] EXT4-fs: Ignoring removed oldalloc option [ 486.804351][ T7630] ext4: Unknown parameter 'rootcontext' [ 490.440937][ T7643] loop0: detected capacity change from 0 to 512 [ 490.541030][ T7643] EXT4-fs (loop0): orphan cleanup on readonly fs [ 490.599315][ T7643] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.479: bg 0: block 393: padding at end of block bitmap is not set [ 490.661425][ T7643] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 490.722188][ T7643] EXT4-fs (loop0): 2 truncates cleaned up [ 490.730327][ T7643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.046335][ T7653] loop5: detected capacity change from 0 to 512 [ 491.104864][ T7653] EXT4-fs: Ignoring removed bh option [ 491.105058][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.110458][ T7653] EXT4-fs: Ignoring removed mblk_io_submit option [ 491.276368][ T7653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.289669][ T7653] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 492.336508][ T30] audit: type=1326 audit(1764380471.969:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 492.575491][ T30] audit: type=1326 audit(1764380472.059:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 492.598174][ T30] audit: type=1326 audit(1764380472.059:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 493.402703][ T7668] syzkaller0: entered promiscuous mode [ 493.408386][ T7668] syzkaller0: entered allmulticast mode [ 494.375135][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.110338][ T30] audit: type=1326 audit(1764380474.709:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.7.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 495.136981][ T30] audit: type=1326 audit(1764380474.719:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.7.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 495.160778][ T30] audit: type=1326 audit(1764380474.719:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.7.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 495.183535][ T30] audit: type=1326 audit(1764380474.719:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.7.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 495.206244][ T30] audit: type=1326 audit(1764380474.719:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.7.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 495.231939][ T30] audit: type=1326 audit(1764380474.759:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.7.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 495.258256][ T30] audit: type=1326 audit(1764380474.759:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.7.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ddd8f749 code=0x7ffc0000 [ 496.218904][ T7683] loop5: detected capacity change from 0 to 1024 [ 496.265946][ T7683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 496.499872][ T7685] loop7: detected capacity change from 0 to 512 [ 496.520208][ T7683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.625169][ T7685] EXT4-fs (loop7): orphan cleanup on readonly fs [ 496.659569][ T7685] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.494: bg 0: block 393: padding at end of block bitmap is not set [ 496.745372][ T7685] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 496.832192][ T7685] EXT4-fs (loop7): 2 truncates cleaned up [ 496.840738][ T7685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.293756][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.419821][ T7287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.400025][ T7703] loop7: detected capacity change from 0 to 512 [ 501.486714][ T7703] EXT4-fs: Ignoring removed bh option [ 501.492346][ T7703] EXT4-fs: Ignoring removed mblk_io_submit option [ 501.751780][ T7703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.765480][ T7703] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 503.953671][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 503.964292][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.004015][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.034935][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.051462][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.474739][ T7287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.152813][ T7722] loop7: detected capacity change from 0 to 512 [ 506.153613][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 506.203314][ T5802] Bluetooth: hci1: command tx timeout [ 506.209488][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 506.220057][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 506.242184][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 506.268750][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 506.287291][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 506.368001][ T7722] EXT4-fs (loop7): orphan cleanup on readonly fs [ 506.429343][ T7722] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.506: bg 0: block 393: padding at end of block bitmap is not set [ 506.495032][ T7722] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 506.534210][ T7722] EXT4-fs (loop7): 2 truncates cleaned up [ 506.542263][ T7722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 507.124923][ T7287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.989131][ T147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.326212][ T5802] Bluetooth: hci1: command tx timeout [ 508.402794][ T5802] Bluetooth: hci6: command tx timeout [ 508.761347][ T147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.228393][ T7750] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 509.326993][ T147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.533958][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.541692][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.549982][ T7710] bridge_slave_0: entered allmulticast mode [ 509.565105][ T7710] bridge_slave_0: entered promiscuous mode [ 509.763195][ T147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.920333][ T7724] chnl_net:caif_netlink_parms(): no params data found [ 509.957586][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.970547][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.978603][ T7710] bridge_slave_1: entered allmulticast mode [ 509.988424][ T7710] bridge_slave_1: entered promiscuous mode [ 510.363197][ T5802] Bluetooth: hci1: command tx timeout [ 510.432817][ T5802] Bluetooth: hci6: command tx timeout [ 510.560161][ T7752] loop0: detected capacity change from 0 to 512 [ 510.644308][ T7752] EXT4-fs: Ignoring removed bh option [ 510.649945][ T7752] EXT4-fs: Ignoring removed mblk_io_submit option [ 510.792152][ T7752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.805713][ T7752] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 511.078723][ T147] bridge_slave_1: left allmulticast mode [ 511.085797][ T147] bridge_slave_1: left promiscuous mode [ 511.097355][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.325493][ T147] bridge_slave_0: left allmulticast mode [ 511.331351][ T147] bridge_slave_0: left promiscuous mode [ 511.338084][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.071274][ T5802] Bluetooth: hci1: command tx timeout [ 513.077623][ T5819] Bluetooth: hci6: command tx timeout [ 514.882193][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.152743][ T5802] Bluetooth: hci6: command tx timeout [ 515.484378][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.585855][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.648190][ T147] bond0 (unregistering): Released all slaves [ 515.962960][ T7767] loop7: detected capacity change from 0 to 512 [ 516.044094][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.124564][ T7767] EXT4-fs (loop7): orphan cleanup on readonly fs [ 516.183730][ T7767] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.518: bg 0: block 393: padding at end of block bitmap is not set [ 516.231024][ T7767] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 516.325560][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.331371][ T7767] EXT4-fs (loop7): 2 truncates cleaned up [ 516.344387][ T7767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 516.677283][ T7287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.717549][ T7710] team0: Port device team_slave_0 added [ 516.814155][ T147] hsr_slave_0: left promiscuous mode [ 516.843085][ T147] hsr_slave_1: left promiscuous mode [ 516.851032][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.860342][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.884228][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.891909][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.949430][ T147] veth1_macvtap: left promiscuous mode [ 516.955527][ T147] veth0_macvtap: left promiscuous mode [ 516.961412][ T147] veth1_vlan: left promiscuous mode [ 516.968744][ T147] veth0_vlan: left promiscuous mode [ 517.446148][ T7782] loop5: detected capacity change from 0 to 16 [ 517.494038][ T7782] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 517.579527][ T7784] loop7: detected capacity change from 0 to 512 [ 517.614634][ T7784] EXT4-fs: Ignoring removed bh option [ 517.620416][ T7784] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.661441][ T147] team0 (unregistering): Port device team_slave_1 removed [ 517.814298][ T7784] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.827350][ T7784] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 517.860593][ T147] team0 (unregistering): Port device team_slave_0 removed [ 518.176241][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 518.176320][ T30] audit: type=1326 audit(1764380497.799:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 518.206714][ T30] audit: type=1326 audit(1764380497.799:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 518.220660][ T7710] team0: Port device team_slave_1 added [ 518.229850][ T30] audit: type=1326 audit(1764380497.799:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 518.260757][ T30] audit: type=1326 audit(1764380497.799:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 518.284615][ T30] audit: type=1326 audit(1764380497.809:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 518.982524][ T30] audit: type=1326 audit(1764380497.969:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 519.005287][ T30] audit: type=1326 audit(1764380497.969:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 519.027933][ T30] audit: type=1326 audit(1764380497.969:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 519.050861][ T30] audit: type=1326 audit(1764380497.969:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 519.077376][ T30] audit: type=1326 audit(1764380497.969:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 519.168457][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.181206][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.189286][ T7724] bridge_slave_0: entered allmulticast mode [ 519.198797][ T7724] bridge_slave_0: entered promiscuous mode [ 519.226487][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.235701][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.262510][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.386234][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.393985][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.401704][ T7724] bridge_slave_1: entered allmulticast mode [ 519.411656][ T7724] bridge_slave_1: entered promiscuous mode [ 520.377167][ T69] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.480635][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.483900][ T7802] loop0: detected capacity change from 0 to 512 [ 520.487844][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.524435][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.549488][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.636380][ T69] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.691095][ T7802] EXT4-fs (loop0): orphan cleanup on readonly fs [ 520.722049][ T7802] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.528: bg 0: block 393: padding at end of block bitmap is not set [ 520.774721][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.807862][ T7802] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 520.877791][ T7802] EXT4-fs (loop0): 2 truncates cleaned up [ 520.886741][ T7802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 520.924872][ T69] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.198313][ T69] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.452138][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.499565][ T7724] team0: Port device team_slave_0 added [ 521.566820][ T7287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.613192][ T7724] team0: Port device team_slave_1 added [ 524.666720][ T69] bridge_slave_1: left allmulticast mode [ 524.673261][ T69] bridge_slave_1: left promiscuous mode [ 524.679808][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.250850][ T7809] loop7: detected capacity change from 0 to 1024 [ 525.279273][ T7809] ext4: Unknown parameter 'noacl' [ 525.533915][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 525.699838][ T69] bridge_slave_0: left allmulticast mode [ 525.705836][ T69] bridge_slave_0: left promiscuous mode [ 525.712561][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.741809][ T11] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 525.751805][ T11] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 525.763169][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 525.772346][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.875187][ T11] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 525.884749][ T11] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 525.893238][ T11] usb 1-1: Product: syz [ 525.897569][ T11] usb 1-1: Manufacturer: syz [ 525.953630][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 525.959149][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 525.964831][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 525.970262][ T11] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 526.205110][ T11] usb 1-1: USB disconnect, device number 4 [ 526.546148][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.647070][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.672048][ T69] bond0 (unregistering): Released all slaves [ 526.741784][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.749210][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.779437][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.933308][ T11] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 527.014606][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.021872][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.048254][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.204548][ T11] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.213522][ T11] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 527.224335][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 527.233783][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.441336][ T7710] hsr_slave_0: entered promiscuous mode [ 527.451732][ T7710] hsr_slave_1: entered promiscuous mode [ 527.460846][ T7710] debugfs: 'hsr0' already exists in 'hsr' [ 527.467020][ T7710] Cannot create hsr debugfs directory [ 527.549985][ T11] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.559715][ T11] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 527.568174][ T11] usb 1-1: Product: syz [ 527.575015][ T11] usb 1-1: Manufacturer: syz [ 527.716739][ T7820] loop7: detected capacity change from 0 to 16 [ 527.734707][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 527.740128][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 527.745905][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 527.751321][ T11] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 527.790698][ T7820] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 527.807700][ T7820] overlayfs: missing 'lowerdir' [ 528.177072][ T7724] hsr_slave_0: entered promiscuous mode [ 528.192097][ T7724] hsr_slave_1: entered promiscuous mode [ 528.201343][ T7724] debugfs: 'hsr0' already exists in 'hsr' [ 528.207449][ T7724] Cannot create hsr debugfs directory [ 528.271640][ T69] hsr_slave_0: left promiscuous mode [ 528.282534][ T69] hsr_slave_1: left promiscuous mode [ 528.294400][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.301975][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.326231][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.334504][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.389861][ T69] veth1_macvtap: left promiscuous mode [ 528.398883][ T69] veth0_macvtap: left promiscuous mode [ 528.404980][ T69] veth1_vlan: left promiscuous mode [ 528.410533][ T69] veth0_vlan: left promiscuous mode [ 528.829395][ T7829] loop5: detected capacity change from 0 to 512 [ 528.902927][ T7829] EXT4-fs (loop5): orphan cleanup on readonly fs [ 529.120343][ T69] team0 (unregistering): Port device team_slave_1 removed [ 529.128245][ T7829] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.537: bg 0: block 393: padding at end of block bitmap is not set [ 529.148845][ T7829] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 529.150987][ T69] team0 (unregistering): Port device team_slave_0 removed [ 529.164583][ T7829] EXT4-fs (loop5): 2 truncates cleaned up [ 529.234888][ T7829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 529.561678][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.605396][ T11] usb 1-1: USB disconnect, device number 5 [ 530.205580][ T7836] loop5: detected capacity change from 0 to 512 [ 530.240311][ T7836] EXT4-fs: Ignoring removed bh option [ 530.246320][ T7836] EXT4-fs: Ignoring removed mblk_io_submit option [ 530.405374][ T7836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.418602][ T7836] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 531.224971][ T7710] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 531.251412][ T7710] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 531.279082][ T7710] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 531.380756][ T7710] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 531.809019][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.815791][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.241433][ T7724] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 532.266638][ T7724] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 532.987388][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.230363][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.244132][ T7724] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 533.272705][ T7724] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 533.561427][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.569004][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.669448][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.677066][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.695224][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.227791][ T7861] loop0: detected capacity change from 0 to 16 [ 535.281389][ T7861] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 535.335334][ T7861] overlayfs: missing 'lowerdir' [ 535.398742][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.785670][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.964250][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.971778][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.196310][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.203932][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.635177][ T7867] loop0: detected capacity change from 0 to 512 [ 536.775918][ T7867] EXT4-fs (loop0): orphan cleanup on readonly fs [ 536.854054][ T7867] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.546: bg 0: block 393: padding at end of block bitmap is not set [ 536.943487][ T7867] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 536.983914][ T7867] EXT4-fs (loop0): 2 truncates cleaned up [ 536.991905][ T7867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 537.292759][ T7730] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 537.397838][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.538917][ T7730] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 537.548063][ T7730] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 537.559649][ T7730] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 537.569000][ T7730] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.648723][ T7730] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 537.659773][ T7730] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 537.668262][ T7730] usb 8-1: Product: syz [ 537.672731][ T7730] usb 8-1: Manufacturer: syz [ 537.727611][ T7730] cdc_wdm 8-1:1.0: skipping garbage [ 537.733172][ T7730] cdc_wdm 8-1:1.0: skipping garbage [ 537.738577][ T7730] cdc_wdm 8-1:1.0: skipping garbage [ 537.744280][ T7730] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 537.938530][ T7730] usb 8-1: USB disconnect, device number 2 [ 538.059621][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.593052][ T5856] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 538.652085][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.776076][ T5856] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 539.785351][ T5856] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 539.797504][ T5856] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 539.807297][ T5856] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.099191][ T5856] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 542.108715][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 542.272763][ T5856] usb 8-1: can't set config #1, error -71 [ 542.322881][ T5856] usb 8-1: USB disconnect, device number 3 [ 542.911617][ T7894] loop0: detected capacity change from 0 to 512 [ 542.968346][ T7894] EXT4-fs: Ignoring removed bh option [ 542.974930][ T7894] EXT4-fs: Ignoring removed mblk_io_submit option [ 543.189507][ T7894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.206158][ T7894] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.999468][ T7710] veth0_vlan: entered promiscuous mode [ 544.159048][ T7724] veth0_vlan: entered promiscuous mode [ 544.217245][ T7724] veth1_vlan: entered promiscuous mode [ 544.613131][ T7912] loop7: detected capacity change from 0 to 16 [ 544.648759][ T7724] veth0_macvtap: entered promiscuous mode [ 544.663304][ T7912] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 544.707622][ T7912] overlayfs: missing 'lowerdir' [ 544.717913][ T7724] veth1_macvtap: entered promiscuous mode [ 544.848062][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.925713][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.166576][ T7710] veth1_vlan: entered promiscuous mode [ 545.259420][ T3625] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.402722][ T3625] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.459358][ T7918] loop5: detected capacity change from 0 to 512 [ 545.534835][ T3625] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.604341][ T3625] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.694738][ T7918] EXT4-fs (loop5): orphan cleanup on readonly fs [ 545.821877][ T7918] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.556: bg 0: block 393: padding at end of block bitmap is not set [ 545.889875][ T7710] veth0_macvtap: entered promiscuous mode [ 545.935682][ T7918] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 545.996267][ T7710] veth1_macvtap: entered promiscuous mode [ 546.055258][ T7918] EXT4-fs (loop5): 2 truncates cleaned up [ 546.063831][ T7918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 546.380240][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.461176][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.474481][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.508743][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.545846][ T3749] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.584132][ T3749] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.643943][ T3749] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.733335][ T3749] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.194910][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 547.377500][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 547.386583][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 547.397382][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 547.406784][ T24] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 547.420247][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 547.524533][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 547.534236][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 547.545727][ T24] usb 1-1: Product: syz [ 547.550102][ T24] usb 1-1: Manufacturer: syz [ 547.628396][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 547.634070][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 547.639617][ T24] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 547.845910][ T5869] usb 1-1: USB disconnect, device number 6 [ 548.545525][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 548.748590][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.757816][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 548.768461][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.780288][ T24] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 548.792990][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 548.910150][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.919600][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.928116][ T24] usb 1-1: Product: syz [ 548.932615][ T24] usb 1-1: Manufacturer: syz [ 549.013104][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 549.018529][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 549.026130][ T24] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 550.733042][ T24] usb 1-1: USB disconnect, device number 7 [ 550.871342][ T7969] loop7: detected capacity change from 0 to 1024 [ 550.953288][ T7969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 551.104772][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.112951][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.168909][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.177118][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.203705][ T7969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.219706][ T3749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.231863][ T3749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.376239][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.384462][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.506022][ T7983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.896434][ T7987] loop5: detected capacity change from 0 to 16 [ 553.005140][ T7985] syzkaller0: entered promiscuous mode [ 553.010825][ T7985] syzkaller0: entered allmulticast mode [ 553.048135][ T7987] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 553.116302][ T7987] overlayfs: missing 'lowerdir' [ 553.381107][ T7991] tipc: Started in network mode [ 553.386781][ T7991] tipc: Node identity 9aa61b3dd613, cluster identity 4711 [ 553.395104][ T7991] tipc: Enabled bearer , priority 0 [ 553.649454][ T7992] loop0: detected capacity change from 0 to 256 [ 553.739037][ T7992] vfat: Bad value for 'shortname' [ 554.072344][ T7996] loop8: detected capacity change from 0 to 512 [ 554.781220][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 554.990808][ T8001] loop5: detected capacity change from 0 to 512 [ 557.798242][ T8001] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 557.798514][ T8001] EXT4-fs: failed to create workqueue [ 557.813897][ T8001] EXT4-fs (loop5): mount failed [ 559.765661][ T7991] syzkaller0: entered promiscuous mode [ 559.771348][ T7991] syzkaller0: entered allmulticast mode [ 561.783585][ T7996] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 561.783883][ T7996] EXT4-fs: failed to create workqueue [ 561.800368][ T7996] EXT4-fs (loop8): mount failed [ 562.553498][ T7714] tipc: Node number set to 1286937405 [ 562.657209][ T7287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.281713][ T7998] tipc: Resetting bearer [ 563.306241][ T7998] tipc: Disabling bearer [ 563.667347][ T8010] loop9: detected capacity change from 0 to 1024 [ 563.711868][ T8010] EXT4-fs: Ignoring removed orlov option [ 563.727959][ T7714] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 563.843708][ T8010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.968655][ T7714] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 563.977998][ T7714] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 563.989094][ T7714] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 563.998520][ T7714] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 564.010530][ T7714] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 564.151996][ T7714] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.161897][ T7714] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.170520][ T7714] usb 9-1: Product: syz [ 564.174974][ T7714] usb 9-1: Manufacturer: syz [ 564.380951][ T7714] cdc_wdm 9-1:1.0: skipping garbage [ 564.386682][ T7714] cdc_wdm 9-1:1.0: skipping garbage [ 564.392321][ T7714] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 564.468230][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.589396][ T7714] usb 9-1: USB disconnect, device number 2 [ 564.940848][ T8029] loop5: detected capacity change from 0 to 2048 [ 565.037610][ T5869] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 565.244279][ T5856] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 565.251510][ T5869] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 565.263646][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.314920][ T5869] usb 1-1: config 0 descriptor?? [ 565.346052][ T5869] usb-storage 1-1:0.0: USB Mass Storage device detected [ 565.413164][ T8033] loop5: detected capacity change from 0 to 16 [ 565.440255][ T5856] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 565.445264][ T8033] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 565.450108][ T5856] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 565.474163][ T5856] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 565.485765][ T5856] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 565.497700][ T5856] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 565.541536][ T8033] overlayfs: missing 'lowerdir' [ 565.625256][ T5856] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 565.636905][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 565.645956][ T5856] usb 9-1: Product: syz [ 565.650333][ T5856] usb 9-1: Manufacturer: syz [ 565.676117][ T5856] cdc_wdm 9-1:1.0: skipping garbage [ 565.681537][ T5856] cdc_wdm 9-1:1.0: skipping garbage [ 565.687366][ T5856] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 565.818162][ T5856] usb 1-1: USB disconnect, device number 8 [ 566.004670][ T8041] syzkaller0: entered promiscuous mode [ 566.010362][ T8041] syzkaller0: entered allmulticast mode [ 566.248659][ T8044] loop9: detected capacity change from 0 to 512 [ 566.308685][ T8044] EXT4-fs (loop9): orphan cleanup on readonly fs [ 566.319451][ T8044] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.581: bg 0: block 393: padding at end of block bitmap is not set [ 566.381648][ T8044] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 566.420741][ T8044] EXT4-fs (loop9): 2 truncates cleaned up [ 566.429428][ T8044] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 566.731212][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.428054][ T8054] tipc: Enabling of bearer rejected, failed to enable media [ 567.913843][ T5869] usb 9-1: USB disconnect, device number 3 [ 569.709931][ T8062] xt_limit: Overflow, try lower: 65536/2147483648 [ 570.872592][ T8068] loop5: detected capacity change from 0 to 512 [ 571.125257][ T8071] loop9: detected capacity change from 0 to 16 [ 571.149878][ T8068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.163253][ T8068] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.205122][ T8071] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 571.283718][ T8071] overlayfs: missing 'lowerdir' [ 571.354047][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 571.354132][ T30] audit: type=1326 audit(1764380550.889:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 571.383292][ T30] audit: type=1326 audit(1764380550.899:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 571.415473][ T30] audit: type=1326 audit(1764380550.909:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d8d8f749 code=0x7ffc0000 [ 572.058127][ T30] audit: type=1800 audit(1764380551.279:101): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.589" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 572.235596][ T8078] syzkaller0: entered promiscuous mode [ 572.241318][ T8078] syzkaller0: entered allmulticast mode [ 572.554494][ T8083] loop9: detected capacity change from 0 to 512 [ 572.644285][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.720302][ T8083] EXT4-fs (loop9): orphan cleanup on readonly fs [ 572.997892][ T8083] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.594: bg 0: block 393: padding at end of block bitmap is not set [ 573.067803][ T8083] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 573.098690][ T8083] EXT4-fs (loop9): 2 truncates cleaned up [ 573.107393][ T8083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 573.505988][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.832611][ T5869] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 574.074495][ T5869] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 574.083618][ T5869] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 574.094173][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 574.103478][ T5869] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 574.115385][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 575.971754][ T5869] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 575.981340][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 575.989702][ T5869] usb 1-1: Product: syz [ 575.994120][ T5869] usb 1-1: Manufacturer: syz [ 576.016174][ T5869] cdc_wdm 1-1:1.0: skipping garbage [ 576.021580][ T5869] cdc_wdm 1-1:1.0: skipping garbage [ 576.027428][ T5869] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 576.834491][ T5869] usb 1-1: USB disconnect, device number 9 [ 576.850828][ T8102] loop7: detected capacity change from 0 to 1024 [ 576.865631][ T8102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.903933][ T8102] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 576.915671][ T8102] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 576.925798][ T8102] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 576.938926][ T8102] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.602: inode #1: comm syz.7.602: iget: illegal inode # [ 577.090994][ T8102] EXT4-fs (loop7): Remounting filesystem read-only [ 577.098149][ T8102] EXT4-fs (loop7): no journal found [ 577.379823][ T8109] loop5: detected capacity change from 0 to 16 [ 577.420521][ T8109] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 577.466796][ T8109] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 577.476474][ T8109] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 577.733867][ T5869] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 578.212047][ T8115] syzkaller0: entered promiscuous mode [ 578.217211][ T8122] random: crng reseeded on system resumption [ 578.217851][ T8115] syzkaller0: entered allmulticast mode [ 578.379933][ T8118] loop9: detected capacity change from 0 to 512 [ 578.701706][ T8118] EXT4-fs (loop9): orphan cleanup on readonly fs [ 578.730853][ T8118] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.608: bg 0: block 393: padding at end of block bitmap is not set [ 578.798178][ T8118] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 578.827838][ T8118] EXT4-fs (loop9): 2 truncates cleaned up [ 578.836494][ T8118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 579.488268][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.583086][ T5869] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 580.606079][ T8145] loop7: detected capacity change from 0 to 16 [ 580.636217][ T8145] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 580.760238][ T8145] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 580.769995][ T8145] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 580.792828][ T5869] usb 10-1: Using ep0 maxpacket: 16 [ 580.854435][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.866009][ T5869] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 580.879382][ T5869] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 580.888845][ T5869] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.148069][ T5869] usb 10-1: config 0 descriptor?? [ 581.372220][ T8148] loop8: detected capacity change from 0 to 1024 [ 581.385323][ T8148] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 581.397081][ T8148] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 581.683605][ T5869] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.000A/input/input7 [ 581.925927][ T5869] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 582.343587][ T5869] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 582.427251][ T8158] loop7: detected capacity change from 0 to 128 [ 582.465933][ T8158] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 582.536061][ T5869] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 582.545228][ T5869] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 582.556004][ T5869] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 582.568154][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 582.580489][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 582.707123][ T5869] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 582.716744][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 582.725224][ T5869] usb 9-1: Product: syz [ 582.729714][ T5869] usb 9-1: Manufacturer: syz [ 582.791944][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 582.797716][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 582.815795][ T7730] usb 10-1: USB disconnect, device number 2 [ 582.834567][ T5869] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 582.840903][ T5869] cdc_wdm 9-1:1.0: Unknown control protocol [ 582.992110][ T5869] usb 9-1: USB disconnect, device number 4 [ 583.250033][ T8160] syzkaller0: entered promiscuous mode [ 583.255995][ T8160] syzkaller0: entered allmulticast mode [ 583.742933][ T5869] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 583.928847][ T5869] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 583.937924][ T5869] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 583.948551][ T5869] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 583.961812][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 583.973391][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 584.067590][ T5869] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 584.076988][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 584.085693][ T5869] usb 9-1: Product: syz [ 584.090030][ T5869] usb 9-1: Manufacturer: syz [ 584.171625][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 584.177149][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 584.213170][ T5869] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 584.219300][ T5869] cdc_wdm 9-1:1.0: Unknown control protocol [ 584.230197][ T8166] loop9: detected capacity change from 0 to 512 [ 584.296970][ T8166] EXT4-fs (loop9): orphan cleanup on readonly fs [ 584.426960][ T8166] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.625: bg 0: block 393: padding at end of block bitmap is not set [ 584.468266][ T8166] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 584.500259][ T8166] EXT4-fs (loop9): 2 truncates cleaned up [ 584.515425][ T8166] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 584.850565][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.070630][ T5856] usb 9-1: USB disconnect, device number 5 [ 586.293091][ T8178] loop7: detected capacity change from 0 to 16 [ 586.329754][ T8178] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 586.480870][ T8178] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 586.490561][ T8178] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 587.199651][ T8185] evm: overlay not supported [ 589.770933][ T8201] loop7: detected capacity change from 0 to 512 [ 589.805033][ T8201] EXT4-fs (loop7): orphan cleanup on readonly fs [ 589.867946][ T8201] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.637: bg 0: block 393: padding at end of block bitmap is not set [ 589.963089][ T8201] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 590.023811][ T8201] EXT4-fs (loop7): 2 truncates cleaned up [ 590.031939][ T8201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.323882][ T8208] loop0: detected capacity change from 0 to 512 [ 590.579859][ T8208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.594219][ T8208] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.639862][ T7287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.747492][ T30] audit: type=1800 audit(1764380570.389:102): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.640" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 591.088563][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.435949][ T8216] cgroup: Unknown subsys name 'appraise_type' [ 591.511001][ T8225] loop0: detected capacity change from 0 to 16 [ 591.529235][ T30] audit: type=1326 audit(1764380571.179:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.5.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482238f749 code=0x7ffc0000 [ 591.552144][ T30] audit: type=1326 audit(1764380571.179:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.5.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f482238f749 code=0x7ffc0000 [ 591.579181][ T30] audit: type=1326 audit(1764380571.179:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.5.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482238f749 code=0x7ffc0000 [ 591.609512][ T8225] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 591.685025][ T8225] overlayfs: missing 'lowerdir' [ 591.722826][ T7730] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 591.909350][ T7730] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 591.918946][ T7730] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 591.929660][ T7730] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 591.939027][ T7730] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 591.950455][ T7730] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 592.048268][ T7730] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 592.058209][ T7730] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 592.066666][ T7730] usb 8-1: Product: syz [ 592.071011][ T7730] usb 8-1: Manufacturer: syz [ 592.235113][ T8233] syzkaller0: entered promiscuous mode [ 592.240806][ T8233] syzkaller0: entered allmulticast mode [ 592.267856][ T7730] cdc_wdm 8-1:1.0: skipping garbage [ 592.273982][ T7730] cdc_wdm 8-1:1.0: skipping garbage [ 592.283361][ T7730] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 592.298357][ T7730] cdc_wdm 8-1:1.0: Unknown control protocol [ 592.529083][ T5869] usb 8-1: USB disconnect, device number 4 [ 592.834294][ T8239] loop0: detected capacity change from 0 to 512 [ 592.916713][ T8242] loop9: detected capacity change from 0 to 512 [ 592.928858][ T8239] EXT4-fs (loop0): orphan cleanup on readonly fs [ 592.984727][ T8242] EXT4-fs (loop9): orphan cleanup on readonly fs [ 593.012879][ T8239] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.650: bad orphan inode 13 [ 593.046868][ T8239] ext4_test_bit(bit=12, block=18) = 1 [ 593.053498][ T8239] is_bad_inode(inode)=0 [ 593.058974][ T8239] NEXT_ORPHAN(inode)=2130706432 [ 593.064305][ T8239] max_ino=32 [ 593.067679][ T8239] i_nlink=1 [ 593.073343][ T8239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 593.113450][ T8242] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.651: bg 0: block 393: padding at end of block bitmap is not set [ 593.161053][ T8242] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 593.173465][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.180092][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.225396][ T8242] EXT4-fs (loop9): 2 truncates cleaned up [ 593.236959][ T8242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 593.255283][ T5869] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 593.279635][ T8239] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.650: iget: bad i_size value: 360287970189639690 [ 593.435198][ T5869] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 593.445144][ T5869] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 593.455877][ T5869] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 593.465257][ T5869] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 593.476747][ T5869] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 593.491491][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.593868][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.609845][ T5869] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 593.621842][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 593.633346][ T5869] usb 8-1: Product: syz [ 593.637877][ T5869] usb 8-1: Manufacturer: syz [ 593.761544][ T5869] cdc_wdm 8-1:1.0: skipping garbage [ 593.767607][ T5869] cdc_wdm 8-1:1.0: skipping garbage [ 593.818545][ T5869] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 593.824819][ T5869] cdc_wdm 8-1:1.0: Unknown control protocol [ 594.912951][ T8258] warning: `syz.0.653' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 595.733919][ T5869] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 595.974439][ T5869] usb 10-1: Using ep0 maxpacket: 16 [ 596.009008][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.020584][ T5869] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 596.030283][ T5869] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.215657][ T7714] usb 8-1: USB disconnect, device number 5 [ 596.271008][ T5869] usb 10-1: config 0 descriptor?? [ 596.436037][ T8266] loop5: detected capacity change from 0 to 16 [ 596.497200][ T8266] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 596.651010][ T8266] overlayfs: missing 'lowerdir' [ 596.894040][ T5869] input: HID 041e:3100 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:041E:3100.000B/input/input8 [ 597.039259][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.049149][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.314598][ T5869] creative-sb0540 0003:041E:3100.000B: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.9-1/input0 [ 597.500483][ T5869] usb 10-1: USB disconnect, device number 3 [ 597.871282][ T8271] loop5: detected capacity change from 0 to 128 [ 597.905338][ T8271] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 598.023181][ T8271] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 598.160705][ T8275] loop7: detected capacity change from 0 to 1024 [ 598.315951][ T8275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 598.328688][ T8275] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.750560][ T8275] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.661: lblock 0 mapped to illegal pblock 0 (length 6) [ 598.803310][ T6324] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 598.858959][ T8275] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 598.871892][ T8275] EXT4-fs (loop7): This should not happen!! Data will be lost [ 598.871892][ T8275] [ 599.475076][ T136] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 599.809290][ T8283] loop9: detected capacity change from 0 to 512 [ 599.963319][ T8283] EXT4-fs (loop9): orphan cleanup on readonly fs [ 600.007940][ T8283] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.664: bg 0: block 393: padding at end of block bitmap is not set [ 600.101771][ T8283] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 600.142351][ T8283] EXT4-fs (loop9): 2 truncates cleaned up [ 600.150709][ T8283] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 600.431709][ T136] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 600.444616][ T136] EXT4-fs (loop7): This should not happen!! Data will be lost [ 600.444616][ T136] [ 600.499102][ T7287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 600.659744][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.974864][ T7730] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 602.055508][ T8298] loop8: detected capacity change from 0 to 512 [ 602.165712][ T8298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.180110][ T8298] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 602.214464][ T7730] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 602.229875][ T7730] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 602.239956][ T8298] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.670: corrupted inode contents [ 602.242922][ T7730] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 602.261596][ T7730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 602.273174][ T7730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 602.314208][ T8298] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.670: mark_inode_dirty error [ 602.375736][ T8298] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.670: corrupted inode contents [ 602.419425][ T7730] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 602.422926][ T8298] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.670: mark_inode_dirty error [ 602.435221][ T7730] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 602.453388][ T7730] usb 6-1: Product: syz [ 602.457738][ T7730] usb 6-1: Manufacturer: syz [ 602.488872][ T7730] cdc_wdm 6-1:1.0: skipping garbage [ 602.494630][ T7730] cdc_wdm 6-1:1.0: skipping garbage [ 602.694657][ T7730] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 602.700790][ T7730] cdc_wdm 6-1:1.0: Unknown control protocol [ 602.748788][ T7730] usb 6-1: USB disconnect, device number 4 [ 602.752172][ T7710] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.789995][ T7714] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 602.981514][ T7714] usb 10-1: Using ep0 maxpacket: 16 [ 603.006407][ T7714] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.017933][ T7714] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 603.027732][ T7714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.070019][ T8307] loop8: detected capacity change from 0 to 128 [ 603.084364][ T7714] usb 10-1: config 0 descriptor?? [ 603.152249][ T8307] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 603.183822][ T8307] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 603.197774][ T8309] loop0: detected capacity change from 0 to 1024 [ 603.279767][ T8309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 603.292765][ T8309] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.362790][ T5869] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 603.468839][ T8309] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.675: lblock 0 mapped to illegal pblock 0 (length 6) [ 603.487201][ T8309] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 603.500317][ T8309] EXT4-fs (loop0): This should not happen!! Data will be lost [ 603.500317][ T8309] [ 603.568449][ T7714] input: HID 041e:3100 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:041E:3100.000C/input/input9 [ 603.585438][ T5869] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 603.594555][ T5869] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 603.605232][ T5869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 603.614867][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 603.626838][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 603.667517][ T7714] creative-sb0540 0003:041E:3100.000C: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.9-1/input0 [ 603.731490][ T5869] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 603.741040][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 603.749605][ T5869] usb 6-1: Product: syz [ 603.754355][ T5869] usb 6-1: Manufacturer: syz [ 603.774333][ T7710] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 603.786916][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.796988][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.813095][ T5869] cdc_wdm 6-1:1.0: skipping garbage [ 603.818843][ T5869] cdc_wdm 6-1:1.0: skipping garbage [ 603.853958][ T5869] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 603.860405][ T5869] cdc_wdm 6-1:1.0: Unknown control protocol [ 603.906485][ T7730] usb 10-1: USB disconnect, device number 4 [ 603.928881][ T3705] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 603.962270][ T3705] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 603.981667][ T3705] EXT4-fs (loop0): This should not happen!! Data will be lost [ 603.981667][ T3705] [ 604.027890][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 604.861461][ T8330] loop0: detected capacity change from 0 to 256 [ 604.949924][ T8330] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 604.961457][ T8330] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 605.048094][ T8332] loop8: detected capacity change from 0 to 512 [ 605.141274][ T8330] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 605.205818][ T8330] exFAT-fs (loop0): failed to load alloc-bitmap [ 605.212292][ T8330] exFAT-fs (loop0): failed to recognize exfat type [ 605.244526][ T8332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.258084][ T8332] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 605.395293][ T8339] usb usb8: usbfs: process 8339 (syz.7.681) did not claim interface 0 before use [ 605.433386][ T8332] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.683: corrupted inode contents [ 605.696892][ T8332] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.683: mark_inode_dirty error [ 605.826244][ T8332] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.683: corrupted inode contents [ 605.897713][ T8332] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.683: mark_inode_dirty error [ 606.038516][ T5869] usb 6-1: USB disconnect, device number 5 [ 606.467564][ T7710] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.058049][ T8350] loop5: detected capacity change from 0 to 1024 [ 607.103020][ T8350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 607.115757][ T8350] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.196842][ T8350] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.689: lblock 0 mapped to illegal pblock 0 (length 6) [ 607.219468][ T8350] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 607.232592][ T8350] EXT4-fs (loop5): This should not happen!! Data will be lost [ 607.232592][ T8350] [ 607.393099][ T3749] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:19: lblock 8 mapped to illegal pblock 8 (length 8) [ 607.429436][ T3749] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 607.442555][ T3749] EXT4-fs (loop5): This should not happen!! Data will be lost [ 607.442555][ T3749] [ 607.524116][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 607.774674][ T8358] loop8: detected capacity change from 0 to 128 [ 607.814591][ T8359] loop7: detected capacity change from 0 to 512 [ 607.824127][ T8359] EXT4-fs: Ignoring removed oldalloc option [ 607.830394][ T8359] ext4: Unknown parameter 'rootcontext' [ 607.877000][ T8358] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.896931][ T8358] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 608.937432][ T7710] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 609.367775][ T8375] loop5: detected capacity change from 0 to 512 [ 609.460638][ T8375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.474419][ T8375] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 609.544392][ T8375] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.697: corrupted inode contents [ 609.564141][ T5869] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 609.565222][ T8375] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.697: mark_inode_dirty error [ 609.584322][ T7730] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 609.620230][ T8375] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.697: corrupted inode contents [ 609.671160][ T8375] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.697: mark_inode_dirty error [ 609.740128][ T5869] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.749672][ T5869] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 609.760416][ T5869] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.770376][ T5869] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 609.773093][ T7730] usb 9-1: Using ep0 maxpacket: 16 [ 609.781719][ T5869] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 609.847543][ T7730] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.859075][ T7730] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 609.868746][ T7730] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.885712][ T8388] loop9: detected capacity change from 0 to 1024 [ 609.930709][ T7730] usb 9-1: config 0 descriptor?? [ 609.935223][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.952201][ T5869] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.963127][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 609.971333][ T5869] usb 8-1: Product: syz [ 609.976750][ T5869] usb 8-1: Manufacturer: syz [ 609.999535][ T5869] cdc_wdm 8-1:1.0: skipping garbage [ 610.009594][ T5869] cdc_wdm 8-1:1.0: skipping garbage [ 610.050228][ T8388] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 610.063066][ T8388] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.076134][ T5869] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 610.082260][ T5869] cdc_wdm 8-1:1.0: Unknown control protocol [ 610.229282][ T5856] usb 8-1: USB disconnect, device number 6 [ 610.262130][ T8388] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm syz.9.700: lblock 0 mapped to illegal pblock 0 (length 6) [ 610.283415][ T8388] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 610.296389][ T8388] EXT4-fs (loop9): This should not happen!! Data will be lost [ 610.296389][ T8388] [ 610.425457][ T7730] input: HID 041e:3100 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:041E:3100.000D/input/input10 [ 610.524293][ T7730] creative-sb0540 0003:041E:3100.000D: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.8-1/input0 [ 610.578283][ T8376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.587845][ T8376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.613363][ T14] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 610.649367][ T14] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 610.662693][ T14] EXT4-fs (loop9): This should not happen!! Data will be lost [ 610.662693][ T14] [ 610.664864][ T7730] usb 9-1: USB disconnect, device number 6 [ 610.690613][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 610.713654][ T8395] loop0: detected capacity change from 0 to 128 [ 610.755791][ T8395] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 610.771854][ T8395] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 611.316342][ T5801] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.025116][ T8403] serio: Serial port ptm0 [ 612.236614][ T7730] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 612.472262][ T7730] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.483199][ T7730] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.506187][ T7730] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 612.515825][ T7730] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 612.524244][ T7730] usb 9-1: SerialNumber: syz [ 612.785330][ T7730] usb 9-1: 0:2 : does not exist [ 612.801054][ T5856] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 612.867079][ T7730] usb 9-1: USB disconnect, device number 7 [ 612.890874][ T8420] loop5: detected capacity change from 0 to 512 [ 612.966608][ T8420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.986845][ T8420] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 613.010766][ T5856] usb 8-1: Using ep0 maxpacket: 32 [ 613.050065][ T5856] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 613.059242][ T5856] usb 8-1: config 0 has no interface number 0 [ 613.093402][ T8420] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.712: corrupted inode contents [ 613.118771][ T8420] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.712: mark_inode_dirty error [ 613.138964][ T5856] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 613.148723][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.157240][ T5856] usb 8-1: Product: syz [ 613.161590][ T5856] usb 8-1: Manufacturer: syz [ 613.163025][ T8429] loop0: detected capacity change from 0 to 1024 [ 613.166527][ T5856] usb 8-1: SerialNumber: syz [ 613.202012][ T8420] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.712: corrupted inode contents [ 613.218550][ T5856] usb 8-1: config 0 descriptor?? [ 613.225291][ T8420] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.712: mark_inode_dirty error [ 613.231411][ T5856] smsc95xx v2.0.0 [ 613.263658][ T8429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 613.277064][ T8429] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.449486][ T8429] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.715: lblock 0 mapped to illegal pblock 0 (length 6) [ 613.524904][ T8429] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 613.537977][ T8429] EXT4-fs (loop0): This should not happen!! Data will be lost [ 613.537977][ T8429] [ 613.619293][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.653062][ T5856] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 613.665048][ T5856] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 613.765749][ T8435] loop8: detected capacity change from 0 to 128 [ 613.813904][ T8435] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 613.855062][ T8435] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 613.984514][ T14] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 614.034578][ T14] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 614.047412][ T14] EXT4-fs (loop0): This should not happen!! Data will be lost [ 614.047412][ T14] [ 614.135929][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 614.464235][ T7730] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 614.507878][ T5856] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 614.528689][ T5856] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 614.604356][ T7710] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 614.670532][ T7730] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 614.679822][ T7730] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 614.690441][ T7730] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 614.699812][ T7730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 614.711508][ T7730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 614.745160][ T5869] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 614.761777][ T7730] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 614.771896][ T7730] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 614.780447][ T7730] usb 6-1: Product: syz [ 614.784983][ T7730] usb 6-1: Manufacturer: syz [ 614.828469][ T7730] cdc_wdm 6-1:1.0: skipping garbage [ 614.834269][ T7730] cdc_wdm 6-1:1.0: skipping garbage [ 614.843073][ T7730] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 614.849179][ T7730] cdc_wdm 6-1:1.0: Unknown control protocol [ 614.886064][ T7714] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 614.902996][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 614.947105][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.958902][ T5869] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 614.968503][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.987537][ T5869] usb 1-1: config 0 descriptor?? [ 615.036518][ T7730] usb 6-1: USB disconnect, device number 6 [ 615.156912][ T7714] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.167820][ T7714] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.199445][ T7714] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 615.209099][ T7714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 615.217854][ T7714] usb 10-1: SerialNumber: syz [ 615.276263][ T8452] binder: 8450:8452 ioctl 4018620d 0 returned -22 [ 615.292004][ T8452] binder: 8450:8452 ioctl c0306201 200000000080 returned -14 [ 615.485271][ T5869] input: HID 041e:3100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.000E/input/input11 [ 615.517534][ T7714] usb 10-1: 0:2 : does not exist [ 615.589792][ T5869] creative-sb0540 0003:041E:3100.000E: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.0-1/input0 [ 615.616223][ T7714] usb 10-1: USB disconnect, device number 5 [ 615.673290][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.683173][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.727334][ T7730] usb 1-1: USB disconnect, device number 11 [ 615.916336][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.8.725'. [ 616.357800][ T30] audit: type=1326 audit(1764380595.999:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.389137][ T8462] loop9: detected capacity change from 0 to 512 [ 616.444611][ T30] audit: type=1326 audit(1764380596.039:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.470011][ T30] audit: type=1326 audit(1764380596.039:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.494734][ T30] audit: type=1326 audit(1764380596.059:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.517545][ T30] audit: type=1326 audit(1764380596.059:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.540422][ T30] audit: type=1326 audit(1764380596.059:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.550821][ T7730] usb 8-1: USB disconnect, device number 7 [ 616.565492][ T30] audit: type=1326 audit(1764380596.059:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.565752][ T30] audit: type=1326 audit(1764380596.059:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.566013][ T30] audit: type=1326 audit(1764380596.059:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.566267][ T30] audit: type=1326 audit(1764380596.069:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5ab8f749 code=0x7ffc0000 [ 616.762821][ T7714] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 616.883426][ T8468] loop0: detected capacity change from 0 to 1024 [ 616.909295][ T8462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.922853][ T8462] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 616.922956][ T7714] usb 6-1: Using ep0 maxpacket: 32 [ 616.930821][ T7714] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.950000][ T7714] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.960251][ T7714] usb 6-1: config 0 interface 0 has no altsetting 0 [ 616.967446][ T7714] usb 6-1: New USB device found, idVendor=05ac, idProduct=0200, bcdDevice= 0.00 [ 616.980880][ T7714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.994975][ T7714] usb 6-1: config 0 descriptor?? [ 617.018440][ T8468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 617.031712][ T8468] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.036059][ T8472] loop8: detected capacity change from 0 to 128 [ 617.063872][ T8462] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.728: corrupted inode contents [ 617.092891][ T8462] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.728: mark_inode_dirty error [ 617.130448][ T8472] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 617.185015][ T8468] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.729: lblock 0 mapped to illegal pblock 0 (length 6) [ 617.221911][ T8462] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.728: corrupted inode contents [ 617.249286][ T8468] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 617.262186][ T8468] EXT4-fs (loop0): This should not happen!! Data will be lost [ 617.262186][ T8468] [ 617.297800][ T8472] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 617.351863][ T8462] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.728: mark_inode_dirty error [ 617.463324][ T7714] hid-generic 0003:05AC:0200.000F: item fetching failed at offset 3/5 [ 617.488543][ T7714] hid-generic 0003:05AC:0200.000F: probe with driver hid-generic failed with error -22 [ 617.670421][ T3705] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 617.702942][ T3705] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 617.718737][ T3705] EXT4-fs (loop0): This should not happen!! Data will be lost [ 617.718737][ T3705] [ 617.719409][ T7730] usb 6-1: USB disconnect, device number 7 [ 617.801582][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 617.875103][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.054135][ T7710] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 618.264327][ T8484] binder: 8483:8484 ioctl 4018620d 0 returned -22 [ 618.292691][ T8484] binder: 8483:8484 ioctl c0306201 200000000080 returned -14 [ 618.892212][ T8495] loop9: detected capacity change from 0 to 512 [ 618.947750][ T8495] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 618.963305][ T7714] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 618.985017][ T8495] EXT4-fs (loop9): invalid journal inode [ 618.990931][ T8495] EXT4-fs (loop9): can't get journal size [ 619.031573][ T8495] EXT4-fs (loop9): 1 truncate cleaned up [ 619.040212][ T8495] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.111237][ T7714] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 620.120677][ T7714] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 620.131288][ T7714] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 620.140884][ T7714] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 620.154733][ T7714] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 621.113009][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 621.914341][ T8504] syz.7.741 (8504) used greatest stack depth: 2440 bytes left [ 623.359117][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 624.247572][ T24] usb 9-1: device descriptor read/all, error -71 [ 624.262898][ T7714] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 624.272741][ T7714] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 624.375446][ T7714] usb 6-1: can't set config #1, error -71 [ 624.418491][ T7714] usb 6-1: USB disconnect, device number 8 [ 624.606847][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.523285][ T8511] loop8: detected capacity change from 0 to 512 [ 625.650936][ T8511] EXT4-fs (loop8): orphan cleanup on readonly fs [ 625.701401][ T8511] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.743: bad orphan inode 13 [ 625.759303][ T8511] ext4_test_bit(bit=12, block=18) = 1 [ 625.765128][ T8511] is_bad_inode(inode)=0 [ 625.769660][ T8511] NEXT_ORPHAN(inode)=2130706432 [ 625.777893][ T8511] max_ino=32 [ 625.781369][ T8511] i_nlink=1 [ 625.788197][ T8511] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 626.196470][ T8519] loop9: detected capacity change from 0 to 128 [ 626.284349][ T8511] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 626.347838][ T8519] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 626.409048][ T8511] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 626.439991][ T8519] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 628.688704][ T7710] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.227084][ T8536] loop0: detected capacity change from 0 to 4096 [ 631.236494][ T8536] EXT4-fs: Ignoring removed mblk_io_submit option [ 631.245279][ T8531] Bluetooth: hci1: command 0x0406 tx timeout [ 631.251490][ T8531] Bluetooth: hci6: command 0x0406 tx timeout [ 631.437397][ T8536] EXT4-fs (loop0): Test dummy encryption mode enabled [ 631.476887][ T8536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.885613][ T7724] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 631.998814][ T8540] binder: BINDER_SET_CONTEXT_MGR already set [ 632.005178][ T8540] binder: 8539:8540 ioctl 4018620d 200000000040 returned -16 [ 632.786281][ T5856] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 632.951480][ T7730] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 632.997543][ T5856] usb 6-1: Using ep0 maxpacket: 16 [ 633.029228][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.040894][ T5856] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 633.056296][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.173586][ T7730] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 633.182975][ T7730] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 633.193710][ T7730] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 633.203077][ T7730] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 633.214596][ T7730] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 633.271791][ T5856] usb 6-1: config 0 descriptor?? [ 633.598138][ T7730] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 633.608005][ T7730] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 633.616633][ T7730] usb 9-1: Product: syz [ 633.621132][ T7730] usb 9-1: Manufacturer: syz [ 633.785112][ T5856] input: HID 041e:3100 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.0010/input/input12 [ 633.908967][ T7730] cdc_wdm 9-1:1.0: skipping garbage [ 633.915013][ T7730] cdc_wdm 9-1:1.0: skipping garbage [ 633.931132][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.941142][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.100767][ T5856] creative-sb0540 0003:041E:3100.0010: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.5-1/input0 [ 634.165110][ T7730] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 634.179958][ T7730] cdc_wdm 9-1:1.0: Unknown control protocol [ 634.300111][ T5856] usb 6-1: USB disconnect, device number 9 [ 634.330851][ T7730] usb 9-1: USB disconnect, device number 10 [ 636.313009][ T7730] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 637.503407][ T7730] usb 9-1: device descriptor read/all, error -71 [ 641.781728][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.903227][ T8573] loop5: detected capacity change from 0 to 128 [ 642.003297][ T8573] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 642.091096][ T8573] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 642.436285][ T8578] binder: BINDER_SET_CONTEXT_MGR already set [ 642.443279][ T8578] binder: 8577:8578 ioctl 4018620d 200000000040 returned -16 [ 642.495549][ T8580] loop8: detected capacity change from 0 to 256 [ 642.626203][ T6324] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 643.567044][ T7730] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 643.714445][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.771'. [ 643.794987][ T7730] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 643.809887][ T7730] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 643.822548][ T7730] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 643.831789][ T7730] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 643.843304][ T7730] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 643.923890][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 644.119905][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 644.174799][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.186716][ T24] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 644.196217][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.308082][ T24] usb 8-1: config 0 descriptor?? [ 644.356892][ T7730] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 644.366480][ T7730] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 644.375169][ T7730] usb 9-1: Product: syz [ 644.379532][ T7730] usb 9-1: Manufacturer: syz [ 644.388010][ T8599] loop5: detected capacity change from 0 to 16 [ 644.433581][ T7730] cdc_wdm 9-1:1.0: skipping garbage [ 644.437215][ T8599] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 644.438968][ T7730] cdc_wdm 9-1:1.0: skipping garbage [ 644.455307][ T7730] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 644.461602][ T7730] cdc_wdm 9-1:1.0: Unknown control protocol [ 644.648466][ T7730] usb 9-1: USB disconnect, device number 13 [ 644.816383][ T24] input: HID 041e:3100 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:041E:3100.0011/input/input13 [ 645.189902][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.199993][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.516137][ T8608] loop9: detected capacity change from 0 to 128 [ 645.676951][ T24] creative-sb0540 0003:041E:3100.0011: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.7-1/input0 [ 645.684681][ T8608] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 645.704407][ T24] usb 8-1: USB disconnect, device number 8 [ 645.712996][ T5856] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 645.771567][ T8608] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 646.328684][ T5856] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.337896][ T5856] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 646.348642][ T5856] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.354722][ T7724] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.363994][ T5856] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 646.382597][ T5856] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 646.410096][ T8613] binder: BINDER_SET_CONTEXT_MGR already set [ 646.419534][ T8613] binder: 8612:8613 ioctl 4018620d 200000000040 returned -16 [ 646.737275][ T5856] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.748015][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.819705][ T8617] binfmt_misc: register: failed to install interpreter file ./file0 [ 646.977488][ T5856] usb 9-1: can't set config #1, error -71 [ 647.023991][ T5856] usb 9-1: USB disconnect, device number 14 [ 647.361291][ T8623] loop5: detected capacity change from 0 to 512 [ 647.421195][ T8623] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 647.433414][ T8623] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 647.444054][ T8623] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.782: Corrupt directory, running e2fsck is recommended [ 647.594155][ T8623] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 647.636423][ T8623] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.782: corrupted in-inode xattr: e_name out of bounds [ 647.663251][ T8623] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.782: couldn't read orphan inode 15 (err -117) [ 647.742528][ T8623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.982141][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.291160][ T8632] loop5: detected capacity change from 0 to 16 [ 648.312760][ T8632] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 648.633664][ T5856] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 648.842816][ T5856] usb 10-1: Using ep0 maxpacket: 16 [ 648.889463][ T5856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.901260][ T5856] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 648.911141][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.171095][ T5856] usb 10-1: config 0 descriptor?? [ 649.731970][ T8640] loop7: detected capacity change from 0 to 128 [ 649.833599][ T5856] input: HID 041e:3100 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:041E:3100.0012/input/input14 [ 649.871076][ T8640] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 649.885124][ T8640] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 649.958410][ T5856] creative-sb0540 0003:041E:3100.0012: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.9-1/input0 [ 650.002232][ T8645] binder: 8644:8645 ioctl c0306201 0 returned -14 [ 650.025494][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.035511][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.096836][ T24] usb 10-1: USB disconnect, device number 6 [ 650.257585][ T7287] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 650.813300][ T7714] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 651.328747][ T7714] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 651.337989][ T7714] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 651.348636][ T7714] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 651.358103][ T7714] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 651.369388][ T7714] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 651.586634][ T7714] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 651.596438][ T7714] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 651.604913][ T7714] usb 8-1: Product: syz [ 651.609254][ T7714] usb 8-1: Manufacturer: syz [ 651.801916][ T7714] cdc_wdm 8-1:1.0: skipping garbage [ 651.807617][ T7714] cdc_wdm 8-1:1.0: skipping garbage [ 651.906218][ T7714] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 651.912346][ T7714] cdc_wdm 8-1:1.0: Unknown control protocol [ 652.048744][ T7714] usb 8-1: USB disconnect, device number 9 [ 652.269297][ T8663] loop8: detected capacity change from 0 to 16 [ 652.329885][ T8663] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 652.763119][ T7714] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 653.039581][ T7714] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 653.048960][ T7714] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 653.059550][ T7714] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 653.068938][ T7714] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 653.080390][ T7714] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 653.180732][ T7714] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 653.190253][ T7714] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 653.198650][ T7714] usb 8-1: Product: syz [ 653.203082][ T7714] usb 8-1: Manufacturer: syz [ 653.252305][ T7714] cdc_wdm 8-1:1.0: skipping garbage [ 653.258023][ T7714] cdc_wdm 8-1:1.0: skipping garbage [ 653.287870][ T7714] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 653.294182][ T7714] cdc_wdm 8-1:1.0: Unknown control protocol [ 653.311048][ T8669] loop5: detected capacity change from 0 to 128 [ 653.421767][ T8669] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 653.507178][ T8669] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 653.576667][ T8673] binder: 8672:8673 ioctl c0306201 0 returned -14 [ 653.606658][ T8673] binder: BINDER_SET_CONTEXT_MGR already set [ 653.612949][ T8673] binder: 8672:8673 ioctl 4018620d 200000000040 returned -16 [ 654.106784][ T8669] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 654.120418][ T8669] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 654.186315][ T8675] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 654.204671][ T8676] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 654.218421][ T8676] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 654.621058][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.627809][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.022882][ T6324] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 655.371846][ T7714] usb 8-1: USB disconnect, device number 10 [ 655.774849][ T8701] loop5: detected capacity change from 0 to 512 [ 655.841745][ T8701] EXT4-fs: Ignoring removed bh option [ 656.035875][ T8701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.121646][ T8701] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 656.797390][ T8710] loop9: detected capacity change from 0 to 512 [ 656.965791][ T8710] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.807: bad orphan inode 16 [ 657.023025][ T8710] ext4_test_bit(bit=15, block=18) = 0 [ 657.030581][ T8710] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.046774][ T8710] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.070782][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.612871][ T8720] loop8: detected capacity change from 0 to 16 [ 657.654956][ T8720] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 657.915719][ T7724] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.222333][ T8732] loop8: detected capacity change from 0 to 128 [ 658.267455][ T8735] loop5: detected capacity change from 0 to 1024 [ 658.289264][ T8735] EXT4-fs: Ignoring removed bh option [ 658.295354][ T8732] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 658.325626][ T8732] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 658.378559][ T8735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.405118][ T30] audit: type=1800 audit(1764380638.059:116): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.817" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 659.113961][ T8732] fscrypt (loop8, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 659.127901][ T8732] fscrypt (loop8, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 659.235509][ T8744] fscrypt (loop8, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 659.388330][ T8745] fscrypt (loop8, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 659.401972][ T8745] fscrypt (loop8, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 659.658422][ T8765] loop7: detected capacity change from 0 to 128 [ 659.890702][ T8765] EXT4-fs (loop7): Test dummy encryption mode enabled [ 660.007906][ T8765] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 660.125283][ T7710] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 660.130165][ T8765] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 660.510834][ T8765] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 661.242193][ T7287] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 663.208443][ T8785] loop0: detected capacity change from 0 to 16 [ 663.278307][ T8785] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 663.544402][ T6324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.867773][ T8801] loop7: detected capacity change from 0 to 128 [ 664.911777][ T8801] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 664.952247][ T8801] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 665.651590][ T8801] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-fixed-time,nhpoly1305-generic)" [ 665.762721][ T8816] loop0: detected capacity change from 0 to 256 [ 665.992188][ T8816] FAT-fs (loop0): Directory bread(block 64) failed [ 665.999164][ T8816] FAT-fs (loop0): Directory bread(block 65) failed [ 666.006941][ T8816] FAT-fs (loop0): Directory bread(block 66) failed [ 666.013893][ T8816] FAT-fs (loop0): Directory bread(block 67) failed [ 666.027628][ T8816] FAT-fs (loop0): Directory bread(block 68) failed [ 666.038757][ T8816] FAT-fs (loop0): Directory bread(block 69) failed [ 666.046527][ T8816] FAT-fs (loop0): Directory bread(block 70) failed [ 666.053456][ T8816] FAT-fs (loop0): Directory bread(block 71) failed [ 666.060366][ T8816] FAT-fs (loop0): Directory bread(block 72) failed [ 666.067484][ T8816] FAT-fs (loop0): Directory bread(block 73) failed [ 666.140087][ T7287] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 666.151985][ T8817] vlan0: entered promiscuous mode [ 666.274256][ T8816] syz.0.832: attempt to access beyond end of device [ 666.274256][ T8816] loop0: rw=2051, sector=1224, nr_sectors = 64 limit=256 [ 667.003783][ T8822] input: syz0 as /devices/virtual/input/input15 [ 667.019846][ T8822] netlink: 516 bytes leftover after parsing attributes in process `syz.8.833'. [ 667.177455][ T8814] vlan0: left promiscuous mode [ 667.495613][ T8825] loop0: detected capacity change from 0 to 16 [ 667.915308][ T8825] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 669.328208][ T8829] loop9: detected capacity change from 0 to 256 [ 669.685847][ T8829] FAT-fs (loop9): Directory bread(block 64) failed [ 669.692982][ T8829] FAT-fs (loop9): Directory bread(block 65) failed [ 669.700079][ T8829] FAT-fs (loop9): Directory bread(block 66) failed [ 669.710232][ T8829] FAT-fs (loop9): Directory bread(block 67) failed [ 669.718173][ T8829] FAT-fs (loop9): Directory bread(block 68) failed [ 669.725042][ T8829] FAT-fs (loop9): Directory bread(block 69) failed [ 669.731908][ T8829] FAT-fs (loop9): Directory bread(block 70) failed [ 669.738775][ T8829] FAT-fs (loop9): Directory bread(block 71) failed [ 669.745778][ T8829] FAT-fs (loop9): Directory bread(block 72) failed [ 669.752624][ T8829] FAT-fs (loop9): Directory bread(block 73) failed [ 670.046320][ T8836] xt_hashlimit: size too large, truncated to 1048576 [ 670.173018][ T8840] loop8: detected capacity change from 0 to 256 [ 670.386973][ T8840] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 670.555070][ T8845] loop9: detected capacity change from 0 to 128 [ 670.768054][ T8845] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 670.784025][ T8845] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 671.781791][ T8856] loop7: detected capacity change from 0 to 256 [ 672.543449][ T3705] ===================================================== [ 672.550677][ T3705] BUG: KMSAN: uninit-value in aes_encrypt+0x1239/0x1960 [ 672.557800][ T3705] aes_encrypt+0x1239/0x1960 [ 672.562584][ T3705] aesti_encrypt+0x7d/0xf0 [ 672.567171][ T3705] cipher_crypt_one+0x120/0x2e0 [ 672.572171][ T3705] crypto_cipher_encrypt_one+0x33/0x40 [ 672.577800][ T3705] adiantum_crypt+0x939/0xe60 [ 672.582652][ T3705] adiantum_encrypt+0x33/0x40 [ 672.587484][ T3705] crypto_skcipher_encrypt+0x18a/0x1e0 [ 672.593106][ T3705] fscrypt_crypt_data_unit+0x38e/0x590 [ 672.598796][ T3705] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 672.605246][ T3705] ext4_bio_write_folio+0x1383/0x30d0 [ 672.610802][ T3705] ext4_do_writepages+0x3c08/0x8020 [ 672.616177][ T3705] ext4_writepages+0x338/0x870 [ 672.621081][ T3705] do_writepages+0x3f2/0x860 [ 672.625864][ T3705] __writeback_single_inode+0x101/0x1190 [ 672.631713][ T3705] writeback_sb_inodes+0xac1/0x1cb0 [ 672.637121][ T3705] wb_writeback+0x4ce/0xc00 [ 672.641798][ T3705] wb_workfn+0x397/0x1910 [ 672.646312][ T3705] process_scheduled_works+0xb91/0x1d80 [ 672.652065][ T3705] worker_thread+0xedf/0x1590 [ 672.656920][ T3705] kthread+0xd5c/0xf00 [ 672.661120][ T3705] ret_from_fork+0x1f5/0x4c0 [ 672.665893][ T3705] ret_from_fork_asm+0x1a/0x30 [ 672.670843][ T3705] [ 672.673230][ T3705] Uninit was stored to memory at: [ 672.678470][ T3705] adiantum_crypt+0xcf7/0xe60 [ 672.683309][ T3705] adiantum_encrypt+0x33/0x40 [ 672.688146][ T3705] crypto_skcipher_encrypt+0x18a/0x1e0 [ 672.693773][ T3705] fscrypt_crypt_data_unit+0x38e/0x590 [ 672.699430][ T3705] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 672.705878][ T3705] ext4_bio_write_folio+0x1383/0x30d0 [ 672.711440][ T3705] ext4_do_writepages+0x3c08/0x8020 [ 672.716814][ T3705] ext4_writepages+0x338/0x870 [ 672.721711][ T3705] do_writepages+0x3f2/0x860 [ 672.726561][ T3705] __writeback_single_inode+0x101/0x1190 [ 672.732382][ T3705] writeback_sb_inodes+0xac1/0x1cb0 [ 672.737753][ T3705] wb_writeback+0x4ce/0xc00 [ 672.742414][ T3705] wb_workfn+0x397/0x1910 [ 672.746880][ T3705] process_scheduled_works+0xb91/0x1d80 [ 672.752682][ T3705] worker_thread+0xedf/0x1590 [ 672.757574][ T3705] kthread+0xd5c/0xf00 [ 672.761883][ T3705] ret_from_fork+0x1f5/0x4c0 [ 672.766792][ T3705] ret_from_fork_asm+0x1a/0x30 [ 672.771745][ T3705] [ 672.774137][ T3705] Uninit was stored to memory at: [ 672.779451][ T3705] adiantum_crypt+0x531/0xe60 [ 672.784299][ T3705] adiantum_encrypt+0x33/0x40 [ 672.789158][ T3705] crypto_skcipher_encrypt+0x18a/0x1e0 [ 672.794882][ T3705] fscrypt_crypt_data_unit+0x38e/0x590 [ 672.800652][ T3705] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 672.807107][ T3705] ext4_bio_write_folio+0x1383/0x30d0 [ 672.812673][ T3705] ext4_do_writepages+0x3c08/0x8020 [ 672.818065][ T3705] ext4_writepages+0x338/0x870 [ 672.822986][ T3705] do_writepages+0x3f2/0x860 [ 672.827845][ T3705] __writeback_single_inode+0x101/0x1190 [ 672.833777][ T3705] writeback_sb_inodes+0xac1/0x1cb0 [ 672.839176][ T3705] wb_writeback+0x4ce/0xc00 [ 672.843852][ T3705] wb_workfn+0x397/0x1910 [ 672.848338][ T3705] process_scheduled_works+0xb91/0x1d80 [ 672.854074][ T3705] worker_thread+0xedf/0x1590 [ 672.858936][ T3705] kthread+0xd5c/0xf00 [ 672.863136][ T3705] ret_from_fork+0x1f5/0x4c0 [ 672.867901][ T3705] ret_from_fork_asm+0x1a/0x30 [ 672.872845][ T3705] [ 672.875243][ T3705] Uninit was created at: [ 672.879720][ T3705] __alloc_frozen_pages_noprof+0x689/0xf00 [ 672.885728][ T3705] alloc_pages_mpol+0x328/0x860 [ 672.890743][ T3705] folio_alloc_noprof+0x109/0x360 [ 672.895926][ T3705] filemap_alloc_folio_noprof+0x9d/0x420 [ 672.901715][ T3705] __filemap_get_folio+0xb45/0x1930 [ 672.907060][ T3705] ext4_write_begin+0x6d9/0x2d70 [ 672.912142][ T3705] ext4_da_write_begin+0x77c/0x1490 [ 672.917490][ T3705] generic_perform_write+0x365/0x1050 [ 672.923038][ T3705] ext4_buffered_write_iter+0x61a/0xce0 [ 672.928775][ T3705] ext4_file_write_iter+0x2a2/0x3d90 [ 672.934254][ T3705] vfs_write+0xbe2/0x15d0 [ 672.938706][ T3705] __x64_sys_pwrite64+0x2ab/0x3b0 [ 672.943873][ T3705] x64_sys_call+0xe77/0x3e30 [ 672.948643][ T3705] do_syscall_64+0xd9/0xfa0 [ 672.953329][ T3705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.959474][ T3705] [ 672.961918][ T3705] CPU: 0 UID: 0 PID: 3705 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(none) [ 672.971619][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.981822][ T3705] Workqueue: writeback wb_workfn (flush-7:9) [ 672.988032][ T3705] ===================================================== [ 672.995055][ T3705] Disabling lock debugging due to kernel taint [ 673.001309][ T3705] Kernel panic - not syncing: kmsan.panic set ... [ 673.007846][ T3705] CPU: 0 UID: 0 PID: 3705 Comm: kworker/u8:18 Tainted: G B syzkaller #0 PREEMPT(none) [ 673.019146][ T3705] Tainted: [B]=BAD_PAGE [ 673.023383][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.033584][ T3705] Workqueue: writeback wb_workfn (flush-7:9) [ 673.039813][ T3705] Call Trace: [ 673.043187][ T3705] [ 673.046202][ T3705] __dump_stack+0x26/0x30 [ 673.050713][ T3705] dump_stack_lvl+0x53/0x270 [ 673.055481][ T3705] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 673.061483][ T3705] dump_stack+0x1e/0x25 [ 673.065812][ T3705] vpanic+0x435/0xd30 [ 673.069995][ T3705] panic+0x15d/0x160 [ 673.074113][ T3705] kmsan_report+0x31c/0x320 [ 673.078781][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.084053][ T3705] ? __msan_warning+0x1b/0x30 [ 673.088873][ T3705] ? aes_encrypt+0x1239/0x1960 [ 673.093811][ T3705] ? aesti_encrypt+0x7d/0xf0 [ 673.098583][ T3705] ? cipher_crypt_one+0x120/0x2e0 [ 673.103754][ T3705] ? crypto_cipher_encrypt_one+0x33/0x40 [ 673.109545][ T3705] ? adiantum_crypt+0x939/0xe60 [ 673.114569][ T3705] ? adiantum_encrypt+0x33/0x40 [ 673.119582][ T3705] ? crypto_skcipher_encrypt+0x18a/0x1e0 [ 673.125395][ T3705] ? fscrypt_crypt_data_unit+0x38e/0x590 [ 673.131240][ T3705] ? fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 673.137877][ T3705] ? ext4_bio_write_folio+0x1383/0x30d0 [ 673.143609][ T3705] ? ext4_do_writepages+0x3c08/0x8020 [ 673.149180][ T3705] ? ext4_writepages+0x338/0x870 [ 673.154262][ T3705] ? do_writepages+0x3f2/0x860 [ 673.159253][ T3705] ? __writeback_single_inode+0x101/0x1190 [ 673.165271][ T3705] ? writeback_sb_inodes+0xac1/0x1cb0 [ 673.170835][ T3705] ? wb_writeback+0x4ce/0xc00 [ 673.175694][ T3705] ? wb_workfn+0x397/0x1910 [ 673.180358][ T3705] ? process_scheduled_works+0xb91/0x1d80 [ 673.186282][ T3705] ? worker_thread+0xedf/0x1590 [ 673.191339][ T3705] ? kthread+0xd5c/0xf00 [ 673.195728][ T3705] ? ret_from_fork+0x1f5/0x4c0 [ 673.200686][ T3705] ? ret_from_fork_asm+0x1a/0x30 [ 673.205820][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.211102][ T3705] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 673.217666][ T3705] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 673.223966][ T3705] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 673.229965][ T3705] ? stack_depot_save_flags+0x615/0x7b0 [ 673.235683][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.240965][ T3705] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 673.246953][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.252247][ T3705] __msan_warning+0x1b/0x30 [ 673.256904][ T3705] aes_encrypt+0x1239/0x1960 [ 673.261777][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.267097][ T3705] aesti_encrypt+0x7d/0xf0 [ 673.271706][ T3705] cipher_crypt_one+0x120/0x2e0 [ 673.276717][ T3705] ? __pfx_aesti_encrypt+0x10/0x10 [ 673.282035][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.287326][ T3705] crypto_cipher_encrypt_one+0x33/0x40 [ 673.292976][ T3705] adiantum_crypt+0x939/0xe60 [ 673.297957][ T3705] ? __pfx_adiantum_encrypt+0x10/0x10 [ 673.303513][ T3705] adiantum_encrypt+0x33/0x40 [ 673.308367][ T3705] crypto_skcipher_encrypt+0x18a/0x1e0 [ 673.314013][ T3705] fscrypt_crypt_data_unit+0x38e/0x590 [ 673.319745][ T3705] ? alloc_pages_mpol+0x52c/0x860 [ 673.324928][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.330218][ T3705] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 673.336213][ T3705] ? alloc_pages_noprof+0x141/0x280 [ 673.341591][ T3705] ? mempool_alloc_pages+0x35/0x50 [ 673.346944][ T3705] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 673.353457][ T3705] ext4_bio_write_folio+0x1383/0x30d0 [ 673.359078][ T3705] ext4_do_writepages+0x3c08/0x8020 [ 673.364482][ T3705] ? kfree+0x4e3/0x1460 [ 673.368781][ T3705] ? ieee80211_inform_bss+0x1415/0x1540 [ 673.374509][ T3705] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 673.380999][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.386285][ T3705] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 673.392434][ T3705] ext4_writepages+0x338/0x870 [ 673.397376][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.402677][ T3705] ? __pfx_ext4_writepages+0x10/0x10 [ 673.408112][ T3705] do_writepages+0x3f2/0x860 [ 673.412898][ T3705] ? stack_depot_save_flags+0x35/0x7b0 [ 673.418530][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.423815][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.429115][ T3705] __writeback_single_inode+0x101/0x1190 [ 673.434968][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.440264][ T3705] writeback_sb_inodes+0xac1/0x1cb0 [ 673.445812][ T3705] wb_writeback+0x4ce/0xc00 [ 673.450522][ T3705] ? queue_io+0x471/0x790 [ 673.455060][ T3705] wb_workfn+0x397/0x1910 [ 673.459560][ T3705] ? kmsan_get_metadata+0xfb/0x160 [ 673.464883][ T3705] ? __pfx_wb_workfn+0x10/0x10 [ 673.469815][ T3705] process_scheduled_works+0xb91/0x1d80 [ 673.475624][ T3705] worker_thread+0xedf/0x1590 [ 673.480534][ T3705] kthread+0xd5c/0xf00 [ 673.484740][ T3705] ? __pfx_worker_thread+0x10/0x10 [ 673.490076][ T3705] ? __pfx_kthread+0x10/0x10 [ 673.494815][ T3705] ret_from_fork+0x1f5/0x4c0 [ 673.499593][ T3705] ? __pfx_kthread+0x10/0x10 [ 673.504330][ T3705] ret_from_fork_asm+0x1a/0x30 [ 673.509315][ T3705] [ 673.512811][ T3705] Kernel Offset: disabled [ 673.517192][ T3705] Rebooting in 86400 seconds..