last executing test programs: 10.575783548s ago: executing program 4 (id=1319): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xa4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000000)) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 10.519840572s ago: executing program 1 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x3, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$unix(0x1, 0x5, 0x0) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000a004e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f6000000080001001c0000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c00000008"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) vmsplice(r2, &(0x7f0000001980)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="f5042f58b438cc98c59b7a16390105d7394e76237dcb9853fc4558fd6f54d140465b46286d42d614a08593bf2309cdd1789b9375a83d511dc357a0dd56d046459028fae3b244f663d9e39b9d78893224fe3f03a084212e043f175de7d31a586134e25031b7b7cb9aed463f697243ceea2b87ec8a2fdb821b8f6c3d21f3e13685c52f49499283c3b6c1c19b32a7ff23fce67a33111aff08ff8b4f6c4e4aad0585664962ea19a06351d6c9128a28e2309a7db5047e070a9b9c50e335972b362751ae9d8fcebf37d558b643b14cd04242fb4a7ad3986e2d", 0xd6}, {&(0x7f0000001780)="ad6cadfc242c9e554e01bc2b280b984a500ae34050a16cd247bf7f793667158faf51908d9554468e2b618c85641abe89296dc6df31a65fa16bc80612473c0722b6b27243bcee2b3472a9e2b23fc647166cbb99fc7890326a7cd7a409b253d7612cefc2783773189ba639483669512d45cbc7628eb43fcf3511f449d215a22e7d1b4b5b56ef36b0b20fba088c73b82a8c83f19b3e8a19ba80d1e4d8ae46ed526dd2ad5ef594052e09f57f9b6d5183c04042b30f77cfaea3baceabea9d4b9b25a0b748819828fee5604b", 0xc9}, {&(0x7f0000000380)="9fee93c4783f92b48d2d824e324386c630da64117f94ad77057b9d8fbfaf3231358efce85e974398fc87e6224ca0137aab0974891753f135de29d27f5d11d6032d7e4e60706278c4593bcca2f51920447c57380077952d050fc3b9bafc65ec91b577bea2c4e61254fc8eff", 0x6b}, {&(0x7f0000001880)="601bdfd27db70d257651a0f61de597d35cd85bcdc763774e69075f5039ac4dd4bc6172bae69c7014beed941fa789a254bd66db8c08e2835175919f51c7d0a65516066c1be5474116b0b2678a34d3656aa8829fad68c9f832855d5bc770fe283338d324c7b570e58161f010ca5f16c6fa511a845a8ed80092d167c3667dc99d6b28d8be6e4717e0200adfbe153eccb4b15d2f93af74083c54c10bca4cfc2463eb02b89aa32eaa225f13ac0dee61649f64fa3d91cac7aa50e807f046efa6257c4adf0eb4511e6925808b24cf824d166b9532", 0xd1}], 0x5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a98001280110001006272696467655f736c617665000000008000058005001900030000000500090001000000050005000400000008002500000000000500040000000000050007000000000005000a00000000000500080000000000040018000500060001000000060002000101000080000000000000000500090001000000050019000000000006001f00060000000500010003000000140003006272696467655f736c6176655f30"], 0xcc}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 9.932130778s ago: executing program 1 (id=1323): sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmsg(r7, 0x0, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) 7.919011725s ago: executing program 1 (id=1325): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b46ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x5514, &(0x7f0000013680)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "285c720592a1812d"}, 0x10}, 0x1, 0x0, 0x0, 0x2018055}, 0x44) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000010000104000000000300000000000000", @ANYRES32=r8, @ANYBLOB="000000000d1c0000400012800e00010069703665727370616e0000002c000280040012000500080004000000050016000200000014000700ff020000000000000000000000000001c6b258f97ec3f34189dd8f54def3db0276485b70d560ec4b2b7bcae922d6d8cbe546bfe80d36e80d206868b64c6664398f815e5804d5af5b33936135a0f34416c8"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x12) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x40000000) 7.840443451s ago: executing program 0 (id=1327): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xf9, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005280)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0x1, 0xffff}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x44810) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) 6.981063398s ago: executing program 2 (id=1329): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1002, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) write$UHID_INPUT(r5, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x6, 0x1}}, 0x28) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) 6.848029978s ago: executing program 3 (id=1330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b637075c0"], 0x5) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x32, 0x829, 0x3, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) r9 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r9) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) 6.367545915s ago: executing program 0 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b637075c0"], 0x5) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x32, 0x829, 0x3, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) r9 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r9) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) 6.096222836s ago: executing program 1 (id=1332): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mknodat$null(0xffffffffffffff9c, 0x0, 0x1000, 0x103) openat(0xffffffffffffff9c, 0x0, 0x42, 0x18e) inotify_init1(0x80000) 6.023559492s ago: executing program 2 (id=1333): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = userfaultfd(0x0) fchdir(r1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x40004000, &(0x7f0000000080)="c368b6118f633d67782423152562033c00261a08cfbed4af1c9a25e31bc1e61b1c9b83cb9d5e6242543de8503eeaacb0ab5b05f47a749e9293a3b0a9780ce1", 0x3f, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000340)="9e31221a8f72c4c6248a74aef429413ce9b5fe42b42512a04bc5a73d0d9d26cb664c609bfc02bdfc1720d84a3a4f") socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "6b92a13774ec4d0e9c7a8e7d7d3de18707fbab6e3dffd37a67ee45cc2f77f830", "8a1fd67822b5127335d55599e25082f8", {"9c0819b1de901baa65999d34cec64ee8", "d2233a28ba87c0dd91c3baa08773528e"}}}}}}}}, 0x0) 5.862843824s ago: executing program 3 (id=1334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48) recvmmsg$unix(r1, &(0x7f0000003780)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000000)=[{&(0x7f00000007c0)=""/175, 0xaf}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000a40)=""/124, 0x7c}, {0x0}, {&(0x7f0000000ac0)=""/115, 0x73}, {&(0x7f0000000c00)=""/221, 0xdd}], 0x7, &(0x7f0000000d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f00000010c0)=[{0x0}, {0x0}, {&(0x7f0000000ec0)=""/117, 0x75}, {&(0x7f0000000f40)=""/81, 0x51}, {&(0x7f0000000fc0)=""/208, 0xd0}], 0x5, &(0x7f0000001140)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000880)=""/41, 0x29}, {&(0x7f0000001240)=""/104, 0x68}, {0x0}, {&(0x7f0000001400)=""/240, 0xf0}], 0x5, &(0x7f0000001580)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000003740)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/61, 0x3d}, {&(0x7f00000036c0)=""/89, 0x59}], 0x4}}], 0x5, 0x2000, &(0x7f00000038c0)={0x77359400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r6}, 0x18) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 5.715381146s ago: executing program 4 (id=1335): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = userfaultfd(0x0) fchdir(r1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x40004000, &(0x7f0000000080)="c368b6118f633d67782423152562033c00261a08cfbed4af1c9a25e31bc1e61b1c9b83cb9d5e6242543de8503eeaacb0ab5b05f47a749e9293a3b0a9780ce1", 0x3f, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000340)="9e31221a8f72c4c6248a74aef429413ce9b5fe42b42512a04bc5a73d0d9d26cb664c609bfc02bdfc1720d84a3a4f") socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180), 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "6b92a13774ec4d0e9c7a8e7d7d3de18707fbab6e3dffd37a67ee45cc2f77f830", "8a1fd67822b5127335d55599e25082f8", {"9c0819b1de901baa65999d34cec64ee8", "d2233a28ba87c0dd91c3baa08773528e"}}}}}}}}, 0x0) 4.121354699s ago: executing program 0 (id=1336): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffffffba, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000001c0)=']', 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000002540)=""/4086, &(0x7f0000000180)=0xff6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x45) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="a46ba26c290b", 0x6}, {&(0x7f0000000200)="1d9482e0af361e37d922a872e4bd6eb7d07aedd38a06c0a57143e30b38b480e67bcd99c86e524cac82f23cf95544da85b1a3c024f6946384219483986ffa0ed554323925061dfdfb1c0275", 0x4b}], 0x2}}], 0x1, 0x42040810) sendto$inet6(r3, &(0x7f0000000440)="ed6d", 0x2, 0x20003bc4, 0x0, 0x0) 4.107987521s ago: executing program 3 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x3, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$unix(0x1, 0x5, 0x0) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) vmsplice(r1, &(0x7f0000001980)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="f5042f58b438cc98c59b7a16390105d7394e76237dcb9853fc4558fd6f54d140465b46286d42d614a08593bf2309cdd1789b9375a83d511dc357a0dd56d046459028fae3b244f663d9e39b9d78893224fe3f03a084212e043f175de7d31a586134e25031b7b7cb9aed463f697243ceea2b87ec8a2fdb821b8f6c3d21f3e13685c52f49499283c3b6c1c19b32a7ff23fce67a33111aff08ff8b4f6c4e4aad0585664962ea19a06351d6c9128a28e2309a7db5047e070a9b9c50e335972b362751ae9d8fcebf37d558b643b14cd04242fb4a7ad3986e2d", 0xd6}, {&(0x7f0000001780)="ad6cadfc242c9e554e01bc2b280b984a500ae34050a16cd247bf7f793667158faf51908d9554468e2b618c85641abe89296dc6df31a65fa16bc80612473c0722b6b27243bcee2b3472a9e2b23fc647166cbb99fc7890326a7cd7a409b253d7612cefc2783773189ba639483669512d45cbc7628eb43fcf3511f449d215a22e7d1b4b5b56ef36b0b20fba088c73b82a8c83f19b3e8a19ba80d1e4d8ae46ed526dd2ad5ef594052e09f57f9b6d5183c04042b30f77cfaea3baceabea9d4b9b25a0b748819828fee5604b", 0xc9}, {&(0x7f0000000380)="9fee93c4783f92b48d2d824e324386c630da64117f94ad77057b9d8fbfaf3231358efce85e974398fc87e6224ca0137aab0974891753f135de29d27f5d11d6032d7e4e60706278c4593bcca2f51920447c57380077952d050fc3b9bafc65ec91b577bea2c4e61254fc8eff", 0x6b}, {&(0x7f0000001880)="601bdfd27db70d257651a0f61de597d35cd85bcdc763774e69075f5039ac4dd4bc6172bae69c7014beed941fa789a254bd66db8c08e2835175919f51c7d0a65516066c1be5474116b0b2678a34d3656aa8829fad68c9f832855d5bc770fe283338d324c7b570e58161f010ca5f16c6fa511a845a8ed80092d167c3667dc99d6b28d8be6e4717e0200adfbe153eccb4b15d2f93af74083c54c10bca4cfc2463eb02b89aa32eaa225f13ac0dee61649f64fa3d91cac7aa50e807f046efa6257c4adf0eb4511e6925808b24cf824d166b9532", 0xd1}], 0x5, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a98001280110001006272696467655f736c617665000000008000058005001900030000000500090001000000050005000400000008002500000000000500040000000000050007000000000005000a00000000000500080000000000040018000500060001000000060002000101000080000000000000000500090001000000050019000000000006001f00060000000500010003000000140003006272696467655f736c6176655f30"], 0xcc}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 3.979985091s ago: executing program 2 (id=1338): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) tee(0xffffffffffffffff, r2, 0x8, 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002bc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="110f25bd7000fddbdf250f000000367df63dff12c65bd205bf3fab5f879fce5164ded63a4aaff14ef32e9b218324c486ce794bf562af84860c34b27f000742534fc5cf000000001d00007a4f2ba9f42b15fdb958883a7142344f49ecba2320865e5df514f3268e082484b7d2f8a8da"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@journal_async_commit}], [{@fsname={'fsname', 0x3d, 'grpquota'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+*&[+-,&\'\xf0\\'}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}, 0x1, 0x579, &(0x7f0000000680)="$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") 3.811895984s ago: executing program 1 (id=1339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b637075c0"], 0x5) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x32, 0x829, 0x3, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r9) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) 3.724156011s ago: executing program 0 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x102, 0x547b, 0x103d, 0x200000000006, 0x20000000000000, 0x3aa, 0x1, 0x1, 0xf, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x4, 0x4000}) r5 = syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x181c411, &(0x7f0000000040)=ANY=[], 0x1, 0x224, &(0x7f0000000900)="$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") ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6, 0x0, 0x500000000000000}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r5, @ANYRES32=r1, @ANYRES64=r7], 0x54}}, 0x4004) 2.592722458s ago: executing program 4 (id=1341): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) userfaultfd(0x1) r2 = syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x62dd, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x8, 0x81, 0x100100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x81, 0x0, 0x5, 0xd, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2.467999199s ago: executing program 2 (id=1342): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffffffba, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000001c0)=']', 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000002540)=""/4086, &(0x7f0000000180)=0xff6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x45) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="a46ba26c290b", 0x6}, {&(0x7f0000000200)="1d9482e0af361e37d922a872e4bd6eb7d07aedd38a06c0a57143e30b38b480e67bcd99c86e524cac82f23cf95544da85b1a3c024f6946384219483986ffa0ed554323925061dfdfb1c0275", 0x4b}], 0x2}}], 0x1, 0x42040810) sendto$inet6(r3, &(0x7f0000000440)="ed6d", 0x2, 0x20003bc4, 0x0, 0x0) 2.412998252s ago: executing program 2 (id=1343): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b46ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x5514, &(0x7f0000013680)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "285c720592a1812d"}, 0x10}, 0x1, 0x0, 0x0, 0x2018055}, 0x44) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000010000104000000000300000000000000", @ANYRES32=r8, @ANYBLOB="000000000d1c0000400012800e00010069703665727370616e0000002c000280040012000500080004000000050016000200000014000700ff020000000000000000000000000001c6b258f97ec3f34189dd8f54def3db0276485b70d560ec4b2b7bcae922d6d8cbe546bfe80d36e80d206868b64c6664398f815e5804d5af5b33936135a0f34416c8"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x12) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x40000000) 2.398298664s ago: executing program 3 (id=1344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x40, 0xac, 0xe7, 0x3}, {0x0, 0x7, 0x9, 0xf}]}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000180)=0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) 1.385102493s ago: executing program 3 (id=1345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b637075c0"], 0x5) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x32, 0x829, 0x3, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) r9 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r9) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) 1.344965325s ago: executing program 4 (id=1346): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x2d, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x1, 0x0, 0x1, 0x0, 0x2, 0x20, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x2, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x38}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x1, 0x2, 0x6, 0x8, 0x4, 0xfffffffffffffffe, 0xfffffffffffffff0}, @ldst={0x1, 0x2, 0x4, 0xb, 0xa, 0x6, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4329b20f9f8e6cd8, 0x1, 0x1, 0x5, 0xa, 0x1, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x800, 0xd8, &(0x7f0000000780)=""/216, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x9, 0x3da, 0x200}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x1], &(0x7f0000000300)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x7) 1.329535717s ago: executing program 0 (id=1347): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x8, 0x285a, 0xffffbfff, 0x4c405, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 841.767475ms ago: executing program 1 (id=1348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x40, 0xac, 0xe7, 0x3}, {0x0, 0x7, 0x9, 0xf}]}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000180)=0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) 840.603735ms ago: executing program 4 (id=1349): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mknodat$null(0xffffffffffffff9c, 0x0, 0x1000, 0x103) openat(0xffffffffffffff9c, 0x0, 0x42, 0x18e) inotify_init1(0x80000) 312.106076ms ago: executing program 0 (id=1350): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000004dd"], 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x840) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xf9, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005280)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0x1, 0xffff}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x44810) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) 311.344926ms ago: executing program 3 (id=1351): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1002, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) write$UHID_INPUT(r5, &(0x7f0000001dc0)={0x8, {"00303a150d1e8781901b09e2ccd28566214e8fe724bfabbe47aabcd9915ef6c7c8186fe92c6f0622a5a63850cbde3ea98f0344731a4f79ff70e4ad7f4bc360864b2d6254a8e1a54e7f386f974a5ebc461cd060bc80019e6b39de95b98d913e0df7a80acdfca6e88d1522a20e23edc9204e4b1c03fe35b2c1663102b74ff748558483c89ad619c58b7ce3e735894e69ee38402104842b362fd3ab424658a242ebc66c957dd77fe97ef7c99f946ef7ae3b1c7c92d844aacff7ed3fa6775d16f726a693a447954dc2a9047074a054afa0b228aa6669e374997ac9ef68cf9edb7d780aa9fa05ed5a24924190e8cd07af6ea1cd6d5c8ddc5567ffbee8f15696dc535c8fb331a71e3d5133591e4d1a1c6439e19f323dda510111777071dbd5af0b30d77a3db49ca536578ef6200de176f7218875e9979d90e064e003abb97f12b0f1d84ff7913fc1e22eeac691cbe335589fe75ca11891ea3a9a26f3f7350a946724197d2d13dd06faae99d68b1cc62938855c4f828f1256e62f9bb6d0b350af1d89c8b22f19b1854d8fcd537c25b104b0762a38aec5cbefeaca381a69e40b1f30167bcf02e99bf6674d5967f7c9eb1c7d6b4585745d2c6bddaf5d0b8db6b7678b034b420d1d5b6f6a54603b5c6aad09c8832a0ebfbc5b35801a867f90b7bb3df192ab5389f705960ceab0af4dfeba50b187e6d5f621397d21aa3d193111879c6d5a84579e072e6d04df0f8bf2e760d9bab57bb74fd4fa348b9e162615910422bccacf39341bd59f41e05c678d2acdd5d4b3ac74fa4485359b32348f0b928bd1b440dff2d841e646335367ed4c87c0e39f0df1098a0d9f5e4864be05d07398b5bbbec035eb893d5096f8e2d1afd0c7688a2fed31ec163f4c0c1d533f0edce8a567e2155f93f5a961cfe5a07f6450fe130fa3d4f61584c2922b9b0e06c3137010c1f792fb996a46cd8d55038092af8e13c4c445fe289620699947e337fcb1567d5b8b62ee8f4259d2546bc57fae9bdaa430ab51965e111b90222cba923e13b9a5511e08add75a9375fb0b966a66c54109a7e0cbec748d7c30cd3bbe5bf193565c929c4e536a73f9b8679fa207b8c6807e4aa87601e9774bd93dfccd4f316a4577d1e15b0f5b966948f634a2879bb6e6b4c36ef37a9f9efe4a38bba94bcf5cc9a9524cbd556eff32e0592d74c478d9993b3f550e4d4f661d3bad321150dea21d9d36fb9da53b312bdcaf7cbedc52eb8ffdef9c5df273c6da3e620d6953ad8580d39861a92ae689bb75a49a13734df052dfc6f058fef731868ac6afe84b39e463af04e8f3cc885545a4c015629fd1a649c9b0a85434132a558067b449fbb69d44f638dd417211059c1b17331d6f54c2da8f02b7dae57da1984002ef219633fe4bf82df95e81b00f966920ef8037b7f0186a1b7c57b673a34a7d3f3326004e72e5712022afcdd51084e37e26a3b624ddb0d3c8d722c3b097dfd668c4ab2fbd6f2d0b8295ea841e45e6b62d9d3829b9df730efafcf01bccb7ccea627db3323e57f3d7466fc17c72a4340b34e96bf7498aac7a313922b377a77d548a9746a6d6ff750695c3acac547dd4221bbdbe04373e7cd752b2b3ec793666b67bc6a3d36e570e4bc8bed6910e48651c1ebe75f77e7a5a438644d5a46f6bbe56a8d9291f05d8c1071fa6e33040dd77bade2d9d35d2f9c702bdf6f27dda27b38e097f1b3313695c058770de3fbd507beb794986f9cc7e05ce25250e2e895152a8386a732c4c3c67427217176dda27036725a26f86e632125b9c02f0730572a2c1042ef6434b2800d962ae77f021b970d8d243b4b8b0dd85a9366621d763f6791e2b615d9f677b5a0b5f2ac6b1050a6933412d4459ca98145eb7d42c49953ad508e2e72f773d7385c42c02aac7765f2cc8f5f9e81af780619bb7115c3609eed50146f2445d8aa0e63e177f8c8c277060e4f42c9eff6c577ec0af0cc59623a057111fe80cef6e7cb54eb9aec20f83e37e5ceb1d4d3f8a540bd1babb39752f0d929ed8c70a45534724ada1439a43a3a24b18841d9ea1f89f14005c2df332965e1925ecf07d7cd8ef96fefe5a9c2daf0504630bc75b6e1ea2664ba1e5635106988fddf9e29d337e4c519e30cf4ff4b744c7f7434cdec01c9e1b2e32ca160e9f61b2c9170eeda86a49e216448fcf78c84b1763d766cec7e995f1b081b6e38b1b7739d78c1c3e6b55f4d4bd8678d933ddff11915148d1b162410a5dc3390f44539e4a6c2363c37858169041581555dd592ba3f5f8621ee76756dea04184b91d6bc1dc6cfb1bf9378cdcf181bd66df31478dd25327eaa8693b3b74af1639423d240647c9a99f5b5c6e9a6200559a90e3db0a5684af5712c6cfe28bb04aa9ca8ec750cde1da9f508c967d2b52417c37ab1a6418c78844be54cf00c255e6c4f711eb20f6d5afcbc374a16ea5a9c409da48b06a8134e2aaf4b5ba54c7e9b0b147156315bc7f29ae9bcac52cee2e0a7777729a6bb5ad9c6eda1badd9a1d7e30573bf60769b70d06d6be399dda53bd515fa57ec161b90f7b543c0a2324c9f0d360da99f7bd920e2f399e131469a79215ff6a1dc9663b22113150ae95bc2fae294a6628430a84afbc4741deec9837d75daa7ea6b5706700e92e9aaaa6a722c4448892b50fbeda724eea56910672f404fb874dbd7db99afafb0d4a914128627e8df3e4327c1acfdb585890fe49546d3d9dceb48478e3a89f6edf926f483f81ad482e4261db113396bdfce4f3a54a7b7b2f47140edf318c3dac2b9480cf819e3649db24099ef665fb9cca149f5b63ed9d473511e814c05eb024eca30cc1f2e55b589a0fee8077ba01cef9a633270a3809773c0caf9e272a89d77ee251ed1fea9e943eda6802c0a8d74a7b42e63d286431b7d491761ab8e1f8d6e0f6482adde0268c84891b5053c078074311caf39304af9a964bdafa4dee5e83e61b88497913c5e85b1fc396b745c95be4693573bf9f2c932895ea64c27ec96d98591bc09f8b6478be8464b1e201d7efc3a54f38c81b6bc13c051a6675ec50ef2b68fff0217b1f732448f5210b226cbed1b2a9ee8cf0c9fc1121b433952fd458737eb51eff30a0ce8203ee692fa5decb965523d85c4502f2a5f3d52c1a70c9b8ac635a618f5e83b6c12dc02ca6014dfd4fa4625fe79d74a43cef9ce6b438e496236dd856965551317b07525c915ae8a5eaa39ca2f2084ef466d7b093f8b2af82eb66a45bd20ed296101881ac6c34c47ed0385a34a243f2521ef070b99f492d133fc832e26276d07128e353858813eea51e3b0d32856a30b4311f8fb36391fb27529ec707722e1fb41bfc7d26c230894840827e573c69cb4d5f74b68ee1811cb70daf46cf813dcf83df1e9d441bcf75902bd1e6f6244cdcc42e3d45d66af17d3c2bcdd86402b8eedcabc60cd808841b8a8d3e7d6997b3910edd32026b5c3d339e1f8058660e2b2a14623974bec834ec2baa525b5d56c68e4b4d28c95ec0208efd66310bcafb20898b885af393f68cbfb41f4d79dd55944a0b047e9b79b7a0fc4b47e0e58ab2662b68887f6ba7a68f913d3711b72cb3c3e31fe5ff80360520c9c84849fbcc249f507d36c8b2d1d78f709c67ef0bfec74d3e29aa2ee7c338a9e0f0035107dbc2e88dcd86288f771f8ad5f737df1396d00fce058310f823d43848cb481afd0027e0c2cab42fa0077d7560e4dd85b5c13f7ba54bc0bb8a94414c17f82a927f9e31cb0dfa17c7878737c8db87f9e3ec6f33b2e594155539563604966686740cb4d64ad9614d398da996e2f8c04de6c16b68a253851876c04ac65717f1a61587f67d5dabec2ea0d8b9a12599280754f418053ace42ba4cae373d81a28474b612fad8bb4f3cdfa1eaab60a81042a2a579c3d656e1c590a2c17970577bdb1d1f3d9b5865176e4409afa6ac145fde0df1df728b7c523c8a4ca300d78ae804abfc20a65d64927523d458afdbd3fc602d6c2258113781f6711be4cd4291482d0fc2408b4d4b03ff477a4b9dc476a7309475a0ef79378ccabd230f43aff420f9550025a9fc2131391ce57d998eccee237ee4bdef0876e529a274b398ca1cf84c4b71d187d01211b5544267f6d915bae83074d711d2242d1cfa988116c054dc1b403cc64ed604240e8778dab16a14b9a49183a6922f070f1a70dcfcf14b920a4b6f04fe338988666f71859d828b5f9f5874146cb450489afb60d53fba4abdec96c74e248545c4bead614790b9f6a311ce566bac4737b57f6d7a1588559cedd43c107b198c8cc5338d9b9d8ada0d8be209199a78c54ee973f4a056650be3efb27f6e6657ddada590c465ff0b6b45b3a692570749877cebafdfaded3318d06ad162a129371d78aab31fa62f9756186de2e4033eb121ff218a00534594a0153a18cab5d33131681b1c3ce97ddf4127289d1b72ba4885267d7aa0e27e58e41bf255469b283ab9603b476098d50e3bcbe44c059090ba15ce494850aa0a5ff1a3358a0f90a1965c13fa53d3964e9419b72f8f9cbef9b2e001cf8e83ce72f1d1c33a20e46a66ac76e7d124d63dbf2ec4372afc29eece9347c9eae3a29e8f6e42b2c2e85c67831645e67aa3ad58382b68d3f2aaadd6ce8d199832632082921116cca6f7cf2f3895be1222d1d6822ed05a4c045bd84121158d881e9180f622fac59295790016217d07b9c4527e5d087bf84b11042638ece8382b5879f22232bc287f81889893b0e0bd8415dd7266a814e80b3705aa121d8990279e9ecfe0f10c8bdfa7d12a61dd29a240cb45ed544bc29a4e105464fb814ce756b6b8b2929fc2b21a005f6537e712992c6057c9328bd2bde3e8fd83363fd9da1747eaaa43ea27d9d1871aaec644cdbf94d29fb124100dcfc78fdd269c9d191b7bd7d65ee68d7d9c45581b7437fdb9ae876ef8c259a2aca64fd0e4288982e2f2f4897b884ec20574c2ac7b3d4b440f1ccc6f31861340e2835c6c39e04cdd6c17fb8831ab2be8f54f99912b97a993f90ab142e11d271cb8dd0f695cf53921de6390c06df1ac7b55e13ecde62677d5335ad41e13cef7e8d7b421c7296992a1ce2cec0eb69e96f4b139d7b229929509ee3581952ccdff21a779d2a7f7fbe137fcebbc24def70cef7d63d18f2ba5f087197d7fda0dfd3648ceba31606c37297d486f55f75d9cf4adc33f75edfff2422e9a1d52381959dbc9ad4b5cdd2aa0d9d7c26c9b71b7c242d222025539f16b762a33089ad9370c34444d7d6e71ac54c7910aa0e0d63abacd51097baf08a6f5c3b81fd364010e43d9876ffbf529741dd98e88d1d940cf2419ba4b81a48b9cc8749f2383bd0a57b4c09f6c0fd4b44fb0b74ae4a0b318732be9f6e731277623596fe98c55cadb89f139bfa778316b5465b88dfe6fa7282ab231fd4ec49edecc6ac7fb70acf6e89a48e54f19d54f7170b91ec43cb67119f49e62a5311fef9a9b1c0430889cb9f5a6e8f1b787434aee8ec08a543916cb3fa74f9fd5a3d65a2ce3fc57c9892df139aced988dd5905e9721c12f009d4afa7783c25fa4a5d72629bb8d4b5fa635479e22a616e6c005eb9e6d818aeac25b0e0fbc2174d8d721a5cd20d7c3c7f8052268e42e790fba5a9729a927fd30c01d253fac1e31e1334b6c36b38f068ffb479c036d928700af668a1cb390d39c4989fc548eabf4ec27b5323109f1bfec782f7aa21ed3084e693acb97b49baef8793d96ef5305f574fa897352d9974be7b6aeb0f49cbff6700", 0x1000}}, 0x1006) 251.871781ms ago: executing program 2 (id=1352): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$eJzs3c9rHG0dAPDvzCZ5kzS+6SsiNigGPLQgTZNarHqxrQd7KFiwBxEPDU1SQ7c/SFKwtdAEPCgoiHgt0ov/gHfp3ZsI6s2zUEUqFrR0ZWZnm81mN7ttsrtJ5vOBzT7zzLN5nm9mn8wzM/vsBFBas9mPNOJUxNubScR007qpqK+cLcq9+teTW9kjiVrtu/9MIinyGuWT4vlEsTAeEX+8EvHpyu561x89vrNYrdU9jTi3cffBufVHj8+u3l28vXx7+d7C+a9duDj/9YULC00N/XAniuer177z+V/85IdfXflT9WwSl+LG6I+XoiWOgzIbs/G2CLE5fyQiLmaJNn+Xo+YYhFBqleL9OBoRn43pqORLddOx+vOhNg7oq1olora3pFsB4KjSvaGsGuOAxrF9b8fBN/o8Khmcl5frB0C74x8pTjmM58dGk6+SpiOj+rmNkwdQf1bHmyfjz948mXkWO85DvH63dUYOoJ5ONrci4nPt4k/ytp3MI83iT3cc6ycRMR8RY0X7vrWPNiRN6X6ch9lLj/FXsvibt0MaEZeK5yz/ygfW33paa9DxA1BOLy4XO/LNbGl7/5eNPRrjn9ge/zxtvG5q/5dkcsPe/3Ue/zX29+P5uCdtGYdlY5br7X/laGvG33529Ved6q+P/2aeNR5Z/Y2x4CC83IqYaYn/p1mwxfgniz9pM/7Nity81Fsd3/7zP652Wjfs+GvPI063Pf7ZHpVmqT2uT55bWa0uz9d/tq3j93/4wW871d8+/o/6EGl72faf7BB/0/ZPW1+X/U0etP+VW60Zv7v+/G6n+qe6bv/072NJ/XhzrMj50dbGxtpCxFhyrShS5C9ubKyd3zveepnXtfx5oR7/mS+17/873v8tUU00/mX24MH37rzqtO5D3v9NF5Pf1npsQydZ/Evdt/+u/p/l/bLHOv7z/Ydf6LSuffzJvmICAAAAAACAskrza7BJOvcunaZzc/X5sp+JybR6f33jyyv3H95bijiTfx5yNI00yT8yMl1fTlZWq8sLxedhG8vnW5a/EhGfRMSvKxP58tyt+9WlYQcPAAAAAAAAAAAAAAAAAAAAh8SJYv5/4z7V/67U5/8DJdH9BnO77v8AHBP9vMEkcLjl/X+vXfzHg2sLMFj2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCx9MkXX/w1iYjNb0zkj8xYsc6kXzjeRt+rdKVv7QAGT4+G8np36d9gH0qnp/H/f4svB+x/c4AhSNpl5oOD2t6d/0XbV27b2n/bAAAAAAAAAAAAAIC606c6z/9/v7nBwFFj2h+U1z7m//vqADjifPU/lJdjfKDLLP4Y77Si2/x/AAAAAAAAAAAAAODATOWPJJ0r5gJPRZrOzUV8KiJOxmiyslpdno+IjyPiL5XRj7LlhWE3GgAAAAAAAAAAAAAAAAAAAI6Z9UeP7yxWq8trzYn/7co53onGXVC7F671UGbPxDfjPV8VyeD/LBMRMfSN0rfESFNOErGZbflD0bC19TgczcgTQ/7HBAAAAAAAAAAAAAAAAAAAJdQ097i9md8MuEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHjb9//vkliarL+gp8I7E8OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mv4fAAD//6AzO/k=") bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xf9, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005280)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0x1, 0xffff}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x44810) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) 0s ago: executing program 4 (id=1353): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000002bc0)=ANY=[@ANYBLOB="0070d3c06d90f6b00aafe3e574047782ea462b95722660cf9cff5858b8ce71c067582af69c4dca79bb5c157222b5c727c72c7a"], 0x1, 0x550f, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) munlockall() ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffb, 0x2000003}) r1 = getpid() sched_setattr(r1, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x2e, 0x7ff, 0x80000000, 0x1, 0x8b, 0x7, 0x8}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): [ 320.451545][ T4275] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 320.461594][ T4266] F2FS-fs (loop1): Found nat_bits in checkpoint [ 320.507533][ T4275] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 320.537093][ T4280] syz.2.974[4280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.537164][ T4280] syz.2.974[4280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.559155][ T4266] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 320.591223][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 320.690012][ T4284] syz.4.975[4284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.690088][ T4284] syz.4.975[4284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.808855][ T4287] loop2: detected capacity change from 0 to 1024 [ 320.833653][ T4275] syz.0.973 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 320.861311][ T4275] netlink: 180 bytes leftover after parsing attributes in process `syz.0.973'. [ 320.878201][ T4275] netlink: 180 bytes leftover after parsing attributes in process `syz.0.973'. [ 320.917371][ T4288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 321.194270][ T283] attempt to access beyond end of device [ 321.194270][ T283] loop1: rw=2049, want=45104, limit=40427 [ 321.213411][ T20] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 321.239672][ T4287] EXT4-fs (loop2): Ignoring removed nobh option [ 321.258681][ T4287] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.974: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 321.280012][ T4285] loop4: detected capacity change from 0 to 1024 [ 321.286854][ T4287] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.974: couldn't read orphan inode 11 (err -117) [ 321.298840][ T4287] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 321.361325][ T4296] loop0: detected capacity change from 0 to 128 [ 321.390576][ T4285] EXT4-fs (loop4): Ignoring removed nobh option [ 321.669738][ T4285] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.975: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 321.691248][ T4285] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.975: couldn't read orphan inode 11 (err -117) [ 321.710538][ T4285] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 321.911954][ T4306] loop1: detected capacity change from 0 to 1024 [ 321.943804][ T4308] loop4: detected capacity change from 0 to 1024 [ 321.952284][ T4306] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 321.952284][ T4306] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 321.952284][ T4306] [ 321.971301][ T4308] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 321.971301][ T4308] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 321.971301][ T4308] [ 322.002435][ T4308] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nouser_xattr,grpid,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 322.033962][ T4306] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nouser_xattr,grpid,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 322.407179][ T4319] loop0: detected capacity change from 0 to 128 [ 322.643253][ T4319] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.671862][ T4319] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.762016][ T26] usb 4-1: USB disconnect, device number 10 [ 322.790311][ T26] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 322.840171][ T26] ftdi_sio 4-1:0.0: device disconnected [ 323.181433][ T4323] loop3: detected capacity change from 0 to 40427 [ 323.201039][ T4323] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 323.208922][ T4323] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 323.238408][ T4323] F2FS-fs (loop3): invalid crc value [ 323.284797][ T4323] F2FS-fs (loop3): Found nat_bits in checkpoint [ 323.380592][ T4337] loop2: detected capacity change from 0 to 16 [ 323.390646][ T4339] loop4: detected capacity change from 0 to 128 [ 323.438258][ T4339] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 323.448911][ T4339] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.481268][ T4337] erofs: Unknown parameter 'f較' [ 323.525987][ T4323] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 323.541035][ T4323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 323.628347][ T4327] loop1: detected capacity change from 0 to 40427 [ 323.654706][ T4346] syz.0.992[4346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.654785][ T4346] syz.0.992[4346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.671593][ T4327] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 323.710844][ T4327] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 323.733795][ T4327] F2FS-fs (loop1): invalid crc value [ 323.774686][ T4327] F2FS-fs (loop1): Found nat_bits in checkpoint [ 323.876308][ T4327] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 323.887932][ T4327] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 323.926123][ T4346] loop0: detected capacity change from 0 to 1024 [ 323.977227][ T4346] EXT4-fs (loop0): Ignoring removed nobh option [ 323.993245][ T4354] syz.3.993[4354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.993331][ T4354] syz.3.993[4354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.093031][ T4346] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.992: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 324.123631][ T4346] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.992: couldn't read orphan inode 11 (err -117) [ 324.161381][ T4346] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 324.214863][ T4359] syz.4.994[4359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.214929][ T4359] syz.4.994[4359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.236558][ T4360] loop3: detected capacity change from 0 to 1024 [ 324.344657][ T4360] EXT4-fs (loop3): Ignoring removed nobh option [ 324.401444][ T4360] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.993: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 324.447411][ T4367] loop4: detected capacity change from 0 to 1024 [ 324.495342][ T4360] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.993: couldn't read orphan inode 11 (err -117) [ 324.658911][ T4360] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 324.778395][ T4367] EXT4-fs (loop4): Ignoring removed nobh option [ 324.835721][ T4367] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.994: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 324.980099][ T4367] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.994: couldn't read orphan inode 11 (err -117) [ 324.992394][ T4367] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 325.524524][ T4375] loop1: detected capacity change from 0 to 40427 [ 325.623402][ T4375] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 325.648059][ T4375] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 325.693064][ T4375] F2FS-fs (loop1): invalid crc value [ 325.729754][ T4375] F2FS-fs (loop1): Found nat_bits in checkpoint [ 325.772777][ T4389] loop2: detected capacity change from 0 to 128 [ 325.829057][ T4375] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 325.836219][ T4375] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 325.848353][ T4389] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 325.888648][ T4390] loop0: detected capacity change from 0 to 128 [ 325.901162][ T4389] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.987216][ T4390] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.030668][ T4390] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.480474][ T4400] loop1: detected capacity change from 0 to 1024 [ 326.521989][ T4400] EXT4-fs (loop1): Unrecognized mount option "fsname=grpquota" or missing value [ 326.541053][ T4054] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 326.631470][ T4054] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 326.790870][ T4402] loop2: detected capacity change from 0 to 128 [ 326.867707][ T4402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.878483][ T4402] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.239322][ T4407] loop1: detected capacity change from 0 to 256 [ 327.313785][ T4407] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 327.317267][ T4409] syz.4.1008[4409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.360940][ T4409] syz.4.1008[4409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.384025][ T4405] loop2: detected capacity change from 0 to 40427 [ 327.413613][ T4405] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 327.421680][ T4405] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 327.430975][ T4405] F2FS-fs (loop2): invalid crc value [ 327.452396][ T4405] F2FS-fs (loop2): Found nat_bits in checkpoint [ 327.497273][ T4405] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 327.498531][ T4409] loop4: detected capacity change from 0 to 1024 [ 327.504408][ T4405] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 327.529738][ T4409] EXT4-fs (loop4): Ignoring removed nobh option [ 327.585874][ T4409] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1008: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 327.610599][ T4409] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1008: couldn't read orphan inode 11 (err -117) [ 327.611702][ T629] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 327.624104][ T4409] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 327.630804][ T20] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 328.106067][ T4431] loop2: detected capacity change from 0 to 256 [ 328.301372][ T4432] loop4: detected capacity change from 0 to 128 [ 328.354031][ T4432] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.365029][ T4432] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.437514][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 328.599787][ T629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.664634][ T629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.677878][ T629] usb 2-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 328.687189][ T629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.701230][ T629] usb 2-1: config 0 descriptor?? [ 328.793139][ T4438] loop3: detected capacity change from 0 to 40427 [ 328.860568][ T4438] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 328.868507][ T4438] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 328.871223][ T20] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 328.887411][ T4438] F2FS-fs (loop3): invalid crc value [ 328.897867][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.900624][ T4438] F2FS-fs (loop3): Found nat_bits in checkpoint [ 328.907704][ T20] usb 1-1: Product: syz [ 328.917732][ T20] usb 1-1: Manufacturer: syz [ 328.925846][ T4444] loop2: detected capacity change from 0 to 128 [ 328.932308][ T20] usb 1-1: SerialNumber: syz [ 328.937928][ T20] usb 1-1: config 0 descriptor?? [ 328.950398][ T4444] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.961263][ T4444] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.963436][ T4438] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 328.983021][ T20] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 328.987113][ T4438] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 329.000895][ T20] usb 1-1: Detected FT-X [ 329.325781][ T4452] syz.3.1018[4452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.326249][ T4452] syz.3.1018[4452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.434362][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 329.454087][ T629] itetech 0003:06CB:2968.0003: unknown main item tag 0x5 [ 329.461245][ T629] itetech 0003:06CB:2968.0003: unbalanced delimiter at end of report description [ 329.470663][ T629] itetech: probe of 0003:06CB:2968.0003 failed with error -22 [ 329.555987][ T2873] usb 2-1: USB disconnect, device number 14 [ 329.589538][ T4456] loop3: detected capacity change from 0 to 1024 [ 329.607453][ T4456] EXT4-fs (loop3): Ignoring removed nobh option [ 329.615471][ T4456] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.1018: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 329.657306][ T4456] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1018: couldn't read orphan inode 11 (err -117) [ 329.672235][ T4456] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 329.891411][ T4461] loop2: detected capacity change from 0 to 128 [ 330.023405][ T4461] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 330.034354][ T4461] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.216101][ T20] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 330.230028][ T4464] loop4: detected capacity change from 0 to 128 [ 330.303897][ T4466] syz.1.1021[4466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.304009][ T4466] syz.1.1021[4466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.666454][ T4470] loop1: detected capacity change from 0 to 1024 [ 330.730598][ T4470] EXT4-fs (loop1): Ignoring removed nobh option [ 330.752400][ T4470] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1021: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 330.781361][ T4470] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1021: couldn't read orphan inode 11 (err -117) [ 330.862157][ T4470] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 331.127268][ T4477] loop4: detected capacity change from 0 to 128 [ 331.256478][ T4477] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 331.267387][ T4477] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.452993][ T20] usb 1-1: USB disconnect, device number 16 [ 331.471573][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 331.502224][ T4480] syz.3.1023[4480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.502290][ T4480] syz.3.1023[4480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.525808][ T20] ftdi_sio 1-1:0.0: device disconnected [ 331.610353][ T4473] loop2: detected capacity change from 0 to 40427 [ 331.627375][ T4473] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 331.636955][ T4473] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 331.787781][ T4473] F2FS-fs (loop2): invalid crc value [ 331.951201][ T4473] F2FS-fs (loop2): Found nat_bits in checkpoint [ 332.007238][ T4483] loop3: detected capacity change from 0 to 1024 [ 332.031152][ T4483] EXT4-fs (loop3): Ignoring removed nobh option [ 332.048729][ T4483] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.1023: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 332.078696][ T4473] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 332.087933][ T4473] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 332.118511][ T4483] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1023: couldn't read orphan inode 11 (err -117) [ 332.152860][ T4483] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 332.259528][ T4490] loop4: detected capacity change from 0 to 40427 [ 332.301098][ T4422] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 332.399858][ T4490] F2FS-fs (loop4): Found nat_bits in checkpoint [ 332.438803][ T4490] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 333.453753][ T4509] loop0: detected capacity change from 0 to 256 [ 333.460398][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 333.691806][ T282] attempt to access beyond end of device [ 333.691806][ T282] loop4: rw=2049, want=45104, limit=40427 [ 333.710773][ T4517] loop0: detected capacity change from 0 to 128 [ 333.727468][ T4519] loop1: detected capacity change from 0 to 128 [ 333.767268][ T4521] syz.2.1035[4521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.767335][ T4521] syz.2.1035[4521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.898862][ T4521] loop2: detected capacity change from 0 to 1024 [ 333.921619][ T4519] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 333.932512][ T4519] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.964610][ T4521] EXT4-fs (loop2): Ignoring removed nobh option [ 333.977883][ T4521] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1035: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 333.997076][ T4521] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1035: couldn't read orphan inode 11 (err -117) [ 334.009081][ T4521] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 334.308070][ T4528] loop1: detected capacity change from 0 to 40427 [ 334.328178][ T4528] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 334.343341][ T4528] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 334.356867][ T4528] F2FS-fs (loop1): invalid crc value [ 334.383940][ T4528] F2FS-fs (loop1): Found nat_bits in checkpoint [ 334.421032][ T346] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 334.448679][ T4528] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 334.461035][ T4528] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 334.691035][ T346] usb 5-1: Using ep0 maxpacket: 16 [ 335.077445][ T4532] loop3: detected capacity change from 0 to 40427 [ 335.124998][ T4532] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 335.201336][ T4532] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 335.221836][ T4547] loop2: detected capacity change from 0 to 16 [ 335.238310][ T4532] F2FS-fs (loop3): invalid crc value [ 335.288227][ T4547] erofs: Unknown parameter 'f較' [ 335.298483][ T346] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 335.313975][ T4552] loop1: detected capacity change from 0 to 128 [ 335.400033][ T4552] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 335.411027][ T4552] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.691125][ T346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.699151][ T346] usb 5-1: Product: syz [ 335.703346][ T346] usb 5-1: Manufacturer: syz [ 335.707941][ T346] usb 5-1: SerialNumber: syz [ 335.713249][ T346] usb 5-1: config 0 descriptor?? [ 335.733103][ T4532] F2FS-fs (loop3): Found nat_bits in checkpoint [ 335.760427][ T346] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 335.790490][ T346] usb 5-1: Detected FT-X [ 335.803116][ T4559] loop0: detected capacity change from 0 to 16 [ 335.825533][ T4559] erofs: Unknown parameter 'f較' [ 335.833744][ T4532] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 335.840830][ T4532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 335.880699][ T4563] syz.2.1043[4563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.880773][ T4563] syz.2.1043[4563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.971068][ T346] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 336.095580][ T4566] loop2: detected capacity change from 0 to 1024 [ 336.153754][ T4566] EXT4-fs (loop2): Ignoring removed nobh option [ 336.253892][ T4566] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1043: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 336.342041][ T4571] loop1: detected capacity change from 0 to 256 [ 336.561003][ T346] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 336.596200][ T4566] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1043: couldn't read orphan inode 11 (err -117) [ 336.639467][ T4566] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 336.796031][ T4573] loop3: detected capacity change from 0 to 40427 [ 336.823731][ T4573] F2FS-fs (loop3): Found nat_bits in checkpoint [ 336.894990][ T4581] loop0: detected capacity change from 0 to 128 [ 337.204590][ T4581] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.215511][ T4581] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.235600][ T4573] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 337.500377][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'. [ 337.750056][ T4591] loop0: detected capacity change from 0 to 16 [ 337.780364][ T4591] erofs: Unknown parameter 'f較' [ 337.911098][ T4525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 337.932482][ T2873] usb 5-1: USB disconnect, device number 16 [ 337.974716][ T2873] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 338.001444][ T284] attempt to access beyond end of device [ 338.001444][ T284] loop3: rw=2049, want=45104, limit=40427 [ 338.013043][ T2873] ftdi_sio 5-1:0.0: device disconnected [ 338.177908][ T4599] loop4: detected capacity change from 0 to 128 [ 338.281467][ T4599] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.292634][ T4599] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.342008][ T4605] loop3: detected capacity change from 0 to 128 [ 338.598116][ T4601] loop1: detected capacity change from 0 to 40427 [ 338.616435][ T4601] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 338.630378][ T4601] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 338.651971][ T4601] F2FS-fs (loop1): invalid crc value [ 338.671964][ T4601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 338.726259][ T4601] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 338.743999][ T4601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 338.773833][ T4608] loop2: detected capacity change from 0 to 32768 [ 338.965921][ T4610] loop0: detected capacity change from 0 to 40427 [ 339.055637][ T4610] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 339.069864][ T4610] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 339.088930][ T4610] F2FS-fs (loop0): invalid crc value [ 339.096070][ T4610] F2FS-fs (loop0): Found nat_bits in checkpoint [ 339.187588][ T4622] loop4: detected capacity change from 0 to 16 [ 339.220787][ T4610] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 339.234831][ T4610] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 339.302914][ T4622] erofs: Unknown parameter 'f較' [ 339.986806][ T4651] syz.3.1064[4651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.986912][ T4651] syz.3.1064[4651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.393216][ T4642] loop4: detected capacity change from 0 to 40427 [ 340.429502][ T4642] F2FS-fs (loop4): Found nat_bits in checkpoint [ 340.469741][ T4642] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 340.517459][ T4665] loop3: detected capacity change from 0 to 1024 [ 340.627811][ T4665] EXT4-fs (loop3): Ignoring removed nobh option [ 341.173554][ T4668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 341.622301][ T4670] syz.1.1067[4670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.622369][ T4670] syz.1.1067[4670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.759259][ T4673] loop0: detected capacity change from 0 to 512 [ 341.777501][ T282] attempt to access beyond end of device [ 341.777501][ T282] loop4: rw=2049, want=45104, limit=40427 [ 341.822801][ T4673] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 341.829958][ T4673] EXT4-fs (loop0): Ignoring removed bh option [ 341.836311][ T4673] EXT4-fs (loop0): Test dummy encryption mode enabled [ 341.843137][ T4673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 341.870197][ T4673] EXT4-fs (loop0): 1 truncate cleaned up [ 341.875971][ T4673] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 341.897672][ T4665] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.1064: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 341.946830][ T30] audit: type=1400 audit(1765996921.565:265): avc: denied { ioctl } for pid=4676 comm="syz.2.1070" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 342.031120][ T4665] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1064: couldn't read orphan inode 11 (err -117) [ 342.051142][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 342.145964][ T4682] syz.2.1072[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.146038][ T4682] syz.2.1072[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.172339][ T4670] loop1: detected capacity change from 0 to 1024 [ 342.278945][ T4685] loop4: detected capacity change from 0 to 128 [ 342.321891][ T4670] EXT4-fs (loop1): Ignoring removed nobh option [ 342.381292][ T4687] loop2: detected capacity change from 0 to 1024 [ 342.472429][ T4687] EXT4-fs (loop2): Ignoring removed nobh option [ 342.703119][ T4687] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1072: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 342.723002][ T4687] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1072: couldn't read orphan inode 11 (err -117) [ 342.735274][ T4687] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 342.910686][ T4670] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1067: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 342.936528][ T4670] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1067: couldn't read orphan inode 11 (err -117) [ 342.948620][ T4670] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 342.979128][ T4691] syz.0.1073[4691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.979200][ T4691] syz.0.1073[4691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.098991][ T4691] loop0: detected capacity change from 0 to 1024 [ 343.200911][ T4691] EXT4-fs (loop0): Ignoring removed nobh option [ 343.222299][ T4691] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1073: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 343.241052][ T4691] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1073: couldn't read orphan inode 11 (err -117) [ 343.253167][ T4691] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 343.357506][ T4695] loop3: detected capacity change from 0 to 128 [ 343.537020][ T4712] loop0: detected capacity change from 0 to 128 [ 343.691110][ T2873] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 343.733517][ T4712] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.744495][ T4712] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.780660][ T4695] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.801282][ T4700] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 343.811372][ T4695] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.862321][ T30] audit: type=1400 audit(1765996923.485:266): avc: denied { read write } for pid=4716 comm="syz.2.1081" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 343.909206][ T30] audit: type=1400 audit(1765996923.505:267): avc: denied { open } for pid=4716 comm="syz.2.1081" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 343.958043][ T30] audit: type=1400 audit(1765996923.505:268): avc: denied { ioctl } for pid=4716 comm="syz.2.1081" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 343.991037][ T2873] usb 2-1: Using ep0 maxpacket: 16 [ 344.016823][ T4707] loop4: detected capacity change from 0 to 40427 [ 344.051167][ T4707] F2FS-fs (loop4): Found nat_bits in checkpoint [ 344.098182][ T4707] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 344.111171][ T2873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.122566][ T2873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 344.135882][ T2873] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 344.145144][ T2873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.154451][ T2873] usb 2-1: config 0 descriptor?? [ 344.187324][ T30] audit: type=1400 audit(1765996923.795:269): avc: denied { create } for pid=4716 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.207516][ T30] audit: type=1400 audit(1765996923.795:270): avc: denied { ioctl } for pid=4716 comm="syz.2.1081" path="socket:[30395]" dev="sockfs" ino=30395 ioctlcmd=0xaea1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.233030][ T30] audit: type=1400 audit(1765996923.805:271): avc: denied { connect } for pid=4716 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 344.257614][ T30] audit: type=1400 audit(1765996923.805:272): avc: denied { write } for pid=4716 comm="syz.2.1081" path="socket:[30396]" dev="sockfs" ino=30396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 344.333295][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 344.606117][ T4731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1080'. [ 344.702939][ T282] attempt to access beyond end of device [ 344.702939][ T282] loop4: rw=2049, want=45104, limit=40427 [ 344.886822][ T2873] HID 045e:07da: Invalid code 65791 type 1 [ 344.896938][ T2873] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input6 [ 344.909916][ T2873] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 344.986182][ T4726] loop3: detected capacity change from 0 to 32768 [ 344.995929][ T4734] syz.2.1085[4734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.996010][ T4734] syz.2.1085[4734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.182364][ T4738] loop2: detected capacity change from 0 to 1024 [ 345.423246][ T4738] EXT4-fs (loop2): Ignoring removed nobh option [ 345.467792][ T4738] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1085: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 345.487288][ T4738] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1085: couldn't read orphan inode 11 (err -117) [ 345.500546][ T4738] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 345.623013][ T4741] syz.4.1084[4741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.623084][ T4741] syz.4.1084[4741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.745251][ T4743] loop3: detected capacity change from 0 to 128 [ 346.313071][ T4750] loop4: detected capacity change from 0 to 1024 [ 346.380071][ T4750] EXT4-fs (loop4): Ignoring removed nobh option [ 346.392846][ T4750] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1084: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 346.423065][ T4750] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1084: couldn't read orphan inode 11 (err -117) [ 346.488688][ T4750] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 346.766639][ T20] usb 2-1: USB disconnect, device number 15 [ 346.812278][ T4760] loop1: detected capacity change from 0 to 1024 [ 348.677825][ T4769] loop0: detected capacity change from 0 to 16 [ 348.695673][ T4760] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 348.739983][ T4769] erofs: Unknown parameter 'GPL' [ 348.803007][ T4760] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 348.912208][ T30] audit: type=1326 audit(1765996928.535:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff680083749 code=0x7ffc0000 [ 348.940868][ T4773] loop2: detected capacity change from 0 to 128 [ 348.992499][ T30] audit: type=1326 audit(1765996928.535:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ff680083749 code=0x7ffc0000 [ 349.061756][ T4773] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.081128][ T30] audit: type=1326 audit(1765996928.535:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff680083749 code=0x7ffc0000 [ 349.142360][ T4773] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.171035][ T30] audit: type=1326 audit(1765996928.535:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7ff680083749 code=0x7ffc0000 [ 349.218904][ T4776] loop0: detected capacity change from 0 to 40427 [ 349.225812][ T30] audit: type=1326 audit(1765996928.535:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff680083749 code=0x7ffc0000 [ 349.265459][ T4764] syz.3.1090 (4764) used greatest stack depth: 20832 bytes left [ 349.559150][ T4776] F2FS-fs (loop0): Found nat_bits in checkpoint [ 349.991111][ T4776] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 350.181869][ T30] audit: type=1400 audit(1765996929.805:278): avc: denied { setattr } for pid=4791 comm="syz.3.1097" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.262027][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 350.688203][ T4715] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 350.803713][ T281] attempt to access beyond end of device [ 350.803713][ T281] loop0: rw=2049, want=45104, limit=40427 [ 350.910840][ T4797] loop2: detected capacity change from 0 to 32768 [ 351.434359][ T4805] syz.0.1100[4805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.434440][ T4805] syz.0.1100[4805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.707019][ T4810] loop0: detected capacity change from 0 to 1024 [ 351.784743][ T4810] EXT4-fs (loop0): Ignoring removed nobh option [ 351.884237][ T4810] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1100: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 351.903142][ T4810] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1100: couldn't read orphan inode 11 (err -117) [ 351.913960][ T4799] loop3: detected capacity change from 0 to 40427 [ 351.925161][ T4810] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 351.977109][ T4816] loop4: detected capacity change from 0 to 256 [ 352.022128][ T4799] F2FS-fs (loop3): Found nat_bits in checkpoint [ 352.043030][ T4816] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.067958][ T4816] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 352.073510][ T4799] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 352.151009][ T4822] loop2: detected capacity change from 0 to 256 [ 352.190947][ T4816] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 352.481229][ T30] audit: type=1400 audit(1765996932.075:279): avc: denied { bind } for pid=4825 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.569280][ T284] attempt to access beyond end of device [ 352.569280][ T284] loop3: rw=2049, want=45104, limit=40427 [ 354.167945][ T4830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33062 sclass=netlink_route_socket pid=4830 comm=syz.4.1103 [ 354.195896][ T4827] loop0: detected capacity change from 0 to 256 [ 355.328613][ T4853] loop0: detected capacity change from 0 to 256 [ 356.201784][ T4854] loop3: detected capacity change from 0 to 128 [ 357.367300][ T4854] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 357.378580][ T4854] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.712495][ T4864] syz.0.1115[4864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.712575][ T4864] syz.0.1115[4864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.803710][ T4867] loop2: detected capacity change from 0 to 128 [ 357.865572][ T4864] loop0: detected capacity change from 0 to 1024 [ 357.887015][ T4867] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 357.908147][ T4867] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.926098][ T4857] loop1: detected capacity change from 0 to 40427 [ 357.943657][ T4864] EXT4-fs (loop0): Ignoring removed nobh option [ 357.956129][ T4864] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1115: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 357.981053][ T4864] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1115: couldn't read orphan inode 11 (err -117) [ 357.995632][ T4864] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 358.033604][ T4857] F2FS-fs (loop1): Found nat_bits in checkpoint [ 358.161067][ T4857] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 358.308713][ T4885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1121'. [ 358.360462][ T4880] loop0: detected capacity change from 0 to 40427 [ 358.383572][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 358.561192][ T4880] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 358.607012][ T4880] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 358.636888][ T4880] F2FS-fs (loop0): invalid crc value [ 358.681860][ T4880] F2FS-fs (loop0): Found nat_bits in checkpoint [ 358.716497][ T283] attempt to access beyond end of device [ 358.716497][ T283] loop1: rw=2049, want=45104, limit=40427 [ 358.751490][ T30] audit: type=1326 audit(1765996938.365:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 358.834392][ T30] audit: type=1326 audit(1765996938.375:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 358.866405][ T30] audit: type=1326 audit(1765996938.375:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 358.901346][ T4880] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 358.909668][ T4880] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 358.927746][ T30] audit: type=1326 audit(1765996938.375:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 358.951571][ T30] audit: type=1326 audit(1765996938.375:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 359.014311][ T30] audit: type=1326 audit(1765996938.375:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 359.115002][ T30] audit: type=1326 audit(1765996938.375:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 359.213022][ T30] audit: type=1326 audit(1765996938.375:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 359.254441][ T798] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 359.274425][ T30] audit: type=1326 audit(1765996938.375:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 359.310866][ T30] audit: type=1326 audit(1765996938.375:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.3.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 359.531104][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 359.678490][ T4917] loop1: detected capacity change from 0 to 40427 [ 359.721599][ T4917] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 359.728239][ T4917] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 359.772139][ T4917] F2FS-fs (loop1): Found nat_bits in checkpoint [ 359.809663][ T4917] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 359.816769][ T4917] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 359.871655][ T798] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 359.891079][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.899133][ T798] usb 5-1: Product: syz [ 359.924635][ T4917] attempt to access beyond end of device [ 359.924635][ T4917] loop1: rw=2049, want=55376, limit=40427 [ 359.934054][ T798] usb 5-1: Manufacturer: syz [ 359.941918][ T4917] attempt to access beyond end of device [ 359.941918][ T4917] loop1: rw=2049, want=57344, limit=40427 [ 359.944161][ T798] usb 5-1: SerialNumber: syz [ 359.963567][ T4917] attempt to access beyond end of device [ 359.963567][ T4917] loop1: rw=2049, want=53192, limit=40427 [ 359.976776][ T4917] attempt to access beyond end of device [ 359.976776][ T4917] loop1: rw=2049, want=53248, limit=40427 [ 359.998619][ T4917] attempt to access beyond end of device [ 359.998619][ T4917] loop1: rw=2049, want=61456, limit=40427 [ 360.026293][ T798] usb 5-1: config 0 descriptor?? [ 360.027433][ T4915] loop0: detected capacity change from 0 to 40427 [ 360.041973][ T4915] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 360.049864][ T4915] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 360.075799][ T4917] attempt to access beyond end of device [ 360.075799][ T4917] loop1: rw=0, want=53256, limit=40427 [ 360.082052][ T798] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 360.091908][ T4916] attempt to access beyond end of device [ 360.091908][ T4916] loop1: rw=0, want=53256, limit=40427 [ 360.109726][ T4915] F2FS-fs (loop0): invalid crc value [ 360.115432][ T4916] attempt to access beyond end of device [ 360.115432][ T4916] loop1: rw=0, want=53256, limit=40427 [ 360.121963][ T798] usb 5-1: Detected FT-X [ 360.126807][ T4917] attempt to access beyond end of device [ 360.126807][ T4917] loop1: rw=0, want=53256, limit=40427 [ 360.152788][ T4915] F2FS-fs (loop0): Found nat_bits in checkpoint [ 360.196257][ T4924] loop2: detected capacity change from 0 to 16 [ 360.234950][ T4915] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 360.251037][ T4915] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 360.262111][ T4924] erofs: Unknown parameter 'f較' [ 360.291133][ T798] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 360.312040][ T4933] loop3: detected capacity change from 0 to 128 [ 360.374266][ T4933] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.384965][ T4933] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.623134][ T4939] FAULT_INJECTION: forcing a failure. [ 360.623134][ T4939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.651164][ T4939] CPU: 0 PID: 4939 Comm: syz.1.1133 Not tainted syzkaller #0 [ 360.658604][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.668704][ T4939] Call Trace: [ 360.672011][ T4939] [ 360.674971][ T4939] __dump_stack+0x21/0x30 [ 360.679321][ T4939] dump_stack_lvl+0xee/0x150 [ 360.683934][ T4939] ? show_regs_print_info+0x20/0x20 [ 360.689179][ T4939] dump_stack+0x15/0x20 [ 360.693355][ T4939] should_fail+0x3c1/0x510 [ 360.697792][ T4939] should_fail_usercopy+0x1a/0x20 [ 360.702842][ T4939] _copy_to_user+0x20/0x90 [ 360.707290][ T4939] simple_read_from_buffer+0xe9/0x160 [ 360.712691][ T4939] proc_fail_nth_read+0x19a/0x210 [ 360.717735][ T4939] ? proc_fault_inject_write+0x2f0/0x2f0 [ 360.723393][ T4939] ? security_file_permission+0x83/0xa0 [ 360.728977][ T4939] ? proc_fault_inject_write+0x2f0/0x2f0 [ 360.734630][ T4939] vfs_read+0x282/0xbe0 [ 360.738977][ T4939] ? kernel_read+0x1f0/0x1f0 [ 360.743602][ T4939] ? __kasan_check_write+0x14/0x20 [ 360.748746][ T4939] ? mutex_lock+0x95/0x1a0 [ 360.753195][ T4939] ? wait_for_completion_killable_timeout+0x10/0x10 [ 360.756941][ T4937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1135'. [ 360.759815][ T4939] ? __fget_files+0x2c4/0x320 [ 360.759848][ T4939] ? __fdget_pos+0x2d2/0x380 [ 360.778045][ T4939] ? ksys_read+0x71/0x240 [ 360.782494][ T4939] ksys_read+0x140/0x240 [ 360.784473][ T4937] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 360.786745][ T4939] ? vfs_write+0xf70/0xf70 [ 360.798442][ T4939] ? debug_smp_processor_id+0x17/0x20 [ 360.803843][ T4939] __x64_sys_read+0x7b/0x90 [ 360.808382][ T4939] x64_sys_call+0x96d/0x9a0 [ 360.812919][ T4939] do_syscall_64+0x4c/0xa0 [ 360.817382][ T4939] ? clear_bhb_loop+0x50/0xa0 [ 360.822090][ T4939] ? clear_bhb_loop+0x50/0xa0 [ 360.826795][ T4939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.832719][ T4939] RIP: 0033:0x7ff68008215c [ 360.837162][ T4939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 360.857343][ T4939] RSP: 002b:00007ff67eaeb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.862976][ T798] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 360.865789][ T4939] RAX: ffffffffffffffda RBX: 00007ff6802d9fa0 RCX: 00007ff68008215c [ 360.865810][ T4939] RDX: 000000000000000f RSI: 00007ff67eaeb0a0 RDI: 0000000000000006 [ 360.889820][ T4939] RBP: 00007ff67eaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 360.897812][ T4939] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 360.905802][ T4939] R13: 00007ff6802da038 R14: 00007ff6802d9fa0 R15: 00007ffe28886b78 [ 360.913821][ T4939] [ 360.949520][ T4943] loop0: detected capacity change from 0 to 512 [ 360.974439][ T4943] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1136: bad orphan inode 16 [ 360.989557][ T4943] ext4_test_bit(bit=15, block=18) = 0 [ 361.012017][ T4943] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 361.023320][ T4943] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.051998][ T4943] capability: warning: `syz.0.1136' uses 32-bit capabilities (legacy support in use) [ 361.273819][ T4949] loop3: detected capacity change from 0 to 128 [ 361.365601][ T4953] syz.1.1138[4953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.366798][ T4953] syz.1.1138[4953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.396509][ T4943] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.1136: Directory hole found for htree leaf block 0 [ 361.441665][ T4949] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.452621][ T4949] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.655879][ T4957] loop0: detected capacity change from 0 to 1024 [ 361.667941][ T4958] loop1: detected capacity change from 0 to 1024 [ 361.723059][ T4957] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 361.732254][ T4957] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 361.812754][ T4963] loop2: detected capacity change from 0 to 512 [ 361.820937][ T4958] EXT4-fs (loop1): Ignoring removed nobh option [ 362.297473][ T4958] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1138: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 362.318721][ T4958] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1138: couldn't read orphan inode 11 (err -117) [ 362.333821][ T4958] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 362.373117][ T4963] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 362.708499][ T798] usb 5-1: USB disconnect, device number 17 [ 362.723905][ T798] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 362.743021][ T798] ftdi_sio 5-1:0.0: device disconnected [ 362.872338][ T4968] loop4: detected capacity change from 0 to 512 [ 362.903602][ T4971] loop2: detected capacity change from 0 to 128 [ 362.912057][ T4968] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 362.936149][ T4971] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.946873][ T4971] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.960149][ T4968] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1144: invalid indirect mapped block 4294967295 (level 1) [ 362.974604][ T4968] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1144: invalid indirect mapped block 4294967295 (level 1) [ 362.989437][ T4968] EXT4-fs (loop4): 2 truncates cleaned up [ 362.995254][ T4968] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 363.506444][ T4987] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.800383][ T4993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 363.832564][ T4993] bridge1: port 1(veth3) entered blocking state [ 363.856453][ T4993] bridge1: port 1(veth3) entered disabled state [ 363.869520][ T4993] device veth3 entered promiscuous mode [ 363.890270][ T4993] bridge1: port 2(veth0_to_bond) entered blocking state [ 363.995231][ T4993] bridge1: port 2(veth0_to_bond) entered disabled state [ 364.019182][ T4993] device veth0_to_bond entered promiscuous mode [ 364.057310][ T4995] bridge1: port 3(vlan2) entered blocking state [ 364.063792][ T4995] bridge1: port 3(vlan2) entered disabled state [ 364.070609][ T4995] device vlan2 entered promiscuous mode [ 364.076582][ T4995] device veth1 entered promiscuous mode [ 364.348172][ T5002] loop3: detected capacity change from 0 to 32768 [ 364.413306][ T5008] syz.3.1153[5008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.413381][ T5008] syz.3.1153[5008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.631413][ T5011] loop3: detected capacity change from 0 to 1024 [ 364.761506][ T5011] EXT4-fs (loop3): Ignoring removed nobh option [ 364.931519][ T5011] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.1153: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 364.952090][ T5011] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1153: couldn't read orphan inode 11 (err -117) [ 364.964551][ T5011] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 365.289663][ T5016] loop2: detected capacity change from 0 to 256 [ 365.521593][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 365.521607][ T30] audit: type=1400 audit(1765996945.145:351): avc: denied { listen } for pid=5017 comm="syz.1.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.610202][ T30] audit: type=1400 audit(1765996945.195:352): avc: denied { accept } for pid=5017 comm="syz.1.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.836907][ T5023] loop4: detected capacity change from 0 to 16 [ 365.846237][ T5023] erofs: Unknown parameter 'f較' [ 365.897315][ T5026] loop3: detected capacity change from 0 to 128 [ 365.941465][ T798] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 365.977280][ T5026] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.011173][ T5026] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.471061][ T798] usb 2-1: config 0 has an invalid interface number: 248 but max is 0 [ 366.481126][ T798] usb 2-1: config 0 has no interface number 0 [ 366.494079][ T798] usb 2-1: config 0 interface 248 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 366.517184][ T798] usb 2-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice= 4.3d [ 366.536614][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.554853][ T798] usb 2-1: config 0 descriptor?? [ 366.611829][ T798] ftdi_sio 2-1:0.248: FTDI USB Serial Device converter detected [ 366.623164][ T798] usb 2-1: Detected FT232BM [ 367.624919][ T5052] loop2: detected capacity change from 0 to 32768 [ 369.331069][ T798] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 370.696588][ T5072] loop3: detected capacity change from 0 to 256 [ 370.739535][ T798] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 370.820588][ T5077] loop4: detected capacity change from 0 to 1024 [ 370.830081][ T798] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 371.166165][ T798] usb 2-1: USB disconnect, device number 16 [ 371.176651][ T798] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 371.161142][ T30] audit: type=1400 audit(1765996950.625:353): avc: denied { ioctl } for pid=5075 comm="syz.0.1170" path="socket:[32316]" dev="sockfs" ino=32316 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.211545][ T5077] EXT4-fs (loop4): Unrecognized mount option "fsname=grpquota" or missing value [ 371.234422][ T798] ftdi_sio 2-1:0.248: device disconnected [ 371.274601][ T5086] syz.1.1173[5086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.274675][ T5086] syz.1.1173[5086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.291703][ T5081] loop2: detected capacity change from 0 to 16 [ 371.313137][ T5081] erofs: Unknown parameter 'f較' [ 371.474457][ T5087] loop1: detected capacity change from 0 to 1024 [ 371.513904][ T5087] EXT4-fs (loop1): Ignoring removed nobh option [ 371.595722][ T30] audit: type=1326 audit(1765996951.165:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 371.660866][ T5087] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1173: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 371.680033][ T30] audit: type=1326 audit(1765996951.165:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 371.703454][ T5087] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1173: couldn't read orphan inode 11 (err -117) [ 371.715733][ T30] audit: type=1326 audit(1765996951.165:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 371.739229][ T30] audit: type=1326 audit(1765996951.165:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 371.779580][ T5087] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 371.863123][ T30] audit: type=1326 audit(1765996951.165:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 371.981345][ T30] audit: type=1326 audit(1765996951.165:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 372.036507][ T30] audit: type=1326 audit(1765996951.165:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 372.082184][ T30] audit: type=1326 audit(1765996951.165:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 372.121149][ T30] audit: type=1326 audit(1765996951.165:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 372.237878][ T5098] loop4: detected capacity change from 0 to 40427 [ 372.250139][ T5098] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 372.296095][ T5098] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 372.309832][ T5098] F2FS-fs (loop4): invalid crc value [ 372.362508][ T5098] F2FS-fs (loop4): Found nat_bits in checkpoint [ 372.418843][ T5098] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 372.426076][ T5098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 372.835824][ T5104] loop1: detected capacity change from 0 to 40427 [ 372.878624][ T5104] F2FS-fs (loop1): Found nat_bits in checkpoint [ 372.929311][ T5104] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 373.192157][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 373.576094][ T283] handle_bad_sector: 398 callbacks suppressed [ 373.576114][ T283] attempt to access beyond end of device [ 373.576114][ T283] loop1: rw=2049, want=45104, limit=40427 [ 374.532511][ T5136] loop0: detected capacity change from 0 to 256 [ 374.649734][ T5143] syz.2.1187[5143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.649823][ T5143] syz.2.1187[5143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.802443][ T5145] loop1: detected capacity change from 0 to 128 [ 375.075561][ T5145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.086569][ T5145] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.275123][ T5143] loop2: detected capacity change from 0 to 1024 [ 375.320691][ T5138] loop3: detected capacity change from 0 to 40427 [ 375.333764][ T5141] loop4: detected capacity change from 0 to 40427 [ 375.341573][ T5143] EXT4-fs (loop2): Ignoring removed nobh option [ 375.351060][ T5143] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1187: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 375.370794][ T5143] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1187: couldn't read orphan inode 11 (err -117) [ 375.384073][ T5143] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 375.423592][ T5141] F2FS-fs (loop4): Found nat_bits in checkpoint [ 375.441663][ T5155] loop3: detected capacity change from 0 to 128 [ 375.496531][ T5155] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.507368][ T5155] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.508499][ T5141] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 375.601868][ T5164] loop3: detected capacity change from 0 to 1024 [ 375.691339][ T5164] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,discard,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 375.708667][ T282] attempt to access beyond end of device [ 375.708667][ T282] loop4: rw=2049, want=45104, limit=40427 [ 375.709024][ T5164] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.750523][ T5164] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: comm syz.3.1191: lblock 0 mapped to illegal pblock 0 (length 1) [ 375.778526][ T5164] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 3: comm syz.3.1191: lblock 3 mapped to illegal pblock 3 (length 3) [ 375.833172][ T5171] loop1: detected capacity change from 0 to 1024 [ 375.848250][ T5164] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 375.889981][ T5164] EXT4-fs (loop3): This should not happen!! Data will be lost [ 375.889981][ T5164] [ 375.911207][ T5173] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.1191: lblock 3 mapped to illegal pblock 3 (length 1) [ 375.923339][ T5171] EXT4-fs (loop1): Unrecognized mount option "fsname=grpquota" or missing value [ 375.941121][ T5172] netlink: 'syz.3.1191': attribute type 27 has an invalid length. [ 375.981937][ T5172] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.989197][ T5172] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.001770][ T5164] netlink: 'syz.3.1191': attribute type 7 has an invalid length. [ 376.056037][ T5172] device batadv_slave_0 left promiscuous mode [ 376.089772][ T5169] loop2: detected capacity change from 0 to 40427 [ 377.140101][ T5169] F2FS-fs (loop2): Found nat_bits in checkpoint [ 377.245028][ T5187] loop4: detected capacity change from 0 to 1024 [ 377.293542][ T5187] EXT4-fs (loop4): Unrecognized mount option "fsname=grpquota" or missing value [ 377.460059][ T5169] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 377.491613][ T5190] loop1: detected capacity change from 0 to 16 [ 377.564793][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 377.631246][ T5190] erofs: Unknown parameter 'f較' [ 377.636743][ T285] attempt to access beyond end of device [ 377.636743][ T285] loop2: rw=2049, want=45104, limit=40427 [ 377.653336][ T5196] netlink: 'syz.0.1198': attribute type 27 has an invalid length. [ 377.689662][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.697006][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.774441][ T5196] device batadv_slave_0 left promiscuous mode [ 377.833803][ T5199] netlink: 'syz.0.1198': attribute type 8 has an invalid length. [ 377.876321][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.883480][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.906005][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.913108][ T5201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.919561][ T5205] loop2: detected capacity change from 0 to 256 [ 377.958251][ T5201] device veth0_vlan left promiscuous mode [ 377.972427][ T5205] FAT-fs (loop2): bogus number of FAT sectors [ 377.977227][ T5201] device veth0_vlan entered promiscuous mode [ 377.979758][ T5205] FAT-fs (loop2): Can't find a valid FAT filesystem [ 377.998009][ T616] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 378.015229][ T5201] device veth1_macvtap left promiscuous mode [ 378.021647][ T5198] loop4: detected capacity change from 0 to 40427 [ 378.038027][ T616] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 378.052735][ T5198] F2FS-fs (loop4): invalid crc value [ 378.060511][ T5201] device veth1_macvtap entered promiscuous mode [ 378.072488][ T616] EXT4-fs (loop3): This should not happen!! Data will be lost [ 378.072488][ T616] [ 378.083462][ T5198] F2FS-fs (loop4): Found nat_bits in checkpoint [ 378.093897][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.104207][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.124281][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.143840][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.172598][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 378.184190][ T5198] F2FS-fs (loop4): Start checkpoint disabled! [ 378.191796][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.200198][ T5198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 378.222694][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.233371][ T5208] loop3: detected capacity change from 0 to 16 [ 378.261317][ T5208] erofs: Unknown parameter 'f較' [ 378.266709][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.291706][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.305687][ T5198] attempt to access beyond end of device [ 378.305687][ T5198] loop4: rw=2049, want=77960, limit=40427 [ 378.321704][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.330055][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 378.350525][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.361803][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 378.381716][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.401321][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 378.401333][ T30] audit: type=1326 audit(1765996958.025:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 378.410318][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.444877][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.484247][ T30] audit: type=1326 audit(1765996958.065:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 378.522810][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.540688][ T30] audit: type=1326 audit(1765996958.065:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 378.543819][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.564952][ T30] audit: type=1326 audit(1765996958.065:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 379.268787][ T5220] loop2: detected capacity change from 0 to 128 [ 379.294576][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.295730][ T30] audit: type=1326 audit(1765996958.065:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 379.327315][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.335011][ T5220] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 379.335754][ T30] audit: type=1326 audit(1765996958.065:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 379.346007][ T5220] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.387718][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 379.405258][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 379.431338][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 379.445332][ T30] audit: type=1326 audit(1765996958.065:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 379.454906][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 379.480858][ T30] audit: type=1326 audit(1765996958.075:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 379.513008][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 379.534859][ T30] audit: type=1400 audit(1765996958.075:389): avc: denied { lock } for pid=5197 comm="syz.4.1199" path="/227/file0/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 379.534976][ T5201] syz.0.1198 (5201) used greatest stack depth: 20416 bytes left [ 379.576093][ T30] audit: type=1326 audit(1765996958.075:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 379.600562][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 379.608462][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 379.616367][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 379.623849][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 379.631433][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 379.638978][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 379.646749][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 379.655398][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 379.664413][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 379.972546][ T5238] loop0: detected capacity change from 0 to 128 [ 379.993177][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.047993][ T5238] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 380.059015][ T5238] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.159940][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 380.438399][ T5241] loop3: detected capacity change from 0 to 1024 [ 380.482175][ T5241] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 380.512090][ T444] attempt to access beyond end of device [ 380.512090][ T444] loop4: rw=2049, want=40976, limit=40427 [ 380.548656][ T5241] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 380.821495][ T5235] loop2: detected capacity change from 0 to 40427 [ 380.866034][ T5235] F2FS-fs (loop2): Found nat_bits in checkpoint [ 381.008583][ T5235] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 381.271439][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 381.320638][ T285] attempt to access beyond end of device [ 381.320638][ T285] loop2: rw=2049, want=45104, limit=40427 [ 381.369871][ T5264] loop4: detected capacity change from 0 to 32768 [ 381.408991][ T5260] loop1: detected capacity change from 0 to 40427 [ 381.441654][ T5269] loop0: detected capacity change from 0 to 16 [ 381.454006][ T5260] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 381.490726][ T5260] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 381.491326][ T5269] erofs: Unknown parameter 'f較' [ 381.508052][ T5274] netlink: 'syz.4.1217': attribute type 27 has an invalid length. [ 381.520354][ T5260] F2FS-fs (loop1): invalid crc value [ 381.536907][ T5260] F2FS-fs (loop1): Found nat_bits in checkpoint [ 381.653724][ T5282] loop3: detected capacity change from 0 to 1024 [ 381.681430][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.689108][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.783547][ T5282] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 381.822463][ T5274] device batadv_slave_0 left promiscuous mode [ 381.832448][ T5282] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 381.936725][ T5260] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 381.946257][ T5260] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 382.284467][ T5280] netlink: 'syz.4.1217': attribute type 8 has an invalid length. [ 382.535972][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.543117][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.615296][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.622398][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.637295][ T5284] device veth0_vlan left promiscuous mode [ 382.643624][ T5284] device veth0_vlan entered promiscuous mode [ 382.658119][ T5300] loop3: detected capacity change from 0 to 128 [ 382.665013][ T5284] device veth1_macvtap left promiscuous mode [ 382.675602][ T5284] device veth1_macvtap entered promiscuous mode [ 382.704396][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.712472][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.733883][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.747107][ T5303] loop0: detected capacity change from 0 to 1024 [ 382.754608][ T5300] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.761532][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.773894][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 382.782567][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.784991][ T5300] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.790817][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.809204][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.814568][ T5303] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 382.817720][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.832891][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.841262][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 382.849402][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.857605][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 382.858354][ T5303] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 382.865713][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.897513][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.905646][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.913826][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 382.921938][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 382.972208][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 382.980611][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 382.989198][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 382.997461][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 383.005593][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 383.013105][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 383.020566][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 383.028115][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 383.035655][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 383.043187][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 383.050690][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 383.058242][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 383.235773][ T5309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1224'. [ 383.245064][ T5309] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 383.695554][ T5318] loop0: detected capacity change from 0 to 16 [ 383.704789][ T5318] erofs: Unknown parameter 'f較' [ 383.884822][ T5321] loop3: detected capacity change from 0 to 32768 [ 383.911036][ T20] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 384.155369][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 384.273219][ T5328] loop1: detected capacity change from 0 to 256 [ 384.678979][ T5332] binder: BINDER_SET_CONTEXT_MGR already set [ 384.685300][ T5332] binder: 5331:5332 ioctl 4018620d 200000004a80 returned -16 [ 384.731095][ T20] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 384.744644][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.762180][ T20] usb 5-1: Product: syz [ 384.770740][ T20] usb 5-1: Manufacturer: syz [ 384.781709][ T20] usb 5-1: SerialNumber: syz [ 384.800736][ T20] usb 5-1: config 0 descriptor?? [ 385.330133][ T5340] syz.1.1233[5340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.330246][ T5340] syz.1.1233[5340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.473500][ T20] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 385.811339][ T20] usb 5-1: Detected FT-X [ 385.846933][ T5340] loop1: detected capacity change from 0 to 1024 [ 385.861095][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 385.892987][ T5340] EXT4-fs (loop1): Ignoring removed nobh option [ 385.912026][ T5340] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1233: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 385.930783][ T5340] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1233: couldn't read orphan inode 11 (err -117) [ 385.942953][ T5340] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 385.990194][ T5348] loop3: detected capacity change from 0 to 40427 [ 386.042934][ T5348] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 386.050797][ T5348] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 386.060221][ T5348] F2FS-fs (loop3): invalid crc value [ 386.067165][ T5348] F2FS-fs (loop3): Found nat_bits in checkpoint [ 386.095927][ T5348] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 386.103098][ T5348] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 386.291960][ T5361] syz.1.1238[5361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.292064][ T5361] syz.1.1238[5361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.362725][ T20] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 387.178738][ T5367] loop1: detected capacity change from 0 to 1024 [ 387.206445][ T5367] EXT4-fs (loop1): Ignoring removed nobh option [ 387.299639][ T5367] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1238: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 387.344467][ T5367] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1238: couldn't read orphan inode 11 (err -117) [ 387.380540][ T5367] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 387.441758][ T2873] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 387.711044][ T2873] usb 4-1: Using ep0 maxpacket: 16 [ 387.803110][ T5375] loop0: detected capacity change from 0 to 256 [ 387.931251][ T2873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.014503][ T2873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.030687][ T2873] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 388.040037][ T2873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.061434][ T2873] usb 4-1: config 0 descriptor?? [ 388.076915][ T765] usb 5-1: USB disconnect, device number 18 [ 388.093266][ T765] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 388.112520][ T765] ftdi_sio 5-1:0.0: device disconnected [ 388.639265][ T5381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1240'. [ 388.971129][ T2873] usbhid 4-1:0.0: can't add hid device: -71 [ 388.977204][ T2873] usbhid: probe of 4-1:0.0 failed with error -71 [ 389.009691][ T2873] usb 4-1: USB disconnect, device number 11 [ 389.314719][ T5397] loop2: detected capacity change from 0 to 128 [ 389.325423][ T5388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1245'. [ 389.371278][ T5397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.418927][ T5388] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.441112][ T5397] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.952394][ T5400] loop4: detected capacity change from 0 to 40427 [ 390.019338][ T5400] F2FS-fs (loop4): Found nat_bits in checkpoint [ 390.139064][ T5417] loop3: detected capacity change from 0 to 128 [ 390.324784][ T5400] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 390.342528][ T5417] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 390.353516][ T5417] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.643816][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 391.449632][ T282] attempt to access beyond end of device [ 391.449632][ T282] loop4: rw=2049, want=45104, limit=40427 [ 391.469602][ T5431] syz.2.1256[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.469680][ T5431] syz.2.1256[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.577779][ T5436] loop1: detected capacity change from 0 to 512 [ 391.635218][ T5436] EXT4-fs (loop1): Ignoring removed nobh option [ 391.641786][ T5436] EXT4-fs (loop1): Test dummy encryption mode enabled [ 391.648770][ T5436] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 391.668896][ T5440] loop2: detected capacity change from 0 to 1024 [ 391.678558][ T5436] EXT4-fs (loop1): 1 truncate cleaned up [ 391.684589][ T5436] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,test_dummy_encryption,acl,,errors=continue. Quota mode: none. [ 391.798172][ T5440] EXT4-fs (loop2): Ignoring removed nobh option [ 391.893632][ T5440] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1256: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 392.004139][ T5440] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1256: couldn't read orphan inode 11 (err -117) [ 392.041823][ T5440] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 392.185835][ T5447] loop1: detected capacity change from 0 to 128 [ 392.244927][ T5445] loop4: detected capacity change from 0 to 32768 [ 392.941068][ T5371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 393.113905][ T5453] loop4: detected capacity change from 0 to 40427 [ 393.166855][ T5455] loop0: detected capacity change from 0 to 40427 [ 393.175245][ T5453] F2FS-fs (loop4): Found nat_bits in checkpoint [ 393.197584][ T5455] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 393.205770][ T5455] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 393.229721][ T5455] F2FS-fs (loop0): invalid crc value [ 393.423825][ T5463] loop1: detected capacity change from 0 to 128 [ 393.640598][ T5463] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 393.651633][ T5463] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.712246][ T5453] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 393.724319][ T5455] F2FS-fs (loop0): Found nat_bits in checkpoint [ 393.775276][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 393.775294][ T30] audit: type=1400 audit(1765996973.395:421): avc: denied { audit_write } for pid=5452 comm="syz.4.1260" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 393.828329][ T282] attempt to access beyond end of device [ 393.828329][ T282] loop4: rw=2049, want=45104, limit=40427 [ 393.841027][ T30] audit: type=1107 audit(1765996973.405:422): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#' [ 393.874901][ T5455] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 393.891501][ T5455] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 394.689843][ T5481] loop2: detected capacity change from 0 to 40427 [ 394.730649][ T5481] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 394.748021][ T5481] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 394.778879][ T5489] loop0: detected capacity change from 0 to 128 [ 394.826521][ T5481] F2FS-fs (loop2): invalid crc value [ 394.930616][ T5489] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 394.943838][ T5489] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.087503][ T5481] F2FS-fs (loop2): Found nat_bits in checkpoint [ 395.112499][ T5477] loop1: detected capacity change from 0 to 40427 [ 395.154140][ T5498] loop3: detected capacity change from 0 to 1024 [ 395.177164][ T5481] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 395.186979][ T5481] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 395.199882][ T5498] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 395.199910][ T5477] F2FS-fs (loop1): Found nat_bits in checkpoint [ 395.220661][ T5507] loop4: detected capacity change from 0 to 128 [ 395.238054][ T5508] syz.0.1273[5508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.238131][ T5508] syz.0.1273[5508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.262901][ T5507] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.286610][ T5498] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 395.341181][ T5477] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 395.371295][ T5507] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.388493][ T30] audit: type=1326 audit(1765996975.005:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 395.459285][ T30] audit: type=1326 audit(1765996975.045:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 395.494804][ T30] audit: type=1326 audit(1765996975.045:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 395.542396][ T30] audit: type=1326 audit(1765996975.045:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 395.576539][ T30] audit: type=1326 audit(1765996975.045:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 395.601761][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 395.630634][ T5513] loop0: detected capacity change from 0 to 1024 [ 395.672151][ T5513] EXT4-fs (loop0): Ignoring removed nobh option [ 395.684976][ T5513] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1273: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 395.703740][ T5513] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1273: couldn't read orphan inode 11 (err -117) [ 395.715988][ T5513] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 395.768487][ T283] attempt to access beyond end of device [ 395.768487][ T283] loop1: rw=2049, want=45104, limit=40427 [ 395.848201][ T5525] loop2: detected capacity change from 0 to 16 [ 395.875559][ T5525] erofs: Unknown parameter 'GPL' [ 396.053817][ T5527] syz.1.1277[5527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.053900][ T5527] syz.1.1277[5527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.264347][ T5531] loop2: detected capacity change from 0 to 128 [ 396.376358][ T5531] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.379976][ T5536] loop1: detected capacity change from 0 to 1024 [ 396.391614][ T5531] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.420871][ T5538] loop4: detected capacity change from 0 to 128 [ 396.476074][ T5540] loop0: detected capacity change from 0 to 128 [ 396.683093][ T5540] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.694271][ T5540] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.777372][ T5538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.802046][ T5538] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.841693][ T5536] EXT4-fs (loop1): Ignoring removed nobh option [ 396.876951][ T5536] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1277: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 396.896171][ T5536] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1277: couldn't read orphan inode 11 (err -117) [ 396.909095][ T5536] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 396.944180][ T30] audit: type=1326 audit(1765996976.565:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.3.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 397.030137][ T30] audit: type=1326 audit(1765996976.565:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.3.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 397.058983][ T30] audit: type=1326 audit(1765996976.565:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.3.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fbcd4749 code=0x7ffc0000 [ 397.686611][ T5558] loop0: detected capacity change from 0 to 40427 [ 397.709241][ T5558] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 397.769770][ T5558] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 397.780324][ T5558] F2FS-fs (loop0): invalid crc value [ 398.088707][ T5558] F2FS-fs (loop0): Found nat_bits in checkpoint [ 398.321354][ T5558] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 398.328467][ T5558] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 398.396042][ T5558] device batadv_slave_0 entered promiscuous mode [ 398.610169][ T5568] loop2: detected capacity change from 0 to 40427 [ 398.799394][ T5587] loop3: detected capacity change from 0 to 128 [ 398.861126][ T5589] loop1: detected capacity change from 0 to 256 [ 399.116881][ T5568] F2FS-fs (loop2): Found nat_bits in checkpoint [ 399.131726][ T5588] loop0: detected capacity change from 0 to 128 [ 399.143199][ T5587] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.165568][ T5587] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.202217][ T5568] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 399.242071][ T5588] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.319961][ T5588] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.339190][ T5598] loop4: detected capacity change from 0 to 4096 [ 399.374292][ T5598] EXT4-fs (loop4): Mount option "nodelalloc" incompatible with ext2 [ 399.387227][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 399.543578][ T285] attempt to access beyond end of device [ 399.543578][ T285] loop2: rw=2049, want=45104, limit=40427 [ 399.735214][ T5609] loop0: detected capacity change from 0 to 1024 [ 399.780219][ T5615] loop1: detected capacity change from 0 to 16 [ 399.829111][ T5615] erofs: Unknown parameter 'f較' [ 399.836098][ T5609] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 399.864446][ T5609] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 400.002264][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 400.002290][ T30] audit: type=1326 audit(1765996979.625:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7283bb3749 code=0x7ffc0000 [ 400.137149][ T30] audit: type=1326 audit(1765996979.655:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f7283bb3749 code=0x7ffc0000 [ 400.240128][ T30] audit: type=1326 audit(1765996979.655:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7283bb3749 code=0x7ffc0000 [ 400.298978][ T5604] loop3: detected capacity change from 0 to 40427 [ 400.305688][ T30] audit: type=1400 audit(1765996979.885:448): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 400.623511][ T5627] loop4: detected capacity change from 0 to 128 [ 400.634361][ T5604] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 400.642432][ T5604] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 400.655514][ T5604] F2FS-fs (loop3): invalid crc value [ 400.707958][ T5627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.718785][ T5627] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.769125][ T5604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 400.858161][ T5604] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 400.870287][ T5604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 400.926725][ T5604] device batadv_slave_0 entered promiscuous mode [ 402.105864][ T30] audit: type=1400 audit(1765996981.725:449): avc: denied { setattr } for pid=5638 comm="syz.0.1306" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 402.298222][ T5648] loop4: detected capacity change from 0 to 512 [ 402.326805][ T5649] loop2: detected capacity change from 0 to 128 [ 402.655246][ T5643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1304'. [ 402.666570][ T5643] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 402.732398][ T5648] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 402.826294][ T5649] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 402.844780][ T5648] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1305: invalid indirect mapped block 4294967295 (level 0) [ 402.859865][ T5648] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1305: invalid indirect mapped block 4294967295 (level 1) [ 402.877529][ T5648] EXT4-fs (loop4): 1 orphan inode deleted [ 402.883336][ T5648] EXT4-fs (loop4): 1 truncate cleaned up [ 402.889036][ T5648] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 403.447403][ T5649] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.532665][ T5654] syz.0.1308[5654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.532749][ T5654] syz.0.1308[5654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.558951][ T629] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 403.738262][ T5663] loop4: detected capacity change from 0 to 128 [ 403.767924][ T5654] loop0: detected capacity change from 0 to 1024 [ 403.774813][ T5656] loop3: detected capacity change from 0 to 40427 [ 403.826163][ T5654] EXT4-fs (loop0): Ignoring removed nobh option [ 403.832151][ T5656] F2FS-fs (loop3): Found nat_bits in checkpoint [ 403.862950][ T5654] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1308: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 403.895153][ T5663] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 403.910028][ T5673] loop1: detected capacity change from 0 to 16 [ 403.914130][ T5663] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.926787][ T5656] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 403.934500][ T5654] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1308: couldn't read orphan inode 11 (err -117) [ 403.947409][ T5660] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 403.954978][ T629] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 403.961416][ T5654] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 403.965084][ T629] usb 2-1: can't read configurations, error -71 [ 404.077699][ T5673] erofs: (device loop1): mounted with root inode @ nid 36. [ 404.118356][ T5673] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 404.129548][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 404.144894][ T5673] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 404.173961][ T5673] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 404.187879][ T5678] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 404.200252][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 404.214828][ T5678] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 404.224396][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 404.233589][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 404.242804][ T5678] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 404.252364][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 404.252721][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 404.261676][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 404.271008][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 404.279800][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 404.289088][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 404.298047][ T5678] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 404.307275][ T5675] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 404.316507][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 404.336309][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 404.346589][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 404.357852][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 404.985548][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 404.997581][ T5679] loop2: detected capacity change from 0 to 256 [ 405.003401][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 405.013934][ T284] attempt to access beyond end of device [ 405.013934][ T284] loop3: rw=2049, want=45104, limit=40427 [ 405.025993][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 405.042020][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 405.046952][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 405.060729][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 405.089402][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 405.099165][ T5675] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 405.111233][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 405.111683][ T5678] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 405.120507][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 405.130217][ T5678] attempt to access beyond end of device [ 405.130217][ T5678] loop1: rw=524288, want=848, limit=16 [ 405.291496][ T5684] loop4: detected capacity change from 0 to 128 [ 405.298576][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 405.300546][ T5678] attempt to access beyond end of device [ 405.300546][ T5678] loop1: rw=524288, want=13478624104, limit=16 [ 405.310389][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 405.322791][ T5678] attempt to access beyond end of device [ 405.322791][ T5678] loop1: rw=524288, want=13478624080, limit=16 [ 405.331373][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 405.352114][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 405.363571][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 405.372776][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 405.382234][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 405.391435][ T5675] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 405.400817][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 405.409057][ T5687] loop2: detected capacity change from 0 to 1024 [ 405.410134][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 405.426568][ T5684] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.437203][ T5684] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.449281][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 405.458539][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 405.468251][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 405.473466][ T5687] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 405.506102][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 405.527713][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 405.537825][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 405.547675][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 405.557376][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 405.570222][ T5687] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 405.594584][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 405.605179][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 405.621312][ T5675] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 405.645467][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 405.669975][ T5691] loop0: detected capacity change from 0 to 128 [ 405.724022][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 405.755020][ T30] audit: type=1326 audit(1765996985.375:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705e1e1749 code=0x7ffc0000 [ 405.756886][ T5675] erofs: (device loop1): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 405.816197][ T5675] attempt to access beyond end of device [ 405.816197][ T5675] loop1: rw=524288, want=96, limit=16 [ 406.226883][ T30] audit: type=1326 audit(1765996985.415:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705e1e1749 code=0x7ffc0000 [ 406.251328][ T5675] attempt to access beyond end of device [ 406.251328][ T5675] loop1: rw=524288, want=32, limit=16 [ 406.262581][ T5675] attempt to access beyond end of device [ 406.262581][ T5675] loop1: rw=524288, want=14425508776, limit=16 [ 406.274652][ T30] audit: type=1326 audit(1765996985.415:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f705e1e1749 code=0x7ffc0000 [ 406.313939][ T30] audit: type=1326 audit(1765996985.415:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705e1e1749 code=0x7ffc0000 [ 406.766217][ T5705] loop2: detected capacity change from 0 to 1024 [ 406.782109][ T5704] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 406.821392][ T5705] EXT4-fs (loop2): Unrecognized mount option "fsname=grpquota" or missing value [ 406.961025][ T20] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 406.992598][ T5712] loop0: detected capacity change from 0 to 256 [ 407.018398][ T5712] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 407.285816][ T30] audit: type=1400 audit(1765996986.905:454): avc: denied { write } for pid=5711 comm="syz.0.1322" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.330816][ T30] audit: type=1400 audit(1765996986.935:455): avc: denied { add_name } for pid=5711 comm="syz.0.1322" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.339218][ T5717] syz.3.1324[5717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.356486][ T30] audit: type=1400 audit(1765996986.935:456): avc: denied { associate } for pid=5711 comm="syz.0.1322" name="file2" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 407.365086][ T5717] syz.3.1324[5717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.441048][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 407.565262][ T5719] loop3: detected capacity change from 0 to 1024 [ 407.572314][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.584235][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 407.598102][ T20] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 407.609172][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.621833][ T5719] EXT4-fs (loop3): Ignoring removed nobh option [ 407.641092][ T20] usb 5-1: config 0 descriptor?? [ 407.652666][ T5719] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.1324: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 407.672005][ T5719] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1324: couldn't read orphan inode 11 (err -117) [ 407.684942][ T5719] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 408.866972][ T5722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'. [ 409.014766][ T5726] loop2: detected capacity change from 0 to 16 [ 409.037780][ T5726] erofs: Unknown parameter 'f較' [ 409.055050][ T5729] syz.0.1327[5729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.055131][ T5729] syz.0.1327[5729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.186280][ T20] HID 045e:07da: Invalid code 65791 type 1 [ 409.225440][ T5732] loop0: detected capacity change from 0 to 1024 [ 409.276340][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input7 [ 409.289079][ T5732] EXT4-fs (loop0): Ignoring removed nobh option [ 409.313089][ T20] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 409.327786][ T5732] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 409.347484][ T5732] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1327: couldn't read orphan inode 11 (err -117) [ 409.360031][ T5732] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 409.724829][ T5724] loop1: detected capacity change from 0 to 40427 [ 409.779398][ T5724] F2FS-fs (loop1): Found nat_bits in checkpoint [ 409.859708][ T5724] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 410.462305][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 410.476449][ T5750] loop3: detected capacity change from 0 to 256 [ 410.787203][ T283] attempt to access beyond end of device [ 410.787203][ T283] loop1: rw=2049, want=45104, limit=40427 [ 410.982878][ T5756] loop0: detected capacity change from 0 to 256 [ 411.166550][ T26] usb 5-1: USB disconnect, device number 19 [ 413.192701][ T5778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1337'. [ 413.217124][ T5778] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 413.395732][ T5781] loop2: detected capacity change from 0 to 1024 [ 413.462208][ T5781] EXT4-fs (loop2): Unrecognized mount option "fsname=grpquota" or missing value [ 414.257802][ T5784] loop0: detected capacity change from 0 to 16 [ 414.391289][ T5784] erofs: Unknown parameter 'f較' [ 414.785096][ T5797] loop3: detected capacity change from 0 to 128 [ 415.068306][ T5797] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 415.079025][ T5797] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.246351][ T5804] loop1: detected capacity change from 0 to 256 [ 415.577031][ T5808] loop4: detected capacity change from 0 to 1024 [ 415.624500][ T5793] loop2: detected capacity change from 0 to 40427 [ 415.632702][ T5808] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 415.644669][ T5808] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 415.656394][ T5793] F2FS-fs (loop2): Found nat_bits in checkpoint [ 415.753862][ T5818] loop3: detected capacity change from 0 to 256 [ 415.964690][ T30] audit: type=1326 audit(1765996995.395:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5807 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 415.996515][ T30] audit: type=1326 audit(1765996995.405:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5807 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 416.033277][ T30] audit: type=1326 audit(1765996995.405:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5807 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900c8f0749 code=0x7ffc0000 [ 416.086688][ T5793] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 416.211523][ T5826] loop1: detected capacity change from 0 to 128 [ 416.249590][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 416.309511][ T5826] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.321130][ T5826] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.564342][ T285] attempt to access beyond end of device [ 416.564342][ T285] loop2: rw=2049, want=45104, limit=40427 [ 416.691609][ T5831] syz.0.1350[5831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.691687][ T5831] syz.0.1350[5831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.781568][ T5831] loop0: detected capacity change from 0 to 1024 [ 416.893560][ T5831] EXT4-fs (loop0): Ignoring removed nobh option [ 416.905667][ T5831] ================================================================== [ 416.913789][ T5831] BUG: KASAN: use-after-free in __ext4_iget+0x2b8/0x3e40 [ 416.920845][ T5831] Read of size 8 at addr ffff88812aa941a8 by task syz.0.1350/5831 [ 416.928669][ T5831] [ 416.931017][ T5831] CPU: 1 PID: 5831 Comm: syz.0.1350 Not tainted syzkaller #0 [ 416.938408][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.948488][ T5831] Call Trace: [ 416.951785][ T5831] [ 416.954736][ T5831] __dump_stack+0x21/0x30 [ 416.959091][ T5831] dump_stack_lvl+0xee/0x150 [ 416.963714][ T5831] ? show_regs_print_info+0x20/0x20 [ 416.968946][ T5831] ? load_image+0x3a0/0x3a0 [ 416.973472][ T5831] ? _raw_spin_lock+0x8e/0xe0 [ 416.978174][ T5831] print_address_description+0x7f/0x2c0 [ 416.983744][ T5831] ? __ext4_iget+0x2b8/0x3e40 [ 416.988488][ T5831] kasan_report+0xf1/0x140 [ 416.993143][ T5831] ? __ext4_iget+0x2b8/0x3e40 [ 416.997851][ T5831] __asan_report_load8_noabort+0x14/0x20 [ 417.003514][ T5831] __ext4_iget+0x2b8/0x3e40 [ 417.008057][ T5831] ? ext4_init_orphan_info+0x155/0xfa0 [ 417.013548][ T5831] ? _raw_write_lock+0x8e/0xe0 [ 417.018340][ T5831] ? __proc_create+0x564/0x8d0 [ 417.023131][ T5831] ? __kasan_check_write+0x14/0x20 [ 417.028269][ T5831] ? ext4_get_projid+0x140/0x140 [ 417.033329][ T5831] ? _raw_write_unlock+0x2b/0x60 [ 417.038295][ T5831] ? ext4_orphan_file_block_trigger+0x400/0x400 [ 417.044581][ T5831] ext4_enable_quotas+0x33b/0x6d0 [ 417.049647][ T5831] ext4_fill_super+0x87c3/0x9090 [ 417.054620][ T5831] ? ext4_mount+0x40/0x40 [ 417.059073][ T5831] ? set_blocksize+0x1fc/0x380 [ 417.063860][ T5831] ? sb_set_blocksize+0xaa/0xf0 [ 417.068727][ T5831] ? ext4_mount+0x40/0x40 [ 417.073078][ T5831] mount_bdev+0x2ae/0x3e0 [ 417.077433][ T5831] ? ext4_mount+0x40/0x40 [ 417.081883][ T5831] ext4_mount+0x34/0x40 [ 417.086064][ T5831] legacy_get_tree+0xed/0x190 [ 417.090782][ T5831] ? ext4_errno_to_code+0x160/0x160 [ 417.096005][ T5831] vfs_get_tree+0x89/0x260 [ 417.100451][ T5831] do_new_mount+0x25a/0xa20 [ 417.104981][ T5831] path_mount+0x675/0x1020 [ 417.109419][ T5831] ? user_path_at_empty+0x161/0x1c0 [ 417.114643][ T5831] __se_sys_mount+0x318/0x380 [ 417.119355][ T5831] ? __x64_sys_mount+0xd0/0xd0 [ 417.124149][ T5831] __x64_sys_mount+0xbf/0xd0 [ 417.128768][ T5831] x64_sys_call+0x6bf/0x9a0 [ 417.133296][ T5831] do_syscall_64+0x4c/0xa0 [ 417.137739][ T5831] ? clear_bhb_loop+0x50/0xa0 [ 417.142436][ T5831] ? clear_bhb_loop+0x50/0xa0 [ 417.147137][ T5831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.153054][ T5831] RIP: 0033:0x7f7283bb4eea [ 417.157484][ T5831] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.177112][ T5831] RSP: 002b:00007f728261ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 417.185558][ T5831] RAX: ffffffffffffffda RBX: 00007f728261aef0 RCX: 00007f7283bb4eea [ 417.193578][ T5831] RDX: 0000200000000100 RSI: 00002000000005c0 RDI: 00007f728261aeb0 [ 417.201578][ T5831] RBP: 0000200000000100 R08: 00007f728261aef0 R09: 0000000001018ed8 [ 417.209571][ T5831] R10: 0000000001018ed8 R11: 0000000000000246 R12: 00002000000005c0 [ 417.217558][ T5831] R13: 00007f728261aeb0 R14: 0000000000000644 R15: 0000200000000180 [ 417.225555][ T5831] [ 417.228585][ T5831] [ 417.230919][ T5831] Allocated by task 3264: [ 417.235253][ T5831] __kasan_slab_alloc+0xbd/0xf0 [ 417.240123][ T5831] slab_post_alloc_hook+0x4f/0x2b0 [ 417.245316][ T5831] kmem_cache_alloc+0xf7/0x260 [ 417.250101][ T5831] f2fs_alloc_inode+0x26/0x330 [ 417.254888][ T5831] iget_locked+0x16c/0x7e0 [ 417.259327][ T5831] f2fs_iget+0x55/0x5230 [ 417.263578][ T5831] f2fs_fill_super+0x46a7/0x6d10 [ 417.268535][ T5831] mount_bdev+0x2ae/0x3e0 [ 417.272882][ T5831] f2fs_mount+0x34/0x40 [ 417.277050][ T5831] legacy_get_tree+0xed/0x190 [ 417.281737][ T5831] vfs_get_tree+0x89/0x260 [ 417.286162][ T5831] do_new_mount+0x25a/0xa20 [ 417.290676][ T5831] path_mount+0x675/0x1020 [ 417.295102][ T5831] __se_sys_mount+0x318/0x380 [ 417.299787][ T5831] __x64_sys_mount+0xbf/0xd0 [ 417.304391][ T5831] x64_sys_call+0x6bf/0x9a0 [ 417.308945][ T5831] do_syscall_64+0x4c/0xa0 [ 417.313391][ T5831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.319315][ T5831] [ 417.321650][ T5831] Last potentially related work creation: [ 417.327365][ T5831] kasan_save_stack+0x3a/0x60 [ 417.332062][ T5831] __kasan_record_aux_stack+0xd2/0x100 [ 417.337538][ T5831] kasan_record_aux_stack_noalloc+0xb/0x10 [ 417.343354][ T5831] call_rcu+0x105/0xfe0 [ 417.347527][ T5831] evict+0x7da/0x870 [ 417.351433][ T5831] evict_inodes+0x5de/0x650 [ 417.355982][ T5831] generic_shutdown_super+0x96/0x330 [ 417.361283][ T5831] kill_block_super+0x7f/0xf0 [ 417.365975][ T5831] kill_f2fs_super+0x2e7/0x390 [ 417.370755][ T5831] deactivate_locked_super+0xa0/0x100 [ 417.376140][ T5831] deactivate_super+0xaf/0xe0 [ 417.380826][ T5831] cleanup_mnt+0x446/0x500 [ 417.385262][ T5831] __cleanup_mnt+0x19/0x20 [ 417.389699][ T5831] task_work_run+0x127/0x190 [ 417.394303][ T5831] exit_to_user_mode_loop+0xd0/0xe0 [ 417.399516][ T5831] exit_to_user_mode_prepare+0x87/0xd0 [ 417.404988][ T5831] syscall_exit_to_user_mode+0x1a/0x30 [ 417.410464][ T5831] do_syscall_64+0x58/0xa0 [ 417.414910][ T5831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.420830][ T5831] [ 417.423161][ T5831] Second to last potentially related work creation: [ 417.429755][ T5831] kasan_save_stack+0x3a/0x60 [ 417.434441][ T5831] __kasan_record_aux_stack+0xd2/0x100 [ 417.439903][ T5831] kasan_record_aux_stack_noalloc+0xb/0x10 [ 417.445728][ T5831] call_rcu+0x105/0xfe0 [ 417.449888][ T5831] evict+0x7da/0x870 [ 417.453784][ T5831] evict_inodes+0x5de/0x650 [ 417.458288][ T5831] generic_shutdown_super+0x96/0x330 [ 417.463575][ T5831] kill_block_super+0x7f/0xf0 [ 417.468252][ T5831] kill_f2fs_super+0x2e7/0x390 [ 417.473018][ T5831] deactivate_locked_super+0xa0/0x100 [ 417.478387][ T5831] deactivate_super+0xaf/0xe0 [ 417.483063][ T5831] cleanup_mnt+0x446/0x500 [ 417.487481][ T5831] __cleanup_mnt+0x19/0x20 [ 417.491899][ T5831] task_work_run+0x127/0x190 [ 417.496660][ T5831] exit_to_user_mode_loop+0xd0/0xe0 [ 417.501855][ T5831] exit_to_user_mode_prepare+0x87/0xd0 [ 417.507406][ T5831] syscall_exit_to_user_mode+0x1a/0x30 [ 417.512950][ T5831] do_syscall_64+0x58/0xa0 [ 417.517370][ T5831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.523270][ T5831] [ 417.525589][ T5831] The buggy address belongs to the object at ffff88812aa93ca0 [ 417.525589][ T5831] which belongs to the cache f2fs_inode_cache of size 1424 [ 417.540157][ T5831] The buggy address is located 1288 bytes inside of [ 417.540157][ T5831] 1424-byte region [ffff88812aa93ca0, ffff88812aa94230) [ 417.553604][ T5831] The buggy address belongs to the page: [ 417.559231][ T5831] page:ffffea0004aaa400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812aa90c20 pfn:0x12aa90 [ 417.570780][ T5831] head:ffffea0004aaa400 order:3 compound_mapcount:0 compound_pincount:0 [ 417.579100][ T5831] flags: 0x4000000000010200(slab|head|zone=1) [ 417.585201][ T5831] raw: 4000000000010200 0000000000000000 0000000100000001 ffff8881029c4000 [ 417.593788][ T5831] raw: ffff88812aa90c20 0000000080150001 00000001ffffffff 0000000000000000 [ 417.602366][ T5831] page dumped because: kasan: bad access detected [ 417.608787][ T5831] page_owner tracks the page as allocated [ 417.614491][ T5831] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 451, ts 34573405074, free_ts 0 [ 417.634990][ T5831] post_alloc_hook+0x192/0x1b0 [ 417.639769][ T5831] prep_new_page+0x1c/0x110 [ 417.644274][ T5831] get_page_from_freelist+0x2cc5/0x2d50 [ 417.649816][ T5831] __alloc_pages+0x18f/0x440 [ 417.654407][ T5831] new_slab+0xa1/0x4d0 [ 417.658490][ T5831] ___slab_alloc+0x381/0x810 [ 417.663091][ T5831] __slab_alloc+0x49/0x90 [ 417.667416][ T5831] kmem_cache_alloc+0x138/0x260 [ 417.672265][ T5831] f2fs_alloc_inode+0x26/0x330 [ 417.677027][ T5831] iget_locked+0x16c/0x7e0 [ 417.681439][ T5831] f2fs_iget+0x55/0x5230 [ 417.685683][ T5831] f2fs_fill_super+0x3a20/0x6d10 [ 417.690620][ T5831] mount_bdev+0x2ae/0x3e0 [ 417.694947][ T5831] f2fs_mount+0x34/0x40 [ 417.699101][ T5831] legacy_get_tree+0xed/0x190 [ 417.703777][ T5831] vfs_get_tree+0x89/0x260 [ 417.708191][ T5831] page_owner free stack trace missing [ 417.713553][ T5831] [ 417.715871][ T5831] Memory state around the buggy address: [ 417.721491][ T5831] ffff88812aa94080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 417.729549][ T5831] ffff88812aa94100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 417.737604][ T5831] >ffff88812aa94180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 417.745844][ T5831] ^ [ 417.751218][ T5831] ffff88812aa94200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 417.759278][ T5831] ffff88812aa94280: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 417.767355][ T5831] ================================================================== [ 417.775415][ T5831] Disabling lock debugging due to kernel taint [ 417.793580][ T30] audit: type=1400 audit(1765996997.415:460): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 417.821291][ T5831] EXT4-fs error (device loop0): ext4_quota_enable:6408: inode #3: comm syz.0.1350: unexpected EA_INODE flag [ 417.824421][ T30] audit: type=1400 audit(1765996997.435:461): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.893322][ T30] audit: type=1400 audit(1765996997.435:462): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.918710][ T5831] EXT4-fs error (device loop0): ext4_quota_enable:6411: comm syz.0.1350: Bad quota inode: 3, type: 0 [ 417.930603][ T30] audit: type=1400 audit(1765996997.435:463): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.951261][ T30] audit: type=1400 audit(1765996997.435:464): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 417.971812][ T5831] EXT4-fs warning (device loop0): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 417.987232][ T5831] EXT4-fs (loop0): mount failed [ 418.007495][ T30] audit: type=1400 audit(1765996997.435:465): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 418.944940][ T30] audit: type=1400 audit(1765996997.435:466): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 418.987621][ T5836] loop4: detected capacity change from 0 to 40427 [ 419.005806][ T5841] syz.2.1352[5841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.005862][ T5841] syz.2.1352[5841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.013254][ T5836] F2FS-fs (loop4): invalid crc value [ 419.038731][ T5836] F2FS-fs (loop4): Found nat_bits in checkpoint [ 419.077520][ T5836] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 419.118813][ T282] attempt to access beyond end of device [ 419.118813][ T282] loop4: rw=2049, want=45104, limit=40427 [ 419.201569][ T5846] loop2: detected capacity change from 0 to 1024 [ 419.231624][ T5846] EXT4-fs (loop2): Ignoring removed nobh option [ 419.247838][ T5846] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1352: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 419.266805][ T5846] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1352: couldn't read orphan inode 11 (err -117) [ 419.279215][ T5846] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback.