last executing test programs: 24.450825947s ago: executing program 0 (id=562): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 21.300466924s ago: executing program 4 (id=565): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) 21.297522503s ago: executing program 0 (id=566): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x7c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, 0x0, 0x6}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x4, 0x2, 0x1, 0x102, 0x8}}, {0x4}}]}]}, 0x7c}}, 0x4000040) 19.232053277s ago: executing program 0 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x7993818ad3f418e9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) 16.232276076s ago: executing program 4 (id=574): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) read$FUSE(r3, &(0x7f0000001e80)={0x2020}, 0x2062) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 14.395992523s ago: executing program 4 (id=578): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 14.039950162s ago: executing program 0 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12.863073415s ago: executing program 1 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@checkpoint_diasble}, {}, {@nocheckpoint_merge}, {@resuid}, {@discard}, {@disable_roll_forward}, {@background_gc_on}, {@inline_dentry}, {@fsync_mode_strict}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@disable_ext_identify}, {@extent_cache}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_eq}, {@fsname={'fsname', 0x3d, 'inline_xattr'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}]}, 0x1, 0x550e, &(0x7f0000001e00)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r5) setgroups(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000001100)=0x2, 0x4) sendto$inet6(r7, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 10.533429474s ago: executing program 3 (id=586): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3008042, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x55e, &(0x7f0000002080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x2, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x693, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x10860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) stat(&(0x7f0000000540)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 9.646243934s ago: executing program 5 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000180)={[{}, {@mblk_io_submit}, {@data_err_ignore}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@barrier}]}, 0x3, 0x445, &(0x7f0000000800)="$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") memfd_create(0x0, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="930000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 8.185520246s ago: executing program 5 (id=589): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r3, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0x16, 0x0, 0x9, 0x0, {0x3, 0x80000008000080, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0xc000, 0x7fffffff, r2, r3, 0x0, 0x4c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.142226138s ago: executing program 3 (id=590): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) read$FUSE(r3, &(0x7f0000001e80)={0x2020}, 0x2062) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 7.883892493s ago: executing program 1 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x7993818ad3f418e9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) 7.464811276s ago: executing program 3 (id=592): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.263955962s ago: executing program 5 (id=593): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') 7.258549516s ago: executing program 2 (id=594): r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x1aa81, 0x8, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = getuid() mount$overlay(0x0, 0x0, &(0x7f0000000300), 0x3041470, &(0x7f0000000640)={[{@nfs_export_on}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@uid_eq={'uid', 0x3d, r2}}, {@uid_lt}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigaction(0x13, 0x0, 0x0, 0x8, &(0x7f00000008c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) openat(r0, &(0x7f0000000040)='.\x00', 0x145081, 0x40) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@bh}, {@test_dummy_encryption_v1}, {@nobarrier}, {@dax_always}, {@minixdf}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}], [{@appraise}, {@subj_role={'subj_role', 0x3d, '@$-'}}]}, 0x0, 0xbb5, &(0x7f00000017c0)="$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") 6.888906032s ago: executing program 4 (id=595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 6.721270192s ago: executing program 3 (id=596): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f00000002c0)={{}, 0x12, 0x4}, 0x18) 5.603833596s ago: executing program 4 (id=597): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff08010080140003000500010000"], 0x118}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xe2) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x10000050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x6], [0x0, 0x1, 0x0, 0x1000, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7ffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2367, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x10000, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40401, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0xf98, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80]}, 0x45c) 5.589492459s ago: executing program 2 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00'}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)="1186fdd6ca550ff7acc97873d9d991d4996ae7", 0x13}, {&(0x7f00000004c0)="bf1502ee799abb81dbe29e5447baa3a4cbba851a065b6b350f5d9b0249359e9cdf965db6d1b0c0ba23b651a8b8b00b4a0737e338c9f9faacec5b197c48644c0c676d23cead7b02fc28babfeb9d239eb9f3dfe7ad51209f9f98af0389cf608d39fcb03d4430f8a1171214b7fefb25c89e2ab25279315ceae0446883e84909dfe5369442110a504998dd7bf857659a7d0565d0a04859684c92", 0x98}, {&(0x7f0000000580)="0347df82e2984611a8a8c5f8131018d3bf2222a8f075b7735e8dcbef35aa6d294cca8c", 0x23}, {&(0x7f0000000ac0)="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", 0xc3d}, {&(0x7f0000000740)="e949354a4796c8e49864f0c8489a8deb2e6e2622e5c0e85429e0bbf0a2d9f758662de51d333f6db1f4c35a81ccdece75f0eeb91a37afa11f9e37cb40d829486a846ed57c2951aa838d51fa77e0ffa1cb781602214d3a55bf437ae5af44d80b1d1a6a59cb7e1dd6dd0568ad18de8bafb8f0b8e56a4376f6cc98bc9687a6306cf86ba675ca15852c012b6a271f9ef2c39b5f73bdffba6a2042356899cfa97821db954e493e898183556053f67656d019098390", 0xb2}], 0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x4, {0x2, 0x4e20, @multicast1=0xe000cc02}}) 5.555771312s ago: executing program 1 (id=599): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r4, 0x164, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 5.475800782s ago: executing program 5 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008200000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r6 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') setns(r6, 0x20000) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0xa101) 5.138471237s ago: executing program 3 (id=601): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) 4.411540053s ago: executing program 0 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000180)={[{}, {@mblk_io_submit}, {@data_err_ignore}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@barrier}]}, 0x3, 0x445, &(0x7f0000000800)="$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") memfd_create(0x0, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="930000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 3.815396296s ago: executing program 2 (id=603): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2e, 0x0, 0x2, 0x47}}}], 0x18}}], 0x1, 0x167e) 3.509678126s ago: executing program 4 (id=604): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {0x10000000000000, 0x0, 0x0, 0x2, 0x1}, {0x0, 0x6, 0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x2, 0x2}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000300)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000173c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xf0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 3.144940654s ago: executing program 5 (id=605): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x2, 0x5002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="17ff0019003a0fd89f6ad0e62200000000000000e20507d2cced94c779d2f4e15498f19d424952f8ccf279c8630febc652fa4aa81c370a19a12b6fd12ca626ec946bdc225858e621b7565c602b8657b3ae43b53f16eb3f0cd0a65b4a1679830a4f6451042285733dfd47ca95a67142e1fe37edf0396c03b9706eebc423f2937ded1516b94a7c90d2d56b4e41eb7c572d820ab7cfb20b63786827f7ed0422d5cbcbe49f309e5785f7dc0b2f9f9ac8da94b27c9bcadb20fdc67d61f77405064ce959ad872a6487fb49c89c344ea6282c3ede51672c3469d56704bebf1b69564d9963003844067fb18ff22b6d83e6b53a83d057ca30e3539e4ee9bbfad6752d1b2b53427609e068e15abcc1f840ba7a390e37", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) lseek(r5, 0xfffffffffffffff5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) 2.311044707s ago: executing program 0 (id=606): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0x0) 2.079814593s ago: executing program 3 (id=607): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.071789925s ago: executing program 2 (id=608): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x2}}, 0x26) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000009940)=ANY=[], 0x290}], 0x2}, 0x0) 1.807664436s ago: executing program 5 (id=609): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@oldalloc}, {@errors_remount}, {@orlov}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x622}}]}, 0x1, 0x56c, &(0x7f0000001a00)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MHQUvfCmctKTLmuTJttiUs3nA6e87zknfc+bc543z5uTkACG1kT2pxDxfER8kUQcjogk3zYa+caJjf3WHl6fzZYk1tc//C2p75fVG/+r8biDeeW5iPjps4iThe3tVldWF0rlcrqU1ydri1cmqyurpy4tlubT+fTy9MzMmddnpt96842e9fWV839+/cHdd898fnztqx/uH7mdxNk4lG9r7sczuNFcmYiJ/DkZi7NbdpzqQWO7STLoA+CpjORxPhbZGHA4RvKoB/77Po2IdWBIJeIfhlQjD2jM7XeeB/+/T1lJ/zx4Z2MCtL3/oxvvjcS++tzowFry2Mwom++O96D9rI0ff71zO1uid+9DAHR042ZEnB4d3T7+Jfn4t4MOb/qdbr16X3NlaxvGP+ifu1n+82qr/KdQj83f83Ddmv8cbBG7T6Nz/Bfu96CZtrL87+2W+e/mTavxkbz2v3rON5ZcvFROT+fZ8IkY25vVd7qfc2bt3nq7bc35X7Zk7Tdywfw47o/uffwxc6Va6Vn63OzBzYgXWua/yWb+m7Q4/9nzcb7LNo6ld15qt61z//9Z699FvNzy/D96cUt2vj85Wb8eJhtXxXZ/3Dr2c7v2B93/7Pwf2Ln/40nz/drqk7fx7b6/0nbbHut/dH/970k+qpf35OuulWq1pamIPcn729dPP3pso97YP+v/iePtx7921//+iPi4y/7fOvr9i131f0Dnf+6Jzv+TF+6998k37drvbvx7rV46ka/pZvzr9gCf5bkDAAAAAACA3aYQEYciKRQ3y4VCsbjx+Y6jcaBQrlRrJy9Wli/PRf27suMxVmjc6T7c9HmIqfzzsI369Jb6TEQciYgvR/bX68XZSnlu0J0HAAAAAAAAAAAAAAAAAACAXeJg/Tv/I5v1xvf/M7+MDO64gD7xk98wvDrGfy9+6QnYlbz+w/AS/zC8xD8ML/EPw0v8w/AS/zC8uoj/Qj+OA+g/r/8AAAAAAAAAAAAAAAAAAAAAAAAAAADQU+fPncuW9bWH12ez+tzVleWFytVTc2l1obi4PFucrSxdKc5XKvPltDhbWez0/8qVypWp6Vi+NllLq7XJ6srqhcXK8uXahUuLpfn0QjrWl14BAAAAAAAAAAAAAAAAAADAv0t1ZXWhVC6nSwoKT1UY3R2HodDjwqBHJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB45O8AAAD//8A2OIo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101142, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f00000002c0)={[{@debug}, {@usrquota}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nojournal_checksum}, {@lazytime}]}, 0x1c, 0x54a, &(0x7f0000000a80)="$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") pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.650832425s ago: executing program 1 (id=610): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1e, 0x14, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f0000000000010000861c5d5200000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c751265406c7f306003d8a0f4bd00000041140002000000000700", [0x20]}}) 1.511895201s ago: executing program 2 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x7993818ad3f418e9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0xc8, 0xf0, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 1.314406644s ago: executing program 1 (id=612): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 121.522919ms ago: executing program 1 (id=613): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket(0x1e, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) r5 = dup3(r2, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000300)={0x200f}) 0s ago: executing program 2 (id=614): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x2000040, &(0x7f0000000e40)={[{@nobh}, {@nodiscard}, {@grpquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x1f}}, {@resgid={'resgid', 0x3d, r0}}, {@sysvgroups}, {@norecovery}, {@data_writeback}]}, 0x10, 0x4e0, &(0x7f0000000180)="$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") syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000840)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="4022ba000000ba0b5a6a8118a8753f050af82eec60bfc4db2c1aabb1a5d48e7ef5944f2519baa1d1ee760d68d2997dbe8e6970e054e85ac572d4ac8f5513fac4a41e7ee86b1da2e7b6ebd7192794ee9b6192fd6d437677375a826d66350df39168b21a71f753e486261d0051a76202ec9dd5d03dd3eed9512d96572ceb2e4b93e354889676ac54bed3e3fb084a450e0e000000000000047c91a0e03c08ecbbc9f64bc456fe095a112dfb22c4be68a14921815344746445b9a10c3fcf322fd1f18e4f63550e93d49c71933f"], 0x0, &(0x7f0000000780)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x8, 0x1a, 0xb}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x1, 0x80, 0xd, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x7, 0x1e0}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x80, 0xca, 0x2, "2d8b9071", "32bea458"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0xa, 0x2, 0x4b, 0x8, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000880)={0x40, 0xa, 0x18, "4567c78f9de185a88cf11d1d89ceeceada38ce4237a70ef8"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0xc0, 0x80, [0xf0f]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000a40)={0x40, 0xb, 0x2, '\v3'}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x3ad8}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "c741"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x81}, 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r3, 0x0, 0x20000000}, 0x20) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x0, 0x3}}) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406000005240000000d240f", @ANYRESDEC], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x121001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e900000000000000030006000000000002000000000000e4ffffffffffffff0002000100000000000000030d00000009030005000000000002000000ac"], 0x60}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 84.755517][ T5823] cgroup: Unknown subsys name 'net' [ 84.925571][ T5823] cgroup: Unknown subsys name 'cpuset' [ 84.934088][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.491986][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.702309][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.710819][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.721854][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.730407][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.738043][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.772388][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.780796][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.789675][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.829995][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.837261][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.851924][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.860678][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.862534][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.868664][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.880249][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.909982][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.914566][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.925976][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.933750][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.941572][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.948955][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.957852][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.966406][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.974239][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.981459][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.989326][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.996961][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.004416][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.012033][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.021187][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.539642][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 91.627090][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.688385][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.754358][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 91.829781][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 91.937482][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.946519][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.954643][ T5848] bridge_slave_0: entered allmulticast mode [ 91.961470][ T5848] bridge_slave_0: entered promiscuous mode [ 91.973296][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 92.025873][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.033313][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.040476][ T5848] bridge_slave_1: entered allmulticast mode [ 92.047516][ T5848] bridge_slave_1: entered promiscuous mode [ 92.087122][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.094341][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.101498][ T5841] bridge_slave_0: entered allmulticast mode [ 92.108512][ T5841] bridge_slave_0: entered promiscuous mode [ 92.142866][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.150014][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.157360][ T5834] bridge_slave_0: entered allmulticast mode [ 92.164814][ T5834] bridge_slave_0: entered promiscuous mode [ 92.172799][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.179938][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.187306][ T5834] bridge_slave_1: entered allmulticast mode [ 92.194798][ T5834] bridge_slave_1: entered promiscuous mode [ 92.206967][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.217091][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.224794][ T5841] bridge_slave_1: entered allmulticast mode [ 92.232336][ T5841] bridge_slave_1: entered promiscuous mode [ 92.288620][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.304176][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.311299][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.321448][ T5839] bridge_slave_0: entered allmulticast mode [ 92.328676][ T5839] bridge_slave_0: entered promiscuous mode [ 92.336783][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.344017][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.351222][ T5839] bridge_slave_1: entered allmulticast mode [ 92.358338][ T5839] bridge_slave_1: entered promiscuous mode [ 92.376772][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.413544][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.452976][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.472508][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.479636][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.487033][ T5852] bridge_slave_0: entered allmulticast mode [ 92.494187][ T5852] bridge_slave_0: entered promiscuous mode [ 92.503547][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.564599][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.572323][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.579538][ T5852] bridge_slave_1: entered allmulticast mode [ 92.587063][ T5852] bridge_slave_1: entered promiscuous mode [ 92.605358][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.617557][ T5848] team0: Port device team_slave_0 added [ 92.624322][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.631638][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.639104][ T5847] bridge_slave_0: entered allmulticast mode [ 92.646387][ T5847] bridge_slave_0: entered promiscuous mode [ 92.655491][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.667436][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.678818][ T5834] team0: Port device team_slave_0 added [ 92.687915][ T5834] team0: Port device team_slave_1 added [ 92.725210][ T5848] team0: Port device team_slave_1 added [ 92.731217][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.738587][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.746400][ T5847] bridge_slave_1: entered allmulticast mode [ 92.756235][ T5847] bridge_slave_1: entered promiscuous mode [ 92.801334][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.814147][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.826162][ T5841] team0: Port device team_slave_0 added [ 92.847093][ T5836] Bluetooth: hci0: command tx timeout [ 92.869972][ T5839] team0: Port device team_slave_0 added [ 92.905382][ T5841] team0: Port device team_slave_1 added [ 92.912186][ T5856] Bluetooth: hci2: command tx timeout [ 92.917861][ T5836] Bluetooth: hci1: command tx timeout [ 92.922779][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.930267][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.956631][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.971075][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.982666][ T5839] team0: Port device team_slave_1 added [ 92.990299][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.000497][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.007660][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.033726][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.046655][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.053753][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.079883][ T5856] Bluetooth: hci5: command tx timeout [ 93.079923][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.086192][ T5856] Bluetooth: hci4: command tx timeout [ 93.096277][ T5836] Bluetooth: hci3: command tx timeout [ 93.105398][ T5852] team0: Port device team_slave_0 added [ 93.123809][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.130791][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.157283][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.191105][ T5852] team0: Port device team_slave_1 added [ 93.223184][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.230186][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.257514][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.289121][ T5847] team0: Port device team_slave_0 added [ 93.306776][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.314412][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.340799][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.352685][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.359675][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.385704][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.402581][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.410243][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.437027][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.450123][ T5847] team0: Port device team_slave_1 added [ 93.467609][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.474918][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.500931][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.518196][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.525331][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.551953][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.581385][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.588569][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.615095][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.651424][ T5848] hsr_slave_0: entered promiscuous mode [ 93.658472][ T5848] hsr_slave_1: entered promiscuous mode [ 93.694891][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.702048][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.729575][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.786326][ T5834] hsr_slave_0: entered promiscuous mode [ 93.793053][ T5834] hsr_slave_1: entered promiscuous mode [ 93.799420][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.807267][ T5834] Cannot create hsr debugfs directory [ 93.830774][ T5841] hsr_slave_0: entered promiscuous mode [ 93.837209][ T5841] hsr_slave_1: entered promiscuous mode [ 93.843535][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.851116][ T5841] Cannot create hsr debugfs directory [ 93.869807][ T5852] hsr_slave_0: entered promiscuous mode [ 93.876476][ T5852] hsr_slave_1: entered promiscuous mode [ 93.884096][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.891784][ T5852] Cannot create hsr debugfs directory [ 93.900674][ T5839] hsr_slave_0: entered promiscuous mode [ 93.907306][ T5839] hsr_slave_1: entered promiscuous mode [ 93.913371][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.921061][ T5839] Cannot create hsr debugfs directory [ 94.040581][ T5847] hsr_slave_0: entered promiscuous mode [ 94.047068][ T5847] hsr_slave_1: entered promiscuous mode [ 94.053563][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.061520][ T5847] Cannot create hsr debugfs directory [ 94.483392][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.517483][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.531947][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.558033][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.569169][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.593949][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.609888][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.626473][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.665480][ T5834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.694632][ T5834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.712832][ T5834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.736069][ T5834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.781334][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.792965][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.822966][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.877922][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.896133][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.907426][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.917971][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.924984][ T5836] Bluetooth: hci0: command tx timeout [ 94.944486][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.959049][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.992173][ T5836] Bluetooth: hci1: command tx timeout [ 94.992320][ T5856] Bluetooth: hci2: command tx timeout [ 95.019635][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.067453][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.074829][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.089956][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.117922][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.147445][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.154617][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.163458][ T5856] Bluetooth: hci3: command tx timeout [ 95.163509][ T5842] Bluetooth: hci4: command tx timeout [ 95.175294][ T5836] Bluetooth: hci5: command tx timeout [ 95.192082][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.203215][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.287227][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.307167][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.337774][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.423000][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.440393][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.450986][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.464328][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.477122][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.484327][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.528074][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.535396][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.553752][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.560906][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.605069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.612239][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.624683][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.631847][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.675479][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.682670][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.726058][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.757547][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.764778][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.787111][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.822869][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.830014][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.911421][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.929357][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.960021][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.069051][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.154013][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.161413][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.281185][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.288384][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.364566][ T9] cfg80211: failed to load regulatory.db [ 96.387271][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.535979][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.617609][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.660250][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.805333][ T5839] veth0_vlan: entered promiscuous mode [ 96.860474][ T5839] veth1_vlan: entered promiscuous mode [ 96.936364][ T5852] veth0_vlan: entered promiscuous mode [ 96.961620][ T5841] veth0_vlan: entered promiscuous mode [ 96.987119][ T5848] veth0_vlan: entered promiscuous mode [ 96.994195][ T5836] Bluetooth: hci0: command tx timeout [ 97.012299][ T5852] veth1_vlan: entered promiscuous mode [ 97.024852][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.040250][ T5841] veth1_vlan: entered promiscuous mode [ 97.061020][ T5839] veth0_macvtap: entered promiscuous mode [ 97.072801][ T5842] Bluetooth: hci1: command tx timeout [ 97.078311][ T5836] Bluetooth: hci2: command tx timeout [ 97.103976][ T5839] veth1_macvtap: entered promiscuous mode [ 97.112785][ T5848] veth1_vlan: entered promiscuous mode [ 97.133624][ T5834] veth0_vlan: entered promiscuous mode [ 97.160264][ T5847] veth0_vlan: entered promiscuous mode [ 97.178112][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.198083][ T5847] veth1_vlan: entered promiscuous mode [ 97.215335][ T5841] veth0_macvtap: entered promiscuous mode [ 97.229882][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.237522][ T5836] Bluetooth: hci5: command tx timeout [ 97.237572][ T5842] Bluetooth: hci4: command tx timeout [ 97.243883][ T5856] Bluetooth: hci3: command tx timeout [ 97.264076][ T5834] veth1_vlan: entered promiscuous mode [ 97.278380][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.287477][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.297056][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.306249][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.319719][ T5852] veth0_macvtap: entered promiscuous mode [ 97.342673][ T5852] veth1_macvtap: entered promiscuous mode [ 97.352051][ T5841] veth1_macvtap: entered promiscuous mode [ 97.388926][ T5847] veth0_macvtap: entered promiscuous mode [ 97.413245][ T5848] veth0_macvtap: entered promiscuous mode [ 97.432838][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.443796][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.455267][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.467217][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.478221][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.488320][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.498894][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.510194][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.520153][ T5847] veth1_macvtap: entered promiscuous mode [ 97.535969][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.546887][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.558808][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.570039][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.579611][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.588794][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.597997][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.610902][ T5848] veth1_macvtap: entered promiscuous mode [ 97.643891][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.654689][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.665237][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.676095][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.686174][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.696707][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.709129][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.727179][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.740155][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.751304][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.761903][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.773068][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.811254][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.820764][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.831763][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.841170][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.863766][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.875452][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.885561][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.896079][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.905974][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.916553][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.926575][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.938471][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.949824][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.983087][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.993868][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.004187][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.014722][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.024693][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.035472][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.048499][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.057596][ T5834] veth0_macvtap: entered promiscuous mode [ 98.070721][ T5834] veth1_macvtap: entered promiscuous mode [ 98.108056][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.118932][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.129361][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.140109][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.150133][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.161542][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.172666][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.183201][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.194965][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.209903][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.218891][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.228442][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.237561][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.256760][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.265692][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.274985][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.283894][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.316393][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.336043][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.345743][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.358195][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.368210][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.378957][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.388881][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.399498][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.409498][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.420085][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.429978][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.440512][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.452573][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.486265][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.501496][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.510405][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.519294][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.534429][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.545014][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.554934][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.565431][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.575462][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.585971][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.596155][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.606686][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.616791][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.627572][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.638657][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.676340][ T5834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.686569][ T5834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.695686][ T5834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.708306][ T5834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.728986][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.744223][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.837232][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.861246][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.867915][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.938873][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.968262][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.048708][ T5921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.072509][ T5836] Bluetooth: hci0: command tx timeout [ 99.086886][ T5921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.152112][ T5836] Bluetooth: hci2: command tx timeout [ 99.157791][ T5836] Bluetooth: hci1: command tx timeout [ 99.168907][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.181874][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.260202][ T711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.295088][ T711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.314225][ T5836] Bluetooth: hci4: command tx timeout [ 99.319826][ T5836] Bluetooth: hci5: command tx timeout [ 99.326930][ T5856] Bluetooth: hci3: command tx timeout [ 99.484212][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.546142][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.635232][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.647391][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.992542][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.551739][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 100.564623][ T47] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.585896][ T47] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.605987][ T47] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.641854][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.652121][ T47] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 100.697948][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.721804][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.800372][ T47] usb 2-1: config 0 descriptor?? [ 100.808950][ T5964] loop4: detected capacity change from 0 to 512 [ 100.915002][ T5964] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.8: casefold flag without casefold feature [ 100.950046][ T5964] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.8: couldn't read orphan inode 15 (err -117) [ 100.978997][ T5964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.070835][ T47] usbhid 2-1:0.0: can't add hid device: -71 [ 101.101878][ T47] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 101.191021][ T47] usb 2-1: USB disconnect, device number 2 [ 101.396526][ T5974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.507192][ T5974] netlink: 'syz.5.6': attribute type 5 has an invalid length. [ 101.572514][ T5974] netlink: 'syz.5.6': attribute type 5 has an invalid length. [ 101.666654][ T5979] xt_bpf: check failed: parse error [ 103.259284][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.908906][ T5994] loop4: detected capacity change from 0 to 2048 [ 105.004894][ T5994] ======================================================= [ 105.004894][ T5994] WARNING: The mand mount option has been deprecated and [ 105.004894][ T5994] and is ignored by this kernel. Remove the mand [ 105.004894][ T5994] option from the mount to silence this warning. [ 105.004894][ T5994] ======================================================= [ 106.032683][ T5994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.092010][ T5994] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.026604][ T6017] Zero length message leads to an empty skb [ 107.531922][ T30] audit: type=1326 audit(1743419393.827:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.10" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb3198d169 code=0x0 [ 107.775805][ T5946] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.110079][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.519922][ T6022] loop5: detected capacity change from 0 to 512 [ 108.622544][ T6022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.665070][ T6022] EXT4-fs (loop5): orphan cleanup on readonly fs [ 108.718635][ T6022] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.20: bg 0: block 248: padding at end of block bitmap is not set [ 108.742139][ T6022] Quota error (device loop5): write_blk: dquota write failed [ 108.750163][ T6022] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 108.761120][ T6022] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.20: Failed to acquire dquot type 1 [ 108.826309][ T6022] EXT4-fs (loop5): 1 truncate cleaned up [ 108.839876][ T6022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.631735][ T30] audit: type=1326 audit(1743419396.137:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 109.654086][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 109.810545][ T6030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.348961][ T30] audit: type=1326 audit(1743419396.137:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 110.372209][ T5946] usb 3-1: device descriptor read/all, error -71 [ 110.575865][ T30] audit: type=1326 audit(1743419397.047:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 110.750161][ T6033] veth3: entered promiscuous mode [ 110.760317][ T30] audit: type=1326 audit(1743419397.047:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 111.035074][ T30] audit: type=1326 audit(1743419397.047:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 111.059547][ T6033] veth3: entered allmulticast mode [ 111.801771][ T30] audit: type=1326 audit(1743419397.047:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 111.882934][ T30] audit: type=1326 audit(1743419397.047:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 111.989743][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.836174][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 113.845094][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 116.341391][ T6079] loop4: detected capacity change from 0 to 256 [ 116.386625][ T6078] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.474422][ T6078] overlayfs: missing 'lowerdir' [ 116.553330][ T6079] FAT-fs (loop4): Directory bread(block 64) failed [ 116.619033][ T6079] FAT-fs (loop4): Directory bread(block 65) failed [ 116.674411][ T6079] FAT-fs (loop4): Directory bread(block 66) failed [ 117.424684][ T6089] xt_bpf: check failed: parse error [ 117.445216][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 117.689896][ T6079] FAT-fs (loop4): Directory bread(block 67) failed [ 117.776535][ T6079] FAT-fs (loop4): Directory bread(block 68) failed [ 117.866211][ T6079] FAT-fs (loop4): Directory bread(block 69) failed [ 117.887419][ T6079] FAT-fs (loop4): Directory bread(block 70) failed [ 117.918737][ T6079] FAT-fs (loop4): Directory bread(block 71) failed [ 117.945583][ T6079] FAT-fs (loop4): Directory bread(block 72) failed [ 117.967599][ T6093] loop5: detected capacity change from 0 to 512 [ 117.991959][ T6079] FAT-fs (loop4): Directory bread(block 73) failed [ 118.040156][ T6093] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.076750][ T6093] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.136561][ T6093] EXT4-fs (loop5): Test dummy encryption mode enabled [ 118.172951][ T6093] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.225165][ T6093] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.235076][ T6093] EXT4-fs (loop5): 1 truncate cleaned up [ 119.324945][ T6093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.070365][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 120.070393][ T30] audit: type=1326 audit(1743419406.477:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 120.333440][ T30] audit: type=1326 audit(1743419406.477:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 120.501970][ T6118] input: syz1 as /devices/virtual/input/input6 [ 120.571892][ T5900] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.874462][ T6127] fuse: Unknown parameter '0x0000000000000003' [ 122.403694][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 122.524364][ T5900] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.747323][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.751544][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.772768][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.780553][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.788281][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.812253][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.828743][ T5900] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 122.851924][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.859824][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.882897][ T5900] usb 2-1: config 0 descriptor?? [ 122.926260][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.946492][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.974757][ T6135] loop4: detected capacity change from 0 to 512 [ 122.983156][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.990614][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 122.995083][ T6135] ext4: Unknown parameter 'euid' [ 123.028772][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.052267][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.062015][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.085316][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.110879][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.141906][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.171810][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.179314][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.216819][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.245576][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.275583][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.291739][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.304981][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.329126][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.339260][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.357455][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.372226][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.387048][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.401857][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.418660][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.427505][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.436601][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.446714][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.454245][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.462134][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.469663][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.477543][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.485431][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.493569][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.501056][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.508945][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.516917][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.529637][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.533827][ T5900] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 123.539483][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.561854][ T5900] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 123.568958][ T5900] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 123.570688][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 123.591735][ T5900] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 123.602140][ T5900] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 123.656579][ T5900] corsair 0003:1B1C:1B34.0002: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.1-1/input0 [ 124.182033][ T5900] usb 2-1: USB disconnect, device number 3 [ 124.399669][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.407867][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.415977][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.423550][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.430977][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.438635][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.481756][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.489288][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.511490][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.527568][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.563008][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.590463][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.617589][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.635201][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.657587][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.667860][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.701794][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.716943][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.727891][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.738681][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.799640][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.853011][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.894217][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.937139][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.959202][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.971365][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 124.996193][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.058972][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.094347][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.178618][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.209818][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.323838][ T30] audit: type=1326 audit(1743419412.127:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b3d8d169 code=0x7ffc0000 [ 125.354664][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.439003][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.491990][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.510294][ T30] audit: type=1326 audit(1743419412.127:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b3d8d169 code=0x7ffc0000 [ 125.553311][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.585544][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.615921][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.670878][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.704743][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.741820][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.769844][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.817535][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.857339][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.891793][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.938475][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 125.991453][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.033550][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.054551][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.080344][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.103661][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.119419][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.135749][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.147399][ T6171] loop4: detected capacity change from 0 to 512 [ 126.153996][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.162648][ T6171] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.169448][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.177269][ T6171] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.185638][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.193900][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.242311][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.258830][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.283787][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.307204][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.331745][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.356512][ T6171] EXT4-fs (loop4): Test dummy encryption mode enabled [ 126.364118][ T6171] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.391776][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 126.401123][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.351812][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.359416][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.366929][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.374493][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.381979][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.389405][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.969871][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.977397][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.985216][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 127.992727][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.000142][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.002813][ T6171] EXT4-fs (loop4): 1 truncate cleaned up [ 128.035551][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.044104][ T6171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.081726][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.094750][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.115346][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.161888][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.190164][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.210395][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.235032][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.272891][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.300400][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.318312][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.327811][ T6182] loop1: detected capacity change from 0 to 2048 [ 128.336338][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.356130][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.371775][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.393445][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.419535][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.445197][ T6182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.498203][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.548923][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.569770][ T6182] netlink: 164 bytes leftover after parsing attributes in process `syz.1.62'. [ 128.601357][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.641833][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.674335][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.715819][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.763471][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.804832][ T6190] vlan2: entered allmulticast mode [ 128.816591][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.840619][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 128.879958][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 129.860174][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 129.872049][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 129.879515][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 129.887671][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.124276][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.132194][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.142061][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.149607][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.154875][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.157081][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.197973][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.207649][ T6199] xt_bpf: check failed: parse error [ 130.218461][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.256453][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.301006][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.352328][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.381821][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.395858][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.399554][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.422036][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.451988][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.705253][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.713729][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.721313][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.729491][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.737284][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.745032][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.752835][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.760260][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.771751][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.814895][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.834810][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.852450][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.859941][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.877586][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.897814][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.921406][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.939307][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.951755][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.966751][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 130.991947][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 131.018205][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 131.045813][ T10] hid-generic 0000:0004:0003.0001: unknown main item tag 0x0 [ 131.083595][ T10] hid-generic 0000:0004:0003.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 133.428867][ T6206] loop4: detected capacity change from 0 to 40427 [ 133.482565][ T6206] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3fffff [ 133.569463][ T6206] F2FS-fs (loop4): invalid crc value [ 135.014959][ T6206] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 135.171945][ T6237] syz.3.75 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.433691][ T6254] loop3: detected capacity change from 0 to 512 [ 137.502770][ T6254] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.537165][ T6254] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.594535][ T6254] EXT4-fs (loop3): Test dummy encryption mode enabled [ 137.643494][ T6254] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.703262][ T6254] EXT4-fs (loop3): 1 truncate cleaned up [ 137.726750][ T6254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.124906][ T6273] loop4: detected capacity change from 0 to 256 [ 140.194065][ T6273] exfat: Unknown parameter 'io' [ 140.401200][ T6280] loop0: detected capacity change from 0 to 128 [ 141.630934][ T6288] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 141.835998][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.435818][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.445063][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.162273][ T6298] fuse: Unknown parameter 'fd0x0000000000000003' [ 145.058200][ T888] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 145.284345][ T888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.545617][ T888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.791806][ T888] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 145.856670][ T888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.919717][ T888] usb 4-1: config 0 descriptor?? [ 146.059724][ T6317] loop0: detected capacity change from 0 to 128 [ 146.893711][ T888] logitech 0003:046D:C29C.0003: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 146.942512][ T6332] loop5: detected capacity change from 0 to 128 [ 147.347064][ T888] logitech 0003:046D:C29C.0003: no inputs found [ 147.523448][ T888] usb 4-1: USB disconnect, device number 2 [ 148.521173][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 151.736592][ T6354] loop5: detected capacity change from 0 to 256 [ 151.778490][ T6354] exfat: Unknown parameter 'io' [ 152.244219][ T6362] loop3: detected capacity change from 0 to 128 [ 154.521846][ T5904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 154.702912][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 154.722226][ T5904] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 154.743310][ T6382] loop2: detected capacity change from 0 to 128 [ 154.792098][ T5904] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.844888][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.684450][ T5904] usb 5-1: Product: syz [ 155.688703][ T5904] usb 5-1: Manufacturer: syz [ 155.771525][ T5904] usb 5-1: SerialNumber: syz [ 156.024317][ T6390] loop5: detected capacity change from 0 to 128 [ 156.305593][ T6390] EXT4-fs (loop5): Test dummy encryption mode enabled [ 156.334428][ T6390] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.408144][ T6373] loop4: detected capacity change from 0 to 8192 [ 156.414916][ T6390] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.575546][ T6373] loop4: p1 < > p3 < > p4 < > [ 156.582605][ T6373] loop4: partition table partially beyond EOD, truncated [ 156.715224][ T6405] process 'syz.2.125' launched './file0' with NULL argv: empty string added [ 156.783336][ T6373] loop4: p3 start 327168 is beyond EOD, truncated [ 156.893210][ T5904] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 157.703506][ T5904] cdc_ncm 5-1:1.0: bind() failure [ 157.715780][ T5904] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 157.724853][ T5904] cdc_ncm 5-1:1.1: bind() failure [ 157.795325][ T5904] usb 5-1: USB disconnect, device number 2 [ 157.986858][ T6411] loop3: detected capacity change from 0 to 128 [ 158.501257][ T6417] loop0: detected capacity change from 0 to 256 [ 158.536816][ T6417] exfat: Unknown parameter 'io' [ 158.666491][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.121'. [ 158.679399][ T6421] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.689036][ T6421] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 159.808207][ T6426] loop0: detected capacity change from 0 to 512 [ 159.834752][ T6426] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.841512][ T6426] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.857103][ T6426] EXT4-fs (loop0): Test dummy encryption mode enabled [ 159.897973][ T6426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.982809][ T6426] EXT4-fs (loop0): 1 truncate cleaned up [ 160.004821][ T6426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.454577][ T6443] loop1: detected capacity change from 0 to 16 [ 161.657359][ T6443] erofs (device loop1): mounted with root inode @ nid 36. [ 162.664386][ T6449] loop2: detected capacity change from 0 to 128 [ 163.428337][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.457608][ T5834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.517499][ T30] audit: type=1326 audit(1743419450.317:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3198d169 code=0x7ffc0000 [ 163.640560][ T30] audit: type=1326 audit(1743419450.317:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ffb3198d169 code=0x7ffc0000 [ 163.741847][ T30] audit: type=1326 audit(1743419450.317:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3198d169 code=0x7ffc0000 [ 163.928412][ T6465] loop5: detected capacity change from 0 to 256 [ 163.972843][ T6465] exfat: Unknown parameter 'io' [ 164.088221][ T6466] loop3: detected capacity change from 0 to 4096 [ 164.114593][ T6466] EXT4-fs: Ignoring removed bh option [ 164.134248][ T6472] loop4: detected capacity change from 0 to 128 [ 164.141827][ T6466] EXT4-fs: quotafile must be on filesystem root [ 168.263877][ T6503] input: syz0 as /devices/virtual/input/input7 [ 168.617764][ T6511] loop1: detected capacity change from 0 to 256 [ 168.719282][ T6511] FAT-fs (loop1): Directory bread(block 64) failed [ 168.726218][ T6511] FAT-fs (loop1): Directory bread(block 65) failed [ 168.733447][ T6511] FAT-fs (loop1): Directory bread(block 66) failed [ 168.740262][ T6511] FAT-fs (loop1): Directory bread(block 67) failed [ 168.747482][ T6511] FAT-fs (loop1): Directory bread(block 68) failed [ 168.754503][ T6511] FAT-fs (loop1): Directory bread(block 69) failed [ 168.761741][ T6511] FAT-fs (loop1): Directory bread(block 70) failed [ 168.768581][ T6511] FAT-fs (loop1): Directory bread(block 71) failed [ 168.775840][ T6511] FAT-fs (loop1): Directory bread(block 72) failed [ 168.782900][ T6511] FAT-fs (loop1): Directory bread(block 73) failed [ 169.553860][ T6513] loop3: detected capacity change from 0 to 512 [ 169.600778][ T6513] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.649797][ T6513] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.700280][ T6513] EXT4-fs (loop3): Test dummy encryption mode enabled [ 169.757810][ T6513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.847555][ T6513] EXT4-fs (loop3): 1 truncate cleaned up [ 169.884532][ T6513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.384786][ T6517] loop4: detected capacity change from 0 to 128 [ 171.717593][ T6528] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 173.312992][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.452301][ T6560] xt_bpf: check failed: parse error [ 178.028061][ T6566] loop3: detected capacity change from 0 to 128 [ 179.774704][ T6590] loop0: detected capacity change from 0 to 256 [ 179.847535][ T6590] overlay: filesystem on ./bus not supported [ 180.122960][ T6593] loop1: detected capacity change from 0 to 512 [ 180.166689][ T6593] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.231853][ T6593] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.267534][ T6593] EXT4-fs (loop1): Test dummy encryption mode enabled [ 180.291893][ T6593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.341400][ T6593] EXT4-fs (loop1): 1 truncate cleaned up [ 180.382905][ T6593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.828290][ T6603] loop2: detected capacity change from 0 to 128 [ 182.010008][ T6612] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 182.927664][ T6627] loop0: detected capacity change from 0 to 512 [ 183.025550][ T6628] xt_bpf: check failed: parse error [ 183.052486][ T6627] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.182: iget: bad extra_isize 50264 (inode size 256) [ 183.193938][ T6627] EXT4-fs (loop0): Remounting filesystem read-only [ 183.248192][ T6627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.562984][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.666604][ T6640] loop0: detected capacity change from 0 to 256 [ 184.754742][ T6640] exfat: Unknown parameter 'io' [ 186.568271][ T6651] loop4: detected capacity change from 0 to 4096 [ 186.581358][ T6651] EXT4-fs: Ignoring removed bh option [ 186.587752][ T6651] EXT4-fs: quotafile must be on filesystem root [ 186.873257][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.270000][ T6657] loop0: detected capacity change from 0 to 2048 [ 187.369817][ T6657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.456351][ T6657] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.822947][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.835268][ T6671] loop4: detected capacity change from 0 to 128 [ 188.563017][ T30] audit: type=1326 audit(1743419475.327:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6675 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 188.878218][ T30] audit: type=1326 audit(1743419475.397:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6675 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 188.911524][ T30] audit: type=1326 audit(1743419475.637:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6675 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 189.022741][ T30] audit: type=1326 audit(1743419475.637:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6675 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 189.071932][ T30] audit: type=1326 audit(1743419475.637:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6675 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 189.237467][ T6688] loop0: detected capacity change from 0 to 256 [ 189.244748][ T6688] exfat: Unknown parameter 'io' [ 190.295343][ T30] audit: type=1326 audit(1743419477.077:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8d169 code=0x7ffc0000 [ 190.353176][ T6696] loop2: detected capacity change from 0 to 128 [ 190.454003][ T30] audit: type=1326 audit(1743419477.097:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe0dbf8d169 code=0x7ffc0000 [ 190.751271][ T30] audit: type=1326 audit(1743419477.097:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8d169 code=0x7ffc0000 [ 190.774414][ T30] audit: type=1326 audit(1743419477.097:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0dbf8d169 code=0x7ffc0000 [ 190.797695][ T30] audit: type=1326 audit(1743419477.097:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8d169 code=0x7ffc0000 [ 191.204288][ T6702] loop4: detected capacity change from 0 to 4096 [ 191.216419][ T6702] EXT4-fs: Ignoring removed bh option [ 191.222435][ T6702] EXT4-fs: quotafile must be on filesystem root [ 192.302837][ T6715] loop5: detected capacity change from 0 to 2048 [ 192.405232][ T6715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.490225][ T6715] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.538977][ T6721] loop4: detected capacity change from 0 to 16 [ 192.652798][ T6721] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 16700) [ 192.757336][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.022312][ T6726] loop0: detected capacity change from 0 to 128 [ 194.205414][ T6740] loop5: detected capacity change from 0 to 256 [ 194.213079][ T6740] exfat: Unknown parameter 'io' [ 194.228514][ T6737] loop2: detected capacity change from 0 to 512 [ 194.287457][ T6737] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 196.555785][ T6762] loop3: detected capacity change from 0 to 16 [ 196.587091][ T6762] erofs (device loop3): mounted with root inode @ nid 36. [ 196.680308][ T6760] loop4: detected capacity change from 0 to 2048 [ 196.683791][ T6762] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 196.754090][ T6760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.784009][ T5856] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[8192] [ 196.794695][ T6762] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[8192] [ 196.804014][ T1102] Bluetooth: hci6: Frame reassembly failed (-84) [ 196.830671][ T6760] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.865506][ T6762] erofs (device loop3): read error -117 @ 0 of nid 89 [ 196.914775][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.917622][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 196.917645][ T30] audit: type=1800 audit(1743419483.717:91): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.228" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 198.107075][ T6743] loop1: detected capacity change from 0 to 4096 [ 198.115280][ T6743] EXT4-fs: Ignoring removed bh option [ 198.121135][ T6743] EXT4-fs: quotafile must be on filesystem root [ 198.215719][ T6785] loop2: detected capacity change from 0 to 128 [ 198.842354][ T5836] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 202.340299][ T6811] ip6gre1: entered allmulticast mode [ 203.816613][ T6821] loop1: detected capacity change from 0 to 128 [ 203.874924][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.881301][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.938132][ T6833] loop2: detected capacity change from 0 to 128 [ 207.715514][ T6853] loop0: detected capacity change from 0 to 128 [ 208.835063][ T6853] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 210.065680][ T6864] loop5: detected capacity change from 0 to 256 [ 210.447188][ T6864] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 210.540772][ T6864] exFAT-fs (loop5): failed to load alloc-bitmap [ 210.568328][ T6864] exFAT-fs (loop5): failed to recognize exfat type [ 211.763091][ T6867] loop2: detected capacity change from 0 to 4096 [ 211.770405][ T6867] EXT4-fs: Ignoring removed bh option [ 211.776007][ T6867] EXT4-fs: quotafile must be on filesystem root [ 212.861532][ T6878] loop4: detected capacity change from 0 to 128 [ 216.196690][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 216.208394][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 216.214124][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 216.215403][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 216.220668][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 218.099777][ T6914] overlayfs: failed to resolve './file0': -2 [ 218.464869][ T6916] loop4: detected capacity change from 0 to 128 [ 219.842926][ T6930] loop3: detected capacity change from 0 to 256 [ 219.874638][ T6930] exfat: Unknown parameter 'ÿÿ' [ 220.688452][ T6941] loop5: detected capacity change from 0 to 4096 [ 220.699267][ T6941] EXT4-fs: Ignoring removed bh option [ 220.705923][ T6941] EXT4-fs: quotafile must be on filesystem root [ 223.016342][ T6957] loop5: detected capacity change from 0 to 128 [ 223.532502][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 223.998954][ T30] audit: type=1326 audit(1743419510.797:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 224.065892][ T30] audit: type=1326 audit(1743419510.797:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 224.128832][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 224.137016][ T30] audit: type=1326 audit(1743419510.797:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 224.140039][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.220206][ T30] audit: type=1326 audit(1743419510.827:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c8c5bfa25 code=0x7ffc0000 [ 224.237723][ T5904] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 224.262598][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.270648][ T5904] usb 3-1: Product: syz [ 224.304803][ T5904] usb 3-1: Manufacturer: syz [ 224.309533][ T5904] usb 3-1: SerialNumber: syz [ 224.311849][ T30] audit: type=1326 audit(1743419510.827:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 224.366872][ T5904] usb 3-1: config 0 descriptor?? [ 224.396657][ T5904] usb 3-1: bad CDC descriptors [ 224.409257][ T5904] usb 3-1: unsupported MDLM descriptors [ 224.441775][ T30] audit: type=1326 audit(1743419510.827:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 224.522295][ T30] audit: type=1326 audit(1743419510.847:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 224.580882][ T30] audit: type=1326 audit(1743419510.847:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 224.657263][ T5835] usb 3-1: USB disconnect, device number 4 [ 224.702029][ T30] audit: type=1326 audit(1743419510.847:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 224.779077][ T30] audit: type=1326 audit(1743419510.847:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 224.963982][ T6972] loop5: detected capacity change from 0 to 128 [ 225.144113][ T6974] loop0: detected capacity change from 0 to 128 [ 228.403384][ T7012] overlayfs: overlapping lowerdir path [ 228.691768][ T5946] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 229.004197][ T7017] xt_bpf: check failed: parse error [ 229.085896][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.150619][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.220426][ T5946] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.248635][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.267136][ T5946] usb 5-1: SerialNumber: syz [ 229.309308][ T7022] loop2: detected capacity change from 0 to 128 [ 229.647727][ T5946] usb 5-1: 0:2 : does not exist [ 229.692972][ T5946] usb 5-1: USB disconnect, device number 3 [ 229.927032][ T6222] udevd[6222]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.380785][ T7065] loop3: detected capacity change from 0 to 128 [ 235.048360][ T7085] loop3: detected capacity change from 0 to 512 [ 235.230905][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.300072][ T7085] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.090603][ T7102] loop5: detected capacity change from 0 to 4096 [ 237.102503][ T7102] EXT4-fs: Ignoring removed bh option [ 237.108440][ T7102] EXT4-fs: quotafile must be on filesystem root [ 237.687442][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.472058][ T888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.827474][ T888] usb 4-1: Using ep0 maxpacket: 16 [ 238.872151][ T888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.911937][ T888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.963947][ T888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 239.032981][ T888] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 239.099890][ T888] usb 4-1: New USB device strings: Mfr=0, Product=116, SerialNumber=0 [ 239.155162][ T888] usb 4-1: Product: syz [ 239.182990][ T888] usb 4-1: config 0 descriptor?? [ 239.214381][ T7125] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 239.615673][ T7132] loop5: detected capacity change from 0 to 512 [ 239.951825][ T7132] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.782046][ T7132] EXT4-fs (loop5): orphan cleanup on readonly fs [ 240.881575][ T7132] __quota_error: 17 callbacks suppressed [ 240.881628][ T7132] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 240.897582][ T7132] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 240.907376][ T7132] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.335: Failed to acquire dquot type 1 [ 240.941322][ T7132] EXT4-fs (loop5): 1 truncate cleaned up [ 240.967277][ T7132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.788137][ T888] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 242.810695][ T888] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 243.811808][ T888] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 245.549972][ T888] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 245.661820][ T888] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 245.741966][ T888] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 245.812101][ T888] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -71 [ 245.934181][ T888] usb 4-1: USB disconnect, device number 3 [ 246.020823][ T7151] loop4: detected capacity change from 0 to 512 [ 246.066260][ T7151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.198942][ T7153] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.254165][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.334350][ T7153] loop2: detected capacity change from 0 to 512 [ 246.376700][ T7151] EXT4-fs (loop4): orphan cleanup on readonly fs [ 246.394806][ T7151] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.340: bg 0: block 248: padding at end of block bitmap is not set [ 247.308665][ T7156] loop3: detected capacity change from 0 to 4096 [ 247.315964][ T7156] EXT4-fs: Ignoring removed bh option [ 247.322100][ T7156] EXT4-fs: quotafile must be on filesystem root [ 247.457648][ T7151] Quota error (device loop4): write_blk: dquota write failed [ 247.466403][ T7151] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 247.476776][ T7151] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.340: Failed to acquire dquot type 1 [ 248.313283][ T7153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.365166][ T7151] EXT4-fs (loop4): 1 truncate cleaned up [ 248.376529][ T7153] EXT4-fs (loop2): orphan cleanup on readonly fs [ 248.505780][ T7153] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.341: bg 0: block 248: padding at end of block bitmap is not set [ 248.522066][ T7153] Quota error (device loop2): write_blk: dquota write failed [ 248.529538][ T7153] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 248.539632][ T7153] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.341: Failed to acquire dquot type 1 [ 248.555570][ T7153] EXT4-fs (loop2): 1 truncate cleaned up [ 248.698293][ T7151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 248.793615][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.664451][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.118768][ T7174] loop1: detected capacity change from 0 to 256 [ 251.221857][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.770013][ T7184] loop5: detected capacity change from 0 to 512 [ 251.880638][ T7184] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.939938][ T7184] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.982853][ T7184] EXT4-fs (loop5): Test dummy encryption mode enabled [ 252.009300][ T7184] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.068535][ T7184] EXT4-fs (loop5): 1 truncate cleaned up [ 252.102929][ T7184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.439535][ T7197] loop4: detected capacity change from 0 to 128 [ 255.663385][ T7206] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 255.813069][ T7212] loop1: detected capacity change from 0 to 2048 [ 256.046236][ T7212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.238689][ T7212] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.907366][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.791294][ T7237] xt_bpf: check failed: parse error [ 261.292298][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.626446][ T7257] loop5: detected capacity change from 0 to 128 [ 261.909916][ T7263] loop0: detected capacity change from 0 to 2048 [ 262.523350][ T7263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.604310][ T7263] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.964017][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.084674][ T7276] loop0: detected capacity change from 0 to 2048 [ 264.123051][ T7276] loop0: p1 p2 < > p3 < p5 > [ 264.141854][ T7276] loop0: partition table partially beyond EOD, truncated [ 264.171988][ T7276] loop0: p1 start 4043309312 is beyond EOD, truncated [ 264.178840][ T7276] loop0: p2 start 4278190080 is beyond EOD, truncated [ 264.222181][ T7276] loop0: p5 start 4043309312 is beyond EOD, truncated [ 264.859214][ T5205] loop0: p1 p2 < > p3 < p5 > [ 264.881816][ T5205] loop0: partition table partially beyond EOD, truncated [ 264.899447][ T5205] loop0: p1 start 4043309312 is beyond EOD, truncated [ 264.924233][ T5205] loop0: p2 start 4278190080 is beyond EOD, truncated [ 264.954877][ T5205] loop0: p5 start 4043309312 is beyond EOD, truncated [ 265.356331][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.367834][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.425470][ T6222] udevd[6222]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 266.458022][ T7292] xt_bpf: check failed: parse error [ 267.229824][ T6222] udevd[6222]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 268.690989][ T7318] loop5: detected capacity change from 0 to 512 [ 268.751312][ T7318] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.909670][ T7318] EXT4-fs (loop5): orphan cleanup on readonly fs [ 269.775123][ T7318] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.383: bg 0: block 248: padding at end of block bitmap is not set [ 270.033291][ T7328] 9pnet_fd: Insufficient options for proto=fd [ 270.142076][ T7318] Quota error (device loop5): write_blk: dquota write failed [ 270.149595][ T7318] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 270.326477][ T7318] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.383: Failed to acquire dquot type 1 [ 270.829933][ T7318] EXT4-fs (loop5): 1 truncate cleaned up [ 271.012104][ T7318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.266455][ T7334] loop4: detected capacity change from 0 to 128 [ 274.381895][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 274.411247][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 274.542723][ T888] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 274.953832][ T888] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 274.964516][ T888] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 274.981778][ T888] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 275.012366][ T888] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.449039][ T888] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 275.702038][ T888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.944399][ T888] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.989775][ T888] usb 1-1: invalid MIDI out EP 0 [ 276.150619][ T888] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 276.189866][ T888] usb 1-1: USB disconnect, device number 2 [ 276.590722][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.050700][ T7406] loop4: detected capacity change from 0 to 128 [ 281.219415][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.080722][ T7402] loop3: detected capacity change from 0 to 40427 [ 282.297831][ T7415] loop5: detected capacity change from 0 to 512 [ 282.372720][ T7415] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.396170][ T7415] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.422449][ T7415] EXT4-fs (loop5): Test dummy encryption mode enabled [ 282.432153][ T7415] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 282.507833][ T7402] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 282.633765][ T7415] EXT4-fs (loop5): 1 truncate cleaned up [ 282.659895][ T30] audit: type=1326 audit(1743419569.457:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 282.665268][ T7415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.925074][ T30] audit: type=1326 audit(1743419569.457:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 284.047128][ T30] audit: type=1326 audit(1743419569.457:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 284.090841][ T30] audit: type=1326 audit(1743419569.457:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 284.366060][ T5847] syz-executor: attempt to access beyond end of device [ 284.366060][ T5847] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.481601][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 284.481654][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.481681][ T5847] Call Trace: [ 284.481692][ T5847] [ 284.481705][ T5847] dump_stack_lvl+0x16c/0x1f0 [ 284.481771][ T5847] f2fs_handle_critical_error+0x621/0x9f0 [ 284.481837][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.481884][ T5847] ? __asan_memset+0x23/0x50 [ 284.481922][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.481975][ T5847] f2fs_write_end_io+0x73d/0xac0 [ 284.482040][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 284.482107][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.482158][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 284.482220][ T5847] bio_endio+0x6d2/0x810 [ 284.482282][ T5847] submit_bio_noacct+0x56d/0x1ec0 [ 284.482334][ T5847] __submit_merged_bio+0x33c/0x770 [ 284.482374][ T5847] __submit_merged_write_cond+0x319/0x3f0 [ 284.482420][ T5847] f2fs_write_cache_pages+0x2139/0x2680 [ 284.482481][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.482527][ T5847] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 284.482574][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.482621][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.482671][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.482715][ T5847] ? __lock_acquire+0x5ca/0x1ba0 [ 284.482751][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.482814][ T5847] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 284.482914][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.482958][ T5847] ? add_lock_to_list+0x9d/0x130 [ 284.483016][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.483066][ T5847] f2fs_write_data_pages+0x4ad/0xd90 [ 284.483116][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 284.483169][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.483216][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.483261][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 284.483307][ T5847] do_writepages+0x1b5/0x820 [ 284.483366][ T5847] ? __pfx_do_writepages+0x10/0x10 [ 284.483419][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.483465][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.483509][ T5847] ? do_raw_spin_lock+0x12c/0x2b0 [ 284.483550][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.483594][ T5847] ? find_held_lock+0x2b/0x80 [ 284.483644][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.483691][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.483735][ T5847] ? do_raw_spin_unlock+0x172/0x230 [ 284.483780][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.483833][ T5847] filemap_fdatawrite_wbc+0x104/0x160 [ 284.483886][ T5847] ? stack_trace_save+0x8e/0xc0 [ 284.483938][ T5847] __filemap_fdatawrite_range+0xb2/0xf0 [ 284.483976][ T5847] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 284.484014][ T5847] ? check_path.constprop.0+0x24/0x50 [ 284.484109][ T5847] ? find_held_lock+0x2b/0x80 [ 284.484158][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.484203][ T5847] ? do_raw_spin_unlock+0x172/0x230 [ 284.484247][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.484296][ T5847] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 284.484357][ T5847] block_operations+0x2a3/0xfd0 [ 284.484411][ T5847] ? __pfx_block_operations+0x10/0x10 [ 284.484455][ T5847] ? add_lock_to_list+0x9d/0x130 [ 284.484548][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.484592][ T5847] ? down_write+0x14d/0x200 [ 284.484627][ T5847] ? __pfx_down_write+0x10/0x10 [ 284.484663][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.484708][ T5847] ? rcu_is_watching+0x12/0xc0 [ 284.484760][ T5847] f2fs_write_checkpoint+0x2b8/0x45b0 [ 284.484814][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.484858][ T5847] ? kfree+0x2b6/0x4d0 [ 284.484893][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.484941][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.484985][ T5847] ? rcu_is_watching+0x12/0xc0 [ 284.485032][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.485075][ T5847] ? kthread_stop+0x273/0x650 [ 284.485117][ T5847] kill_f2fs_super+0x3c2/0x470 [ 284.485165][ T5847] ? __pfx_kill_f2fs_super+0x10/0x10 [ 284.485212][ T5847] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.485282][ T5847] deactivate_locked_super+0xc1/0x1a0 [ 284.485320][ T5847] deactivate_super+0xde/0x100 [ 284.485358][ T5847] cleanup_mnt+0x225/0x450 [ 284.485400][ T5847] task_work_run+0x150/0x240 [ 284.485445][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 284.485488][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.485536][ T5847] ? __pfx___x64_sys_umount+0x10/0x10 [ 284.485589][ T5847] syscall_exit_to_user_mode+0x27b/0x2a0 [ 284.485649][ T5847] do_syscall_64+0xda/0x260 [ 284.485710][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.485747][ T5847] RIP: 0033:0x7f11b3d8e497 [ 284.485774][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 284.485814][ T5847] RSP: 002b:00007ffceda3b448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 284.485849][ T5847] RAX: 0000000000000000 RBX: 00007f11b3e0e08c RCX: 00007f11b3d8e497 [ 284.485873][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceda3b500 [ 284.485896][ T5847] RBP: 00007ffceda3b500 R08: 0000000000000000 R09: 0000000000000000 [ 284.485918][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffceda3c590 [ 284.485942][ T5847] R13: 00007f11b3e0e08c R14: 0000000000044ff2 R15: 00007ffceda3c5d0 [ 284.485984][ T5847] [ 285.077072][ T30] audit: type=1326 audit(1743419569.457:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 285.217665][ T30] audit: type=1326 audit(1743419569.457:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 285.240261][ T30] audit: type=1326 audit(1743419569.457:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 285.262538][ T30] audit: type=1326 audit(1743419569.457:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 285.288449][ T30] audit: type=1326 audit(1743419569.457:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 285.313918][ T30] audit: type=1326 audit(1743419569.457:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8c58d169 code=0x7ffc0000 [ 285.373855][ T5847] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 285.737879][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.723898][ T7432] loop4: detected capacity change from 0 to 40427 [ 286.747971][ T7432] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 286.789870][ T7432] F2FS-fs (loop4): invalid crc value [ 286.838443][ T7432] F2FS-fs (loop4): invalid crc value [ 286.873543][ T7432] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 288.116195][ T7461] loop4: detected capacity change from 0 to 128 [ 291.186297][ T7479] fuse: Bad value for 'fd' [ 291.537353][ T7483] loop0: detected capacity change from 0 to 512 [ 291.602558][ T7483] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.658770][ T7483] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.695466][ T7483] EXT4-fs (loop0): Test dummy encryption mode enabled [ 291.733127][ T7483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 292.080406][ T7483] EXT4-fs (loop0): 1 truncate cleaned up [ 292.098982][ T7483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.379263][ T7502] loop2: detected capacity change from 0 to 256 [ 294.412787][ T7502] exfat: Unknown parameter 'io' [ 295.562857][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.002528][ T7528] loop0: detected capacity change from 0 to 128 [ 298.733456][ T7534] input: syz0 as /devices/virtual/input/input10 [ 301.108039][ T7549] loop3: detected capacity change from 0 to 512 [ 301.142482][ T7549] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.199870][ T7549] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.216071][ T7549] EXT4-fs (loop3): Test dummy encryption mode enabled [ 301.239959][ T7549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 301.288270][ T7549] EXT4-fs (loop3): 1 truncate cleaned up [ 301.315810][ T7549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.266140][ T7559] loop0: detected capacity change from 0 to 256 [ 302.327048][ T7559] exfat: Unknown parameter 'io' [ 305.652114][ T970] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 306.013999][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.152320][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.314519][ T970] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 306.324319][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.372748][ T970] usb 3-1: config 0 descriptor?? [ 306.845136][ T7589] loop0: detected capacity change from 0 to 128 [ 307.077504][ T7593] loop4: detected capacity change from 0 to 512 [ 307.162388][ T7593] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.269253][ T7593] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.464: iget: bad extended attribute block 512 [ 307.284324][ T7593] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.464: couldn't read orphan inode 15 (err -117) [ 307.313317][ T7593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.501547][ T970] usb 3-1: string descriptor 0 read error: -22 [ 307.580639][ T7600] loop0: detected capacity change from 0 to 128 [ 308.473831][ T970] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input11 [ 308.578480][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.589775][ T970] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input12 [ 308.637330][ T970] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input13 [ 308.706021][ T970] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input14 [ 308.771275][ T970] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 308.952751][ T970] usb 3-1: USB disconnect, device number 5 [ 309.932402][ T7611] loop5: detected capacity change from 0 to 256 [ 309.939594][ T7611] exfat: Unknown parameter 'io' [ 311.506038][ T7624] xt_bpf: check failed: parse error [ 315.362892][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.860029][ T7669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.547954][ T7670] loop4: detected capacity change from 0 to 512 [ 317.628540][ T7672] loop3: detected capacity change from 0 to 1024 [ 317.646336][ T7670] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.697908][ T7670] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.737881][ T7670] EXT4-fs (loop4): Test dummy encryption mode enabled [ 317.759789][ T7672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.802006][ T7670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 317.881647][ T7670] EXT4-fs (loop4): 1 truncate cleaned up [ 317.892718][ T7670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.906715][ T7678] loop2: detected capacity change from 0 to 128 [ 318.767834][ T7682] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 319.404652][ T711] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 319.515570][ T711] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 319.592541][ T711] EXT4-fs (loop3): This should not happen!! Data will be lost [ 319.592541][ T711] [ 319.659872][ T711] EXT4-fs (loop3): Total free blocks count 0 [ 319.692940][ T711] EXT4-fs (loop3): Free/Dirty block details [ 319.745419][ T711] EXT4-fs (loop3): free_blocks=68451041280 [ 319.763643][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.779898][ T711] EXT4-fs (loop3): dirty_blocks=80 [ 319.798063][ T711] EXT4-fs (loop3): Block reservation details [ 319.811810][ T711] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 321.156248][ T7702] loop1: detected capacity change from 0 to 256 [ 321.207082][ T7702] exfat: Unknown parameter 'io' [ 321.803586][ T7712] loop4: detected capacity change from 0 to 128 [ 324.472778][ T7716] loop0: detected capacity change from 0 to 40427 [ 324.502521][ T7716] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 324.550165][ T7716] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 324.671002][ T7716] F2FS-fs (loop0): invalid crc value [ 324.771908][ T7737] xt_bpf: check failed: parse error [ 326.762462][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.768851][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.655841][ T7765] loop4: detected capacity change from 0 to 256 [ 328.702613][ T7765] exfat: Unknown parameter 'io' [ 332.826760][ T7794] loop0: detected capacity change from 0 to 128 [ 333.027071][ T7796] loop2: detected capacity change from 0 to 256 [ 333.777178][ T7796] FAT-fs (loop2): Directory bread(block 64) failed [ 333.820259][ T7796] FAT-fs (loop2): Directory bread(block 65) failed [ 333.873123][ T7796] FAT-fs (loop2): Directory bread(block 66) failed [ 333.879782][ T7796] FAT-fs (loop2): Directory bread(block 67) failed [ 333.946621][ T7796] FAT-fs (loop2): Directory bread(block 68) failed [ 333.954879][ T7796] FAT-fs (loop2): Directory bread(block 69) failed [ 333.961581][ T7796] FAT-fs (loop2): Directory bread(block 70) failed [ 333.969475][ T7796] FAT-fs (loop2): Directory bread(block 71) failed [ 333.976547][ T7796] FAT-fs (loop2): Directory bread(block 72) failed [ 333.983682][ T7796] FAT-fs (loop2): Directory bread(block 73) failed [ 334.272240][ T6003] kworker/u8:10: attempt to access beyond end of device [ 334.272240][ T6003] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 334.509545][ T7805] loop2: detected capacity change from 0 to 512 [ 334.704370][ T7805] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.519: casefold flag without casefold feature [ 334.837802][ T7805] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.519: couldn't read orphan inode 15 (err -117) [ 334.944307][ T7805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.927204][ T7824] loop5: detected capacity change from 0 to 128 [ 338.056442][ T7835] loop1: detected capacity change from 0 to 256 [ 338.082800][ T7835] exfat: Unknown parameter 'io' [ 338.452441][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.869289][ T7845] veth1_macvtap: left promiscuous mode [ 338.874999][ T7845] macsec0: entered allmulticast mode [ 339.152003][ T5854] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 341.892180][ T7869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.398605][ T7878] loop2: detected capacity change from 0 to 256 [ 343.413899][ T7881] loop3: detected capacity change from 0 to 128 [ 343.447303][ T7878] exfat: Unknown parameter 'io' [ 346.803202][ T5842] Bluetooth: hci6: command 0x1003 tx timeout [ 346.810580][ T5854] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 347.284121][ T7905] loop3: detected capacity change from 0 to 1024 [ 347.327535][ T7905] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 349.520178][ T7922] loop2: detected capacity change from 0 to 128 [ 354.114698][ T7949] loop3: detected capacity change from 0 to 40427 [ 355.018994][ T7953] sch_tbf: burst 824 is lower than device lo mtu (1550) ! [ 355.115296][ T7955] loop1: detected capacity change from 0 to 256 [ 355.160881][ T7955] exfat: Unknown parameter 'io' [ 356.983584][ T7967] loop3: detected capacity change from 0 to 512 [ 357.033472][ T5842] Bluetooth: hci6: command 0x1003 tx timeout [ 357.089230][ T7967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.101865][ T5854] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 357.233105][ T7967] EXT4-fs (loop3): orphan cleanup on readonly fs [ 357.242817][ T7967] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.568: bg 0: block 248: padding at end of block bitmap is not set [ 357.263509][ T7967] __quota_error: 20 callbacks suppressed [ 357.263566][ T7967] Quota error (device loop3): write_blk: dquota write failed [ 357.277336][ T7967] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 357.287599][ T7967] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.568: Failed to acquire dquot type 1 [ 357.369408][ T7967] EXT4-fs (loop3): 1 truncate cleaned up [ 357.452388][ T7967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.758847][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.572'. [ 361.105822][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.210635][ T30] audit: type=1326 audit(1743419648.997:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 362.356414][ T30] audit: type=1326 audit(1743419649.007:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 362.387562][ T8002] usb usb8: usbfs: process 8002 (syz.1.580) did not claim interface 0 before use [ 362.419988][ T30] audit: type=1326 audit(1743419649.007:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 362.462553][ T8002] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 362.485557][ T30] audit: type=1326 audit(1743419649.057:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f466c38bad0 code=0x7ffc0000 [ 362.543459][ T30] audit: type=1326 audit(1743419649.057:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f466c38e997 code=0x7ffc0000 [ 362.649770][ T30] audit: type=1326 audit(1743419649.057:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 362.736606][ T30] audit: type=1326 audit(1743419649.057:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f466c38e997 code=0x7ffc0000 [ 362.820768][ T30] audit: type=1326 audit(1743419649.057:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f466c38bdca code=0x7ffc0000 [ 362.922325][ T30] audit: type=1326 audit(1743419649.067:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 363.288739][ T30] audit: type=1326 audit(1743419649.087:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c38d169 code=0x7ffc0000 [ 365.081328][ T8018] loop3: detected capacity change from 0 to 512 [ 365.793332][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.820503][ T8018] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.015012][ T8028] loop5: detected capacity change from 0 to 512 [ 366.022661][ T8028] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.029214][ T8028] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.045712][ T8028] EXT4-fs (loop5): Test dummy encryption mode enabled [ 366.052756][ T8028] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 366.098809][ T8028] EXT4-fs (loop5): 1 truncate cleaned up [ 366.107282][ T8028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.115210][ T8031] EXT4-fs error (device loop3): ext4_readdir:262: inode #2: block 3: comm syz.3.586: path /newroot/92/file0: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=4278190082, rec_len=255, size=2048 fake=1 [ 367.382066][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.382160][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.393650][ T8047] loop3: detected capacity change from 0 to 128 [ 369.309533][ T8056] loop2: detected capacity change from 0 to 4096 [ 369.321197][ T8056] EXT4-fs: Ignoring removed bh option [ 369.327233][ T8056] EXT4-fs: quotafile must be on filesystem root [ 369.870963][ T8057] input: syz0 as /devices/virtual/input/input15 [ 372.271047][ T8080] loop0: detected capacity change from 0 to 512 [ 372.278784][ T8080] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.285451][ T8080] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.303865][ T8080] EXT4-fs (loop0): Test dummy encryption mode enabled [ 372.310698][ T8080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 372.347157][ T8075] loop4: detected capacity change from 0 to 128 [ 372.375037][ T8080] EXT4-fs (loop0): 1 truncate cleaned up [ 372.381639][ T8080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.948704][ T8087] futex_wake_op: syz.5.605 tries to shift op by -1; fix this program [ 373.718007][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.971644][ T8094] loop5: detected capacity change from 0 to 1024 [ 374.016474][ T8094] EXT4-fs: Ignoring removed oldalloc option [ 374.092049][ T8094] EXT4-fs: Ignoring removed orlov option [ 374.126999][ T8094] EXT4-fs (loop5): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 374.230964][ T8094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.612729][ T8094] ================================================================== [ 375.621222][ T8094] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x4129/0x4530 [ 375.629263][ T8094] Read of size 4 at addr ffff888053a92c18 by task syz.5.609/8094 [ 375.637092][ T8094] [ 375.639430][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.5.609 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 375.639473][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.639494][ T8094] Call Trace: [ 375.639505][ T8094] [ 375.639518][ T8094] dump_stack_lvl+0x116/0x1f0 [ 375.639578][ T8094] print_report+0xc3/0x670 [ 375.639625][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.639669][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.639711][ T8094] ? __phys_addr+0xc6/0x150 [ 375.639766][ T8094] ? ext4_ext_remove_space+0x4129/0x4530 [ 375.639815][ T8094] kasan_report+0xe0/0x110 [ 375.639863][ T8094] ? ext4_ext_remove_space+0x4129/0x4530 [ 375.639917][ T8094] ext4_ext_remove_space+0x4129/0x4530 [ 375.639981][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.640024][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.640066][ T8094] ? do_raw_write_lock+0x11c/0x3a0 [ 375.640112][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.640154][ T8094] ? ext4_da_release_space+0x25/0x580 [ 375.640194][ T8094] ? __pfx_ext4_ext_remove_space+0x10/0x10 [ 375.640242][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.640284][ T8094] ? ext4_es_remove_extent+0x103/0x4e0 [ 375.640341][ T8094] ? __pfx_ext4_es_remove_extent+0x10/0x10 [ 375.640404][ T8094] ext4_ext_truncate+0x246/0x300 [ 375.640454][ T8094] ext4_truncate+0xde8/0x11e0 [ 375.640498][ T8094] ? __pfx_ext4_truncate+0x10/0x10 [ 375.640539][ T8094] ? __pfx_down_write+0x10/0x10 [ 375.640579][ T8094] ext4_write_end+0x9df/0xe40 [ 375.640625][ T8094] ext4_da_write_end+0x507/0xdf0 [ 375.640668][ T8094] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 375.640720][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.640764][ T8094] generic_perform_write+0x271/0x930 [ 375.640825][ T8094] ? __pfx_generic_perform_write+0x10/0x10 [ 375.640877][ T8094] ? __mark_inode_dirty+0x5ab/0xe50 [ 375.640939][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.640981][ T8094] ? generic_update_time+0xcf/0xf0 [ 375.641029][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.641071][ T8094] ? mnt_put_write_access_file+0x45/0xf0 [ 375.641115][ T8094] ext4_buffered_write_iter+0x119/0x440 [ 375.641152][ T8094] ext4_file_write_iter+0xa4c/0x1d10 [ 375.641192][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 375.641226][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.641270][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.641316][ T8094] vfs_write+0x5bd/0x1180 [ 375.641353][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 375.641388][ T8094] ? __pfx___mutex_lock+0x10/0x10 [ 375.641444][ T8094] ? __pfx_vfs_write+0x10/0x10 [ 375.641493][ T8094] ksys_write+0x12a/0x240 [ 375.641529][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 375.641564][ T8094] ? rcu_is_watching+0x12/0xc0 [ 375.641610][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.641657][ T8094] do_syscall_64+0xcd/0x260 [ 375.641715][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.641751][ T8094] RIP: 0033:0x7f676b38d169 [ 375.641778][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.641812][ T8094] RSP: 002b:00007f676c29f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.641843][ T8094] RAX: ffffffffffffffda RBX: 00007f676b5a5fa0 RCX: 00007f676b38d169 [ 375.641867][ T8094] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 375.641890][ T8094] RBP: 00007f676b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 375.641911][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.641939][ T8094] R13: 0000000000000000 R14: 00007f676b5a5fa0 R15: 00007fff6a3c6c98 [ 375.641973][ T8094] [ 375.641985][ T8094] [ 376.001228][ T8094] The buggy address belongs to the physical page: [ 376.007737][ T8094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x63b pfn:0x53a92 [ 376.016724][ T8094] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 376.023901][ T8094] raw: 00fff00000000000 ffffea00014ea448 ffffea00014ea4c8 0000000000000000 [ 376.032524][ T8094] raw: 000000000000063b 0000000000000000 00000000ffffffff 0000000000000000 [ 376.041287][ T8094] page dumped because: kasan: bad access detected [ 376.047738][ T8094] page_owner tracks the page as freed [ 376.053113][ T8094] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8101, tgid 8100 (syz.2.611), ts 374410304901, free_ts 375445017861 [ 376.070790][ T8094] post_alloc_hook+0x181/0x1b0 [ 376.075595][ T8094] get_page_from_freelist+0x10fc/0x35c0 [ 376.081181][ T8094] __alloc_frozen_pages_noprof+0x223/0x2370 [ 376.087111][ T8094] alloc_pages_mpol+0x1fb/0x550 [ 376.092008][ T8094] folio_alloc_mpol_noprof+0x36/0x2f0 [ 376.097431][ T8094] shmem_alloc_folio+0x135/0x160 [ 376.102405][ T8094] shmem_alloc_and_add_folio+0x499/0xc20 [ 376.108094][ T8094] shmem_get_folio_gfp+0x687/0x1530 [ 376.113334][ T8094] shmem_fault+0x204/0xb10 [ 376.117788][ T8094] __do_fault+0x10d/0x490 [ 376.122160][ T8094] do_pte_missing+0xed5/0x3ea0 [ 376.126964][ T8094] __handle_mm_fault+0x1043/0x2a50 [ 376.132098][ T8094] handle_mm_fault+0x404/0xae0 [ 376.136887][ T8094] __get_user_pages+0x771/0x36f0 [ 376.141853][ T8094] populate_vma_page_range+0x278/0x3a0 [ 376.147353][ T8094] __mm_populate+0x1d8/0x380 [ 376.151972][ T8094] page last free pid 8108 tgid 8100 stack trace: [ 376.158304][ T8094] free_unref_folios+0x999/0x15e0 [ 376.163355][ T8094] folios_put_refs+0x5af/0x800 [ 376.168137][ T8094] shmem_undo_range+0x58f/0x1150 [ 376.173120][ T8094] shmem_evict_inode+0x3a1/0xbe0 [ 376.178223][ T8094] evict+0x3e6/0x920 [ 376.182248][ T8094] iput+0x521/0x880 [ 376.186117][ T8094] dentry_unlink_inode+0x29c/0x480 [ 376.191279][ T8094] __dentry_kill+0x1d0/0x600 [ 376.195940][ T8094] dput.part.0+0x4b1/0x9b0 [ 376.200413][ T8094] dput+0x1f/0x30 [ 376.204090][ T8094] __fput+0x51c/0xb70 [ 376.208102][ T8094] task_work_run+0x150/0x240 [ 376.212717][ T8094] do_exit+0xafe/0x2d90 [ 376.216885][ T8094] do_group_exit+0xd3/0x2a0 [ 376.221413][ T8094] get_signal+0x2673/0x26d0 [ 376.225967][ T8094] arch_do_signal_or_restart+0x8f/0x7d0 [ 376.231557][ T8094] [ 376.233897][ T8094] Memory state around the buggy address: [ 376.239542][ T8094] ffff888053a92b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.247639][ T8094] ffff888053a92b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.255729][ T8094] >ffff888053a92c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.263811][ T8094] ^ [ 376.268671][ T8094] ffff888053a92c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.276758][ T8094] ffff888053a92d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.284837][ T8094] ================================================================== [ 376.350464][ T8119] loop2: detected capacity change from 0 to 512 [ 376.372645][ T8119] EXT4-fs: Ignoring removed nobh option [ 376.433514][ T8094] Disabling lock debugging due to kernel taint [ 376.439755][ T8094] ================================================================== [ 376.447838][ T8094] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x42f6/0x4530 [ 376.455876][ T8094] Read of size 2 at addr ffff888053a92c1c by task syz.5.609/8094 [ 376.463617][ T8094] [ 376.465967][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.5.609 Tainted: G B 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 376.466022][ T8094] Tainted: [B]=BAD_PAGE [ 376.466034][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 376.466056][ T8094] Call Trace: [ 376.466067][ T8094] [ 376.466081][ T8094] dump_stack_lvl+0x116/0x1f0 [ 376.466141][ T8094] print_report+0xc3/0x670 [ 376.466189][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.466233][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.466274][ T8094] ? __phys_addr+0xc6/0x150 [ 376.466329][ T8094] ? ext4_ext_remove_space+0x42f6/0x4530 [ 376.466377][ T8094] kasan_report+0xe0/0x110 [ 376.466424][ T8094] ? ext4_ext_remove_space+0x42f6/0x4530 [ 376.466477][ T8094] ext4_ext_remove_space+0x42f6/0x4530 [ 376.466530][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.466573][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.466615][ T8094] ? do_raw_write_lock+0x11c/0x3a0 [ 376.466660][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.466701][ T8094] ? ext4_da_release_space+0x25/0x580 [ 376.466741][ T8094] ? __pfx_ext4_ext_remove_space+0x10/0x10 [ 376.466789][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.466830][ T8094] ? ext4_es_remove_extent+0x103/0x4e0 [ 376.466887][ T8094] ? __pfx_ext4_es_remove_extent+0x10/0x10 [ 376.466955][ T8094] ext4_ext_truncate+0x246/0x300 [ 376.467004][ T8094] ext4_truncate+0xde8/0x11e0 [ 376.467048][ T8094] ? __pfx_ext4_truncate+0x10/0x10 [ 376.467089][ T8094] ? __pfx_down_write+0x10/0x10 [ 376.467128][ T8094] ext4_write_end+0x9df/0xe40 [ 376.467174][ T8094] ext4_da_write_end+0x507/0xdf0 [ 376.467217][ T8094] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 376.467268][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.467313][ T8094] generic_perform_write+0x271/0x930 [ 376.467373][ T8094] ? __pfx_generic_perform_write+0x10/0x10 [ 376.467424][ T8094] ? __mark_inode_dirty+0x5ab/0xe50 [ 376.467481][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.467522][ T8094] ? generic_update_time+0xcf/0xf0 [ 376.467570][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.467612][ T8094] ? mnt_put_write_access_file+0x45/0xf0 [ 376.467656][ T8094] ext4_buffered_write_iter+0x119/0x440 [ 376.467692][ T8094] ext4_file_write_iter+0xa4c/0x1d10 [ 376.467732][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 376.467767][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.467811][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.467857][ T8094] vfs_write+0x5bd/0x1180 [ 376.467895][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 376.467930][ T8094] ? __pfx___mutex_lock+0x10/0x10 [ 376.467989][ T8094] ? __pfx_vfs_write+0x10/0x10 [ 376.468038][ T8094] ksys_write+0x12a/0x240 [ 376.468073][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 376.468110][ T8094] ? rcu_is_watching+0x12/0xc0 [ 376.468155][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.468202][ T8094] do_syscall_64+0xcd/0x260 [ 376.468259][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.468294][ T8094] RIP: 0033:0x7f676b38d169 [ 376.468322][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.468357][ T8094] RSP: 002b:00007f676c29f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 376.468389][ T8094] RAX: ffffffffffffffda RBX: 00007f676b5a5fa0 RCX: 00007f676b38d169 [ 376.468413][ T8094] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 376.468436][ T8094] RBP: 00007f676b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 376.468458][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.468480][ T8094] R13: 0000000000000000 R14: 00007f676b5a5fa0 R15: 00007fff6a3c6c98 [ 376.468512][ T8094] [ 376.468523][ T8094] [ 376.833403][ T8094] The buggy address belongs to the physical page: [ 376.839820][ T8094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x63b pfn:0x53a92 [ 376.848799][ T8094] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 376.855946][ T8094] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 376.864561][ T8094] raw: 000000000000063b 0000000000000000 00000000ffffffff 0000000000000000 [ 376.873160][ T8094] page dumped because: kasan: bad access detected [ 376.879576][ T8094] page_owner tracks the page as freed [ 376.884952][ T8094] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8101, tgid 8100 (syz.2.611), ts 374410304901, free_ts 375445017861 [ 376.902622][ T8094] post_alloc_hook+0x181/0x1b0 [ 376.907417][ T8094] get_page_from_freelist+0x10fc/0x35c0 [ 376.912991][ T8094] __alloc_frozen_pages_noprof+0x223/0x2370 [ 376.918912][ T8094] alloc_pages_mpol+0x1fb/0x550 [ 376.923795][ T8094] folio_alloc_mpol_noprof+0x36/0x2f0 [ 376.929207][ T8094] shmem_alloc_folio+0x135/0x160 [ 376.934172][ T8094] shmem_alloc_and_add_folio+0x499/0xc20 [ 376.939838][ T8094] shmem_get_folio_gfp+0x687/0x1530 [ 376.945070][ T8094] shmem_fault+0x204/0xb10 [ 376.949517][ T8094] __do_fault+0x10d/0x490 [ 376.953878][ T8094] do_pte_missing+0xed5/0x3ea0 [ 376.958666][ T8094] __handle_mm_fault+0x1043/0x2a50 [ 376.963802][ T8094] handle_mm_fault+0x404/0xae0 [ 376.968588][ T8094] __get_user_pages+0x771/0x36f0 [ 376.973630][ T8094] populate_vma_page_range+0x278/0x3a0 [ 376.979113][ T8094] __mm_populate+0x1d8/0x380 [ 376.983724][ T8094] page last free pid 8108 tgid 8100 stack trace: [ 376.990055][ T8094] free_unref_folios+0x999/0x15e0 [ 376.995107][ T8094] folios_put_refs+0x5af/0x800 [ 376.999891][ T8094] shmem_undo_range+0x58f/0x1150 [ 377.004878][ T8094] shmem_evict_inode+0x3a1/0xbe0 [ 377.009870][ T8094] evict+0x3e6/0x920 [ 377.013809][ T8094] iput+0x521/0x880 [ 377.017647][ T8094] dentry_unlink_inode+0x29c/0x480 [ 377.022795][ T8094] __dentry_kill+0x1d0/0x600 [ 377.027428][ T8094] dput.part.0+0x4b1/0x9b0 [ 377.031877][ T8094] dput+0x1f/0x30 [ 377.035548][ T8094] __fput+0x51c/0xb70 [ 377.039557][ T8094] task_work_run+0x150/0x240 [ 377.044175][ T8094] do_exit+0xafe/0x2d90 [ 377.048345][ T8094] do_group_exit+0xd3/0x2a0 [ 377.052862][ T8094] get_signal+0x2673/0x26d0 [ 377.057399][ T8094] arch_do_signal_or_restart+0x8f/0x7d0 [ 377.062986][ T8094] [ 377.065318][ T8094] Memory state around the buggy address: [ 377.070960][ T8094] ffff888053a92b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.079043][ T8094] ffff888053a92b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.087121][ T8094] >ffff888053a92c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.095197][ T8094] ^ [ 377.100049][ T8094] ffff888053a92c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.108124][ T8094] ffff888053a92d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.116194][ T8094] ================================================================== [ 377.171012][ T8119] EXT4-fs: Mount option(s) incompatible with ext2 [ 377.179915][ T8094] ================================================================== [ 377.188046][ T8094] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x4129/0x4530 [ 377.196082][ T8094] Read of size 4 at addr ffff888053a92c18 by task syz.5.609/8094 [ 377.203822][ T8094] [ 377.206165][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.5.609 Tainted: G B 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 377.206219][ T8094] Tainted: [B]=BAD_PAGE [ 377.206231][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.206253][ T8094] Call Trace: [ 377.206266][ T8094] [ 377.206280][ T8094] dump_stack_lvl+0x116/0x1f0 [ 377.206341][ T8094] print_report+0xc3/0x670 [ 377.206389][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.206433][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.206476][ T8094] ? __phys_addr+0xc6/0x150 [ 377.206530][ T8094] ? ext4_ext_remove_space+0x4129/0x4530 [ 377.206580][ T8094] kasan_report+0xe0/0x110 [ 377.206628][ T8094] ? ext4_ext_remove_space+0x4129/0x4530 [ 377.206681][ T8094] ext4_ext_remove_space+0x4129/0x4530 [ 377.206736][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.206779][ T8094] ? do_raw_write_lock+0x11c/0x3a0 [ 377.206825][ T8094] ? lock_release+0x201/0x2f0 [ 377.206855][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.206897][ T8094] ? ext4_da_release_space+0x25/0x580 [ 377.206937][ T8094] ? __pfx_ext4_ext_remove_space+0x10/0x10 [ 377.206990][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.207032][ T8094] ? ext4_es_remove_extent+0x103/0x4e0 [ 377.207089][ T8094] ? __pfx_ext4_es_remove_extent+0x10/0x10 [ 377.207151][ T8094] ext4_ext_truncate+0x246/0x300 [ 377.207201][ T8094] ext4_truncate+0xde8/0x11e0 [ 377.207245][ T8094] ? __pfx_ext4_truncate+0x10/0x10 [ 377.207288][ T8094] ? __pfx_down_write+0x10/0x10 [ 377.207326][ T8094] ext4_write_end+0x9df/0xe40 [ 377.207374][ T8094] ext4_da_write_end+0x507/0xdf0 [ 377.207418][ T8094] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 377.207469][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.207514][ T8094] generic_perform_write+0x271/0x930 [ 377.207574][ T8094] ? __pfx_generic_perform_write+0x10/0x10 [ 377.207626][ T8094] ? __mark_inode_dirty+0x5ab/0xe50 [ 377.207683][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.207726][ T8094] ? generic_update_time+0xcf/0xf0 [ 377.207775][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.207816][ T8094] ? mnt_put_write_access_file+0x45/0xf0 [ 377.207860][ T8094] ext4_buffered_write_iter+0x119/0x440 [ 377.207897][ T8094] ext4_file_write_iter+0xa4c/0x1d10 [ 377.207937][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 377.207976][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.208021][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.208067][ T8094] vfs_write+0x5bd/0x1180 [ 377.208104][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 377.208139][ T8094] ? __pfx___mutex_lock+0x10/0x10 [ 377.208195][ T8094] ? __pfx_vfs_write+0x10/0x10 [ 377.208243][ T8094] ksys_write+0x12a/0x240 [ 377.208280][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 377.208316][ T8094] ? rcu_is_watching+0x12/0xc0 [ 377.208361][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.208409][ T8094] do_syscall_64+0xcd/0x260 [ 377.208466][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.208502][ T8094] RIP: 0033:0x7f676b38d169 [ 377.208529][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.208565][ T8094] RSP: 002b:00007f676c29f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.208598][ T8094] RAX: ffffffffffffffda RBX: 00007f676b5a5fa0 RCX: 00007f676b38d169 [ 377.208622][ T8094] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 377.208645][ T8094] RBP: 00007f676b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 377.208667][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.208688][ T8094] R13: 0000000000000000 R14: 00007f676b5a5fa0 R15: 00007fff6a3c6c98 [ 377.208721][ T8094] [ 377.208733][ T8094] [ 377.573060][ T8094] The buggy address belongs to the physical page: [ 377.579483][ T8094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x63b pfn:0x53a92 [ 377.588435][ T8094] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 377.595571][ T8094] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 377.604169][ T8094] raw: 000000000000063b 0000000000000000 00000000ffffffff 0000000000000000 [ 377.612845][ T8094] page dumped because: kasan: bad access detected [ 377.619261][ T8094] page_owner tracks the page as freed [ 377.624630][ T8094] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8101, tgid 8100 (syz.2.611), ts 374410304901, free_ts 375445017861 [ 377.642358][ T8094] post_alloc_hook+0x181/0x1b0 [ 377.647150][ T8094] get_page_from_freelist+0x10fc/0x35c0 [ 377.652724][ T8094] __alloc_frozen_pages_noprof+0x223/0x2370 [ 377.658670][ T8094] alloc_pages_mpol+0x1fb/0x550 [ 377.663574][ T8094] folio_alloc_mpol_noprof+0x36/0x2f0 [ 377.668982][ T8094] shmem_alloc_folio+0x135/0x160 [ 377.673951][ T8094] shmem_alloc_and_add_folio+0x499/0xc20 [ 377.679629][ T8094] shmem_get_folio_gfp+0x687/0x1530 [ 377.684871][ T8094] shmem_fault+0x204/0xb10 [ 377.689331][ T8094] __do_fault+0x10d/0x490 [ 377.693692][ T8094] do_pte_missing+0xed5/0x3ea0 [ 377.698479][ T8094] __handle_mm_fault+0x1043/0x2a50 [ 377.703615][ T8094] handle_mm_fault+0x404/0xae0 [ 377.708438][ T8094] __get_user_pages+0x771/0x36f0 [ 377.713399][ T8094] populate_vma_page_range+0x278/0x3a0 [ 377.718886][ T8094] __mm_populate+0x1d8/0x380 [ 377.723514][ T8094] page last free pid 8108 tgid 8100 stack trace: [ 377.729845][ T8094] free_unref_folios+0x999/0x15e0 [ 377.734896][ T8094] folios_put_refs+0x5af/0x800 [ 377.739680][ T8094] shmem_undo_range+0x58f/0x1150 [ 377.744656][ T8094] shmem_evict_inode+0x3a1/0xbe0 [ 377.749627][ T8094] evict+0x3e6/0x920 [ 377.753552][ T8094] iput+0x521/0x880 [ 377.757390][ T8094] dentry_unlink_inode+0x29c/0x480 [ 377.762537][ T8094] __dentry_kill+0x1d0/0x600 [ 377.767163][ T8094] dput.part.0+0x4b1/0x9b0 [ 377.771612][ T8094] dput+0x1f/0x30 [ 377.775281][ T8094] __fput+0x51c/0xb70 [ 377.779297][ T8094] task_work_run+0x150/0x240 [ 377.783914][ T8094] do_exit+0xafe/0x2d90 [ 377.788092][ T8094] do_group_exit+0xd3/0x2a0 [ 377.792609][ T8094] get_signal+0x2673/0x26d0 [ 377.797144][ T8094] arch_do_signal_or_restart+0x8f/0x7d0 [ 377.802742][ T8094] [ 377.805067][ T8094] Memory state around the buggy address: [ 377.810707][ T8094] ffff888053a92b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.818814][ T8094] ffff888053a92b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.826958][ T8094] >ffff888053a92c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.835033][ T8094] ^ [ 377.839919][ T8094] ffff888053a92c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.848007][ T8094] ffff888053a92d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.856076][ T8094] ================================================================== [ 377.900312][ T8094] ================================================================== [ 377.908447][ T8094] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x42f6/0x4530 [ 377.916486][ T8094] Read of size 2 at addr ffff888053a92c1c by task syz.5.609/8094 [ 377.924236][ T8094] [ 377.926587][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.5.609 Tainted: G B 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 377.926649][ T8094] Tainted: [B]=BAD_PAGE [ 377.926662][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.926686][ T8094] Call Trace: [ 377.926699][ T8094] [ 377.926714][ T8094] dump_stack_lvl+0x116/0x1f0 [ 377.926777][ T8094] print_report+0xc3/0x670 [ 377.926829][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.926877][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.926923][ T8094] ? __phys_addr+0xc6/0x150 [ 377.926990][ T8094] ? ext4_ext_remove_space+0x42f6/0x4530 [ 377.927044][ T8094] kasan_report+0xe0/0x110 [ 377.927096][ T8094] ? ext4_ext_remove_space+0x42f6/0x4530 [ 377.927154][ T8094] ext4_ext_remove_space+0x42f6/0x4530 [ 377.927213][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.927261][ T8094] ? do_raw_write_lock+0x11c/0x3a0 [ 377.927312][ T8094] ? lock_release+0x201/0x2f0 [ 377.927345][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.927391][ T8094] ? ext4_da_release_space+0x25/0x580 [ 377.927435][ T8094] ? __pfx_ext4_ext_remove_space+0x10/0x10 [ 377.927488][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.927534][ T8094] ? ext4_es_remove_extent+0x103/0x4e0 [ 377.927596][ T8094] ? __pfx_ext4_es_remove_extent+0x10/0x10 [ 377.927663][ T8094] ext4_ext_truncate+0x246/0x300 [ 377.927717][ T8094] ext4_truncate+0xde8/0x11e0 [ 377.927765][ T8094] ? __pfx_ext4_truncate+0x10/0x10 [ 377.927810][ T8094] ? __pfx_down_write+0x10/0x10 [ 377.927853][ T8094] ext4_write_end+0x9df/0xe40 [ 377.927904][ T8094] ext4_da_write_end+0x507/0xdf0 [ 377.927957][ T8094] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 377.928012][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.928061][ T8094] generic_perform_write+0x271/0x930 [ 377.928127][ T8094] ? __pfx_generic_perform_write+0x10/0x10 [ 377.928184][ T8094] ? __mark_inode_dirty+0x5ab/0xe50 [ 377.928245][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.928292][ T8094] ? generic_update_time+0xcf/0xf0 [ 377.928346][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.928392][ T8094] ? mnt_put_write_access_file+0x45/0xf0 [ 377.928441][ T8094] ext4_buffered_write_iter+0x119/0x440 [ 377.928486][ T8094] ext4_file_write_iter+0xa4c/0x1d10 [ 377.928531][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 377.928568][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.928619][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.928670][ T8094] vfs_write+0x5bd/0x1180 [ 377.928710][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 377.928748][ T8094] ? __pfx___mutex_lock+0x10/0x10 [ 377.928805][ T8094] ? __pfx_vfs_write+0x10/0x10 [ 377.928858][ T8094] ksys_write+0x12a/0x240 [ 377.928897][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 377.928937][ T8094] ? rcu_is_watching+0x12/0xc0 [ 377.928993][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.929044][ T8094] do_syscall_64+0xcd/0x260 [ 377.929107][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.929146][ T8094] RIP: 0033:0x7f676b38d169 [ 377.929177][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.929216][ T8094] RSP: 002b:00007f676c29f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.929252][ T8094] RAX: ffffffffffffffda RBX: 00007f676b5a5fa0 RCX: 00007f676b38d169 [ 377.929278][ T8094] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 377.929303][ T8094] RBP: 00007f676b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 377.929328][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.929352][ T8094] R13: 0000000000000000 R14: 00007f676b5a5fa0 R15: 00007fff6a3c6c98 [ 377.929387][ T8094] [ 377.929401][ T8094] [ 378.293079][ T8094] The buggy address belongs to the physical page: [ 378.299495][ T8094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x63b pfn:0x53a92 [ 378.308450][ T8094] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 378.315595][ T8094] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 378.324220][ T8094] raw: 000000000000063b 0000000000000000 00000000ffffffff 0000000000000000 [ 378.332816][ T8094] page dumped because: kasan: bad access detected [ 378.339245][ T8094] page_owner tracks the page as freed [ 378.344615][ T8094] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8101, tgid 8100 (syz.2.611), ts 374410304901, free_ts 375445017861 [ 378.362300][ T8094] post_alloc_hook+0x181/0x1b0 [ 378.367102][ T8094] get_page_from_freelist+0x10fc/0x35c0 [ 378.372681][ T8094] __alloc_frozen_pages_noprof+0x223/0x2370 [ 378.378610][ T8094] alloc_pages_mpol+0x1fb/0x550 [ 378.383499][ T8094] folio_alloc_mpol_noprof+0x36/0x2f0 [ 378.388919][ T8094] shmem_alloc_folio+0x135/0x160 [ 378.393896][ T8094] shmem_alloc_and_add_folio+0x499/0xc20 [ 378.399568][ T8094] shmem_get_folio_gfp+0x687/0x1530 [ 378.404813][ T8094] shmem_fault+0x204/0xb10 [ 378.409274][ T8094] __do_fault+0x10d/0x490 [ 378.413644][ T8094] do_pte_missing+0xed5/0x3ea0 [ 378.418435][ T8094] __handle_mm_fault+0x1043/0x2a50 [ 378.423580][ T8094] handle_mm_fault+0x404/0xae0 [ 378.428371][ T8094] __get_user_pages+0x771/0x36f0 [ 378.433334][ T8094] populate_vma_page_range+0x278/0x3a0 [ 378.438819][ T8094] __mm_populate+0x1d8/0x380 [ 378.443442][ T8094] page last free pid 8108 tgid 8100 stack trace: [ 378.449779][ T8094] free_unref_folios+0x999/0x15e0 [ 378.454844][ T8094] folios_put_refs+0x5af/0x800 [ 378.459627][ T8094] shmem_undo_range+0x58f/0x1150 [ 378.464608][ T8094] shmem_evict_inode+0x3a1/0xbe0 [ 378.469590][ T8094] evict+0x3e6/0x920 [ 378.473520][ T8094] iput+0x521/0x880 [ 378.477365][ T8094] dentry_unlink_inode+0x29c/0x480 [ 378.482509][ T8094] __dentry_kill+0x1d0/0x600 [ 378.487131][ T8094] dput.part.0+0x4b1/0x9b0 [ 378.491600][ T8094] dput+0x1f/0x30 [ 378.495302][ T8094] __fput+0x51c/0xb70 [ 378.499321][ T8094] task_work_run+0x150/0x240 [ 378.503945][ T8094] do_exit+0xafe/0x2d90 [ 378.508179][ T8094] do_group_exit+0xd3/0x2a0 [ 378.512789][ T8094] get_signal+0x2673/0x26d0 [ 378.517343][ T8094] arch_do_signal_or_restart+0x8f/0x7d0 [ 378.522945][ T8094] [ 378.525275][ T8094] Memory state around the buggy address: [ 378.530965][ T8094] ffff888053a92b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 378.539143][ T8094] ffff888053a92b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 378.547239][ T8094] >ffff888053a92c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 378.555325][ T8094] ^ [ 378.560311][ T8094] ffff888053a92c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 378.568408][ T8094] ffff888053a92d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 378.576492][ T8094] ================================================================== [ 378.622523][ T8094] ================================================================== [ 378.630664][ T8094] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x4129/0x4530 [ 378.638707][ T8094] Read of size 4 at addr ffff888053a92c18 by task syz.5.609/8094 [ 378.646542][ T8094] [ 378.648896][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.5.609 Tainted: G B 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 378.648951][ T8094] Tainted: [B]=BAD_PAGE [ 378.648964][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.648985][ T8094] Call Trace: [ 378.648998][ T8094] [ 378.649012][ T8094] dump_stack_lvl+0x116/0x1f0 [ 378.649073][ T8094] print_report+0xc3/0x670 [ 378.649120][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.649164][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.649212][ T8094] ? __phys_addr+0xc6/0x150 [ 378.649267][ T8094] ? ext4_ext_remove_space+0x4129/0x4530 [ 378.649317][ T8094] kasan_report+0xe0/0x110 [ 378.649364][ T8094] ? ext4_ext_remove_space+0x4129/0x4530 [ 378.649418][ T8094] ext4_ext_remove_space+0x4129/0x4530 [ 378.649475][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.649517][ T8094] ? do_raw_write_lock+0x11c/0x3a0 [ 378.649563][ T8094] ? lock_release+0x201/0x2f0 [ 378.649593][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.649635][ T8094] ? ext4_da_release_space+0x25/0x580 [ 378.649676][ T8094] ? __pfx_ext4_ext_remove_space+0x10/0x10 [ 378.649724][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.649767][ T8094] ? ext4_es_remove_extent+0x103/0x4e0 [ 378.649824][ T8094] ? __pfx_ext4_es_remove_extent+0x10/0x10 [ 378.649887][ T8094] ext4_ext_truncate+0x246/0x300 [ 378.649937][ T8094] ext4_truncate+0xde8/0x11e0 [ 378.649982][ T8094] ? __pfx_ext4_truncate+0x10/0x10 [ 378.650024][ T8094] ? __pfx_down_write+0x10/0x10 [ 378.650063][ T8094] ext4_write_end+0x9df/0xe40 [ 378.650110][ T8094] ext4_da_write_end+0x507/0xdf0 [ 378.650155][ T8094] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 378.650210][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.650255][ T8094] generic_perform_write+0x271/0x930 [ 378.650316][ T8094] ? __pfx_generic_perform_write+0x10/0x10 [ 378.650369][ T8094] ? __mark_inode_dirty+0x5ab/0xe50 [ 378.650426][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.650469][ T8094] ? generic_update_time+0xcf/0xf0 [ 378.650518][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.650560][ T8094] ? mnt_put_write_access_file+0x45/0xf0 [ 378.650605][ T8094] ext4_buffered_write_iter+0x119/0x440 [ 378.650642][ T8094] ext4_file_write_iter+0xa4c/0x1d10 [ 378.650681][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 378.650716][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.650760][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.650807][ T8094] vfs_write+0x5bd/0x1180 [ 378.650844][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 378.650879][ T8094] ? __pfx___mutex_lock+0x10/0x10 [ 378.650935][ T8094] ? __pfx_vfs_write+0x10/0x10 [ 378.650983][ T8094] ksys_write+0x12a/0x240 [ 378.651020][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 378.651056][ T8094] ? rcu_is_watching+0x12/0xc0 [ 378.651102][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.651149][ T8094] do_syscall_64+0xcd/0x260 [ 378.651213][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.651249][ T8094] RIP: 0033:0x7f676b38d169 [ 378.651275][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.651311][ T8094] RSP: 002b:00007f676c29f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.651344][ T8094] RAX: ffffffffffffffda RBX: 00007f676b5a5fa0 RCX: 00007f676b38d169 [ 378.651368][ T8094] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 378.651391][ T8094] RBP: 00007f676b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 378.651413][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.651435][ T8094] R13: 0000000000000000 R14: 00007f676b5a5fa0 R15: 00007fff6a3c6c98 [ 378.651468][ T8094] [ 378.651479][ T8094] [ 379.015791][ T8094] The buggy address belongs to the physical page: [ 379.022220][ T8094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x63b pfn:0x53a92 [ 379.031182][ T8094] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 379.038333][ T8094] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 379.047033][ T8094] raw: 000000000000063b 0000000000000000 00000000ffffffff 0000000000000000 [ 379.055630][ T8094] page dumped because: kasan: bad access detected [ 379.062086][ T8094] page_owner tracks the page as freed [ 379.067461][ T8094] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8101, tgid 8100 (syz.2.611), ts 374410304901, free_ts 375445017861 [ 379.085143][ T8094] post_alloc_hook+0x181/0x1b0 [ 379.090082][ T8094] get_page_from_freelist+0x10fc/0x35c0 [ 379.095682][ T8094] __alloc_frozen_pages_noprof+0x223/0x2370 [ 379.101614][ T8094] alloc_pages_mpol+0x1fb/0x550 [ 379.106506][ T8094] folio_alloc_mpol_noprof+0x36/0x2f0 [ 379.111937][ T8094] shmem_alloc_folio+0x135/0x160 [ 379.116924][ T8094] shmem_alloc_and_add_folio+0x499/0xc20 [ 379.122602][ T8094] shmem_get_folio_gfp+0x687/0x1530 [ 379.127844][ T8094] shmem_fault+0x204/0xb10 [ 379.132305][ T8094] __do_fault+0x10d/0x490 [ 379.136703][ T8094] do_pte_missing+0xed5/0x3ea0 [ 379.141532][ T8094] __handle_mm_fault+0x1043/0x2a50 [ 379.146673][ T8094] handle_mm_fault+0x404/0xae0 [ 379.151467][ T8094] __get_user_pages+0x771/0x36f0 [ 379.156470][ T8094] populate_vma_page_range+0x278/0x3a0 [ 379.161960][ T8094] __mm_populate+0x1d8/0x380 [ 379.166576][ T8094] page last free pid 8108 tgid 8100 stack trace: [ 379.172921][ T8094] free_unref_folios+0x999/0x15e0 [ 379.178077][ T8094] folios_put_refs+0x5af/0x800 [ 379.182869][ T8094] shmem_undo_range+0x58f/0x1150 [ 379.187857][ T8094] shmem_evict_inode+0x3a1/0xbe0 [ 379.192947][ T8094] evict+0x3e6/0x920 [ 379.196879][ T8094] iput+0x521/0x880 [ 379.200725][ T8094] dentry_unlink_inode+0x29c/0x480 [ 379.205879][ T8094] __dentry_kill+0x1d0/0x600 [ 379.210517][ T8094] dput.part.0+0x4b1/0x9b0 [ 379.215065][ T8094] dput+0x1f/0x30 [ 379.218739][ T8094] __fput+0x51c/0xb70 [ 379.222753][ T8094] task_work_run+0x150/0x240 [ 379.227456][ T8094] do_exit+0xafe/0x2d90 [ 379.231636][ T8094] do_group_exit+0xd3/0x2a0 [ 379.236378][ T8094] get_signal+0x2673/0x26d0 [ 379.240960][ T8094] arch_do_signal_or_restart+0x8f/0x7d0 [ 379.246595][ T8094] [ 379.248927][ T8094] Memory state around the buggy address: [ 379.254581][ T8094] ffff888053a92b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 379.262673][ T8094] ffff888053a92b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 379.270762][ T8094] >ffff888053a92c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 379.278850][ T8094] ^ [ 379.283753][ T8094] ffff888053a92c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 379.291864][ T8094] ffff888053a92d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 379.299943][ T8094] ================================================================== [ 379.446690][ T8094] ================================================================== [ 379.454836][ T8094] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x42f6/0x4530 [ 379.463031][ T8094] Read of size 2 at addr ffff888053a92c1c by task syz.5.609/8094 [ 379.470785][ T8094] [ 379.473191][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.5.609 Tainted: G B 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 379.473254][ T8094] Tainted: [B]=BAD_PAGE [ 379.473268][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 379.473291][ T8094] Call Trace: [ 379.473305][ T8094] [ 379.473321][ T8094] dump_stack_lvl+0x116/0x1f0 [ 379.473387][ T8094] print_report+0xc3/0x670 [ 379.473440][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.473487][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.473534][ T8094] ? __phys_addr+0xc6/0x150 [ 379.473595][ T8094] ? ext4_ext_remove_space+0x42f6/0x4530 [ 379.473650][ T8094] kasan_report+0xe0/0x110 [ 379.473703][ T8094] ? ext4_ext_remove_space+0x42f6/0x4530 [ 379.473761][ T8094] ext4_ext_remove_space+0x42f6/0x4530 [ 379.473822][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.473870][ T8094] ? do_raw_write_lock+0x11c/0x3a0 [ 379.473920][ T8094] ? lock_release+0x201/0x2f0 [ 379.473953][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.474000][ T8094] ? ext4_da_release_space+0x25/0x580 [ 379.474043][ T8094] ? __pfx_ext4_ext_remove_space+0x10/0x10 [ 379.474097][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.474144][ T8094] ? ext4_es_remove_extent+0x103/0x4e0 [ 379.474211][ T8094] ? __pfx_ext4_es_remove_extent+0x10/0x10 [ 379.474280][ T8094] ext4_ext_truncate+0x246/0x300 [ 379.474336][ T8094] ext4_truncate+0xde8/0x11e0 [ 379.474384][ T8094] ? __pfx_ext4_truncate+0x10/0x10 [ 379.474430][ T8094] ? __pfx_down_write+0x10/0x10 [ 379.474474][ T8094] ext4_write_end+0x9df/0xe40 [ 379.474525][ T8094] ext4_da_write_end+0x507/0xdf0 [ 379.474574][ T8094] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 379.474630][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.474680][ T8094] generic_perform_write+0x271/0x930 [ 379.474748][ T8094] ? __pfx_generic_perform_write+0x10/0x10 [ 379.474806][ T8094] ? __mark_inode_dirty+0x5ab/0xe50 [ 379.474868][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.474915][ T8094] ? generic_update_time+0xcf/0xf0 [ 379.474969][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.475016][ T8094] ? mnt_put_write_access_file+0x45/0xf0 [ 379.475066][ T8094] ext4_buffered_write_iter+0x119/0x440 [ 379.475107][ T8094] ext4_file_write_iter+0xa4c/0x1d10 [ 379.475152][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 379.475195][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.475245][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.475296][ T8094] vfs_write+0x5bd/0x1180 [ 379.475337][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 379.475376][ T8094] ? __pfx___mutex_lock+0x10/0x10 [ 379.475437][ T8094] ? __pfx_vfs_write+0x10/0x10 [ 379.475491][ T8094] ksys_write+0x12a/0x240 [ 379.475531][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 379.475571][ T8094] ? rcu_is_watching+0x12/0xc0 [ 379.475621][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.475674][ T8094] do_syscall_64+0xcd/0x260 [ 379.475738][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.475778][ T8094] RIP: 0033:0x7f676b38d169 [ 379.475807][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.475845][ T8094] RSP: 002b:00007f676c29f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 379.475881][ T8094] RAX: ffffffffffffffda RBX: 00007f676b5a5fa0 RCX: 00007f676b38d169 [ 379.475908][ T8094] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 379.475934][ T8094] RBP: 00007f676b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 379.475958][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.475982][ T8094] R13: 0000000000000000 R14: 00007f676b5a5fa0 R15: 00007fff6a3c6c98 [ 379.476018][ T8094] [ 379.476031][ T8094] [ 379.839461][ T8094] The buggy address belongs to the physical page: [ 379.845886][ T8094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x63b pfn:0x53a92 [ 379.854976][ T8094] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 379.862124][ T8094] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 379.870734][ T8094] raw: 000000000000063b 0000000000000000 00000000ffffffff 0000000000000000 [ 379.879338][ T8094] page dumped because: kasan: bad access detected [ 379.885761][ T8094] page_owner tracks the page as freed [ 379.891181][ T8094] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8101, tgid 8100 (syz.2.611), ts 374410304901, free_ts 375445017861 [ 379.908905][ T8094] post_alloc_hook+0x181/0x1b0 [ 379.913924][ T8094] get_page_from_freelist+0x10fc/0x35c0 [ 379.919554][ T8094] __alloc_frozen_pages_noprof+0x223/0x2370 [ 379.925690][ T8094] alloc_pages_mpol+0x1fb/0x550 [ 379.930587][ T8094] folio_alloc_mpol_noprof+0x36/0x2f0 [ 379.936016][ T8094] shmem_alloc_folio+0x135/0x160 [ 379.941460][ T8094] shmem_alloc_and_add_folio+0x499/0xc20 [ 379.947233][ T8094] shmem_get_folio_gfp+0x687/0x1530 [ 379.952488][ T8094] shmem_fault+0x204/0xb10 [ 379.957049][ T8094] __do_fault+0x10d/0x490 [ 379.961416][ T8094] do_pte_missing+0xed5/0x3ea0 [ 379.966242][ T8094] __handle_mm_fault+0x1043/0x2a50 [ 379.971386][ T8094] handle_mm_fault+0x404/0xae0 [ 379.976179][ T8094] __get_user_pages+0x771/0x36f0 [ 379.981144][ T8094] populate_vma_page_range+0x278/0x3a0 [ 379.986669][ T8094] __mm_populate+0x1d8/0x380 [ 379.991406][ T8094] page last free pid 8108 tgid 8100 stack trace: [ 379.997744][ T8094] free_unref_folios+0x999/0x15e0 [ 380.002802][ T8094] folios_put_refs+0x5af/0x800 [ 380.007590][ T8094] shmem_undo_range+0x58f/0x1150 [ 380.012666][ T8094] shmem_evict_inode+0x3a1/0xbe0 [ 380.017645][ T8094] evict+0x3e6/0x920 [ 380.021714][ T8094] iput+0x521/0x880 [ 380.025558][ T8094] dentry_unlink_inode+0x29c/0x480 [ 380.030706][ T8094] __dentry_kill+0x1d0/0x600 [ 380.035336][ T8094] dput.part.0+0x4b1/0x9b0 [ 380.039793][ T8094] dput+0x1f/0x30 [ 380.043463][ T8094] __fput+0x51c/0xb70 [ 380.047475][ T8094] task_work_run+0x150/0x240 [ 380.052091][ T8094] do_exit+0xafe/0x2d90 [ 380.056263][ T8094] do_group_exit+0xd3/0x2a0 [ 380.060810][ T8094] get_signal+0x2673/0x26d0 [ 380.065584][ T8094] arch_do_signal_or_restart+0x8f/0x7d0 [ 380.071230][ T8094] [ 380.073570][ T8094] Memory state around the buggy address: [ 380.079220][ T8094] ffff888053a92b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 380.087300][ T8094] ffff888053a92b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 380.095387][ T8094] >ffff888053a92c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 380.103459][ T8094] ^ [ 380.108314][ T8094] ffff888053a92c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 380.116393][ T8094] ffff888053a92d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 380.124469][ T8094] ================================================================== [ 380.136614][ T8094] ================================================================== [ 380.144929][ T8094] BUG: KASAN: use-after-free in ext4_ext_insert_extent+0x45d0/0x4610 [ 380.153147][ T8094] Read of size 4 at addr ffff888053a92c18 by task syz.5.609/8094 [ 380.160896][ T8094] [ 380.163254][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.5.609 Tainted: G B 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 380.163310][ T8094] Tainted: [B]=BAD_PAGE [ 380.163322][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.163344][ T8094] Call Trace: [ 380.163358][ T8094] [ 380.163372][ T8094] dump_stack_lvl+0x116/0x1f0 [ 380.163432][ T8094] print_report+0xc3/0x670 [ 380.163480][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.163524][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.163567][ T8094] ? __phys_addr+0xc6/0x150 [ 380.163622][ T8094] ? ext4_ext_insert_extent+0x45d0/0x4610 [ 380.163670][ T8094] kasan_report+0xe0/0x110 [ 380.163718][ T8094] ? ext4_ext_insert_extent+0x45d0/0x4610 [ 380.163770][ T8094] ext4_ext_insert_extent+0x45d0/0x4610 [ 380.163823][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.163866][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.163908][ T8094] ? inode_needs_sync+0x143/0x180 [ 380.163952][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.163995][ T8094] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 380.164046][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.164087][ T8094] ? __ext4_ext_dirty+0x17d/0x230 [ 380.164132][ T8094] ext4_split_extent_at+0x53d/0xfc0 [ 380.164184][ T8094] ? __pfx_ext4_split_extent_at+0x10/0x10 [ 380.164231][ T8094] ? __pfx___might_resched+0x10/0x10 [ 380.164294][ T8094] ext4_split_extent+0x20b/0x660 [ 380.164344][ T8094] ext4_split_convert_extents+0x2ff/0x3a0 [ 380.164399][ T8094] ext4_ext_map_blocks+0x2b77/0x5d60 [ 380.164452][ T8094] ? rcu_is_watching+0x12/0xc0 [ 380.164498][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.164540][ T8094] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 380.164578][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.164622][ T8094] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 380.164673][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.164715][ T8094] ? stack_depot_save_flags+0x3e6/0xa50 [ 380.164767][ T8094] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 380.164816][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.164859][ T8094] ? kasan_save_stack+0x33/0x60 [ 380.164901][ T8094] ? __kasan_slab_alloc+0x89/0x90 [ 380.164953][ T8094] ? ext4_do_writepages+0x1432/0x3490 [ 380.164995][ T8094] ? ext4_writepages+0x37a/0x7d0 [ 380.165035][ T8094] ? __filemap_fdatawrite_range+0xb2/0xf0 [ 380.165071][ T8094] ? file_write_and_wait_range+0xca/0x140 [ 380.165107][ T8094] ? generic_buffers_fsync_noflush+0x76/0x310 [ 380.165160][ T8094] ? ext4_sync_file+0x896/0xf10 [ 380.165197][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.165238][ T8094] ? rcu_is_watching+0x12/0xc0 [ 380.165283][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.165326][ T8094] ? lock_acquire+0x2cd/0x350 [ 380.165359][ T8094] ? __pfx___might_resched+0x10/0x10 [ 380.165408][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.165451][ T8094] ? rcu_is_watching+0x12/0xc0 [ 380.165500][ T8094] ? __pfx_down_write+0x10/0x10 [ 380.165532][ T8094] ? ext4_es_lookup_extent+0xc7/0xc50 [ 380.165592][ T8094] ext4_map_blocks+0x45b/0x1390 [ 380.165630][ T8094] ? __pfx_ext4_map_blocks+0x10/0x10 [ 380.165666][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.165708][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.165750][ T8094] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 380.165798][ T8094] ? ext4_journal_check_start+0x22b/0x340 [ 380.165839][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.165881][ T8094] ? ext4_alloc_io_end_vec+0x148/0x1c0 [ 380.165943][ T8094] ext4_do_writepages+0x1a2c/0x3490 [ 380.165985][ T8094] ? __kasan_slab_free+0x51/0x70 [ 380.166043][ T8094] ? __pfx_ext4_do_writepages+0x10/0x10 [ 380.166085][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.166131][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.166174][ T8094] ? lock_acquire+0x2cd/0x350 [ 380.166206][ T8094] ? __pfx___might_resched+0x10/0x10 [ 380.166260][ T8094] ? ext4_writepages+0x37a/0x7d0 [ 380.166300][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.166342][ T8094] ext4_writepages+0x37a/0x7d0 [ 380.166383][ T8094] ? __pfx_ext4_writepages+0x10/0x10 [ 380.166424][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.166466][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.166515][ T8094] ? rcu_is_watching+0x12/0xc0 [ 380.166559][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.166601][ T8094] ? lock_release+0x201/0x2f0 [ 380.166634][ T8094] ? __pfx_ext4_writepages+0x10/0x10 [ 380.166676][ T8094] do_writepages+0x1b5/0x820 [ 380.166728][ T8094] ? __pfx_do_writepages+0x10/0x10 [ 380.166779][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.166822][ T8094] ? do_raw_spin_lock+0x12c/0x2b0 [ 380.166862][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.166904][ T8094] ? rcu_is_watching+0x12/0xc0 [ 380.166953][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.166995][ T8094] ? lock_release+0x201/0x2f0 [ 380.167026][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.167068][ T8094] ? do_raw_spin_unlock+0x172/0x230 [ 380.167110][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.167155][ T8094] filemap_fdatawrite_wbc+0x104/0x160 [ 380.167211][ T8094] __filemap_fdatawrite_range+0xb2/0xf0 [ 380.167247][ T8094] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 380.167305][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.167348][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.167390][ T8094] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 380.167440][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.167487][ T8094] file_write_and_wait_range+0xca/0x140 [ 380.167526][ T8094] generic_buffers_fsync_noflush+0x76/0x310 [ 380.167582][ T8094] ext4_sync_file+0x896/0xf10 [ 380.167620][ T8094] ? __pfx_ext4_sync_file+0x10/0x10 [ 380.167656][ T8094] vfs_fsync_range+0x139/0x220 [ 380.167702][ T8094] ext4_buffered_write_iter+0x2e0/0x440 [ 380.167739][ T8094] ext4_file_write_iter+0xa4c/0x1d10 [ 380.167780][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 380.167814][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.167858][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.167905][ T8094] vfs_write+0x5bd/0x1180 [ 380.167947][ T8094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 380.167982][ T8094] ? __pfx___mutex_lock+0x10/0x10 [ 380.168042][ T8094] ? __pfx_vfs_write+0x10/0x10 [ 380.168091][ T8094] ksys_write+0x12a/0x240 [ 380.168127][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 380.168163][ T8094] ? rcu_is_watching+0x12/0xc0 [ 380.168207][ T8094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.168255][ T8094] do_syscall_64+0xcd/0x260 [ 380.168316][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.168352][ T8094] RIP: 0033:0x7f676b38d169 [ 380.168381][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.168417][ T8094] RSP: 002b:00007f676c29f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.168450][ T8094] RAX: ffffffffffffffda RBX: 00007f676b5a5fa0 RCX: 00007f676b38d169 [ 380.168475][ T8094] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 380.168497][ T8094] RBP: 00007f676b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 380.168520][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.168542][ T8094] R13: 0000000000000000 R14: 00007f676b5a5fa0 R15: 00007fff6a3c6c98 [ 380.168575][ T8094] [ 380.168587][ T8094] [ 380.871160][ T8094] The buggy address belongs to the physical page: [ 380.877581][ T8094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x63b pfn:0x53a92 [ 380.886539][ T8094] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 380.893727][ T8094] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 380.902419][ T8094] raw: 000000000000063b 0000000000000000 00000000ffffffff 0000000000000000 [ 380.911043][ T8094] page dumped because: kasan: bad access detected [ 380.917463][ T8094] page_owner tracks the page as freed [ 380.922833][ T8094] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8101, tgid 8100 (syz.2.611), ts 374410304901, free_ts 375445017861 [ 380.940535][ T8094] post_alloc_hook+0x181/0x1b0 [ 380.945334][ T8094] get_page_from_freelist+0x10fc/0x35c0 [ 380.950912][ T8094] __alloc_frozen_pages_noprof+0x223/0x2370 [ 380.956859][ T8094] alloc_pages_mpol+0x1fb/0x550 [ 380.961749][ T8094] folio_alloc_mpol_noprof+0x36/0x2f0 [ 380.967171][ T8094] shmem_alloc_folio+0x135/0x160 [ 380.972173][ T8094] shmem_alloc_and_add_folio+0x499/0xc20 [ 380.977876][ T8094] shmem_get_folio_gfp+0x687/0x1530 [ 380.983235][ T8094] shmem_fault+0x204/0xb10 [ 380.987689][ T8094] __do_fault+0x10d/0x490 [ 380.992124][ T8094] do_pte_missing+0xed5/0x3ea0 [ 380.996915][ T8094] __handle_mm_fault+0x1043/0x2a50 [ 381.002053][ T8094] handle_mm_fault+0x404/0xae0 [ 381.006845][ T8094] __get_user_pages+0x771/0x36f0 [ 381.011832][ T8094] populate_vma_page_range+0x278/0x3a0 [ 381.017323][ T8094] __mm_populate+0x1d8/0x380 [ 381.021946][ T8094] page last free pid 8108 tgid 8100 stack trace: [ 381.028327][ T8094] free_unref_folios+0x999/0x15e0 [ 381.033442][ T8094] folios_put_refs+0x5af/0x800 [ 381.038232][ T8094] shmem_undo_range+0x58f/0x1150 [ 381.043218][ T8094] shmem_evict_inode+0x3a1/0xbe0 [ 381.048205][ T8094] evict+0x3e6/0x920 [ 381.052142][ T8094] iput+0x521/0x880 [ 381.055997][ T8094] dentry_unlink_inode+0x29c/0x480 [ 381.061148][ T8094] __dentry_kill+0x1d0/0x600 [ 381.065785][ T8094] dput.part.0+0x4b1/0x9b0 [ 381.070247][ T8094] dput+0x1f/0x30 [ 381.073920][ T8094] __fput+0x51c/0xb70 [ 381.077942][ T8094] task_work_run+0x150/0x240 [ 381.082561][ T8094] do_exit+0xafe/0x2d90 [ 381.086733][ T8094] do_group_exit+0xd3/0x2a0 [ 381.091259][ T8094] get_signal+0x2673/0x26d0 [ 381.096242][ T8094] arch_do_signal_or_restart+0x8f/0x7d0 [ 381.101927][ T8094] [ 381.104257][ T8094] Memory state around the buggy address: [ 381.109907][ T8094] ffff888053a92b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.118001][ T8094] ffff888053a92b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.126088][ T8094] >ffff888053a92c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.134168][ T8094] ^ [ 381.139044][ T8094] ffff888053a92c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.147193][ T8094] ffff888053a92d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.155286][ T8094] ================================================================== [ 381.196607][ T8094] EXT4-fs error (device loop5): ext4_ext_split:1078: inode #18: comm syz.5.609: p_ext > EXT_MAX_EXTENT! [ 381.209867][ T8094] EXT4-fs (loop5): Remounting filesystem read-only [ 381.254799][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.292738][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd