last executing test programs: 9m0.152488232s ago: executing program 32 (id=163): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000140)=0xf, 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x40000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x10002, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x25, 0x800, 0x8, 0x72cb}) 8m17.796623521s ago: executing program 33 (id=248): syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000140)=0xf, 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x40000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m45.825108248s ago: executing program 34 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010025bd7000ffdbdf2500000000b79944830870e6d041334849395a33632d9201085c173c89171ef5a7f78d36ac0fa7c063a3920aa0c075762d5409eb506215a7a6d0d423e6e6ad8888827883a5a14e5d3f890783caa1a29f65cc7cef5b65f21f7d5d45788d1506398603519c7729abc41017a2c1eee54e8f7aff91facf22", @ANYRES32=0x0, @ANYBLOB="3a29060003000000"], 0x20}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x121202, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000380)=0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@mcast2, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7m1.17457497s ago: executing program 35 (id=439): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000880)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) fsmount(0xffffffffffffffff, 0x0, 0x83) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"648f3e52", 0x4, 0x0, 0x4, 0x9, 0x8, "32ed0b784e2ba1b9afe5a05ee47ac8", "5d7d67b5", "16ccabd5", "3b8a8863", ["00fc64e6146f1fc27c267923", "dd4058dff003acb562e33d8c", "1582f778e0b18ca665f7c0c6", "5ac39a3f14a9655e8c188e64"]}) lseek(r6, 0x40000000400016, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 6m8.442831946s ago: executing program 36 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@mpls_getnetconf={0x4c, 0x52, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1800000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x65e90000}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2044d0, &(0x7f00000005c0)={[{@noauto_da_alloc}]}, 0x3, 0x4ab, &(0x7f0000000080)="$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") bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5m39.221918997s ago: executing program 37 (id=580): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000042000040c41090ea00000000000109022400010000000009040000010300000009"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) r4 = socket(0x2, 0x3, 0x68) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x10) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) getpgid(r0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 5m20.986637034s ago: executing program 4 (id=647): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 5m19.729190725s ago: executing program 4 (id=650): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x586, &(0x7f0000000840)="$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") chdir(&(0x7f0000000000)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 5m17.742703759s ago: executing program 4 (id=653): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa30801, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x523a00, 0xdc) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) write$UHID_INPUT(r0, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(r0) 5m16.512407966s ago: executing program 4 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r3, 0x7}, 0x8) 5m15.862074043s ago: executing program 38 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r3, 0x7}, 0x8) 4m38.848353733s ago: executing program 5 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xed}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0xa, 0x3) getpid() r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x2) r4 = epoll_create(0x628) epoll_pwait(r4, &(0x7f0000000580)=[{}], 0x1, 0x7c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x8000000, 0x0, 0xc880}, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, r1, 0x0, 0x1004) 4m36.679380923s ago: executing program 5 (id=744): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x1, 0x8, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 4m32.379908488s ago: executing program 5 (id=757): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m27.156727943s ago: executing program 5 (id=762): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f0000000180), 0xfe, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_clone(0x9e0411, 0x0, 0x64, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r0, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1) 4m24.356309431s ago: executing program 5 (id=768): r0 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r1, 0x8008972) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) 4m23.47381619s ago: executing program 5 (id=772): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@errors_continue}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1a10755, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@abort}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@delalloc}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4m21.884658154s ago: executing program 39 (id=772): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@errors_continue}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1a10755, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@abort}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@delalloc}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4m12.248537161s ago: executing program 6 (id=792): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x40201, 0x20) fspick(r5, &(0x7f00000001c0)='./file0\x00', 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x5, 0x0, 0x0, 0x5}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="34050000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000000000000014100000018001700000021000000007564703a73797a3100000000"], 0x34}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r8 = syz_open_procfs(r1, &(0x7f0000000080)='net/bnep\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/96, 0x87}], 0x1, 0x7, 0xb) timer_create(0x4, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setuid(0xee01) mlockall(0x7) 4m10.435157473s ago: executing program 6 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80009, @mcast2, 0xb}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) 4m7.862804101s ago: executing program 6 (id=800): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x7, 0x4a4, &(0x7f0000000a40)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x51) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) 4m2.528891182s ago: executing program 6 (id=807): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffff9c, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 3m58.691618026s ago: executing program 6 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80009, @mcast2, 0xb}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) 3m54.775985228s ago: executing program 6 (id=818): r0 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x50) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@xdp, &(0x7f0000000600)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000005c0)={[{@auto_da_alloc}]}, 0x3, 0x4b5, &(0x7f0000000840)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x160, 0x180, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'veth0_vlan\x00', &(0x7f0000000340)=@ethtool_coalesce={0xf, 0x868, 0x730, 0x59, 0x2, 0xffff, 0x9f34, 0x2, 0xd6, 0x80000000, 0xb, 0x459, 0x2, 0x8, 0x4f6797b1, 0x8001, 0xa9, 0x9, 0x5, 0xf, 0x7, 0x2f6, 0x10}}) capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f00000000c0)={0x47, 0x7, 0x7, 0x1, 0x2, 0xa5}) 3m38.903626137s ago: executing program 40 (id=818): r0 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x50) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@xdp, &(0x7f0000000600)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000005c0)={[{@auto_da_alloc}]}, 0x3, 0x4b5, &(0x7f0000000840)="$eJzs3EtsVFUfAPD/nbb0+3i1Ij5A1CoaiY8WCgoLEx+JiQs1JrrA5VgKQQZqaE0sqVINwY2Jkhi3RmNijK5duHJl1JWJGxe6NyTEdAOyGnNn7ozTaefBMDB9/H7J5Z4zc6bnnHvvufece7g3gHVrJP0nidgcEX9ExFBE5OoTjJRXVxbmJv5ZmJtIolh85e8k/VlcXpibqCRNsvWmcqQ/XeXOJfH0MvlOz545kS8UJk9n8bGZk2+OTc+eeez4yfyxyWOTp8YPHTqwf9/BJ8Yf70o9b0nLuvPdqV07nn/twosThy+8/vO3SU2ha+tRtwU6NBDzNduk3oNdyGEl2VITTvqbJu3GxqVLBiNKDXWg1P6Hou/c1up3Q/Hc+z0tHHBDFYvF4njjr+eLwBqWRK9LAPRG5UJ/eeHTiXQMvHgcvPZdeqY8AErrfSVbyoOe/upAdaBufNtNcxFxeP7qZ+kSS+5DRJM7CAAAnfkh7f88Wu53LO7/5eL2mnRbs7mh4WwuZVtE3BoR2yPitohS2jsi4s5rzH+kLr60/5O72FHF2pT2/57M5rYqS5ZvJclwXxbbUqr/QHL0eGFyb7ZN9sTAYBrft+xfT6I0CRS/fdQo/5Ga/l+6pPlX+oJZOS72Dy7+zZH8TP66K5659F7Ezv7l6p9N4GU90B0RsbPDPI4//PWuxZ/0VUOt699E83mmthQ/j3iovP/no67+FUnz+cmx/0Vhcu9Y5ahY6pdfz7/cKP/rqn8XpPt/47LHf7X+w0ntfO30kj+xoVUe5//8oOGYciTiqejg+N+QvLoo87fzMzNXixEbkheWfH665gZ3JV5a7yvXf8/u5dv/tvhvS9wVEelBfHdE3BMR92b77r6IuD8idjep/0/PPvBGk/r3dP/HN5WN28b+ryQtHwjVI6JVoO/Ej983yr6989+BUmhPdkpu5/zXbgE72mYAAACwyqRD6s2R5Ear4VxudLT8f/i3x8ZcYWp65pGjU2+dOlJ+RmA4BnKVO11DWTyy+5/D5Xhp9D1eWkecze6X7s/uG3/S9/9SfHRiqnCk15WHdW5Tg/af+quv16UDbrguzKMBq1Sz9v/FwZtYEOCm6/z6r+cAq12LVuyFDbCGuYrD+rVc+z/bg3IAN1/j6/+krgGscdVG/nEbiWse96p/eBNYfVzkYf1q3f5fulHvvwJ6p/2n+FdKIEkWfRJfRjT/VdL7MrcbeOer6psLPlwJ5WkWiFyjrwav9QURPQnkV0YxWgUqDXX2zIn+tt9qMVs8my8Ufv/uenLv7XkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgW/4NAAD//4cH3cw=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x160, 0x180, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'veth0_vlan\x00', &(0x7f0000000340)=@ethtool_coalesce={0xf, 0x868, 0x730, 0x59, 0x2, 0xffff, 0x9f34, 0x2, 0xd6, 0x80000000, 0xb, 0x459, 0x2, 0x8, 0x4f6797b1, 0x8001, 0xa9, 0x9, 0x5, 0xf, 0x7, 0x2f6, 0x10}}) capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f00000000c0)={0x47, 0x7, 0x7, 0x1, 0x2, 0xa5}) 2m58.899186323s ago: executing program 0 (id=990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5eef8c28, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x3f31, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc5501, 0x104) syz_fuse_handle_req(r1, &(0x7f0000004200)="8dae385542776ef3225455ae34f2486ecdda5cd1d60c9951ee7b87c6ebc68c94635cc676e0f984be9ac5baa3ef4917b2190708bfd7b65b896b549a4d391245cf38043c6559e2b3f8cdb019de083b572833620485cc91059bbc24cb814ea5bf4fc1fb81304f3f9104637e8fefbaa6fbcab3e225794cae21e5a745c2a8e7542b7c71f06e2ea9f9ba943a84f27fa8dd6a9c00834d1a8ca56c7493d364707c8c56c7dc2119fb330112939c72342ec74327ccd674066e6beb33f65e0991c2a1675286a480226de18d4b375ed9f45ca6f5aa6e1d30ec39ceb187e02ea8fab83f8668c0aba52bff37f43d6788422e2c9d52d789566d68272d74db81d530dc73f54e2502fbc13c5624c681c5c7494c326617ec90fe3aeb6cc2e5358916e35c08fb884719a1501f3bd7e28619a44cef79f974c18b5b049db3ebd823f11f3b050be2e46df8fafa03f239956e024eaeb42f62fcf1499b516bae7fb497209149cbe05eaf12eec1168908aaf676271e55b466d6ad3761216e65100d656159bc08c17b5487fadf8f53d055e983002f6a0a9dbb003a7c61f2eb412162d6280a255c1b6b358812ba92220d8c70740d15afd505fc268663f0e7913668f4763a863c07350e447f969b15ccad9701730183e6fcb49b6d35aa15fab1c696d84eb12e23ad056834805378edc0f7c4a8f8f9b53261a60d72438baa814bcd3ad5eeb3b3bd7c9ad1147e6aea0f02f00940583fa037925d997f63bb0a58952a27690f4977fa4c18726a2b02c2a5a9e751739f7f27ef5a20e22f56828e1d75961f97069bf2e5c50804bd8fb4b27bcb026de552f870b16d6bb453d7d264c110aa81e86b4f48825c8f2321e6a57ef7d3a7ad25eda7ba75e6f8ffd2a61ddfc91de75f14434765a3a51b9f2d62429bbde7e545099223fb1f77acb0c46c3914e69812a70c440d6c840458d7cd450ab4662e509a0316cff5ba3f3b23a68db0461d97a7da1e760fc93a7b5654a1e5d524eb68c185a7857a9d05cbf7efb540494a7d3b45fa452358a8c8a8a49bef99b11b0568e0708f92e2ecb3152cad459e1c53fc3bda846a146c8d8997d2239ac80a67cc9a47013ce7815026f1aa62153b4a415e16705cf4734f9ea9c854ff01d1e95f8a7a030cb5b446a850eea9be68159920f392e3b603fb7faecfea12606897172e334875ce13d56e243414f1a55794180a1fe4f330e1c0d4cda08ee0610279dacd25fd67ce4769301791ce8ef63a0e77a4b9e24069935b76be9dd2eef38819c0bf30e858bf429a5decb1921f1514eeee9d9f5b9ad01e2d84423724828f953264330ee98a4b3c7b475b1a3834bbd3bf8ea506d1dccf4f9b37613f861f9ad3b87c715ca69f52d0959d2d1fefe12c02d946f7935178cfea08de37a6c6474c77b01fd99d4d902f7d4553c2b36663a5d66bfba30647894347b89c0849ce8062365759af750ac74bf8772a1c628f93f8a9feb9f1f802033b77766ebe575c00eee1acd7600d0cad72cff5f6359a5e64c234abe6e3115111db5a66e369555656dd3fbb8e87e0ea578baffdb1b21076f784a4f442997901834abcc7892ca0cfe50624c27f280c10ed338821610b5ffe275fc4be8332635025d0de91e12b63aa40f9223dd11c4da133b30813826618beb41e4a0aa8de34c608f0c6de8d42b1ba97dda4c8a16969a2c88023169e35afa3d9d56667962644b86a72b78bc3cab8a95b55a1793e8678ad7f02bdf655ac473785f240f198458f4405b49618fa40d33a8e0e8f447404de799782610e04feae53770bb8b0c40571aff49d748ab1d7c70b3d31ebe02061d257e18d5916ad574785f227f0e79e76461de5e6c207416497b8e334dd7f23a45aba88aac1f113738a4f4cb62f2bf6549b5306f296289ebedd3ffa535be6c7ec4cf2c2a16e3c53967f82049b7c5c0e8ac3ba6fc19f1c8a3a49e299924dae5b0f34c002bf323e17b01e4b31fb426f03de3e7d6ce2a6d8bf0bd4b4fd2831ad1e0dad665dda85243932190d69a80ebc5dc4ae305837af88c251502a1e1db56138db27a9951cc63402c156a360ef72bdd3c04e5cd2a940f7e33ec39004dc4f4134bc24ac87b2dce8a35498469f9663191df768b917125d34b5f27e362a0e0c01b0c82ee803484ff304abd3f350a3fd7de1145f794ab5b0e5513b2230e20c3d1ce4d2effcfb3018bce6cb10fbc611f17a852632ae2731299077ecdd671fc5df6c59fa1ce66fb67b5f35605479e4e50e2476b7f6d38973b39f29ba39d19bc3664e0493a22b838438e9ea512541e5d0bf5689ce33d63509590b459c6500e53af3d50b84958b066738ca38ecc9dcda439007a0541237fb7935a0fc6f0c1e3a13a719cf10eaebf03bd89d0d5a6a387632d41791305fbe42b741688d8f8870eaa8649d433daf06bc0734603ad2c848afc211f8fbb2dcaaf452e35060a3903ca984b1f2e5dfd03c905bcaa202433debefc99ad273970d497c6543be1307ffd93fc1d334356b999c6d2026e09acdb133547519b5dfe58f37d8c926dc35b6666bd1f46c9ee74ab727f96dcb4e1a00defc064973d443298b5a6fb2bcdb869e756b51688a2f00fed4b1b1e4277e3dbf24635a60b777b2e83f229a05ce75a0089be3887329822854308d56eb82b79ed70db1dc53742b54764396c8f70eeac1b25d6272d0b0e0b75b2515648e2007638c225827d521914c52a17a71c86e792fd0a4ad11b8c2b4abfa0e9ae2bd6b491386be59d4693f9d6d6a64f1de8664765ceb9a648cd2189b03de222160b1f494ff0d118c0c6604722807f81ec75c24be9b84b462dafd716d072f72de692790fb007eeec237ebf3b5d0245d3c1e36338aaed7f83b132177b9e020fe6a24028a7df02d1468824e7d30f8e49cf1d31ca8e832ebf8cf510ad75190068e24539ffe289e8c59c65b43b23f5e35a789d13a65af8dde91e3d8558aa79167d5130c4b9a5f301fe51502b581a82768b7ebc40e18dd71bbf64f7267616740e1d0436ae9f8d32174fceb8685f00b9788ce7a4206d0d3f3c108f0bd1a6f59fe43723fc7e1b4f5b6d1ae2473634b3607ea0a4c468d1f98f340f3411e07417a8c69391130ec28a3da834989921fdc386ba2ce980e955d94034d58591c3bb744311096e77517704ec8812c80354c29a26a36b5572ababc3931650df6c7003c10f6bd92fe85ff265cab64618fa56b0412c119676e589ec78d6a0d9d28d6df04c3c5bb0f4d78f7d441e5180f6f6de73809e93fdf4122656a180c789eff11e7ebc16ea8ea58f9087de3bafa33a8926202d2036db0837636f05fcc2ec9024a0c35981f2f7237e59cdd68f3cac981ac7228fe3f9fb15279500aae672ff925d6d5eab713c005250beaeeb2ab22ef4ac48b1c414ccf18a90d91c62e8a87e0cde0f323d7564eb0c8e80e55ebd4d2bd0f3931efb382899de1f183bc3a942b3dff8dfe934b34db9cbb316e0c5c5818a44da2d57ff463cc8cd316ff61c9ac7566d2fdbca2058d9b2f2484904dfb6c11fe34ac91660bba74a65fdf8401310126e49f51e52ce1fe8f4b19e64bc11fc554bd34cbe8918863983703c7f479552d50117248671fb00dd0b4492bc4e8db1429667291157c722d2aaceed4dc6d302c807d9b4186833ce70b6040f216fa69251d05aa65165914c966c6b1b41dc718686f5c0ea604cf0a02764b1aaa0732f0debaf101ee3ec105bc7c6c916e18278b3fec05dda2232b081f3d09d65403cdfadb7b987c745406e39cafb2d841b4d2219da4f240549bddac47dbf36b490cba64bbe34d3b109232820dfdd781024dbee2ca65b59564c4d8801a589caa2d8ce3ed597a413fb40fa6bbb4ecc761ca494b7e184e6717b4033cbfd5330ff6bd0fd3823ea960ed57eec8398d5c16722a556340bc7401bc4f1cea644f2db36d40937ab702af4a58039c1b33cb09dc91a705e3b560b995db3b0d631ef29ca968efef9853d977daa49224a08b52db69c3df8859ec286c8383ad4959ae82c3112205452b36b25801b2e76b29ed729d638bfaae4f2ccf3213ccaaa12650d15b654cb1da7a727dc9ff017aaa17912469e4a4b872949dfd7ce3c7e0f30187c1cccae58842590ca44e5b73c5da2d1547fe7e2c3bbf1bd973797aa9636016758b8608abe1bf988d1bd14c85a2576de119f85e69a2396b869385e59848462b51b27f34bd1ddfb6b1ad94e662078cc2181fccab16fa373a4a1c529f18159ec6b97bb911d34bb9fcf6a007992ba2d045898eeddd1d88843e5d0a1e7741e07bc61e873e24fe808041371379833bed3fcf6deeec0ea5f1fccd0fe340aed85697e7500f68c50effb4623bcd050637b1ba01c6ea7e70c06751b945c93f49d761342a2d2681ffed532d83c5fd27a13014145514222923f0a706762c5c96f85298144c277dbeb64ad6bbce15808c66dfb53c2a89e9095e2c402b30a8c38e3c47699a5b2461d9b31068a14da8c664ee75dd5d652fb16eba9fc2f673868d22ea9df948161421a73f7042362941f77924e0bfbd74dfdc5138bcc9a8d700fc78dff38a7262705765120971d4294a418586d4d70a4ce7ce1f10a3d6446bf59db37188863395e25529a2ff19c83115c6b5cf136c1b8163692e9153871eda9a9b9347eec77f7d8c648259262942e8fa40585a88d412fed41b5fbf264c3f630b9dc90ee800c6bfeac68b973b31d4ea2789247f63e7fc529b3cd7c98f584b327a8a341cbb3bee7ad6fafa752ed03ad3f7ee292ca0c6296db8893df42a42b76e403affe3f04cfe78a441d697638321be79dca7eefceeb44817315a505e50ba712ece1668a2ec195a1c2693724e1cd87e091f9d33ce6b0925ae00ca9c9298c28d75144ae79cbf370be8f3c390c0e4ed2c25df8ed5d208233689b28433391f9262f8730b46ce82e60e453b429dea97441b54c9fb79599da10486d93b0acb7b057127c6244c67c7d9920db4990499e530511044f9263763b349dce1d456debf35a2a58f415e327383910dea71da72121fabf66ce719ea4535609685c3ecfb5f95c87c7f26f0a2ceff64b153501cdd0602f0109f832b1675c3dedfb771a191736b1f077a283c9402aeb6cd544daa15495542d3822360bf8c807709c4d718fdb20e98dd15656b0c1c8c47f5f6ad3b74ab83ef81b9be3bd1301c6c67904f7c88605030a2b98b7f4593d5045880f6685012b2f63e33d54d195dede0459a9653d99fd51d47496875940296374c3000b8f0bf1c878b9db67afbb0144b2e1216b338c75b1a89bcd7e16de6544ab34869cf09f5eda7e284daeafb0aad70f74f996ede15c8ecdee30542e3f4f9c6655f8c4b726cc8ae388bb49a2ac52d08447b6f38c68f59b6df332f9720807ac86a8420459814e876991eb3221eefe8636d5e222ea31bea1fa86e4cdaa35da7a5b8fc97cc5dd089df090106fac8ad1ae732d064f3f22272f88ec3110cb24a0aa534095971ba59a581e6bc493ca9b084111ffce6a0323323efdd66c911283e090ddb8b1dfe413f9b09d83570ed3f1f1a606354b6d488b30e8f8c4ac7a63b97ef0732f2288bad5d4a78b9c739ee6742e571402f4985c19b442d807350918907d7c4da400fc4231473cd0c7175093bbe704ec189242afba72d5cc28a81a7c7fa29b88c05a979365986d5f631abd3cf212f6c7b0e99c71fc4671b75f8ed7cd61565c9968ac1e88bb694d10b7c17d4aeed19a7c630fb1fe435fa3ec38273505961d016fb070c301db4bc7e956e08019f43b6047aefb759642a77e1e9a46481a404fd2d9eaffc0dc6e8363ee9a4e8a67844612e7ef30663486242b1a52e4e6ec1a13f279ccbd4fed92274823c88ea49706593e786095f3730effc4a10271b7baf2d4191fb91d659b351df1a5cc57fb4575d9fa0929f78185dd6081788ff2613bc3f83cbb4b47193da8ba41f2f1076de1cfe76cfbea393b9fe197d51f2e204cdf116f8b3c68ed95ecf16dd18afa4d40f1d097ee088b2580c7732ac51e372dd8225c70566456fc598d57f97af1680c652d7e3679049dc8132d9878a288f82b1f066a52587ec7177e9d9d1baa64f4b4606dac4f5ab642dde9b8761d4dc1a74f1abd7452465d7c6e9ecdf01bc85db79fd6f016dacff2811ba44f779cf453b6d4f75e8f48d6a4de3bec14f52d25966c48f608c5174f57d381eda228ed41422efe7cb9a720ac78d0b3f79cf11117a3d59c87833eea983a30b049b8d32d953b56c1f0ac9eb2efd6ba64ef84c19669569c44a396b9791aff01ebf7a759d718788a89f2311ff02579c2a6cd5e9e7b511188ff9eec0d627b69c19a764b54c8333e2411d282826a3abd917144e13a39b630d3b1eae7e762718afad2f0b92f306ba7e78b5fc4e27175a6ca5b09a4c123b858653601da1402869bbfb444d4ce40e23f9dd2601eac7ea998371682e90240044f0c87118324c1666b636f738841efe3b199fdccf0eb288d0eb73f202b0fa2ee14e907d2c6a4893e6eefbf1e4940d5d7e105d20c4692a253904d28bf19e7d4ec677e6411e9717610978e6abdd86b66d485253416675f21b0b7f3f20aa91b75fe09139c395b8b31ad1f7892b24aeca4fd4fdb0aa21d90404a58baf3b214f49b16ec1bd6dbf4d80efa9ec2300b323c3fa503ace46ee3e68c52f5eec2b8662abdc5b2b704e1868732d814ba38db4382b995a4066fdbb9000fec3817017818729cfc0bccc8a8d8ebc0d29b4394f453e0feeac8b28b7cedbc00723a98507e25d710d627ffe2c0d5aedc7a9fae4be0e705429c484ad661c5c250cdc1d2c8e1ed9f1033e346fbc43ff6096a93d162b67480d75f227f496622f2bffddf49094c74e6236addfeeaff9d98d921182448069355c4b11532b12a3f46faed855b394c6632bbc73ffd6aff7a7d1bb6f168505657928a6de4828d7a7c4bc9e4e7befcf85ae405cbd93995a1b2b6b9e7f385edaa70b65937a5482e59adbdd18f197e0750b256b4f2b4dfb1fab8f85042db746f3339a1f8feddc103356b3dbea3c8caae54f05f51d6014c92ed340b35d43687dc64e1436c0ff4a123be88b723aba8d8b1c5dc549a6d6b408de31a93984a1cf850ca4b4607d852cdbd65478bcb979d002319c5ea4a55770d56222656c6ff74269ff7c7fcff9950a1f213e0c5c4564d366baa8f6266642547e9c26f283dba8f5c590446b5c25e57f5197e469a30b70c152643e0be370832e45a214d85643ae8a239c26ba541cb52695ebfd20f0e8ffb733decd7c71e2d264b348b4e41cd969d39901e1ab724fb65125d899be926a3ee07fb49589796d96a6b9410af4db225584732854a3ad7c765d6f6969cdb43b89f32b618aa23a46e10ad2ae50e26ec307ed88c5091883e960886dbf89d5b5bf08ff423791b0e9e506d41d2fca6d14e5632337876b06733d70b35530a4c55bbedd8288275705741651380ea8f49ca5433144b9afca27151da4875e2ab736aedf0f510ba75cee65cf3e429a9a24d46865a69cd0b5545f58f4df25b6c4a08b2b9ccde46eef61275c2a2505593889b139de9007611bf2d38f81a6a951392c27f1475d190d46186e3b1de1b209df25a077cdbfa91097a24ef98ffbace6137ed5e07aed339106f998c7b69cb453a245ebe89ae2e476414f21a5356780cbcfa4daf1f8f69662b8dbd3aeb083260e69d7fa553ba8540be6fda2ff6c948b3d1b7035f3b817e5183a76b6da5b5b650c6943f660c5bdce749496e7ed4b9a0c1d76a2bf914718bb814f2835d5f7e8373865675a9124d68e05a7b1ba57c72d2fabc5f3870b636053f2bc36ab6230d0090e715b0f63dbf73c5d3032bd98ee6bd41ea883d1b497db12bac4d53577416b9fa709b93d3adb9655443e417b7d52ab4f76f04effbfa5f2508220ba4a7db909a9548a0453e96e044baabc0498e85b75384141c4fcebf46c1c23bee13c796535af8783e266ab9317e325b1fa78ecc04abd895e57e25af19dc2daadf647f35100d00e0979ea44d8bd57330d85c9915cc1bcd692aea2304c6e499e1e377588e88ae51cf2c228b699eebc27a72437f8942fd4bef2d27b05c5fcfab94af1e113829bda2e52f4c779a1433b813ff4cad39082f1500a8a33df607df0ac411007cac0b04d54d25bbf99fa1bb2bd63fa9b848c490e0fd224f9c5cf0555439a312b28ee6ee670b6b9ceaa60e7d47b4660e428d98e4073773e0f4aedcf229de7d36d047af93d826e8bf294bc8463d7c3dd591fd7c9d95e30df6ffd42dbd98dd6ef2a608427c87f405d63e422c829d8ed262e87ed6c5edaf94f6012c7f18d7202c278ae399483e135de69401d3825cceee5f75a1dec94d93fb99046bae4228a819f60482b03e458ae32c047008e6d782f0c4e3bd377b794ae94a58712bc2b479535e2f3b7621af55f43e781c054cf6491f1c7f72e91dc1e4919b37013b3fb023f166055da4739b3e4934a48c56e0d915c99eb700f2e81eeac27d44266d5d4417bd8bc816f44d69396f573cec244f332fc63b63d31407c1df9ad4cb78f907e6b9836a94b07b25777e7cc79356d24113b413d3098bd7aab02e1ebac87c146000ff2fc3b40833e9aaab66e9fd408bc43b733cfc0b89e8617b4252e1c3aad7706b3fff9b351080f023ec58b7093d3d1e0813e9046f28db3d38d72c769c64576bbe60f99895e58f77bd03508b33c0a034ebea5c05b661a0db22c650693001c2ff2eaa1245c38c5bd949e937df36cdc102961ccfd1db3f37a79d5a7adf1663951108d33798908457dcc4199027e148c5d67e84b2d1d3d69efa35cb95c2fdbeddc788d46cd6b2c2cde195f00b0c44787f7d9adfdb802209f98d0970bc6ee3be58749ba88a38c3d71df3d8a67976bacffbd08e2c7446918422c1a68423925bf3c0be2116a72eb9fc7165d6ee02263e6a54cb7258fd02f3d7bdc704a4a62d13e3268dd5b2d2250b33397a8fef6a8654dcafdc84004bcd0cbc2748fa535ea4dff51f96985c83b998169ecdbea0fe4c817565f3469ae9b7d3f9a171ed463bf51409928157bb26ab93560742489464171caae1af10147f4c162ec996af20f4453a10b2da1369112c4d560589021b7589b4f848006b6c8fb4334029e1bc47d027b3647b59dff50f65da1dabcf9ba330b92142e632afdb361017775a457c591fa14450519cf69aac3dc57d1ecd0d93a229d4c1413a866733d288919c1b7591891f67f2baa815a4d5e002d2484f17ecacc0eefc9530079c7d7df60b42874ec1f0d1f7d692b059e18a938207b5c217aac29bae6140c70740331691a30a334a68793927799a14ff73cef250a84b58f54de95aa97ad40fa3af419925fe2b5855525cbebcb239f3e4318c03d40109808259aa8b90f43452b65e87f79cbc1e50ad4975b9c57a7d4cacda057e684f2f28e05a0dcf4bf64aa6456b8e30276af0b760575f3c93310ae29e3fe833444a187432160ae195b5d4fe4d50552cb635c780cb650d49248c78b3306af7c4c4c4304dde150ee964e072836db9097e9eb55ad4a6c829cd1d88aea4a3a963cbf596ef0748dce44361e4953d87429062af665841835dfcd23b97b06fd4a8acf76ed46ad5f4bd70cfed38f540b4d586a12f4a89e59982cbb324840d9e033f251df24de81690eee9d21abdbd01350cb36e6a2101fb8dad7db05a7c38c9ab7416f5e96f84a0335574cda1a6e724e4caf3e10c5a3554d9b1bccd0901ff7fa82dd8156043f1f40eded9178eb892b82068881d9806c2b014a5fc068f51a265795d7d41e40e11e54eaf7fb4242a45ffa5a9dd0956261623cd968721b2727420691780996350e570a6daeda409330d9ee2da0ce4ff7b9302c780badae6b54c6d4ad109fd3344f37621b9b18ebe8a8fcf4e1a12cbbe66362d840a0a22e2f761da3e94649cd495f793791aef4677ff27ceb922e579facf2d9e283d121e6414bea8a6a87eedb8b4ef6a5d08d7b1ca73982bdc546ce04788c6272dc4e524246892c535c44b50cedb0a1588da3becf61ac6bd79494f3c854c83546fa0803e326c5aa3abe13a88db88ee1f8f2fc74281aba6cf20df469f97757b0a31cc64dcb06c4f0cd9cabb06b344a95d4176729bb9ae31f70c259bde20b2cb40b60fa0c0fe1168eca9ab0c1a254dc8da6ad7419a67c028b9a5ac741ef4fe415c4db7d8973dbe3f3563649c2db1a17f1b71a6e1309c967217cfbaa0b6978eb94ad2f399aa663336f1c06eede0f5f8fc256c721c4bdf1b0802cbd2d896a951a590cfa77377093bd73c9953988b1aed9f167791d956193dadb735ccc48bf7c55d57eac847727782e1b60ea16629c403436fa4332ea7c439030bf90bc525137035aadf6a520c3e3326d886c41921a477d6943c3cbe5a04a6ec008e4f42da0619bfa0edb2975965a4bf7a56dd1544d37443dc2143f3e222c7a9d1f63c43e9ef33ca716d8bf1f2ea421b8b77ddc6a573f25b6fb7a28c5215a5acf3e2507bda413d3a42e01d39a71fc74c452631438e1c08c95c3fafd1cb7eab129df96d09763b37495687d887ac169089c42dcca25d7e799e84a1c2758a3e24e324006745a887f6f648cd2e73fa329c062a35a7d000fa9982b819ac1b1852f8fb576a588c75e7b8b910cb58789bad818071503924bca4cb36e4303f6b97a14f2b7cd6666ceea121015cbd0eb38bc88d6e06cec66637eced45f422d86c40b58511d4900b9655a567061ae06f1e056d10a65ded02f9087a16f6676480f90096bdf274f2a99fd797da956aae465fa15176712a94e2dc177ffdad28cbdcf91f589d63789d4c470013f1127c0943625806d160408a652a0c9edeae278a453dcc76826de7efd4be1e3e3a198934acd6b0baa86ae2b83db13aa55b52b31d2c0a3fb1d684b58e757dd8caaf6d390cbfde0427d95ebe8f23e5e4ff2946c8765f2b1947cd6faa93746c39d2f983c041169f25f68d31ccfebb6e08fd214447bf4fba3d987483024fc175f0b3b5ea48b7ca6d0939bbe5a4f26672b1c3b09313e81cf2d05bd63b262dd44819aaf61784ac18d6a955e0749ed172941e80103c8303ae3f50124aa52dc17f7d0dc6962818f7bc72d283ec86e2337dec8c5e918c728d0cbaed2065136220b5a9a25a2fb7c60ee807f23c6dea8bd88b24bab526f11cfc779c68eeff2db6f7696ed3dccd5597e1035f70924a436219f3761b035750b6af37fb369119ed694c5f9a3d8cd4897d81dc517bffad5af4bc08f6628604de55b5f2f6db57a6a8e931fb17b744550c4075b4757fd47140eb8293ba414d1e7b9e7cf0a1f0dbd1bb44fad31dd518b99ab4447852055b5348d7886a19d03c2e694b72dd78b4dba371141d6a95af4627742454f8e6d9f4e4b9b933934f92098d1219e89985eba44c59df01fbdcbde91d072afc7fb90970d59a68e2c021c693497ac94721a314ce391474f6271b1c05866909a1779871ec2864dad591707797494e41c502d4c5db8f33e14acff3d44507a257cb0598686ea0d673ab45624e6d9113e7f57a7fa94167dac0f23569c5dbc683be1bb00364f64d05fc7d6d914bb122c188705d540505b41ee36da0591b7219624125cd3d58474767ca7c45580444733bfe0e7adce829f2224d9e4be09e3d2b6f8c9c15944851d8d14ddc1e0287b4f18dc81d6ec3de0d37e9ee27d9a3de425f8a84e1ef58b8d24c1235ba14d", 0x2000, &(0x7f0000000f40)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0xfffffffffffffffa, {0x7, 0x2d, 0x2, 0x20200228, 0x7, 0xff6b, 0x8000, 0x8, 0x0, 0x0, 0x8, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m56.308044233s ago: executing program 0 (id=999): bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x1, r0, 0x0, 0x2, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcbc}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x5000) sendmmsg$inet6(r5, &(0x7f0000003cc0), 0x0, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) 2m54.600482834s ago: executing program 0 (id=1002): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f00000000c0)={0x8, 0x7, 0x7, 0x8, 0x0, 0xf0000000}) sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m50.950953397s ago: executing program 0 (id=1012): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x200, 0x0, 0x0, 0x2, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d306e6d602000000000000000000010001", [0x204]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 2m48.547912467s ago: executing program 0 (id=1017): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x24044092) r4 = mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) fcntl$getownex(r2, 0x10, &(0x7f0000000280)) ioctl(r5, 0x8b22, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x1, 'veth1_virt_wifi\x00', {}, 0x3}) 2m42.938556934s ago: executing program 0 (id=1024): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f00000000c0)={0x8, 0x7, 0x7, 0x8, 0x0, 0xf0000000}) sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m41.648566055s ago: executing program 41 (id=1024): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f00000000c0)={0x8, 0x7, 0x7, 0x8, 0x0, 0xf0000000}) sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m25.497611094s ago: executing program 3 (id=1229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000040)={0x1d, r8}, 0x10) 1m24.092915501s ago: executing program 3 (id=1236): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m18.639751371s ago: executing program 3 (id=1252): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x63}, 0x28) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xd3) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) llistxattr(&(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0) 1m16.805873972s ago: executing program 3 (id=1260): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 1m11.103948196s ago: executing program 3 (id=1273): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0xfffffffffffffdb9, 0x9, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m8.360133871s ago: executing program 3 (id=1280): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e24, @empty=0xe0000000}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) madvise(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0x5, 0xfff1}, {0xfff3, 0xfff3}}}, 0x24}}, 0x24048894) write$binfmt_elf64(r7, 0x0, 0xfffffdcf) 52.477895983s ago: executing program 42 (id=1280): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e24, @empty=0xe0000000}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) madvise(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0x5, 0xfff1}, {0xfff3, 0xfff3}}}, 0x24}}, 0x24048894) write$binfmt_elf64(r7, 0x0, 0xfffffdcf) 46.021177046s ago: executing program 2 (id=1329): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@nolazytime}, {@usrjquota, 0x2e}, {@journal_async_commit}, {@grpjquota}, {@bsdgroups}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x142, 0x1ef) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x131000, 0x0) getdents64(r0, 0x0, 0x0) 43.644506659s ago: executing program 2 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, &(0x7f0000000200)=""/189, 0xbd) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 42.283995856s ago: executing program 2 (id=1336): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@block_validity}, {@max_dir_size_kb}]}, 0x1, 0x247, &(0x7f0000002600)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) mount$nfs4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10090ce, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mknod$loop(&(0x7f0000003e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x1) creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 39.201428235s ago: executing program 2 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 29.973481027s ago: executing program 2 (id=1355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000600)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26.841198312s ago: executing program 2 (id=1361): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 13.449623538s ago: executing program 8 (id=1381): syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c508630702104e000000030109023f0001000000000904000005ff87e70009058808020000000009050300000000000009050cfeffff0146e909050f000000000000090507"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_read_part_table(0x5cd, &(0x7f0000000600)="$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") 11.071497869s ago: executing program 43 (id=1361): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 10.120003874s ago: executing program 7 (id=1386): r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_clone(0x84000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0)=r3, 0x12) 9.605599821s ago: executing program 8 (id=1388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, &(0x7f0000000200)=""/189, 0xbd) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setreuid(0xee01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x26, 0x0) 8.765517207s ago: executing program 9 (id=1390): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffff9, 0x1a442) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) 8.513910576s ago: executing program 8 (id=1391): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "4e9d78a3"}]}}, 0x0}, 0x0) 8.247215405s ago: executing program 7 (id=1392): unshare(0x20000400) r0 = userfaultfd(0x80001) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 8.188951399s ago: executing program 1 (id=1393): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x63}, 0x28) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xd3) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b"], 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) llistxattr(&(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0) 6.96017941s ago: executing program 7 (id=1394): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x1800880, &(0x7f0000000040)=ANY=[], 0x1, 0x205, &(0x7f0000000600)="$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") pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6.631979691s ago: executing program 1 (id=1395): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 6.228026338s ago: executing program 1 (id=1396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000740)={0x1c, r2, 0x62c21a4ade68aba1, 0x70bd27, 0x25dfdbfd, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x24040010) 5.744851781s ago: executing program 7 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 5.669013116s ago: executing program 8 (id=1398): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x400e7, @mcast1, 0xfffff373}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71073f3ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 5.557385894s ago: executing program 1 (id=1399): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0xfff, &(0x7f0000001840)=""/4095, 0x40f00, 0x20}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) fallocate(r1, 0x10, 0x6, 0x10001) 5.212551119s ago: executing program 8 (id=1400): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x217, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 5.1014863s ago: executing program 9 (id=1401): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc845}, 0x4004) fcntl$setstatus(r0, 0x4, 0x2000) 4.060216734s ago: executing program 1 (id=1402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_setup(0xd94, &(0x7f0000000800)={0x0, 0x74ef, 0x40, 0x2, 0x278}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1, &(0x7f0000000700)=ANY=[], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) pipe2$9p(0x0, 0x800) syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000002140)=ANY=[@ANYBLOB="646973636172642c6572726f72733d636f6e74696e75652c646973636172642c6eff0365636173653d312c696f636861727365743d63703836322c756d61736b3d30303030303030303030303030303030303030303030312c666d61736b3d30303030303030303030303030303030303030303030302c6572726f72733d72656d6f756e742d726f2c00"], 0x5, 0x1531, &(0x7f00000044c0)="$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") write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000680)={0x2, 0x1, 0x12}) r7 = dup(0xffffffffffffffff) write$UHID_INPUT(r7, 0x0, 0x0) 4.039193553s ago: executing program 7 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.990792167s ago: executing program 8 (id=1404): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0x5, 0x2, {0x2, 0x31}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.73837648s ago: executing program 4 (id=1312): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101540) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x1, 0x6, 0x0, 0xfffe}) 3.589732531s ago: executing program 7 (id=1405): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xff7, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x2, 0x0, [0x8071, 0xfffe, 0x2d3, 0x2, 0x6], [0x2, 0x7, 0x1, 0x800000000000007, 0x7fff, 0x5, 0x5, 0x2, 0x800000000000000, 0x10001, 0x9, 0x8, 0x0, 0xfffffffffffffff4, 0x4c, 0x5, 0x102, 0xd, 0xdd, 0x5, 0x1, 0x6, 0x3, 0x33, 0x4003, 0x8, 0xa, 0x2, 0xa51, 0x8, 0x1, 0x3, 0x8, 0xfffffffffffffffa, 0x81, 0x7, 0x80, 0x931, 0x101, 0x3, 0x4, 0x7ffffffffffffffc, 0x7, 0x1, 0x1, 0x2, 0x1, 0x100, 0x101, 0x8000000000000001, 0x6, 0x9, 0xda, 0xbc, 0xfffffffffffffffd, 0x4, 0x5, 0x7, 0x3, 0x8000000000000000, 0x5, 0x3, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x35f438ce, 0x7, 0x6, 0x9, 0x10000000000005, 0x7ff, 0x3, 0xe4, 0xe, 0x20, 0x5, 0xd9, 0x2, 0x7, 0xffffffffffffffbf, 0x8000000000000000, 0x20000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000001, 0x4, 0x5, 0x7, 0x7, 0x7, 0x9, 0x1, 0x100000000016d, 0x100, 0x691, 0xffffffffffff43b0, 0xa, 0x259678ba, 0xe, 0x0, 0x0, 0x3, 0x4, 0x4, 0x3fb, 0x3, 0x8, 0x1, 0x0, 0x800000003, 0x40, 0x7fffffff, 0xb, 0xe, 0x9]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x80000000, 0xfffffffb, 0x0, 0x398, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x889, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x3d43, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x5, 0x200000, 0x0, 0x5, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x7ff, 0x8001, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xcd, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x80, 0x0, 0x1, 0x1ff]}, 0x45c) 3.587289193s ago: executing program 9 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80009, @mcast2, 0xb}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, 0x0, 0x10) 2.210083797s ago: executing program 9 (id=1407): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[], 0x0) 1.633725866s ago: executing program 1 (id=1408): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'pim6reg\x00', {0x80000001}, 0x7fff}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) gettid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x40, 0x101) io_setup(0x6, &(0x7f0000003b80)=0x0) io_submit(r8, 0x2, &(0x7f0000000280)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0xa, r7, 0x0, 0x28, 0x800, 0x0, 0x0, r7}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r7, 0x0, 0x0, 0x1, 0x0, 0x3, r7}]) 1.419444384s ago: executing program 9 (id=1409): bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000004dc0)={0x2020}, 0x2020) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff0040"], 0x48) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) 858.452µs ago: executing program 4 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 9 (id=1411): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') kernel console output (not intermixed with test programs): batadv_slave_0 [ 517.585556][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.603824][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.629757][ T32] veth1_macvtap: left promiscuous mode [ 517.641939][ T32] veth0_macvtap: left promiscuous mode [ 518.138323][T10341] loop2: detected capacity change from 0 to 8192 [ 518.209905][T10341] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.464701][T10350] netlink: 44 bytes leftover after parsing attributes in process `syz.0.903'. [ 519.406264][ T32] team0 (unregistering): Port device team_slave_1 removed [ 519.469726][ T32] team0 (unregistering): Port device team_slave_0 removed [ 519.975887][T10156] team0: Port device team_slave_0 added [ 519.997457][T10156] team0: Port device team_slave_1 added [ 520.216223][T10156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.226764][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.270513][T10156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.314805][T10156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.337566][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.505995][ T7434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.607248][T10156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.740269][T10388] tmpfs: Unknown parameter 'fscontext' [ 521.009672][ T5840] Bluetooth: unknown link type 128 [ 521.863936][ T30] audit: type=1800 audit(1771995871.339:26): pid=10398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.921" name="file1" dev="fuse" ino=0 res=0 errno=0 [ 521.909774][T10156] hsr_slave_0: entered promiscuous mode [ 521.966540][T10156] hsr_slave_1: entered promiscuous mode [ 522.015708][T10156] debugfs: 'hsr0' already exists in 'hsr' [ 522.049093][T10156] Cannot create hsr debugfs directory [ 522.447376][ T5917] kernel write not supported for file [eventfd] (pid: 5917 comm: kworker/0:7) [ 522.448369][T10413] xt_hashlimit: size too large, truncated to 1048576 [ 522.818743][T10419] md: invalid raid superblock magic on ram0 [ 522.920522][T10419] md: ram0 does not have a valid v0.0 superblock, not importing! [ 522.946995][T10419] md: md_import_device returned -22 [ 523.070760][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 523.252512][T10427] xfrm1: entered promiscuous mode [ 523.257574][T10427] xfrm1: entered allmulticast mode [ 525.284445][ T5840] Bluetooth: unknown link type 128 [ 526.201842][T10156] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 526.741774][T10482] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 526.807609][T10156] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 526.869102][T10156] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 526.926780][T10156] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 527.320260][ T5139] Bluetooth: hci2: command 0x0419 tx timeout [ 528.478378][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 529.212758][T10156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.299076][T10156] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.443220][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.450344][ T7987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.510390][ T5963] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 529.622306][ T7987] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.629454][ T7987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.669140][T10527] loop8: detected capacity change from 0 to 128 [ 529.679774][ T5963] usb 8-1: Using ep0 maxpacket: 16 [ 529.751355][ T5963] usb 8-1: config 1 interface 0 altsetting 121 bulk endpoint 0x1 has invalid maxpacket 1024 [ 529.806932][ T5963] usb 8-1: config 1 interface 0 has no altsetting 0 [ 529.841544][ T5963] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 529.893817][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.938997][ T5963] usb 8-1: Product: syz [ 529.966209][ T5963] usb 8-1: Manufacturer: syz [ 529.986428][ T5963] usb 8-1: SerialNumber: syz [ 530.143566][ T5840] Bluetooth: unknown link type 128 [ 530.149694][T10519] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 531.274412][ T5963] usblp0: Disabling reads from problematic bidirectional printer [ 531.312310][ T5963] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 121 proto 1 vid 0x03F0 pid 0x0004 [ 531.365012][T10548] Unsupported ieee802154 address type: 0 [ 531.418979][ T5963] usb 8-1: USB disconnect, device number 4 [ 532.181592][ T5963] usblp0: removed [ 532.190049][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 532.426139][T10557] overlayfs: failed to clone upperpath [ 532.473809][T10156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.939650][T10156] veth0_vlan: entered promiscuous mode [ 536.065402][T10156] veth1_vlan: entered promiscuous mode [ 536.592618][T10616] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 536.686031][T10156] veth0_macvtap: entered promiscuous mode [ 536.853074][T10156] veth1_macvtap: entered promiscuous mode [ 536.961088][T10156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.025399][T10156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.058254][ T1150] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.161978][ T1150] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.211050][ T1150] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.219904][ T1150] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.568256][ T7092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.620130][ T7092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.709872][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.746046][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.755341][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 537.830017][T10630] mmap: syz.1.973 (10630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 538.205901][T10636] input: syz1 as /devices/virtual/input/input17 [ 538.669290][T10642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.759828][T10642] batadv_slave_0: entered promiscuous mode [ 539.327910][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'. [ 539.369032][T10661] netlink: 44 bytes leftover after parsing attributes in process `syz.2.982'. [ 540.324251][T10668] loop2: detected capacity change from 0 to 256 [ 541.443657][T10677] netlink: 56 bytes leftover after parsing attributes in process `syz.7.986'. [ 542.465360][T10689] fuse: Bad value for 'fd' [ 543.285329][T10709] tmpfs: Unknown parameter 'fscontext' [ 545.627529][ T30] audit: type=1326 audit(1771995894.789:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239c629 code=0x7ffc0000 [ 545.909372][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 546.000948][ T30] audit: type=1326 audit(1771995894.789:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239c629 code=0x7ffc0000 [ 546.081140][ T30] audit: type=1326 audit(1771995894.789:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239c629 code=0x7ffc0000 [ 546.160653][ T30] audit: type=1326 audit(1771995894.789:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239c629 code=0x7ffc0000 [ 546.241832][ T30] audit: type=1326 audit(1771995894.789:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2dc239c629 code=0x7ffc0000 [ 547.240156][ T30] audit: type=1326 audit(1771995894.789:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239c629 code=0x7ffc0000 [ 547.308071][ T30] audit: type=1326 audit(1771995894.789:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239c629 code=0x7ffc0000 [ 547.378330][ T30] audit: type=1326 audit(1771995894.789:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239c629 code=0x7ffc0000 [ 547.464312][ T30] audit: type=1326 audit(1771995894.789:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239c629 code=0x7ffc0000 [ 547.566926][T10742] loop9: detected capacity change from 0 to 512 [ 547.605038][ T5840] Bluetooth: unknown link type 128 [ 547.616717][ T30] audit: type=1326 audit(1771995894.789:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dc239dec7 code=0x7ffc0000 [ 548.996569][T10755] loop2: detected capacity change from 0 to 128 [ 549.103004][T10755] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 549.215554][T10755] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 549.315848][T10755] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1007: No space for directory leaf checksum. Please run e2fsck -D. [ 549.342296][T10761] loop9: detected capacity change from 0 to 512 [ 549.371391][T10755] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1007: checksumming directory block 0 [ 549.386159][T10761] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 549.471462][T10761] EXT4-fs (loop9): 1 truncate cleaned up [ 549.481200][T10755] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1007: No space for directory leaf checksum. Please run e2fsck -D. [ 549.522587][T10761] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.600952][T10755] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1007: checksumming directory block 0 [ 549.625436][T10766] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1007: No space for directory leaf checksum. Please run e2fsck -D. [ 549.644253][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 549.707904][T10769] fuse: Bad value for 'fd' [ 549.713459][T10766] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1007: checksumming directory block 0 [ 549.768635][T10773] loop0: detected capacity change from 0 to 512 [ 549.782405][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1010'. [ 549.820312][T10773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 549.870415][T10767] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1007: No space for directory leaf checksum. Please run e2fsck -D. [ 549.908449][T10773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 549.939874][T10773] System zones: 1-2, 4-12, 8-8 [ 549.957405][T10767] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1007: checksumming directory block 0 [ 549.972306][T10773] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1012: iget: bad i_size value: 38620345925642 [ 550.098426][T10773] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 550.099975][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 550.115568][ C1] EXT4-fs (loop0): initial error at time 1771995899: ext4_orphan_get:1391: inode 15 [ 550.124995][ C1] EXT4-fs (loop0): last error at time 1771995899: ext4_orphan_get:1391: inode 15 [ 550.278327][T10773] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1012: couldn't read orphan inode 15 (err -117) [ 550.387080][T10755] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1007: No space for directory leaf checksum. Please run e2fsck -D. [ 550.406991][T10773] loop0: lost filesystem error report for type 5 error -117 [ 550.412444][T10773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.474342][T10755] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1007: checksumming directory block 0 [ 550.653537][T10775] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1007: No space for directory leaf checksum. Please run e2fsck -D. [ 550.682641][T10767] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1007: No space for directory leaf checksum. Please run e2fsck -D. [ 550.698016][T10767] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.1007: Directory block failed checksum [ 550.741806][T10775] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1007: checksumming directory block 0 [ 550.764451][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.774772][T10766] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1007: No space for directory leaf checksum. Please run e2fsck -D. [ 550.854195][T10766] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1007: checksumming directory block 0 [ 550.885961][T10773] loop0: detected capacity change from 512 to 0 [ 550.949777][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 550.949799][ T30] audit: type=1326 audit(1771995900.419:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 551.060188][ T30] audit: type=1326 audit(1771995900.419:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 551.937815][T10759] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 552.960059][ T30] audit: type=1326 audit(1771995900.499:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 554.010069][T10759] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 554.018354][T10759] EXT4-fs (loop0): I/O error while writing superblock [ 554.159133][ T30] audit: type=1326 audit(1771995900.499:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 554.950925][T10759] EXT4-fs error (device loop0): ext4_check_bdev_write_error:226: comm ext4lazyinit: Error while async write back metadata [ 554.974699][T10759] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 554.982989][T10759] EXT4-fs (loop0): I/O error while writing superblock [ 555.170019][ T30] audit: type=1326 audit(1771995900.499:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 555.371799][ T30] audit: type=1326 audit(1771995900.499:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 555.473271][ T30] audit: type=1326 audit(1771995900.499:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 555.606178][ T8612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.675526][ T9194] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 555.692725][ T30] audit: type=1326 audit(1771995900.499:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 555.779637][ T30] audit: type=1326 audit(1771995900.499:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 555.834477][T10799] loop9: detected capacity change from 0 to 512 [ 555.859395][ T30] audit: type=1326 audit(1771995900.499:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.7.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 555.928326][T10799] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 555.955301][ T8612] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 556.012457][ T8612] EXT4-fs (loop0): I/O error while writing superblock [ 556.021965][T10799] EXT4-fs (loop9): 1 truncate cleaned up [ 556.071431][T10799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.451845][T10788] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 557.092228][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.100024][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.188458][T10792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.201687][T10792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.873162][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.910622][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.914057][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.919531][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.093457][ T49] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.219356][ T204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.428207][ T204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.643494][ T204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.887907][ T204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.035401][T10855] fuse: Bad value for 'fd' [ 559.072613][T10858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.416017][T10863] IPv6: NLM_F_CREATE should be specified when creating new route [ 559.447057][T10863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.454491][T10863] IPv6: NLM_F_CREATE should be set when creating new route [ 559.491129][ T204] bridge_slave_1: left allmulticast mode [ 559.504245][ T204] bridge_slave_1: left promiscuous mode [ 559.523503][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 559.537330][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 559.547655][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 559.561215][ T204] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.609230][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 559.625578][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 560.632034][ T204] bridge_slave_0: left allmulticast mode [ 560.645295][ T204] bridge_slave_0: left promiscuous mode [ 560.672923][ T204] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.919686][T10872] loop9: detected capacity change from 0 to 4096 [ 560.957503][T10872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 561.082252][T10872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.097319][T10879] input: syz1 as /devices/virtual/input/input18 [ 561.170469][ T5910] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 561.243698][T10872] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 561.371198][ T5910] usb 9-1: Using ep0 maxpacket: 8 [ 561.396023][ T5910] usb 9-1: unable to get BOS descriptor or descriptor too short [ 561.440157][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 561.468632][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 561.493536][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.531050][ T5910] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 561.577873][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 561.592146][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 561.603682][ T5910] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice= 0.4e [ 561.613756][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 561.621937][ T5910] usb 9-1: SerialNumber: syz [ 561.664172][ T5910] usb 9-1: config 0 descriptor?? [ 561.712536][T10874] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 561.794252][ T5910] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.980247][ T5139] Bluetooth: hci2: command tx timeout [ 562.045189][T10892] loop9: detected capacity change from 0 to 1024 [ 562.081866][T10892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 562.132324][T10892] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.145639][ T204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.200465][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.206771][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.292468][ T204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.354543][ T204] bond0 (unregistering): Released all slaves [ 562.579721][T10079] udevd[10079]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.077445][ T5139] Bluetooth: hci2: command tx timeout [ 564.479905][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 564.479932][ T30] audit: type=1800 audit(1771995913.949:119): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1035" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 564.580021][ T204] hsr_slave_0: left promiscuous mode [ 564.620059][ T204] hsr_slave_1: left promiscuous mode [ 564.626189][ T204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.691365][ T204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.757044][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.785926][ T204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.793638][ T204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.945658][ T204] veth1_macvtap: left promiscuous mode [ 564.971624][ T204] veth0_macvtap: left promiscuous mode [ 565.001906][ T204] veth1_vlan: left promiscuous mode [ 565.015869][ T30] audit: type=1326 audit(1771995914.489:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.9.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 565.054471][ T204] veth0_vlan: left promiscuous mode [ 565.083133][ T30] audit: type=1326 audit(1771995914.529:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.9.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 565.852253][ T30] audit: type=1326 audit(1771995914.529:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.9.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 565.876033][ T30] audit: type=1326 audit(1771995914.539:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.9.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 565.899136][ T30] audit: type=1326 audit(1771995914.539:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.9.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 565.990321][ T30] audit: type=1326 audit(1771995914.539:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.9.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 566.064875][T10939] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 566.083756][ T30] audit: type=1326 audit(1771995914.539:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.9.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 566.116294][ T5139] Bluetooth: hci2: command tx timeout [ 566.162656][ T30] audit: type=1326 audit(1771995914.539:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.9.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 566.303126][ T30] audit: type=1326 audit(1771995914.539:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.9.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 566.740548][T10820] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 566.938698][T10820] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.965634][T10820] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 566.982283][T10820] usb 8-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 567.000869][T10820] usb 8-1: Product: syz [ 567.009382][T10820] usb 8-1: SerialNumber: syz [ 567.034811][T10820] usb 8-1: config 0 descriptor?? [ 567.047043][T10820] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 567.056787][T10820] usb 8-1: Detected SIO [ 567.064559][T10820] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 567.073423][ T204] team0 (unregistering): Port device team_slave_1 removed [ 567.394675][ T204] team0 (unregistering): Port device team_slave_0 removed [ 567.478609][ T5909] usb 8-1: USB disconnect, device number 5 [ 567.498718][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 567.539253][ T5909] ftdi_sio 8-1:0.0: device disconnected [ 567.780239][T10820] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 567.939507][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.947110][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.987028][T10820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.009785][T10820] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.41 [ 568.041673][T10820] usb 3-1: New USB device strings: Mfr=3, Product=246, SerialNumber=2 [ 568.154294][T10820] usb 3-1: Product: syz [ 568.158546][T10820] usb 3-1: Manufacturer: syz [ 568.197226][T10933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.209596][T10933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.230206][ T5139] Bluetooth: hci2: command tx timeout [ 568.323000][ T7092] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.381910][T10820] usb 3-1: SerialNumber: syz [ 568.394766][T10820] usb 3-1: config 0 descriptor?? [ 568.412964][T10820] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 568.425796][ T7092] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.459871][T10820] usb 3-1: Detected SIO [ 568.493031][T10976] loop7: detected capacity change from 0 to 512 [ 568.501817][T10820] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 568.525318][T10959] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 568.563015][T10976] ext2: Unknown parameter 'fowner<00000000000000000000' [ 568.596635][ T7092] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.655890][ T7092] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.677204][ T5909] usb 3-1: USB disconnect, device number 4 [ 568.738557][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 569.560822][ T5909] ftdi_sio 3-1:0.0: device disconnected [ 569.734850][T10993] loop7: detected capacity change from 0 to 128 [ 570.157521][T10993] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 570.232270][T10999] loop2: detected capacity change from 0 to 1024 [ 570.249898][T10999] ext4: Unknown parameter 'smackfsdef' [ 570.602207][T10864] chnl_net:caif_netlink_parms(): no params data found [ 570.635542][T10993] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 571.600072][T10993] overlayfs: failed to resolve './cgroup': -2 [ 571.838924][T10864] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.880100][T10864] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.887241][T10864] bridge_slave_0: entered allmulticast mode [ 571.898267][ T9733] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 571.962849][T10864] bridge_slave_0: entered promiscuous mode [ 571.989624][T10864] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.024297][T10864] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.050171][T10864] bridge_slave_1: entered allmulticast mode [ 572.058174][T10864] bridge_slave_1: entered promiscuous mode [ 572.191647][T10864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.225639][T10864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.362954][T10864] team0: Port device team_slave_0 added [ 572.385046][T10864] team0: Port device team_slave_1 added [ 572.484193][T11024] loop7: detected capacity change from 0 to 1024 [ 572.507068][T10864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.513923][T11024] ext4: Unknown parameter 'smackfsdef' [ 572.590150][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.769992][T10864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.867943][T10864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.908762][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.994353][T10864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.026707][T10826] usb 9-1: USB disconnect, device number 9 [ 575.531568][T11044] binder: 11034:11044 ioctl 4018620d 0 returned -22 [ 575.548685][T11044] binder: 11034:11044 ioctl c0306201 2000000003c0 returned -14 [ 578.096377][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 578.096542][ T30] audit: type=1326 audit(1771995927.559:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11048 comm="syz.2.1069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd75999c629 code=0x0 [ 578.714650][T10864] hsr_slave_0: entered promiscuous mode [ 578.843441][T10864] hsr_slave_1: entered promiscuous mode [ 578.849766][T10864] debugfs: 'hsr0' already exists in 'hsr' [ 578.977893][T10864] Cannot create hsr debugfs directory [ 580.173465][T11078] loop9: detected capacity change from 0 to 1024 [ 580.183243][T11080] loop7: detected capacity change from 0 to 1024 [ 580.211227][T11078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 580.275407][T11080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.354524][T11078] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.955462][ T5840] Bluetooth: hci6: command 0x1003 tx timeout [ 582.963649][ T5139] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 583.325157][ T9733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.787846][ T30] audit: type=1800 audit(1771995933.259:146): pid=11078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1076" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 583.965722][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.353453][T10864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 584.447741][T10864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 584.478112][T10864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 584.545351][T10864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 584.958069][T10864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.057287][T10864] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.113576][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.120783][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.173180][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.180369][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.321771][T11114] loop7: detected capacity change from 0 to 40427 [ 585.336763][T10864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.349654][T11114] F2FS-fs (loop7): invalid crc value [ 585.790740][T11150] loop2: detected capacity change from 0 to 16 [ 585.828652][T11150] erofs (device loop2): mounted with root inode @ nid 36. [ 585.879188][T11150] syz.2.1080: attempt to access beyond end of device [ 585.879188][T11150] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 585.982788][T11150] syz.2.1080: attempt to access beyond end of device [ 585.982788][T11150] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 586.020058][T11150] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 586.031565][T11150] erofs (device loop2): read error -117 @ 1 of nid 89 [ 586.108793][ T30] audit: type=1800 audit(1771995935.509:147): pid=11150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1080" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 586.814922][T11114] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 586.868677][T11114] F2FS-fs (loop7): Start checkpoint disabled! [ 586.892685][T11114] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 587.068876][T11162] loop9: detected capacity change from 0 to 2048 [ 587.119061][T10864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.213539][T11162] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.231023][T11162] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.287417][T10864] veth0_vlan: entered promiscuous mode [ 587.310613][T10864] veth1_vlan: entered promiscuous mode [ 587.380092][T10864] veth0_macvtap: entered promiscuous mode [ 587.405186][T10864] veth1_macvtap: entered promiscuous mode [ 587.497312][T10864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.621820][T10864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.198442][T11188] loop8: detected capacity change from 0 to 1024 [ 589.229256][T11188] EXT4-fs: Ignoring removed nomblk_io_submit option [ 589.316075][ T204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.335586][ T204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.360927][T11188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.385423][ T204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.443574][ T204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.764574][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.034056][ T5139] Bluetooth: hci1: command 0x0405 tx timeout [ 590.799781][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.807764][ T30] audit: type=1800 audit(1771995940.269:148): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1095" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 590.837835][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.934083][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.993545][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.087009][ T7434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.864303][T11246] loop2: detected capacity change from 0 to 512 [ 592.890111][T11246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 593.007751][T11246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.007885][T11246] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.649417][ T9194] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.595123][T11250] loop3: detected capacity change from 0 to 40427 [ 594.630774][T11250] f2fs: Unknown parameter '›¨gc_merge' [ 595.005997][T11287] loop8: detected capacity change from 0 to 1024 [ 595.070519][T11287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 595.145592][T11287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.891472][ T30] audit: type=1326 audit(1771995947.369:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 597.947618][T11312] loop2: detected capacity change from 0 to 256 [ 597.965142][T11312] exfat: Deprecated parameter 'utf8' [ 597.996943][T11312] exfat: Deprecated parameter 'namecase' [ 598.010993][ T30] audit: type=1326 audit(1771995947.369:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 598.049188][T11312] exfat: Deprecated parameter 'namecase' [ 598.109242][T11312] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 598.125845][ T30] audit: type=1326 audit(1771995947.369:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 598.250097][ T30] audit: type=1326 audit(1771995947.369:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 598.380564][ T30] audit: type=1326 audit(1771995947.369:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 598.450055][ T30] audit: type=1326 audit(1771995947.369:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 598.553493][ T30] audit: type=1326 audit(1771995947.369:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 598.579602][ T7434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.685159][ T30] audit: type=1326 audit(1771995947.369:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 598.749647][ T30] audit: type=1326 audit(1771995947.369:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 598.815114][ T5139] Bluetooth: hci2: command 0x0405 tx timeout [ 599.519630][ T30] audit: type=1326 audit(1771995947.369:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.7.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bd9c629 code=0x7ffc0000 [ 599.585318][T11330] loop8: detected capacity change from 0 to 128 [ 599.633036][T11330] EXT4-fs (loop8): Test dummy encryption mode enabled [ 599.695438][T11330] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 599.759455][T11330] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.904460][ T7434] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 600.093512][T11339] loop2: detected capacity change from 0 to 512 [ 600.120851][T11342] random: crng reseeded on system resumption [ 600.167029][T11346] loop7: detected capacity change from 0 to 16 [ 600.169562][T11339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 600.214474][T11346] erofs (device loop7): invalid ishare xattr prefix id 0 [ 600.257596][T11339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.341034][T11339] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.450386][T11350] loop7: detected capacity change from 0 to 512 [ 600.511460][T11350] vfat: Unknown parameter 'iocharse' [ 600.960794][T11361] tmpfs: Unknown parameter 'fscontext' [ 601.026362][T11359] loop8: detected capacity change from 0 to 1024 [ 601.500045][T11359] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 601.592050][T11359] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 601.671877][T11359] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 601.697298][ T9194] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.802139][T11359] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #3: comm syz.8.1132: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 601.849697][T11364] loop9: detected capacity change from 0 to 1024 [ 601.860057][T11359] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 601.866344][T11359] EXT4-fs (loop8): no journal found [ 601.875625][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 601.875656][ C1] EXT4-fs (loop8): initial error at time 1771995951: ext4_ext_check_inode:521: inode 3 [ 601.875712][ C1] EXT4-fs (loop8): last error at time 1771995951: ext4_ext_check_inode:521: inode 3 [ 602.003151][T11359] EXT4-fs (loop8): can't get journal size [ 602.053121][T11359] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #3: comm syz.8.1132: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 602.220953][T11364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.250063][T11359] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 602.250552][T11359] EXT4-fs (loop8): failed to initialize system zone (-117) [ 602.304216][T11371] loop7: detected capacity change from 0 to 1024 [ 602.330908][T11359] EXT4-fs (loop8): mount failed [ 602.361148][T11371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 602.447365][T11364] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 602.449062][T11371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.514278][T11364] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 602.765458][T11364] EXT4-fs (loop9): This should not happen!! Data will be lost [ 602.765458][T11364] [ 603.450218][T11364] EXT4-fs (loop9): Total free blocks count 0 [ 603.530351][T11364] EXT4-fs (loop9): Free/Dirty block details [ 603.536310][T11364] EXT4-fs (loop9): free_blocks=68451041280 [ 603.620136][T11364] EXT4-fs (loop9): dirty_blocks=16 [ 603.637263][T11364] EXT4-fs (loop9): Block reservation details [ 603.669080][T11364] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 603.675427][T11393] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1137'. [ 603.687073][T11392] loop8: detected capacity change from 0 to 512 [ 603.705294][T11392] ext2: Unknown parameter 'fowner<00000000000000000000' [ 604.782233][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 604.782259][ T30] audit: type=1800 audit(1771995954.259:209): pid=11371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1136" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 604.883201][T11401] overlayfs: failed to clone upperpath [ 604.935580][ T1150] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 605.029406][ T9733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.968640][T11416] loop7: detected capacity change from 0 to 512 [ 605.982752][T11422] loop9: detected capacity change from 0 to 256 [ 606.065569][T11416] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 606.112899][T11422] FAT-fs (loop9): Directory bread(block 64) failed [ 606.166421][T11422] FAT-fs (loop9): Directory bread(block 65) failed [ 606.200253][T11422] FAT-fs (loop9): Directory bread(block 66) failed [ 606.206791][T11422] FAT-fs (loop9): Directory bread(block 67) failed [ 606.323100][T11422] FAT-fs (loop9): Directory bread(block 68) failed [ 606.378639][T11422] FAT-fs (loop9): Directory bread(block 69) failed [ 606.452469][T11422] FAT-fs (loop9): Directory bread(block 70) failed [ 606.504034][T11422] FAT-fs (loop9): Directory bread(block 71) failed [ 606.633147][T11422] FAT-fs (loop9): Directory bread(block 72) failed [ 606.699216][T11422] FAT-fs (loop9): Directory bread(block 73) failed [ 610.918332][T11465] loop9: detected capacity change from 0 to 1024 [ 610.966482][T11465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 611.157578][T11465] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.382889][ T30] audit: type=1326 audit(1771995960.839:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 611.510056][ T30] audit: type=1326 audit(1771995960.839:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 612.205782][ T30] audit: type=1326 audit(1771995960.839:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 612.372934][ T30] audit: type=1326 audit(1771995960.839:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 612.396112][ T30] audit: type=1326 audit(1771995960.839:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 612.458570][ T30] audit: type=1326 audit(1771995960.839:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 612.560030][ T30] audit: type=1326 audit(1771995960.839:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 612.661152][ T30] audit: type=1326 audit(1771995960.839:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 612.670398][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.768998][ T30] audit: type=1326 audit(1771995960.839:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 613.860072][ T30] audit: type=1326 audit(1771995960.859:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7cf9c629 code=0x7ffc0000 [ 615.587188][T11525] loop8: detected capacity change from 0 to 1024 [ 615.625719][T11525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 616.638559][T11525] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.413044][T11556] loop3: detected capacity change from 0 to 256 [ 618.469371][T11559] loop7: detected capacity change from 0 to 512 [ 618.525373][T11559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.589181][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 618.589201][ T30] audit: type=1800 audit(1771995967.819:266): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1171" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 618.595453][T11559] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.759013][T11564] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1175'. [ 619.266190][T11565] loop2: detected capacity change from 0 to 256 [ 619.306140][ T7434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.362281][T11565] vfat: Unknown parameter 'shortnem' [ 620.260702][ T9733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.391303][T11580] loop9: detected capacity change from 0 to 2048 [ 620.454859][T11584] loop8: detected capacity change from 0 to 512 [ 620.574715][T11565] tipc: Started in network mode [ 620.596105][T11565] tipc: Node identity ac141424, cluster identity 4711 [ 620.634800][T11580] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.686303][T11565] tipc: Enabled bearer , priority 10 [ 620.710040][T11584] EXT4-fs warning (device loop8): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 620.777917][T11584] EXT4-fs warning (device loop8): dx_probe:848: Enable large directory feature to access it [ 620.881439][T11584] EXT4-fs warning (device loop8): dx_probe:933: inode #2: comm syz.8.1179: Corrupt directory, running e2fsck is recommended [ 620.919875][T11593] loop7: detected capacity change from 0 to 128 [ 621.185839][T11584] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 621.288926][T11584] EXT4-fs error (device loop8): ext4_iget_extra_inode:5024: inode #15: comm syz.8.1179: corrupted in-inode xattr: e_name out of bounds [ 621.326475][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.412348][T11598] tmpfs: Unknown parameter 'fscontext' [ 621.438049][T11584] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 621.439971][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 621.455531][ C0] EXT4-fs (loop8): initial error at time 1771995970: ext4_iget_extra_inode:5024: inode 15 [ 621.465502][ C0] EXT4-fs (loop8): last error at time 1771995970: ext4_iget_extra_inode:5024: inode 15 [ 621.477325][T11584] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1179: couldn't read orphan inode 15 (err -117) [ 621.608896][T11584] loop8: lost filesystem error report for type 5 error -117 [ 621.629817][T11584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.792455][T10826] tipc: Node number set to 2886997028 [ 621.832801][T11584] EXT4-fs warning (device loop8): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 621.844363][T11584] EXT4-fs warning (device loop8): dx_probe:848: Enable large directory feature to access it [ 621.854876][T11584] EXT4-fs warning (device loop8): dx_probe:933: inode #2: comm syz.8.1179: Corrupt directory, running e2fsck is recommended [ 621.906244][T11605] EXT4-fs warning (device loop8): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 622.054238][T11605] EXT4-fs warning (device loop8): dx_probe:848: Enable large directory feature to access it [ 622.166560][T11608] loop7: detected capacity change from 0 to 16 [ 622.174897][T11608] erofs (device loop7): invalid ishare xattr prefix id 0 [ 622.194652][T11605] EXT4-fs warning (device loop8): dx_probe:933: inode #2: comm syz.8.1179: Corrupt directory, running e2fsck is recommended [ 622.221592][T10826] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 622.376238][T11584] EXT4-fs warning (device loop8): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 622.474823][T10826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.496002][T11584] EXT4-fs warning (device loop8): dx_probe:848: Enable large directory feature to access it [ 622.506200][T11584] EXT4-fs warning (device loop8): dx_probe:933: inode #2: comm syz.8.1179: Corrupt directory, running e2fsck is recommended [ 623.317684][T10826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.321245][T11529] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 623.329221][T10826] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 623.351761][T10826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.363039][T10826] usb 10-1: config 0 descriptor?? [ 623.494083][ T7434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.604726][T11623] loop7: detected capacity change from 0 to 1024 [ 623.712044][T11623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 623.720783][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.756085][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.061660][T11623] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.420480][T10826] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 624.444960][T10826] usb 10-1: USB disconnect, device number 2 [ 624.916302][T11633] fido_id[11633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 625.082186][ T30] audit: type=1800 audit(1771995974.559:267): pid=11623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1191" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 625.201015][ T9733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.536263][T11655] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1196'. [ 625.741262][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 626.145891][T11658] loop8: detected capacity change from 0 to 1024 [ 626.164956][T11660] netlink: 'syz.7.1199': attribute type 2 has an invalid length. [ 626.229880][T11658] ext4: Unknown parameter 'smackfsdef' [ 628.233001][T11681] loop8: detected capacity change from 0 to 16 [ 628.320291][T11681] erofs (device loop8): invalid ishare xattr prefix id 0 [ 629.500599][ T24] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 629.734655][ T24] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 629.788314][ T24] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 629.865924][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 629.892328][ T24] usb 8-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 629.941944][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.034422][ T24] usb 8-1: config 0 descriptor?? [ 630.043715][T11677] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 630.303101][T11702] loop8: detected capacity change from 0 to 128 [ 630.334942][T11703] loop9: detected capacity change from 0 to 16 [ 630.380272][T11703] erofs (device loop9): mounted with root inode @ nid 36. [ 630.488964][ T30] audit: type=1800 audit(1771995979.959:268): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1209" name="bus" dev="loop8" ino=1048748 res=0 errno=0 [ 630.514983][ T24] wacom 0003:056A:0093.0006: item fetching failed at offset 0/5 [ 630.550641][ T24] wacom 0003:056A:0093.0006: parse failed [ 630.587715][ T24] wacom 0003:056A:0093.0006: probe with driver wacom failed with error -22 [ 630.609076][T11706] syz.8.1209: attempt to access beyond end of device [ 630.609076][T11706] loop8: rw=2049, sector=753, nr_sectors = 8 limit=128 [ 630.880217][ T24] usb 8-1: USB disconnect, device number 6 [ 631.019635][T11716] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1213'. [ 631.858133][ T204] kworker/u8:5: attempt to access beyond end of device [ 631.858133][ T204] loop8: rw=1, sector=761, nr_sectors = 280 limit=128 [ 631.915552][T11722] loop3: detected capacity change from 0 to 256 [ 632.197629][T10820] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 632.669470][T10820] usb 10-1: Using ep0 maxpacket: 8 [ 632.826312][T11722] FAT-fs (loop3): Directory bread(block 64) failed [ 632.907080][T11722] FAT-fs (loop3): Directory bread(block 65) failed [ 632.918957][T10820] usb 10-1: unable to get BOS descriptor or descriptor too short [ 632.950574][T11722] FAT-fs (loop3): Directory bread(block 66) failed [ 632.971069][T10820] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 633.003859][T11722] FAT-fs (loop3): Directory bread(block 67) failed [ 633.067774][T10820] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 633.092854][T11722] FAT-fs (loop3): Directory bread(block 68) failed [ 633.117617][T11722] FAT-fs (loop3): Directory bread(block 69) failed [ 633.121636][T10820] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 633.155648][T11722] FAT-fs (loop3): Directory bread(block 70) failed [ 633.157805][T10820] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 633.175564][T11736] loop8: detected capacity change from 0 to 16 [ 633.180051][T11722] FAT-fs (loop3): Directory bread(block 71) failed [ 633.188372][T11736] erofs (device loop8): invalid ishare xattr prefix id 0 [ 633.206789][T11737] loop7: detected capacity change from 0 to 512 [ 633.216760][T11722] FAT-fs (loop3): Directory bread(block 72) failed [ 633.247617][T11722] FAT-fs (loop3): Directory bread(block 73) failed [ 633.260282][T10820] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 633.298864][T11737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.302834][T10820] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice= 0.4e [ 633.340473][T10820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 633.350784][T10820] usb 10-1: SerialNumber: syz [ 633.356355][T11737] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.380567][T10820] usb 10-1: config 0 descriptor?? [ 633.402279][T11719] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 633.424070][T10820] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.623019][T10079] udevd[10079]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.738182][T11719] loop9: detected capacity change from 0 to 2048 [ 633.772947][ T9733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.796405][T11719] loop9: p1 < > p4 [ 633.803566][T11719] loop9: p4 start 42180 is beyond EOD, truncated [ 633.834633][T10820] usb 10-1: USB disconnect, device number 3 [ 634.854612][T11758] loop7: detected capacity change from 0 to 128 [ 634.901687][T11758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 635.058602][T11758] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 635.190145][T11758] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.350122][T11766] loop2: detected capacity change from 0 to 256 [ 635.485707][T11766] FAT-fs (loop2): Directory bread(block 64) failed [ 635.525269][T11766] FAT-fs (loop2): Directory bread(block 65) failed [ 635.558492][ T9733] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.573384][T11766] FAT-fs (loop2): Directory bread(block 66) failed [ 635.600786][T11766] FAT-fs (loop2): Directory bread(block 67) failed [ 635.607395][T11766] FAT-fs (loop2): Directory bread(block 68) failed [ 635.617548][T11766] FAT-fs (loop2): Directory bread(block 69) failed [ 635.624542][T11766] FAT-fs (loop2): Directory bread(block 70) failed [ 635.631226][T11766] FAT-fs (loop2): Directory bread(block 71) failed [ 635.637822][T11766] FAT-fs (loop2): Directory bread(block 72) failed [ 635.644395][T11766] FAT-fs (loop2): Directory bread(block 73) failed [ 636.588692][T11785] loop9: detected capacity change from 0 to 16 [ 636.705504][T11785] erofs (device loop9): mounted with root inode @ nid 36. [ 636.895695][ T30] audit: type=1804 audit(1771995986.359:269): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1235" name="/newroot/42/bus/bus" dev="overlay" ino=261 res=1 errno=0 [ 637.658054][T11791] loop8: detected capacity change from 0 to 4096 [ 637.819348][T11791] EXT4-fs (loop8): Test dummy encryption mode enabled [ 637.896156][T11791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.248730][T11812] loop9: detected capacity change from 0 to 512 [ 638.305489][T11812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 638.314183][ T7434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.240540][T11812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.311241][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 640.480121][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 640.482865][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.501006][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 640.537098][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 640.570012][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 640.600003][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 640.600255][T10826] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 640.619983][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 640.657032][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 640.699314][ T29] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice= 0.4e [ 640.723700][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 640.756537][ T29] usb 3-1: SerialNumber: syz [ 640.777798][ T29] usb 3-1: config 0 descriptor?? [ 640.798105][T11817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 640.815005][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 640.835118][T10826] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.883498][T10826] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.914660][T10826] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 640.954516][T10826] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 640.988507][T11840] fuse: Bad value for 'group_id' [ 640.993607][T10826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.006838][T11840] fuse: Bad value for 'group_id' [ 641.027263][T10826] usb 8-1: config 0 descriptor?? [ 641.115984][ T9945] udevd[9945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.158523][T11817] loop2: detected capacity change from 0 to 2048 [ 641.229352][ T9926] loop2: p1 < > p4 [ 641.248977][ T9926] loop2: p4 start 42180 is beyond EOD, truncated [ 641.281768][T11817] loop2: p1 < > p4 [ 641.298984][T11817] loop2: p4 start 42180 is beyond EOD, truncated [ 641.333772][ T29] usb 3-1: USB disconnect, device number 5 [ 641.462850][T10826] plantronics 0003:047F:FFFF.0007: unbalanced delimiter at end of report description [ 641.497280][T10826] plantronics 0003:047F:FFFF.0007: parse failed [ 641.515861][T10826] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 641.664739][ T5917] usb 8-1: USB disconnect, device number 7 [ 642.170424][ T30] audit: type=1326 audit(1771995991.619:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 643.216228][ T30] audit: type=1326 audit(1771995991.619:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 643.242481][ T30] audit: type=1326 audit(1771995991.679:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 643.419661][ T30] audit: type=1326 audit(1771995991.679:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 643.609768][ T30] audit: type=1326 audit(1771995991.679:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 643.785053][ T30] audit: type=1326 audit(1771995991.679:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 643.859101][ T30] audit: type=1326 audit(1771995991.679:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 643.888001][T11873] loop7: detected capacity change from 0 to 512 [ 643.910335][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 643.924976][ T30] audit: type=1326 audit(1771995991.679:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 643.985057][ T30] audit: type=1326 audit(1771995991.679:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 644.581106][T11887] loop2: detected capacity change from 0 to 16 [ 645.019727][T11887] erofs (device loop2): invalid ishare xattr prefix id 0 [ 645.080504][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 645.161210][ T29] usb 10-1: unable to get BOS descriptor or descriptor too short [ 645.211872][ T30] audit: type=1326 audit(1771995991.679:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.9.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 645.258038][T11873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.282740][ T29] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.293159][ T29] usb 10-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 645.324569][ T29] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.337943][T11873] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.365880][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.461076][ T29] usb 10-1: Product: syz [ 645.477011][ T29] usb 10-1: Manufacturer: syz [ 645.550316][ T29] usb 10-1: SerialNumber: syz [ 645.648605][T11873] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 646.470516][T11895] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 646.485398][T11902] fuse: Bad value for 'group_id' [ 646.505138][T11902] fuse: Bad value for 'group_id' [ 646.543855][ T29] usb 10-1: 2:0 : UAC_AS_GENERAL descriptor not found [ 646.601721][ T29] usb 10-1: USB disconnect, device number 4 [ 646.669719][ T9910] udevd[9910]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.690897][ T9733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.782045][T10826] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 647.793535][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 647.793557][ T30] audit: type=1326 audit(1771995997.269:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.8.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ef9c629 code=0x7ffc0000 [ 647.834211][ T30] audit: type=1326 audit(1771995997.269:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.8.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ef9c629 code=0x7ffc0000 [ 647.948821][T10826] usb 3-1: Using ep0 maxpacket: 8 [ 647.981680][T10826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 648.018686][T10826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 648.056169][T10826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 648.081765][T11925] loop8: detected capacity change from 0 to 1024 [ 648.104959][T10826] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 648.142532][T11925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 648.157647][T10826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 648.190792][T10826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 648.221880][T10826] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice= 0.4e [ 648.244486][T10826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 648.257727][T11931] netlink: 'syz.9.1270': attribute type 9 has an invalid length. [ 648.262770][T10826] usb 3-1: SerialNumber: syz [ 648.275366][T11925] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.291247][T11931] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1270'. [ 648.341591][T10826] usb 3-1: config 0 descriptor?? [ 648.387864][T11911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 648.441248][T10826] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.676800][T11911] loop2: detected capacity change from 0 to 2048 [ 648.816340][ T9910] loop2: p1 < > p4 [ 648.838296][T10082] udevd[10082]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.863638][ T9910] loop2: p4 start 42180 is beyond EOD, truncated [ 648.888848][T11911] loop2: p1 < > p4 [ 648.930206][T11911] loop2: p4 start 42180 is beyond EOD, truncated [ 649.007459][ T5910] usb 3-1: USB disconnect, device number 6 [ 649.044618][ T30] audit: type=1800 audit(1771995998.509:319): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1269" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 649.070362][ T29] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 649.185643][ T7434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.270358][ T29] usb 10-1: config 1 has an invalid interface number: 188 but max is 0 [ 649.293901][ T29] usb 10-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 649.335035][ T29] usb 10-1: config 1 has no interface number 0 [ 649.360075][ T29] usb 10-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.418050][ T29] usb 10-1: config 1 interface 188 has no altsetting 0 [ 649.678168][ T29] usb 10-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 649.700781][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.708872][ T29] usb 10-1: Product: syz [ 649.720818][ T29] usb 10-1: Manufacturer: syz [ 649.725518][ T29] usb 10-1: SerialNumber: syz [ 650.016319][T11952] loop8: detected capacity change from 0 to 128 [ 650.411004][ T29] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 650.460056][T10826] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 650.645202][T10826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.696700][T10826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.743720][ T29] snd-usb-audio 10-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 650.750608][T10826] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 650.793166][T10826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.820569][ T29] usb 10-1: USB disconnect, device number 5 [ 650.863114][T10826] usb 4-1: config 0 descriptor?? [ 650.901064][ T9910] udevd[9910]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.110083][ T5910] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 651.290146][ T5910] usb 9-1: Using ep0 maxpacket: 16 [ 651.318365][ T5910] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 651.347769][T10826] microsoft 0003:045E:009D.0008: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.3-1/input0 [ 651.359394][ T5910] usb 9-1: config 0 has no interface number 0 [ 651.379640][ T5910] usb 9-1: config 0 interface 251 altsetting 0 endpoint 0x4 has invalid maxpacket 16400, setting to 1024 [ 651.402020][T10826] microsoft 0003:045E:009D.0008: no inputs found [ 651.422057][T10826] microsoft 0003:045E:009D.0008: could not initialize ff, continuing anyway [ 651.431484][ T5910] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 651.472152][ T5910] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 651.520594][ T5910] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 651.529768][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.546019][ T5917] usb 4-1: USB disconnect, device number 11 [ 651.587786][T11968] xt_CT: No such helper "netbios-ns" [ 651.600024][ T5910] usb 9-1: Product: syz [ 651.610475][ T5910] usb 9-1: Manufacturer: syz [ 651.632070][ T5910] usb 9-1: SerialNumber: syz [ 651.657948][ T5910] usb 9-1: config 0 descriptor?? [ 651.672032][T11959] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 651.684073][T11971] fido_id[11971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 651.700246][T11959] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 651.915177][T11955] loop2: detected capacity change from 0 to 40427 [ 651.941295][T11959] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 651.969206][T11955] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (67108865, 24) [ 651.978946][T11959] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 651.989402][T11955] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 652.016786][T11955] F2FS-fs (loop2): invalid crc value [ 652.293743][T11955] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 652.318054][T11955] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 652.334708][T11955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 652.406762][ T5910] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 652.452118][ T5910] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 652.495430][ T5910] asix 9-1:0.251: probe with driver asix failed with error -71 [ 652.530748][ T9194] syz-executor: attempt to access beyond end of device [ 652.530748][ T9194] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 652.580581][ T5910] usb 9-1: USB disconnect, device number 10 [ 652.594467][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 652.594514][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 652.594535][ T9194] Call Trace: [ 652.594545][ T9194] [ 652.594558][ T9194] dump_stack_lvl+0x100/0x190 [ 652.594615][ T9194] f2fs_handle_critical_error+0x5d7/0x970 [ 652.594669][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.594713][ T9194] ? f2fs_build_fault_attr+0x53/0x280 [ 652.594766][ T9194] f2fs_write_end_io+0xc3f/0xf30 [ 652.594825][ T9194] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 652.594886][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.594938][ T9194] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 652.594993][ T9194] bio_endio+0x7a3/0x910 [ 652.595045][ T9194] submit_bio_noacct+0x64c/0x2010 [ 652.595093][ T9194] f2fs_submit_write_bio+0x133/0x350 [ 652.595146][ T9194] __submit_merged_bio+0x331/0x7b0 [ 652.595207][ T9194] __submit_merged_write_cond+0x3fe/0x510 [ 652.595272][ T9194] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 652.595339][ T9194] ? __pfx___might_resched+0x10/0x10 [ 652.595375][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.595426][ T9194] f2fs_write_cache_pages+0x21c0/0x2720 [ 652.595490][ T9194] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 652.595539][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.595586][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.595628][ T9194] ? find_held_lock+0x2b/0x80 [ 652.595668][ T9194] ? is_bpf_text_address+0x8a/0x1a0 [ 652.595708][ T9194] ? is_bpf_text_address+0x8a/0x1a0 [ 652.595788][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.595866][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.595908][ T9194] ? __mod_zone_page_state+0xe2/0x190 [ 652.595968][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.596010][ T9194] ? rcu_is_watching+0x12/0xc0 [ 652.596052][ T9194] f2fs_write_data_pages+0x799/0x16d0 [ 652.596103][ T9194] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 652.596155][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.596199][ T9194] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 652.596241][ T9194] do_writepages+0x278/0x600 [ 652.596296][ T9194] ? __pfx_do_writepages+0x10/0x10 [ 652.596343][ T9194] ? do_raw_spin_unlock+0x145/0x1e0 [ 652.596379][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.596421][ T9194] ? _raw_spin_unlock+0x28/0x50 [ 652.596459][ T9194] filemap_writeback+0x22d/0x2e0 [ 652.596519][ T9194] ? __pfx_filemap_writeback+0x10/0x10 [ 652.596619][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.596662][ T9194] ? find_held_lock+0x2b/0x80 [ 652.596702][ T9194] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 652.596742][ T9194] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 652.596782][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.596835][ T9194] f2fs_sync_dirty_inodes+0x452/0x990 [ 652.596892][ T9194] block_operations+0x2a6/0xfc0 [ 652.596929][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.596973][ T9194] ? finish_task_switch.isra.0+0x205/0xb80 [ 652.597024][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.597071][ T9194] ? __pfx_block_operations+0x10/0x10 [ 652.597159][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.597206][ T9194] ? ktime_get+0x200/0x300 [ 652.597248][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.597293][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.597336][ T9194] ? rcu_is_watching+0x12/0xc0 [ 652.597379][ T9194] f2fs_write_checkpoint+0x582/0x5550 [ 652.597427][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.597470][ T9194] ? _raw_spin_unlock_irq+0x2e/0x50 [ 652.597509][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.597552][ T9194] ? __wait_for_common+0x1f3/0x4c0 [ 652.597591][ T9194] ? __pfx_schedule_timeout+0x10/0x10 [ 652.597653][ T9194] ? __pfx___wait_for_common+0x10/0x10 [ 652.597692][ T9194] ? kasan_quarantine_put+0x104/0x240 [ 652.597731][ T9194] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 652.597770][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.597824][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.597866][ T9194] ? rcu_is_watching+0x12/0xc0 [ 652.597901][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.597944][ T9194] ? kthread_stop+0x280/0x680 [ 652.598002][ T9194] kill_f2fs_super+0x3e5/0x490 [ 652.598041][ T9194] ? __pfx_kill_f2fs_super+0x10/0x10 [ 652.598100][ T9194] ? lockdep_hardirqs_on+0x78/0x100 [ 652.598138][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.598181][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.598238][ T9194] deactivate_locked_super+0xc1/0x1b0 [ 652.598279][ T9194] deactivate_super+0xe7/0x110 [ 652.598319][ T9194] cleanup_mnt+0x21f/0x450 [ 652.598369][ T9194] task_work_run+0x150/0x240 [ 652.598403][ T9194] ? __pfx_task_work_run+0x10/0x10 [ 652.598437][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.598483][ T9194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.598545][ T9194] exit_to_user_mode_loop+0x100/0x4a0 [ 652.598610][ T9194] do_syscall_64+0x67c/0xf80 [ 652.598659][ T9194] ? irqentry_exit+0x138/0x670 [ 652.598716][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.598762][ T9194] RIP: 0033:0x7fd75999d897 [ 652.598794][ T9194] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 652.598831][ T9194] RSP: 002b:00007ffc7dca0378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 652.598866][ T9194] RAX: 0000000000000000 RBX: 00007fd759a31ef0 RCX: 00007fd75999d897 [ 652.598891][ T9194] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7dca0430 [ 652.598915][ T9194] RBP: 00007ffc7dca0430 R08: 00007ffc7dca1430 R09: 00000000ffffffff [ 652.598938][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7dca14c0 [ 652.598960][ T9194] R13: 00007fd759a31ef0 R14: 000000000009f43b R15: 00007ffc7dca1500 [ 652.599011][ T9194] [ 652.660161][ T9194] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 653.246462][ T30] audit: type=1326 audit(1771996002.719:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 654.073442][ T30] audit: type=1326 audit(1771996002.719:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 654.114439][ T30] audit: type=1326 audit(1771996002.719:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 654.189097][ T30] audit: type=1326 audit(1771996002.719:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 654.258808][ T30] audit: type=1326 audit(1771996002.719:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 654.353993][T12005] loop9: detected capacity change from 0 to 16 [ 654.459731][T12005] erofs (device loop9): mounted with root inode @ nid 36. [ 654.481944][T12005] syz.9.1283: attempt to access beyond end of device [ 654.481944][T12005] loop9: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 654.597358][T12005] syz.9.1283: attempt to access beyond end of device [ 654.597358][T12005] loop9: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 654.616249][T12005] erofs (device loop9): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 654.627639][T12005] erofs (device loop9): read error -117 @ 1 of nid 89 [ 655.025449][ T30] audit: type=1326 audit(1771996002.719:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 655.051360][ T30] audit: type=1326 audit(1771996002.719:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 655.893423][ T30] audit: type=1326 audit(1771996002.719:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 655.986453][ T30] audit: type=1326 audit(1771996002.719:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 656.060048][ T30] audit: type=1326 audit(1771996002.719:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.9.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e619c629 code=0x7ffc0000 [ 657.031153][T12020] loop9: detected capacity change from 0 to 1024 [ 657.062639][T12020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 657.182301][T12020] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.401690][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 657.763159][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.806356][T12053] loop9: detected capacity change from 0 to 512 [ 658.967018][T12053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.001154][T12028] loop8: detected capacity change from 0 to 40427 [ 659.016677][T12028] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 659.028389][T12053] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.179108][T12028] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 659.265268][T12028] F2FS-fs (loop8): invalid crc value [ 660.015983][T12028] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 660.116209][T12028] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 660.160033][T12028] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 660.299163][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.881961][T12085] tmpfs: Unknown parameter 'fscontext' [ 661.770312][T12088] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 663.770342][T12109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.241730][T12120] loop8: detected capacity change from 0 to 1024 [ 664.291200][T12120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 664.382203][T12120] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.404002][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 665.404028][ T30] audit: type=1800 audit(1771996014.879:347): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1302" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 665.483158][T12137] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1304'. [ 665.608297][ T7434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.761986][T10826] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 665.942157][T10826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.956565][T10826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.984589][T10826] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 666.008407][T10826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.035355][T10826] usb 10-1: config 0 descriptor?? [ 666.473980][T10826] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 666.548026][T10826] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0009/input/input19 [ 666.668969][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.690574][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.745556][T12154] loop8: detected capacity change from 0 to 32768 [ 666.788771][T10826] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 666.882943][T10826] usb 10-1: USB disconnect, device number 6 [ 667.294120][T12167] tmpfs: Unknown parameter 'fscontext' [ 667.975943][T12164] fido_id[12164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 668.281231][T12177] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1314'. [ 668.371059][T12179] loop9: detected capacity change from 0 to 256 [ 668.404746][T12177] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1314'. [ 668.453176][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1314'. [ 669.064278][T12177] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1314'. [ 669.103453][T12179] FAT-fs (loop9): Directory bread(block 64) failed [ 669.158109][T12182] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1314'. [ 669.167274][T12179] FAT-fs (loop9): Directory bread(block 65) failed [ 669.250180][T12179] FAT-fs (loop9): Directory bread(block 66) failed [ 669.256724][T12179] FAT-fs (loop9): Directory bread(block 67) failed [ 669.314102][T12177] ip6gretap2: entered allmulticast mode [ 669.326462][T12179] FAT-fs (loop9): Directory bread(block 68) failed [ 669.401690][T12179] FAT-fs (loop9): Directory bread(block 69) failed [ 669.450619][T12179] FAT-fs (loop9): Directory bread(block 70) failed [ 669.457153][T12179] FAT-fs (loop9): Directory bread(block 71) failed [ 669.532485][T12179] FAT-fs (loop9): Directory bread(block 72) failed [ 669.539014][T12179] FAT-fs (loop9): Directory bread(block 73) failed [ 669.586992][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 669.598605][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 669.613756][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 669.633428][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 669.645438][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 669.690470][ T5910] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 669.932677][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.723938][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.793241][ T5910] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 670.814861][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.848068][ T5910] usb 9-1: config 0 descriptor?? [ 671.678564][ T1009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.702698][T12217] fuse: Unknown parameter 'grou00000000000000000000' [ 671.710617][ T5840] Bluetooth: hci6: command tx timeout [ 672.826892][T10820] usb 9-1: USB disconnect, device number 11 [ 673.125614][ T1009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.200602][T12187] chnl_net:caif_netlink_parms(): no params data found [ 673.517262][T12235] tmpfs: Unknown parameter 'fscontext' [ 673.791800][ T5840] Bluetooth: hci6: command tx timeout [ 674.513405][ T1009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.396788][T12256] loop2: detected capacity change from 0 to 512 [ 675.900072][ T5840] Bluetooth: hci6: command tx timeout [ 675.965688][T12256] EXT4-fs warning (device loop2): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 676.021877][T12253] input: syz1 as /devices/virtual/input/input20 [ 676.080081][T12256] EXT4-fs warning (device loop2): dx_probe:848: Enable large directory feature to access it [ 676.104429][T12256] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.1329: Corrupt directory, running e2fsck is recommended [ 676.134257][ T1009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.148805][T12256] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 676.169168][T12256] EXT4-fs error (device loop2): ext4_iget_extra_inode:5024: inode #15: comm syz.2.1329: corrupted in-inode xattr: e_name out of bounds [ 676.185986][T12256] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 676.186480][T12256] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1329: couldn't read orphan inode 15 (err -117) [ 676.195672][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 676.195694][ C1] EXT4-fs (loop2): initial error at time 1771996025: ext4_iget_extra_inode:5024: inode 15 [ 676.195736][ C1] EXT4-fs (loop2): last error at time 1771996025: ext4_iget_extra_inode:5024: inode 15 [ 676.243673][T12256] loop2: lost filesystem error report for type 5 error -117 [ 676.246355][T12256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.286904][T12256] EXT4-fs warning (device loop2): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 676.355677][T12256] EXT4-fs warning (device loop2): dx_probe:848: Enable large directory feature to access it [ 676.366034][T12262] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 676.400208][T12187] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.407431][T12256] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.1329: Corrupt directory, running e2fsck is recommended [ 676.425908][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.450324][T12187] bridge_slave_0: entered allmulticast mode [ 676.469920][T12270] EXT4-fs warning (device loop2): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 676.483306][T12187] bridge_slave_0: entered promiscuous mode [ 676.513593][T12187] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.524538][T12270] EXT4-fs warning (device loop2): dx_probe:848: Enable large directory feature to access it [ 676.544176][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.565041][T12270] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.1329: Corrupt directory, running e2fsck is recommended [ 676.582530][T12187] bridge_slave_1: entered allmulticast mode [ 676.620926][T12187] bridge_slave_1: entered promiscuous mode [ 676.630307][T12272] EXT4-fs warning (device loop2): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 676.684108][T12272] EXT4-fs warning (device loop2): dx_probe:848: Enable large directory feature to access it [ 676.708737][T12272] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.1329: Corrupt directory, running e2fsck is recommended [ 676.761938][T12275] loop9: detected capacity change from 0 to 256 [ 676.854393][T12187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.916685][ T9194] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.947076][T12275] FAT-fs (loop9): Directory bread(block 64) failed [ 676.976717][T12275] FAT-fs (loop9): Directory bread(block 65) failed [ 677.010876][T12275] FAT-fs (loop9): Directory bread(block 66) failed [ 677.025355][T12187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.038699][T12275] FAT-fs (loop9): Directory bread(block 67) failed [ 677.070154][T12275] FAT-fs (loop9): Directory bread(block 68) failed [ 677.076696][T12275] FAT-fs (loop9): Directory bread(block 69) failed [ 677.108314][T12275] FAT-fs (loop9): Directory bread(block 70) failed [ 677.125222][T12275] FAT-fs (loop9): Directory bread(block 71) failed [ 677.136097][T12275] FAT-fs (loop9): Directory bread(block 72) failed [ 677.143110][T12275] FAT-fs (loop9): Directory bread(block 73) failed [ 677.441731][T12279] loop2: detected capacity change from 0 to 16 [ 677.523543][T12279] erofs (device loop2): mounted with root inode @ nid 36. [ 677.545801][T12279] syz.2.1332: attempt to access beyond end of device [ 677.545801][T12279] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 677.593337][T12279] syz.2.1332: attempt to access beyond end of device [ 677.593337][T12279] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 677.607942][T12279] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 677.619732][T12279] erofs (device loop2): read error -117 @ 1 of nid 89 [ 677.651269][T12279] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 677.662749][T12279] erofs (device loop2): read error -117 @ 1 of nid 89 [ 677.740324][ T30] audit: type=1800 audit(1771996027.109:348): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1332" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 677.951733][ T5840] Bluetooth: hci6: command tx timeout [ 678.300341][T12283] loop7: detected capacity change from 0 to 1024 [ 678.323161][T12187] team0: Port device team_slave_0 added [ 678.334223][T12283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 678.365441][T12187] team0: Port device team_slave_1 added [ 678.492140][T12292] loop2: detected capacity change from 0 to 128 [ 678.599856][T12187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.626110][T12283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.668510][T12292] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 678.700448][T12187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.824206][T12292] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 679.402464][T12187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.476346][ T1009] bridge_slave_1: left allmulticast mode [ 679.482168][ T1009] bridge_slave_1: left promiscuous mode [ 679.487951][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.495835][T12292] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1336: No space for directory leaf checksum. Please run e2fsck -D. [ 679.516142][T12292] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1336: checksumming directory block 0 [ 679.534624][T12299] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1336: No space for directory leaf checksum. Please run e2fsck -D. [ 679.559992][T12299] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1336: checksumming directory block 0 [ 679.573325][ T1009] bridge_slave_0: left allmulticast mode [ 679.578974][ T1009] bridge_slave_0: left promiscuous mode [ 679.610199][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.623571][T12292] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1336: No space for directory leaf checksum. Please run e2fsck -D. [ 679.783640][T12292] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1336: checksumming directory block 0 [ 679.825572][ T30] audit: type=1800 audit(1771996029.299:349): pid=12283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1334" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 679.850084][T12301] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1336: No space for directory leaf checksum. Please run e2fsck -D. [ 679.890729][T12301] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1336: checksumming directory block 0 [ 679.922220][T12303] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1336: No space for directory leaf checksum. Please run e2fsck -D. [ 679.958506][ T9733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.020341][T12303] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1336: checksumming directory block 0 [ 680.091796][T12299] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1336: No space for directory leaf checksum. Please run e2fsck -D. [ 680.169168][T12299] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1336: checksumming directory block 0 [ 680.280147][T12292] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1336: No space for directory leaf checksum. Please run e2fsck -D. [ 680.360162][T12292] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1336: checksumming directory block 0 [ 680.430167][T12301] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1336: No space for directory leaf checksum. Please run e2fsck -D. [ 680.445631][T12301] EXT4-fs error (device loop2): __ext4_find_entry:1624: inode #2: comm syz.2.1336: checksumming directory block 0 [ 680.556105][T12313] tmpfs: Unknown parameter 'fscontext' [ 681.406861][ T9194] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 682.362060][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.510603][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.581892][ T1009] bond0 (unregistering): Released all slaves [ 682.660812][T12187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.667914][T12187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.725538][T12187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.965551][T12187] hsr_slave_0: entered promiscuous mode [ 683.021153][T12187] hsr_slave_1: entered promiscuous mode [ 683.048376][T12187] debugfs: 'hsr0' already exists in 'hsr' [ 683.074777][T12187] Cannot create hsr debugfs directory [ 685.274591][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.281208][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.445921][ T1009] hsr_slave_0: left promiscuous mode [ 686.477717][ T1009] hsr_slave_1: left promiscuous mode [ 686.511114][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.538787][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.583076][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.609892][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.646100][ T1009] veth1_macvtap: left promiscuous mode [ 686.694055][ T1009] veth0_macvtap: left promiscuous mode [ 686.699642][ T1009] veth1_vlan: left promiscuous mode [ 686.705936][T12380] loop9: detected capacity change from 0 to 1024 [ 686.760666][ T1009] veth0_vlan: left promiscuous mode [ 686.787232][T12380] EXT4-fs: Ignoring removed orlov option [ 686.830276][T12380] EXT4-fs: Ignoring removed bh option [ 686.835682][T12380] ext4: Unknown parameter 'seclabel' [ 688.533115][T12391] tmpfs: Unknown parameter 'fscontext' [ 690.770570][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 690.838529][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 690.854947][T12406] loop7: detected capacity change from 0 to 1024 [ 691.143898][T12406] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.307747][T12422] loop8: detected capacity change from 0 to 16 [ 693.614977][ T9733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.750298][T12422] erofs (device loop8): mounted with root inode @ nid 36. [ 693.767783][T12421] syz.8.1358: attempt to access beyond end of device [ 693.767783][T12421] loop8: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 693.807560][T12421] syz.8.1358: attempt to access beyond end of device [ 693.807560][T12421] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 693.821564][T12421] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 693.832833][T12421] erofs (device loop8): read error -117 @ 1 of nid 89 [ 693.842931][T12421] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 693.850019][ T30] audit: type=1800 audit(1771996043.319:350): pid=12421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1358" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 693.854380][T12421] erofs (device loop8): read error -117 @ 1 of nid 89 [ 695.576066][T12440] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1363'. [ 695.595961][T12448] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1360'. [ 696.963492][T12457] loop7: detected capacity change from 0 to 1024 [ 697.171452][T12457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.776975][ T30] audit: type=1800 audit(1771996051.009:351): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1365" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 704.496264][ T9733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.570286][T12500] loop9: detected capacity change from 0 to 1024 [ 704.592849][T12500] EXT4-fs: Ignoring removed orlov option [ 704.698830][T12500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.729865][T12187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 704.747575][T12187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 704.799003][T12187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 704.837000][ T5139] Bluetooth: hci6: command 0x0405 tx timeout [ 704.862333][T12187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 704.992381][T12513] loop7: detected capacity change from 0 to 16 [ 705.791939][T12513] erofs (device loop7): mounted with root inode @ nid 36. [ 705.806990][T12512] syz.7.1368: attempt to access beyond end of device [ 705.806990][T12512] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 705.826164][T12512] syz.7.1368: attempt to access beyond end of device [ 705.826164][T12512] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 705.840582][T12512] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 705.852159][T12512] erofs (device loop7): read error -117 @ 1 of nid 89 [ 705.859307][ T30] audit: type=1800 audit(1771996055.329:352): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1368" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 705.879402][T12512] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 705.890942][T12512] erofs (device loop7): read error -117 @ 1 of nid 89 [ 706.303244][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.511387][T12187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.630824][T12187] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.673227][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.680390][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.784713][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.791869][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.630652][ T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 708.088743][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 708.160982][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 708.194196][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 708.220024][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 708.312652][T12187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.480012][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 708.500018][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 708.509765][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 708.542882][ T24] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice= 0.4e [ 708.660288][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 708.744203][ T24] usb 9-1: SerialNumber: syz [ 709.401785][ T24] usb 9-1: config 0 descriptor?? [ 709.407858][T12543] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 709.429576][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 709.749195][T12543] loop8: detected capacity change from 0 to 2048 [ 709.814221][T10079] udevd[10079]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.915220][T10081] loop8: p1 < > p4 [ 709.930446][T10081] loop8: p4 start 42180 is beyond EOD, truncated [ 709.968200][T12543] loop8: p1 < > p4 [ 709.994102][T12543] loop8: p4 start 42180 is beyond EOD, truncated [ 710.017365][T12570] loop9: detected capacity change from 0 to 512 [ 710.077227][ T24] usb 9-1: USB disconnect, device number 12 [ 710.127937][T12570] EXT4-fs warning (device loop9): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 710.146003][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 710.165334][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 710.170086][T12570] EXT4-fs warning (device loop9): dx_probe:848: Enable large directory feature to access it [ 710.184474][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 710.227379][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 710.237222][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 710.288639][T12570] EXT4-fs warning (device loop9): dx_probe:933: inode #2: comm syz.9.1385: Corrupt directory, running e2fsck is recommended [ 710.342669][T12570] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 710.410133][T12570] EXT4-fs error (device loop9): ext4_iget_extra_inode:5024: inode #15: comm syz.9.1385: corrupted in-inode xattr: e_name out of bounds [ 710.479269][T12570] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 710.479767][T12570] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.1385: couldn't read orphan inode 15 (err -117) [ 710.488975][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 710.489006][ C1] EXT4-fs (loop9): initial error at time 1771996059: ext4_iget_extra_inode:5024: inode 15 [ 710.489063][ C1] EXT4-fs (loop9): last error at time 1771996059: ext4_iget_extra_inode:5024: inode 15 [ 710.597744][T12570] loop9: lost filesystem error report for type 5 error -117 [ 710.608776][T12570] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.663243][T12187] veth0_vlan: entered promiscuous mode [ 710.696439][T12570] EXT4-fs warning (device loop9): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 710.732649][T12187] veth1_vlan: entered promiscuous mode [ 710.755556][T12570] EXT4-fs warning (device loop9): dx_probe:848: Enable large directory feature to access it [ 710.766545][T12570] EXT4-fs warning (device loop9): dx_probe:933: inode #2: comm syz.9.1385: Corrupt directory, running e2fsck is recommended [ 710.807121][T12589] EXT4-fs warning (device loop9): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 710.819295][T12589] EXT4-fs warning (device loop9): dx_probe:848: Enable large directory feature to access it [ 710.830731][T12589] EXT4-fs warning (device loop9): dx_probe:933: inode #2: comm syz.9.1385: Corrupt directory, running e2fsck is recommended [ 710.844299][T12589] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 3: comm syz.9.1385: path /76/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 710.888506][T12589] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 8: comm syz.9.1385: path /76/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 711.012625][T12187] veth0_macvtap: entered promiscuous mode [ 711.212338][T12595] loop8: detected capacity change from 0 to 16 [ 711.230341][T12595] erofs (device loop8): mounted with root inode @ nid 36. [ 711.252086][T12595] syz.8.1388: attempt to access beyond end of device [ 711.252086][T12595] loop8: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 711.278132][T12595] syz.8.1388: attempt to access beyond end of device [ 711.278132][T12595] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 711.295251][T12595] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 711.306627][T12595] erofs (device loop8): read error -117 @ 1 of nid 89 [ 711.327961][T12595] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 711.339306][T12595] erofs (device loop8): read error -117 @ 1 of nid 89 [ 711.356787][ T30] audit: type=1800 audit(1771996060.799:353): pid=12595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1388" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 711.997475][T10156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.020479][T12187] veth1_macvtap: entered promiscuous mode [ 712.212661][T12571] chnl_net:caif_netlink_parms(): no params data found [ 712.270889][ T5139] Bluetooth: hci2: command tx timeout [ 712.467959][T12187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.484313][ T5139] Bluetooth: hci4: connection err: -111 [ 712.550067][ T24] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 712.637122][T12187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.728942][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 713.123153][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.179105][ T1009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.193221][ T24] usb 9-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 713.240024][ T1009] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.274674][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.325951][ T24] usb 9-1: config 0 descriptor?? [ 713.451469][T12571] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.458673][T12571] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.506617][T12571] bridge_slave_0: entered allmulticast mode [ 713.543471][T12571] bridge_slave_0: entered promiscuous mode [ 713.590142][ T204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.679324][T12571] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.719136][T12571] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.749560][T12571] bridge_slave_1: entered allmulticast mode [ 713.772139][T12571] bridge_slave_1: entered promiscuous mode [ 713.813011][T12625] loop7: detected capacity change from 0 to 1024 [ 713.846433][ T24] nti 0003:0757:0A00.000B: invalid report_size -1552376498 [ 713.878323][ T204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.916762][ T24] nti 0003:0757:0A00.000B: item 0 4 1 7 parsing failed [ 713.965852][ T24] nti 0003:0757:0A00.000B: probe with driver nti failed with error -22 [ 713.978069][T12625] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.063595][ T24] usb 9-1: USB disconnect, device number 13 [ 714.188852][T12625] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 714.209792][T12571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.255325][T12571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.351255][ T5139] Bluetooth: hci2: command tx timeout [ 714.403220][T12625] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 714.427079][T12625] EXT4-fs (loop7): This should not happen!! Data will be lost [ 714.427079][T12625] [ 714.481551][T12625] EXT4-fs (loop7): Total free blocks count 0 [ 714.512795][T12625] EXT4-fs (loop7): Free/Dirty block details [ 714.525415][T12625] EXT4-fs (loop7): free_blocks=20480 [ 714.536386][T12625] EXT4-fs (loop7): dirty_blocks=80 [ 714.546804][T12625] EXT4-fs (loop7): Block reservation details [ 714.567552][T12625] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 714.663687][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.681513][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.735629][T12571] team0: Port device team_slave_0 added [ 714.763530][T12571] team0: Port device team_slave_1 added [ 714.790843][ T7987] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 715.062379][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.096648][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.707493][T12654] loop8: detected capacity change from 0 to 128 [ 715.937568][T12571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.091876][T12571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.430212][ T5139] Bluetooth: hci2: command tx timeout [ 716.466643][T12571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.560652][T12571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.568064][T12571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.606529][T12571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.190477][ T5917] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 717.259057][ T7987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.301958][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 717.355252][ T5917] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 718.310686][ T5917] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 718.361617][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.670446][ T5139] Bluetooth: hci2: command tx timeout [ 718.723063][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 718.754257][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.796864][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.820282][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 718.849624][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 718.867152][ T24] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 718.882721][ T5917] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 718.896818][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 718.905284][ T24] usb 9-1: Manufacturer: syz [ 718.919999][ T5917] usb 5-1: Product: syz [ 718.924175][ T5917] usb 5-1: Manufacturer: syz [ 718.935253][ T5917] usb 5-1: SerialNumber: syz [ 718.955902][ T24] usb 9-1: config 0 descriptor?? [ 718.971127][ T5917] usb 5-1: config 0 descriptor?? [ 718.985440][ T5917] hub 5-1:0.0: bad descriptor, ignoring hub [ 719.005867][ T5917] hub 5-1:0.0: probe with driver hub failed with error -5 [ 719.029767][ T5917] usb 5-1: selecting invalid altsetting 0 [ 719.175342][ T7987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.280599][ T5917] usb 5-1: USB disconnect, device number 8 [ 719.349525][T10079] udevd[10079]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.578883][ T24] appleir 0003:05AC:8243.000C: item fetching failed at offset 0/1 [ 719.620748][ T24] appleir 0003:05AC:8243.000C: parse failed [ 719.624783][T12571] hsr_slave_0: entered promiscuous mode [ 719.626876][ T24] appleir 0003:05AC:8243.000C: probe with driver appleir failed with error -22 [ 720.329449][T12571] hsr_slave_1: entered promiscuous mode [ 720.345759][T12571] debugfs: 'hsr0' already exists in 'hsr' [ 720.351777][T12571] Cannot create hsr debugfs directory [ 720.695150][T12700] [ 720.697679][T12700] ============================= [ 720.702673][T12700] WARNING: suspicious RCU usage [ 720.707555][T12700] syzkaller #0 Not tainted [ 720.712649][T12700] ----------------------------- [ 720.717499][T12700] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 720.726453][T12700] [ 720.726453][T12700] other info that might help us debug this: [ 720.726453][T12700] [ 720.736736][T12700] [ 720.736736][T12700] rcu_scheduler_active = 2, debug_locks = 1 [ 720.745165][T12700] 1 lock held by syz.4.1410/12700: [ 720.750346][T12700] #0: ffffffff8e7e8618 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: bpf_prog_test_run_syscall+0x301/0xad0 [ 720.763000][T12700] [ 720.763000][T12700] stack backtrace: [ 720.768895][T12700] CPU: 0 UID: 0 PID: 12700 Comm: syz.4.1410 Not tainted syzkaller #0 PREEMPT(full) [ 720.768942][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 720.768966][T12700] Call Trace: [ 720.768977][T12700] [ 720.768990][T12700] dump_stack_lvl+0x100/0x190 [ 720.769051][T12700] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 720.769121][T12700] get_callchain_entry+0x278/0x3f0 [ 720.769186][T12700] get_perf_callchain+0x2d6/0x9c0 [ 720.769243][T12700] ? __entry_text_end+0x1020b5/0x1020b9 [ 720.769294][T12700] ? __pfx_get_perf_callchain+0x10/0x10 [ 720.769353][T12700] ? __schedule+0x1000/0x60e0 [ 720.769395][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 720.769442][T12700] ? __lock_acquire+0x4a5/0x2630 [ 720.769520][T12700] __bpf_get_stack+0x531/0xa90 [ 720.769585][T12700] ? __pfx___bpf_get_stack+0x10/0x10 [ 720.769644][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 720.769701][T12700] bpf_get_stack+0x32/0x40 [ 720.769757][T12700] bpf_get_stack_raw_tp+0x1dd/0x280 [ 720.769817][T12700] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 720.769854][T12700] bpf_prog_test_run_syscall+0x4b1/0xad0 [ 720.769908][T12700] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 720.769961][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 720.770010][T12700] ? fput+0x79/0x100 [ 720.770067][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 720.770113][T12700] ? __bpf_prog_get+0x97/0x2a0 [ 720.770155][T12700] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 720.770203][T12700] __sys_bpf+0x1725/0x4b90 [ 720.770252][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 720.770307][T12700] ? __pfx___sys_bpf+0x10/0x10 [ 720.770361][T12700] ? __pfx_futex_wait+0x10/0x10 [ 720.770415][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 720.770461][T12700] ? rcu_is_watching+0x12/0xc0 [ 720.770507][T12700] ? trace_sched_exit_tp+0x13a/0x180 [ 720.770569][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 720.770616][T12700] ? do_futex+0x192/0x350 [ 720.770704][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 720.770751][T12700] ? xfd_validate_state+0x129/0x190 [ 720.770824][T12700] __x64_sys_bpf+0x7b/0xc0 [ 720.770878][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 720.770925][T12700] ? lockdep_hardirqs_on+0x78/0x100 [ 720.770969][T12700] do_syscall_64+0x106/0xf80 [ 720.771012][T12700] ? irqentry_exit+0x138/0x670 [ 720.771060][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.771100][T12700] RIP: 0033:0x7f626959c629 [ 720.771129][T12700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.771166][T12700] RSP: 002b:00007f626a3c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 720.771202][T12700] RAX: ffffffffffffffda RBX: 00007f6269815fa0 RCX: 00007f626959c629 [ 720.771228][T12700] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 720.771252][T12700] RBP: 00007f6269632b39 R08: 0000000000000000 R09: 0000000000000000 [ 720.771276][T12700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.771300][T12700] R13: 00007f6269816038 R14: 00007f6269815fa0 R15: 00007ffcec60ac98 [ 720.771351][T12700] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 721.672645][ T29] usb 9-1: USB disconnect, device number 14 [ 721.932748][ T7987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.442821][ T7987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.572784][ T7987] bridge_slave_1: left allmulticast mode [ 724.578471][ T7987] bridge_slave_1: left promiscuous mode [ 724.608528][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.641550][ T7987] bridge_slave_0: left allmulticast mode [ 724.647209][ T7987] bridge_slave_0: left promiscuous mode [ 724.670786][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.300536][ T7987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.322940][ T7987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.343467][ T7987] bond0 (unregistering): Released all slaves [ 725.470115][ T7987] tipc: Disabling bearer [ 725.486492][ T7987] tipc: Left network mode [ 725.817562][ T7987] hsr_slave_0: left promiscuous mode [ 725.831386][ T7987] hsr_slave_1: left promiscuous mode [ 725.837495][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.861113][ T7987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.868505][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.910829][ T7987] veth1_macvtap: left promiscuous mode [ 725.916316][ T7987] veth0_macvtap: left promiscuous mode [ 725.929893][ T7987] veth1_vlan: left promiscuous mode [ 725.936486][ T7987] veth0_vlan: left promiscuous mode [ 727.275524][ T7987] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.339700][ T7987] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.394856][ T7987] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.488796][ T7987] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.656936][ T7987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.711436][ T7987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.782705][ T7987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.843119][ T7987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.806181][ T7987] bridge_slave_1: left allmulticast mode [ 728.813832][ T7987] bridge_slave_1: left promiscuous mode [ 728.819641][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.831223][ T7987] bridge_slave_0: left allmulticast mode [ 728.836880][ T7987] bridge_slave_0: left promiscuous mode [ 728.845518][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.859045][ T7987] bridge_slave_1: left allmulticast mode [ 728.867967][ T7987] bridge_slave_1: left promiscuous mode [ 728.874011][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.884811][ T7987] bridge_slave_0: left allmulticast mode [ 728.890612][ T7987] bridge_slave_0: left promiscuous mode [ 728.896367][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.913571][ T7987] bridge_slave_1: left allmulticast mode [ 728.919230][ T7987] bridge_slave_1: left promiscuous mode [ 728.925477][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.940674][ T7987] bridge_slave_0: left allmulticast mode [ 728.946337][ T7987] bridge_slave_0: left promiscuous mode [ 728.953328][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.968118][ T7987] bridge_slave_1: left allmulticast mode [ 728.975915][ T7987] bridge_slave_1: left promiscuous mode [ 728.982171][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.997292][ T7987] bridge_slave_0: left allmulticast mode [ 729.004370][ T7987] bridge_slave_0: left promiscuous mode [ 729.010528][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.023457][ T7987] bridge_slave_1: left allmulticast mode [ 729.029119][ T7987] bridge_slave_1: left promiscuous mode [ 729.037266][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.047290][ T7987] bridge_slave_0: left allmulticast mode [ 729.053029][ T7987] bridge_slave_0: left promiscuous mode [ 729.058794][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.412181][ T7987] bond0 (unregistering): Released all slaves [ 729.538769][ T7987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.551673][ T7987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.565088][ T7987] bond0 (unregistering): Released all slaves [ 729.810671][ T7987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.825940][ T7987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.843264][ T7987] bond0 (unregistering): Released all slaves [ 730.029482][ T7987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.049731][ T7987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.062765][ T7987] bond0 (unregistering): Released all slaves [ 730.245859][ T7987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.258934][ T7987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.269134][ T7987] bond0 (unregistering): Released all slaves [ 730.478430][ T7987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.488919][ T7987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.498369][ T7987] bond0 (unregistering): Released all slaves