last executing test programs: 8.123324908s ago: executing program 4 (id=2322): r0 = syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x442, &(0x7f0000000780), 0x3f, 0x540, &(0x7f0000000800)="$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") r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = gettid() tkill(r2, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r2, 0x3, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x23, 0x44b, &(0x7f00000004c0)="$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") sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0xb65) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xc4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1001, 0x0) setxattr$system_posix_acl(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0, @ANYRES16=0x0], 0x2c, 0x2) read$FUSE(r1, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000002c80)='./file0\x00', r11, 0x0) 6.321819363s ago: executing program 3 (id=2331): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) 6.100297076s ago: executing program 0 (id=2335): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x2, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x0, 0x129432e2, 0xc8, 0xf8, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x6, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x4, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x425], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x10d7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.082368426s ago: executing program 0 (id=2336): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d46f07083773b015940f714fd2eda7873f0d980c0cec7c9f43d0e715863c294a02f6743eb350c01f83811903274cb81b9a5940b4ca94f555fd1f9f5f473d1ac27e7609080a86da27702d95643399b2f80cc63eaa7fc8c994612459b6beedd0d62a9478615462325875a6df1e4207cf52799c09e6918a71cfb5eff896886b967408923d356ab74ce4e0f098"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 6.081959226s ago: executing program 4 (id=2337): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000020d000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x8e44b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}}, 0x32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 5.592276153s ago: executing program 2 (id=2339): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x100c404, &(0x7f0000000480)={[{@dots}, {@dots}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d8}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@showexec}, {}, {@fat=@sys_immutable}, {@nodots}, {@nodots}, {@fat=@usefree}, {@nodots}, {@fat=@showexec}, {@nodots}, {@dots}]}, 0xfd, 0x1f0, &(0x7f0000000240)="$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") mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_0\x00'}) 5.480157825s ago: executing program 3 (id=2340): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d46f07083773b015940f714fd2eda7873f0d980c0cec7c9f43d0e715863c294a02f6743eb350c01f83811903274cb81b9a5940b4ca94f555fd1f9f5f473d1ac27e7609080a86da27702d95643399b2f80cc63eaa7fc8c994612459b6beedd0d62a9478615462325875a6df1e4207cf52799c09e6918a71cfb5eff896886b967408923d356ab74ce4e0f0983c"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 5.041311771s ago: executing program 4 (id=2341): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r0}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 4.852012904s ago: executing program 4 (id=2343): syz_io_uring_setup(0x1eae, &(0x7f0000000480)={0x0, 0x9d2d, 0x1, 0x2, 0x335}, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) open(0x0, 0x1c3142, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r0, r5, 0x0, 0x7ffff004) 4.817575684s ago: executing program 0 (id=2345): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) 4.796277894s ago: executing program 1 (id=2347): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800000, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x1, r1}, {0x2, 0x0, r1}, {0x2, 0x5, r1}, {0x2, 0x5, r1}], {0x4, 0x1}, [{0x8, 0x5, r2}, {0x8, 0x4, r2}, {0x8, 0x6, r2}, {0x8, 0x6}, {0x8, 0x2, r2}, {0x8, 0x2, r2}], {0x10, 0x4}, {0x20, 0x6}}, 0x74, 0x1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x52, &(0x7f0000000380)=""/82, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x4, 0x3, 0xffffffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x1], &(0x7f0000000580)=[{0x1, 0x4, 0x10, 0xb}, {0x3, 0x5, 0xe, 0x7}, {0x4, 0x3, 0x0, 0x4}, {0x3, 0x4, 0x9, 0x4}, {0x4, 0x5, 0x10, 0x7}], 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000006c0)={0x3, 0x21, "eeec4e1d1ac46bb82153e46feeef2bfbcff9af969efdac7b8a1a1db0ccdf88d0dd"}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 4.795678734s ago: executing program 0 (id=2348): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x8413, &(0x7f00000000c0)={[{@noload}, {@data_writeback}, {@max_batch_time={'max_batch_time', 0x3d, 0x401}}, {@noblock_validity}, {@nobarrier}, {@acl}]}, 0x0, 0x518, &(0x7f0000000f80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000001c40)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000010002"], 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r12, 0x0, 0x0}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x23, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0xfffff801}, [@map_fd={0x18, 0x8, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0x5, 0x3, 0xc, 0x2, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x41000, 0x22, '\x00', r10, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x4, 0x2, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000780)=[r12, r13, r14, r15, 0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0xc, 0xc}, {0x2, 0x2, 0xb, 0x5}, {0x3, 0x2, 0x1}, {0x0, 0x3, 0x9, 0x9}, {0x0, 0x4, 0x6, 0x3}, {0x0, 0x1, 0x0, 0xa}, {0x7, 0x4, 0x10, 0xc}, {0x4, 0x1, 0xe, 0x2}], 0x10, 0x37d15f7a, @void, @value}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r16}, 0x10) 4.722432205s ago: executing program 0 (id=2349): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setpgid(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r8, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, 0x0, &(0x7f00000001c0)=@tcp=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r6}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x1808020, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) 4.708506665s ago: executing program 1 (id=2350): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d46f07083773b015940f714fd2eda7873f0d980c0cec7c9f43d0e715863c294a02f6743eb350c01f83811903274cb81b9a5940b4ca94f555fd1f9f5f473d1ac27e7609080a86da27702d95643399b2f80cc63eaa7fc8c994612459b6beedd0d62a9478615462325875a6df1e4207cf52799c09e6918a71cfb5eff896886b967408923d356ab74ce4e0f0983c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r7 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) 4.707392185s ago: executing program 2 (id=2351): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000020d000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x8e44b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}}, 0x32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 3.076719718s ago: executing program 2 (id=2352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000350f175ee81d1ed5285092c398ab3ebdaa8daa72cb9fa491644cc85b86354ce09f405f2f4e96e18f5875031bbcd2e44b52e9867d98cd7a83e653d60ac4a46df6a66c2f500d89aea9853748b7fc2c33394c80de2865401394896f45043d6ce5e836ba44b72ed4bddf", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000070000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\x00\x00', 0x2}]) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.076233948s ago: executing program 3 (id=2353): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0102, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r7 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006120000040000000000000e03000000000000000100000000000012000000001d0000000000000202000000002e00006100"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 3.074939938s ago: executing program 4 (id=2362): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x100c404, &(0x7f0000000480)={[{@dots}, {@dots}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d8}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@showexec}, {}, {@fat=@sys_immutable}, {@nodots}, {@nodots}, {@fat=@usefree}, {@nodots}, {@fat=@showexec}, {@nodots}, {@dots}]}, 0xfd, 0x1f0, &(0x7f0000000240)="$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") mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_0\x00'}) 2.731142373s ago: executing program 1 (id=2354): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r0}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 2.730810773s ago: executing program 2 (id=2355): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)={0x24, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0], 0x44}}, 0x0) 210.497088ms ago: executing program 4 (id=2356): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d46f07083773b015940f714fd2eda7873f0d980c0cec7c9f43d0e715863c294a02f6743eb350c01f83811903274cb81b9a5940b4ca94f555fd1f9f5f473d1ac27e7609080a86da27702d95643399b2f80cc63eaa7fc8c994612459b6beedd0d62a9478615462325875a6df1e4207cf52799c09e6918a71cfb5eff896886b967408923d356ab74ce4e0f098"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 123.870049ms ago: executing program 2 (id=2357): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_setup(0x8, &(0x7f0000000000)=0x0) r7 = eventfd(0x2) r8 = eventfd2(0x6, 0x0) io_submit(r6, 0x4, &(0x7f00000004c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xa573, r4, &(0x7f0000000080)="e2338c8d2e243b87bb85ad0b11f28baca951103a39b11fc74b724ba5eff50c901893", 0x22, 0x5, 0x0, 0x2, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1721, r4, &(0x7f00000001c0)="5c7db41749e030a45ee80d114ee889e0d2ae17a21a98ecbf422fce8a536d430eb5f4b9c5ae66b9a9d8", 0x29, 0x2, 0x0, 0x3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="d7d46bab78e6abcf0d3686a4d91a082c4cbe81408959c80c32c63e6090d584a28934da953cf87fc0dd1353c43aafd3b9f8af3efe1d661c8f9b3edb476c70f67dea5febf27ce374167301a1", 0x4b, 0x8, 0x0, 0x1, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000003c0)="1bced35a5a1cb3602e516ff002467947a9058ab2bcd918ea8e2fdbd4ad8db0dbd08b47db107b06cf701fa3b2ace421352611c9e900d2b16e639026b0679337d468bff4490fc5b9db35054a12cf14d365013269f91ad26924a8dfd9a6db8c5e347ff95ff948859632fd079509690f99036aeba805b343a3dc4e07af2345a6a0fd3fbc3147387592d82d7d11c2cc16e04fc917f1ed317091", 0x97, 0x910, 0x0, 0x1, r8}]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYRES8]) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x38, 0x10, 0x503, 0x70bd2c, 0x900, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000040)) 123.050799ms ago: executing program 3 (id=2358): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) 119.875139ms ago: executing program 1 (id=2359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 95.074039ms ago: executing program 3 (id=2360): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x8413, &(0x7f00000000c0)={[{@noload}, {@data_writeback}, {@max_batch_time={'max_batch_time', 0x3d, 0x401}}, {@noblock_validity}, {@nobarrier}, {@acl}]}, 0x0, 0x518, &(0x7f0000000f80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000001c40)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000010002"], 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r12, 0x0, 0x0}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x23, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0xfffff801}, [@map_fd={0x18, 0x8, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0x5, 0x3, 0xc, 0x2, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x41000, 0x22, '\x00', r10, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x4, 0x2, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000780)=[r12, r13, r14, r15, 0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0xc, 0xc}, {0x2, 0x2, 0xb, 0x5}, {0x3, 0x2, 0x1}, {0x0, 0x3, 0x9, 0x9}, {0x0, 0x4, 0x6, 0x3}, {0x0, 0x1, 0x0, 0xa}, {0x7, 0x4, 0x10, 0xc}, {0x4, 0x1, 0xe, 0x2}], 0x10, 0x37d15f7a, @void, @value}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r16}, 0x10) 90.87401ms ago: executing program 1 (id=2361): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) (async, rerun: 64) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESOCT=0x0, @ANYRES16=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) (async) mount$incfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) (async) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r3, &(0x7f0000000140)) fcntl$setpipe(r2, 0x407, 0x3a50) (async) sendto$inet(r2, &(0x7f0000000040)="c8", 0x1, 0x12044000, 0x0, 0xfffffffffffffd8a) read(r0, &(0x7f0000000740)=""/4096, 0x1000) 55.09159ms ago: executing program 3 (id=2363): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d46f07083773b015940f714fd2eda7873f0d980c0cec7c9f43d0e715863c294a02f6743eb350c01f83811903274cb81b9a5940b4ca94f555fd1f9f5f473d1ac27e7609080a86da27702d95643399b2f80cc63eaa7fc8c994612459b6beedd0d62a9478615462325875a6df1e4207cf52799c09e6918a71cfb5eff896886b967408923d356ab74ce4e0f0983c"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 439.1µs ago: executing program 2 (id=2364): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000020d000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x8e44b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}}, 0x32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 216.111µs ago: executing program 1 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x78) (fail_nth: 1) 0s ago: executing program 0 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x78) kernel console output (not intermixed with test programs): t [ 163.146390][ T2063] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 163.153551][ T2063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 163.276938][ T2070] loop3: detected capacity change from 0 to 40427 [ 163.284058][ T2070] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 163.291792][ T2070] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 163.315009][ T2070] F2FS-fs (loop3): invalid crc value [ 163.362598][ T308] Bluetooth: hci1: Frame reassembly failed (-84) [ 163.372465][ T2070] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.427771][ T2070] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 163.434970][ T2070] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.704162][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 163.713821][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 163.982769][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 163.992214][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 165.094589][ T2106] netlink: 'syz.2.428': attribute type 4 has an invalid length. [ 165.399012][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 165.425671][ T481] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.432043][ T373] Bluetooth: hci1: command 0x1003 tx timeout [ 165.438198][ T375] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 165.666657][ T2117] netlink: 'syz.0.431': attribute type 4 has an invalid length. [ 165.874232][ T1371] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.974028][ T2124] loop4: detected capacity change from 0 to 256 [ 166.023400][ T2124] netlink: 9 bytes leftover after parsing attributes in process `syz.4.433'. [ 166.148257][ T2124] device gretap0 entered promiscuous mode [ 166.160509][ T2126] netlink: 'syz.3.435': attribute type 4 has an invalid length. [ 166.160956][ T443] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.934487][ T481] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.987451][ T2131] loop0: detected capacity change from 0 to 512 [ 168.035749][ T2131] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.436: corrupted inode contents [ 168.063706][ T2131] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #16: comm syz.0.436: mark_inode_dirty error [ 168.075734][ T2109] loop1: detected capacity change from 0 to 40427 [ 168.099661][ T2136] loop4: detected capacity change from 0 to 512 [ 168.108341][ T2109] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 168.116689][ T2109] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 168.127292][ T2131] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.436: corrupted inode contents [ 168.145451][ T2109] F2FS-fs (loop1): invalid crc value [ 168.154891][ T2131] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.436: mark_inode_dirty error [ 168.170785][ T2136] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.437: corrupted inode contents [ 168.189742][ T2109] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.193603][ T2131] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.436: corrupted inode contents [ 168.203583][ T2136] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #16: comm syz.4.437: mark_inode_dirty error [ 168.219268][ T2131] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 168.225858][ T2136] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.437: corrupted inode contents [ 168.228527][ T2131] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.436: corrupted inode contents [ 168.252215][ T2136] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.437: mark_inode_dirty error [ 168.256350][ T2131] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.436: mark_inode_dirty error [ 168.266370][ T2136] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.437: corrupted inode contents [ 168.289943][ T2109] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 168.297093][ T2109] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.304975][ T2136] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 168.344050][ T2131] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 168.360877][ T2131] EXT4-fs (loop0): 1 truncate cleaned up [ 168.367994][ T2136] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.437: corrupted inode contents [ 168.381765][ T308] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 168.392085][ T2131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.401150][ T308] EXT4-fs error (device loop0): ext4_release_dquot:6825: comm kworker/u4:4: Failed to release dquot type 1 [ 168.412936][ T2136] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.437: mark_inode_dirty error [ 168.432893][ T2131] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.443875][ T2136] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 168.557225][ T2136] EXT4-fs (loop4): 1 truncate cleaned up [ 168.609758][ T2136] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.702125][ T2136] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.708225][ T1371] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 168.749883][ T1371] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:8: Failed to release dquot type 1 [ 168.762929][ T308] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 168.774986][ T308] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 169.046109][ T2155] loop1: detected capacity change from 0 to 512 [ 169.115400][ T2155] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.440: corrupted inode contents [ 169.131528][ T2155] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #16: comm syz.1.440: mark_inode_dirty error [ 169.464230][ T2155] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.440: corrupted inode contents [ 169.568858][ T2155] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.440: mark_inode_dirty error [ 169.587198][ T2155] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.440: corrupted inode contents [ 169.608087][ T2155] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 169.617781][ T2155] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.440: corrupted inode contents [ 169.630492][ T2155] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.440: mark_inode_dirty error [ 169.642101][ T2155] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 169.651913][ T2155] EXT4-fs (loop1): 1 truncate cleaned up [ 169.657896][ T2155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.667301][ T2155] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.667320][ T304] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 169.706883][ T304] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:3: Failed to release dquot type 1 [ 170.100049][ T2171] netlink: 'syz.3.443': attribute type 4 has an invalid length. [ 170.385522][ T2178] netlink: 'syz.2.445': attribute type 4 has an invalid length. [ 170.732994][ T289] EXT4-fs (loop4): unmounting filesystem. [ 170.743562][ T308] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 170.757359][ T308] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:4: Failed to release dquot type 1 [ 170.831824][ T28] audit: type=1400 audit(1748941793.221:143): avc: denied { create } for pid=2181 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 170.868053][ T28] audit: type=1400 audit(1748941793.221:144): avc: denied { setopt } for pid=2181 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 170.914955][ T28] audit: type=1400 audit(1748941793.221:145): avc: denied { write } for pid=2181 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.131333][ T2187] netlink: 'syz.4.446': attribute type 4 has an invalid length. [ 171.223767][ T2185] loop3: detected capacity change from 0 to 16 [ 171.363500][ T2185] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 171.380220][ T286] EXT4-fs (loop0): unmounting filesystem. [ 171.395019][ T8] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 171.406221][ T2190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.450'. [ 171.416011][ T443] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.426449][ T8] EXT4-fs error (device loop0): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 1 [ 171.604038][ T28] audit: type=1400 audit(1748941794.001:146): avc: denied { write } for pid=2198 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.606809][ T2199] loop0: detected capacity change from 0 to 512 [ 171.825471][ T2199] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.833585][ T2199] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.851092][ T28] audit: type=1400 audit(1748941794.001:147): avc: denied { read } for pid=2198 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.897454][ T2199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 171.913113][ T2199] System zones: 1-12 [ 171.940947][ T2199] EXT4-fs (loop0): 1 truncate cleaned up [ 171.941336][ T284] EXT4-fs (loop1): unmounting filesystem. [ 171.953801][ T1371] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:8: Failed to release dquot type 1 [ 171.962637][ T2199] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 172.597001][ T2210] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 172.606518][ T2210] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 172.651582][ T286] EXT4-fs (loop0): unmounting filesystem. [ 172.830834][ T2227] can0: slcan on ptm0. [ 173.753640][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 173.753655][ T28] audit: type=1400 audit(1748941795.601:158): avc: denied { write } for pid=2224 comm="syz.1.460" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.786632][ T2232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 173.795465][ T2227] can0 (unregistered): slcan off ptm0. [ 173.916206][ T2232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 173.924829][ T28] audit: type=1400 audit(1748941795.601:159): avc: denied { open } for pid=2224 comm="syz.1.460" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.000902][ T28] audit: type=1400 audit(1748941796.181:160): avc: denied { create } for pid=2239 comm="syz.0.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.055110][ T28] audit: type=1400 audit(1748941796.191:161): avc: denied { read } for pid=2239 comm="syz.0.463" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 174.433787][ T28] audit: type=1400 audit(1748941796.191:162): avc: denied { open } for pid=2239 comm="syz.0.463" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 174.952179][ T28] audit: type=1400 audit(1748941797.081:163): avc: denied { write } for pid=2258 comm="syz.0.468" path="socket:[22538]" dev="sockfs" ino=22538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.002547][ T28] audit: type=1400 audit(1748941797.201:164): avc: denied { getopt } for pid=2266 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.022973][ T28] audit: type=1400 audit(1748941797.211:165): avc: denied { search } for pid=2264 comm="sed" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.357678][ T28] audit: type=1400 audit(1748941797.261:166): avc: denied { unlink } for pid=2274 comm="syz.1.473" name="#1" dev="tmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 176.829999][ T2296] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 176.940519][ T28] audit: type=1400 audit(1748941797.271:167): avc: denied { mount } for pid=2274 comm="syz.1.473" name="/" dev="overlay" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 177.096316][ T2313] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 177.113603][ T2313] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.720419][ T2352] hub 8-0:1.0: USB hub found [ 178.725723][ T2352] hub 8-0:1.0: 1 port detected [ 178.884318][ T2357] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 178.899811][ T2357] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.959928][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 178.959949][ T28] audit: type=1400 audit(1748941801.351:191): avc: denied { mounton } for pid=2358 comm="syz.3.492" path="/96/file0" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.004182][ T2363] loop0: detected capacity change from 0 to 40427 [ 180.022963][ T2363] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 180.037287][ T2363] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 180.049190][ T2363] F2FS-fs (loop0): invalid crc value [ 180.055735][ T2363] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.143210][ T2363] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 180.244193][ T2363] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 181.279449][ T28] audit: type=1400 audit(1748941803.671:192): avc: denied { write } for pid=2399 comm="syz.4.502" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 181.326717][ T28] audit: type=1400 audit(1748941803.671:193): avc: denied { open } for pid=2399 comm="syz.4.502" path="/dev/input/event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 181.392305][ T1371] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 181.441899][ T1371] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 181.753522][ T358] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.793589][ T413] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 181.933472][ T358] usb 4-1: Using ep0 maxpacket: 32 [ 181.939655][ T358] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 181.951048][ T358] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 181.960138][ T358] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 181.968441][ T358] usb 4-1: Product: syz [ 181.972610][ T358] usb 4-1: Manufacturer: syz [ 181.977225][ T358] usb 4-1: SerialNumber: syz [ 181.982245][ T358] usb 4-1: config 0 descriptor?? [ 181.987442][ T2408] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.994607][ T413] usb 2-1: Using ep0 maxpacket: 16 [ 182.001672][ T413] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 182.011683][ T413] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 182.021485][ T413] usb 2-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.034543][ T413] usb 2-1: config 1 interface 0 has no altsetting 0 [ 182.041792][ T413] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.050906][ T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.058970][ T413] usb 2-1: SerialNumber: syz [ 182.064574][ T2414] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 182.074062][ T2414] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 182.173112][ T2421] netlink: 'syz.4.509': attribute type 4 has an invalid length. [ 182.208167][ T358] usb 4-1: USB disconnect, device number 4 [ 182.285462][ T2414] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 182.292763][ T2414] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 182.510011][ T2428] loop0: detected capacity change from 0 to 128 [ 182.679093][ T28] audit: type=1400 audit(1748941805.071:194): avc: denied { mount } for pid=2427 comm="syz.0.512" name="/" dev="configfs" ino=13672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 182.902620][ T413] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 182.937503][ T413] usb 2-1: USB disconnect, device number 3 [ 183.051411][ T2433] loop4: detected capacity change from 0 to 40427 [ 183.075673][ T2433] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 183.083933][ T2433] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 183.326088][ T2433] F2FS-fs (loop4): invalid crc value [ 183.355373][ T2433] F2FS-fs (loop4): Found nat_bits in checkpoint [ 183.397904][ T2433] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 183.405097][ T2433] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 184.394683][ T308] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 184.410285][ T308] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 185.015175][ T28] audit: type=1400 audit(1748941807.361:195): avc: denied { create } for pid=2462 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.133073][ T28] audit: type=1400 audit(1748941807.381:196): avc: denied { unmount } for pid=2462 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.318914][ T2482] netlink: 'syz.4.523': attribute type 4 has an invalid length. [ 186.370533][ T2486] loop2: detected capacity change from 0 to 128 [ 188.140164][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.152535][ T2506] loop1: detected capacity change from 0 to 512 [ 188.257473][ T2506] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 188.277559][ T2506] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 188.289521][ T2506] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 188.521234][ T2509] netlink: 'syz.2.533': attribute type 4 has an invalid length. [ 188.715086][ T2506] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 188.728375][ T2506] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 188.742349][ T2506] EXT4-fs (loop1): orphan cleanup on readonly fs [ 188.773882][ T2506] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.531: bg 0: block 34: padding at end of block bitmap is not set [ 188.792623][ T2506] Quota error (device loop1): write_blk: dquota write failed [ 188.813482][ T2506] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 188.823761][ T2502] loop3: detected capacity change from 0 to 40427 [ 188.832894][ T2506] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.531: Failed to acquire dquot type 1 [ 188.844362][ T2502] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 188.863559][ T2502] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 189.129821][ T2502] F2FS-fs (loop3): invalid crc value [ 189.133923][ T2506] EXT4-fs (loop1): 1 truncate cleaned up [ 189.137594][ T2502] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.141416][ T2506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.178631][ T2502] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 189.185729][ T2502] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.260951][ T284] EXT4-fs (loop1): unmounting filesystem. [ 190.180313][ T481] Bluetooth: hci0: command 0x1003 tx timeout [ 190.183614][ T2107] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.193392][ T1371] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 190.301233][ T1371] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 190.575865][ T28] audit: type=1400 audit(1748941812.861:197): avc: denied { map } for pid=2536 comm="syz.0.539" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 190.969750][ T28] audit: type=1400 audit(1748941812.861:198): avc: denied { read write } for pid=2536 comm="syz.0.539" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 191.387114][ T2552] loop0: detected capacity change from 0 to 512 [ 191.424306][ T2552] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 191.454247][ T2552] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 191.464268][ T2552] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 191.501531][ T2552] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 191.513519][ T2552] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 191.536955][ T2552] EXT4-fs (loop0): orphan cleanup on readonly fs [ 191.681827][ T2552] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.544: bg 0: block 34: padding at end of block bitmap is not set [ 191.764055][ T2560] netlink: 'syz.2.542': attribute type 4 has an invalid length. [ 191.798165][ T2552] Quota error (device loop0): write_blk: dquota write failed [ 191.811879][ T2552] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 191.830062][ T2552] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.544: Failed to acquire dquot type 1 [ 191.853813][ T2552] EXT4-fs (loop0): 1 truncate cleaned up [ 191.864665][ T2552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.991400][ T286] EXT4-fs (loop0): unmounting filesystem. [ 193.926824][ T2576] loop0: detected capacity change from 0 to 40427 [ 193.942073][ T2576] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 193.950257][ T2576] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 193.970946][ T2576] F2FS-fs (loop0): invalid crc value [ 193.990250][ T2576] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.997907][ T2592] netlink: 'syz.2.551': attribute type 4 has an invalid length. [ 194.006638][ T461] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 194.029858][ T2576] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 194.037069][ T2576] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 194.205569][ T461] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 194.231597][ T461] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.288186][ T461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.316401][ T461] usb 2-1: Product: syz [ 194.332907][ T461] usb 2-1: Manufacturer: syz [ 194.369482][ T461] usb 2-1: SerialNumber: syz [ 194.403062][ T461] usb 2-1: config 0 descriptor?? [ 194.444002][ T304] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 194.455478][ T304] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 195.675894][ T2612] loop0: detected capacity change from 0 to 16 [ 195.684619][ T2612] erofs: (device loop0): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 195.695449][ T2612] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 196.809157][ T461] usb 2-1: USB disconnect, device number 4 [ 196.991195][ T2629] netlink: 'syz.0.559': attribute type 4 has an invalid length. [ 197.997481][ T2641] loop0: detected capacity change from 0 to 40427 [ 198.150465][ T461] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 198.172927][ T2648] loop1: detected capacity change from 0 to 512 [ 198.199739][ T2641] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 198.208728][ T2641] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 198.230302][ T2641] F2FS-fs (loop0): invalid crc value [ 198.312326][ T2648] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.567: corrupted inode contents [ 198.326329][ T2648] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #16: comm syz.1.567: mark_inode_dirty error [ 198.337975][ T2641] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.338215][ T2648] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.567: corrupted inode contents [ 198.356422][ T2648] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.567: mark_inode_dirty error [ 198.370324][ T461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 198.381324][ T2648] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.567: corrupted inode contents [ 198.424228][ T461] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 198.467763][ T461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 198.529800][ T2648] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 198.544647][ T2641] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 198.551912][ T2641] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.559654][ T461] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 198.575815][ T2648] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.567: corrupted inode contents [ 198.602219][ T2648] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.567: mark_inode_dirty error [ 198.633162][ T2648] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 198.642636][ T2648] EXT4-fs (loop1): 1 truncate cleaned up [ 198.649447][ T2648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 198.658724][ T43] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 198.664817][ T2648] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.681057][ T461] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 198.684510][ T43] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:2: Failed to release dquot type 1 [ 198.693456][ T461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.713508][ T461] usb 4-1: Product: syz [ 198.717694][ T461] usb 4-1: Manufacturer: syz [ 198.722349][ T461] usb 4-1: SerialNumber: syz [ 199.173704][ T461] usb 4-1: config 0 descriptor?? [ 199.194722][ T461] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 199.694567][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 199.705360][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 199.765714][ T461] ums-isd200: probe of 4-1:0.0 failed with error -22 [ 199.837753][ T28] audit: type=1400 audit(1748941822.231:199): avc: denied { relabelfrom } for pid=2647 comm="syz.1.567" name="" dev="pipefs" ino=24210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 200.758511][ T532] usb 4-1: USB disconnect, device number 5 [ 200.873970][ T284] EXT4-fs (loop1): unmounting filesystem. [ 200.879850][ T308] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.889639][ T308] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:4: Failed to release dquot type 1 [ 201.536332][ T2694] netlink: 'syz.0.575': attribute type 4 has an invalid length. [ 202.099932][ T2701] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 202.342341][ T2707] loop3: detected capacity change from 0 to 512 [ 202.465794][ T2707] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.580: corrupted inode contents [ 202.480812][ T2712] loop1: detected capacity change from 0 to 128 [ 202.485008][ T2707] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #16: comm syz.3.580: mark_inode_dirty error [ 202.505700][ T2707] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.580: corrupted inode contents [ 202.518020][ T2707] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.580: mark_inode_dirty error [ 202.543393][ T2707] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.580: corrupted inode contents [ 203.261056][ T2707] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 203.395479][ T2707] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.580: corrupted inode contents [ 203.432642][ T2707] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.580: mark_inode_dirty error [ 203.804254][ T2725] netlink: 'syz.0.582': attribute type 4 has an invalid length. [ 203.886220][ T2707] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 203.984238][ T2707] EXT4-fs (loop3): 1 truncate cleaned up [ 203.989945][ T2707] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 203.999258][ T2707] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.058139][ T43] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 204.068170][ T43] EXT4-fs error (device loop3): ext4_release_dquot:6825: comm kworker/u4:2: Failed to release dquot type 1 [ 204.375452][ T2728] netlink: 'syz.1.583': attribute type 4 has an invalid length. [ 205.805216][ T2752] netlink: 'syz.0.589': attribute type 4 has an invalid length. [ 207.846320][ T2774] loop0: detected capacity change from 0 to 512 [ 207.871704][ T2774] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 207.901734][ T2774] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 207.932109][ T2774] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 208.008688][ T2774] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 208.016552][ T2759] loop1: detected capacity change from 0 to 40427 [ 208.024049][ T2759] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 208.031862][ T2759] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 208.032080][ T2774] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 208.049745][ T2759] F2FS-fs (loop1): invalid crc value [ 208.068206][ T2774] EXT4-fs (loop0): orphan cleanup on readonly fs [ 208.117532][ T2780] netlink: 'syz.4.597': attribute type 4 has an invalid length. [ 208.249387][ T2774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.596: bg 0: block 34: padding at end of block bitmap is not set [ 208.292229][ T2759] F2FS-fs (loop1): Found nat_bits in checkpoint [ 208.306881][ T2774] Quota error (device loop0): write_blk: dquota write failed [ 208.343553][ T2774] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 208.366196][ T2774] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.596: Failed to acquire dquot type 1 [ 208.378054][ T2759] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 208.385146][ T2759] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.393178][ T2774] EXT4-fs (loop0): 1 truncate cleaned up [ 208.411641][ T2774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 209.966321][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 209.975930][ T286] EXT4-fs (loop0): unmounting filesystem. [ 209.977266][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 211.047653][ T283] EXT4-fs (loop3): unmounting filesystem. [ 211.169569][ T2794] netlink: 'syz.2.601': attribute type 4 has an invalid length. [ 211.231489][ T304] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 211.254948][ T304] EXT4-fs error (device loop3): ext4_release_dquot:6825: comm kworker/u4:3: Failed to release dquot type 1 [ 211.873280][ T2809] loop0: detected capacity change from 0 to 16 [ 211.881819][ T2812] loop3: detected capacity change from 0 to 16 [ 211.894116][ T2809] erofs: (device loop0): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 211.905103][ T2809] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 211.932101][ T2812] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 211.942996][ T2812] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 212.936309][ T2820] netlink: 'syz.3.608': attribute type 4 has an invalid length. [ 213.204694][ T2816] loop0: detected capacity change from 0 to 40427 [ 213.218236][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 213.274414][ T2816] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 213.298009][ T2816] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 213.327574][ T2816] F2FS-fs (loop0): invalid crc value [ 213.409465][ T2816] F2FS-fs (loop0): Found nat_bits in checkpoint [ 213.476221][ T2816] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 213.486990][ T2816] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 214.191279][ T8] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 214.211287][ T8] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 215.558675][ T2107] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.585379][ T2861] netlink: 'syz.1.617': attribute type 4 has an invalid length. [ 216.993264][ T2884] netlink: 'syz.1.622': attribute type 4 has an invalid length. [ 217.704608][ T2889] netlink: 'syz.2.624': attribute type 4 has an invalid length. [ 218.593762][ T2895] netlink: 'syz.3.625': attribute type 4 has an invalid length. [ 218.811246][ T2904] loop3: detected capacity change from 0 to 512 [ 219.809945][ T2912] netlink: 'syz.4.629': attribute type 4 has an invalid length. [ 219.834396][ T2904] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.628: corrupted inode contents [ 219.846892][ T2904] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #16: comm syz.3.628: mark_inode_dirty error [ 219.947341][ T2918] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 221.270997][ T2904] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.628: corrupted inode contents [ 221.284063][ T2904] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.628: mark_inode_dirty error [ 221.295742][ T2904] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.628: corrupted inode contents [ 221.307920][ T2904] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 221.329098][ T2904] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.628: corrupted inode contents [ 221.364136][ T2904] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.628: mark_inode_dirty error [ 221.393653][ T2904] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 221.474837][ T2904] EXT4-fs (loop3): 1 truncate cleaned up [ 221.486377][ T2904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 221.495531][ T1371] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 221.506708][ T1371] EXT4-fs error (device loop3): ext4_release_dquot:6825: comm kworker/u4:8: Failed to release dquot type 1 [ 221.518888][ T2904] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.816835][ T2934] netlink: 'syz.1.635': attribute type 4 has an invalid length. [ 221.848222][ T283] EXT4-fs (loop3): unmounting filesystem. [ 222.007309][ T2939] netlink: 'syz.0.636': attribute type 4 has an invalid length. [ 223.622554][ T2954] netlink: 'syz.0.638': attribute type 4 has an invalid length. [ 225.851346][ T2975] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 226.624744][ T2990] netlink: 'syz.2.650': attribute type 4 has an invalid length. [ 228.480181][ T3000] loop3: detected capacity change from 0 to 16 [ 228.525345][ T3000] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 228.536297][ T3000] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 228.711568][ T443] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.084570][ T3020] netlink: 'syz.3.659': attribute type 4 has an invalid length. [ 230.229778][ T3030] loop3: detected capacity change from 0 to 512 [ 230.640096][ T3030] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 230.653640][ T3030] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 230.663638][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 230.683442][ T3030] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 230.726941][ T3030] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 230.767090][ T3030] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 230.805947][ T3030] EXT4-fs (loop3): orphan cleanup on readonly fs [ 230.844566][ T3030] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.662: bg 0: block 34: padding at end of block bitmap is not set [ 230.915541][ T3030] Quota error (device loop3): write_blk: dquota write failed [ 230.943283][ T3030] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 230.984219][ T3030] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.662: Failed to acquire dquot type 1 [ 231.027985][ T3030] EXT4-fs (loop3): 1 truncate cleaned up [ 231.052601][ T3030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 231.472573][ T283] EXT4-fs (loop3): unmounting filesystem. [ 231.576454][ T3055] loop0: detected capacity change from 0 to 512 [ 231.592649][ T3055] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 231.602650][ T3055] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 231.613179][ T3055] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 231.626757][ T3055] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 231.634859][ T3055] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 231.643198][ T3055] EXT4-fs (loop0): orphan cleanup on readonly fs [ 231.650651][ T3055] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.669: bg 0: block 34: padding at end of block bitmap is not set [ 231.665432][ T3055] Quota error (device loop0): write_blk: dquota write failed [ 231.673144][ T3055] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 231.683781][ T3055] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.669: Failed to acquire dquot type 1 [ 231.701873][ T3055] EXT4-fs (loop0): 1 truncate cleaned up [ 231.708093][ T3055] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.792008][ T286] EXT4-fs (loop0): unmounting filesystem. [ 232.219704][ T3068] netlink: 'syz.4.672': attribute type 4 has an invalid length. [ 233.075153][ T798] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.904815][ T3078] netlink: 'syz.1.675': attribute type 4 has an invalid length. [ 234.153489][ T532] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 234.351476][ T532] usb 1-1: Using ep0 maxpacket: 16 [ 234.401271][ T532] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 234.419919][ T532] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 234.432520][ T532] usb 1-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 234.453444][ T532] usb 1-1: config 1 interface 0 has no altsetting 0 [ 234.465129][ T532] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.482237][ T532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.495908][ T532] usb 1-1: SerialNumber: syz [ 234.507154][ T3076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.522935][ T3076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.745565][ T3076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.752750][ T3076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 235.554900][ T532] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 235.568497][ T532] usb 1-1: USB disconnect, device number 2 [ 235.656365][ T3107] netlink: 'syz.4.683': attribute type 4 has an invalid length. [ 237.107066][ T3125] loop1: detected capacity change from 0 to 128 [ 237.407075][ T3132] netlink: 'syz.2.691': attribute type 4 has an invalid length. [ 240.765110][ T3155] netlink: 'syz.4.695': attribute type 4 has an invalid length. [ 241.644369][ T3158] netlink: 'syz.1.698': attribute type 4 has an invalid length. [ 241.676298][ T3165] loop3: detected capacity change from 0 to 512 [ 241.724708][ T3165] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 241.741530][ T3165] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 241.751524][ T3165] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 241.783806][ T3165] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 241.798225][ T3165] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 241.807355][ T3165] EXT4-fs (loop3): orphan cleanup on readonly fs [ 241.814459][ T3165] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.700: bg 0: block 34: padding at end of block bitmap is not set [ 242.061334][ T3165] Quota error (device loop3): write_blk: dquota write failed [ 242.079364][ T3165] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 242.093628][ T3165] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.700: Failed to acquire dquot type 1 [ 242.191798][ T3174] netlink: 'syz.1.702': attribute type 4 has an invalid length. [ 242.385252][ T3165] EXT4-fs (loop3): 1 truncate cleaned up [ 242.391146][ T3165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 242.433746][ T283] EXT4-fs (loop3): unmounting filesystem. [ 243.553910][ T3199] netlink: 'syz.0.708': attribute type 4 has an invalid length. [ 245.574306][ T3218] netlink: 'syz.0.712': attribute type 4 has an invalid length. [ 245.776694][ T3228] loop3: detected capacity change from 0 to 512 [ 245.787573][ T3228] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 245.816045][ T3228] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 245.846544][ T3228] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 245.881227][ T3228] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 245.893634][ T3228] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 245.909692][ T3228] EXT4-fs (loop3): orphan cleanup on readonly fs [ 245.924809][ T3228] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.716: bg 0: block 34: padding at end of block bitmap is not set [ 245.939984][ T3228] Quota error (device loop3): write_blk: dquota write failed [ 245.947574][ T3228] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 245.970520][ T3228] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.716: Failed to acquire dquot type 1 [ 245.987668][ T3228] EXT4-fs (loop3): 1 truncate cleaned up [ 246.114817][ T3228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.208820][ T283] EXT4-fs (loop3): unmounting filesystem. [ 247.242533][ T3245] netlink: 'syz.3.721': attribute type 4 has an invalid length. [ 248.355906][ T3262] netlink: 'syz.0.723': attribute type 4 has an invalid length. [ 251.804485][ T3292] loop3: detected capacity change from 0 to 16 [ 251.913930][ T3292] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 252.005881][ T3292] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 252.523161][ T3297] loop0: detected capacity change from 0 to 40427 [ 252.538417][ T3297] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 252.552704][ T3297] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 252.561942][ T3297] F2FS-fs (loop0): invalid crc value [ 252.587208][ T3297] F2FS-fs (loop0): Found nat_bits in checkpoint [ 252.651421][ T3297] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 252.662154][ T3297] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 253.120012][ T3324] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 253.385009][ T1371] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 253.428715][ T1371] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 253.963942][ T3336] netlink: 'syz.4.743': attribute type 4 has an invalid length. [ 255.015190][ T3346] netlink: 'syz.0.741': attribute type 4 has an invalid length. [ 255.137408][ T3348] loop3: detected capacity change from 0 to 16 [ 255.149946][ T3348] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 255.160961][ T3348] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 256.600586][ T3368] loop0: detected capacity change from 0 to 512 [ 256.603623][ T413] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 256.614625][ T3368] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 256.625804][ T3368] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 256.635966][ T3368] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 256.646493][ T3368] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 256.655405][ T3368] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 256.663899][ T3368] EXT4-fs (loop0): orphan cleanup on readonly fs [ 256.670891][ T3368] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.753: bg 0: block 34: padding at end of block bitmap is not set [ 256.691105][ T3368] Quota error (device loop0): write_blk: dquota write failed [ 256.699635][ T3368] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 256.709912][ T3368] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.753: Failed to acquire dquot type 1 [ 256.728124][ T3368] EXT4-fs (loop0): 1 truncate cleaned up [ 256.743822][ T3368] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 256.803536][ T413] usb 2-1: Using ep0 maxpacket: 16 [ 256.819708][ T413] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 256.845392][ T413] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 256.857765][ T413] usb 2-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 256.871298][ T413] usb 2-1: config 1 interface 0 has no altsetting 0 [ 256.885660][ T413] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.895429][ T286] EXT4-fs (loop0): unmounting filesystem. [ 256.905194][ T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 256.913240][ T413] usb 2-1: SerialNumber: syz [ 256.922047][ T3363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.941994][ T3363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.692081][ T3381] netlink: 'syz.0.755': attribute type 4 has an invalid length. [ 257.719167][ T3363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.733480][ T3363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.992688][ T3386] netlink: 'syz.4.756': attribute type 4 has an invalid length. [ 259.014651][ T3397] netlink: 'syz.4.763': attribute type 4 has an invalid length. [ 259.332162][ T413] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 259.428079][ T413] usb 2-1: USB disconnect, device number 5 [ 261.228026][ T3430] netlink: 'syz.4.769': attribute type 4 has an invalid length. [ 261.966743][ T3432] loop1: detected capacity change from 0 to 512 [ 261.982457][ T3432] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 261.992513][ T3432] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 262.003505][ T3432] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 262.044453][ T3432] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 262.073675][ T3432] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 262.094640][ T3432] EXT4-fs (loop1): orphan cleanup on readonly fs [ 262.111653][ T3432] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.771: bg 0: block 34: padding at end of block bitmap is not set [ 262.284253][ T3432] Quota error (device loop1): write_blk: dquota write failed [ 262.309486][ T3432] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 262.369853][ T3432] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.771: Failed to acquire dquot type 1 [ 262.391776][ T3432] EXT4-fs (loop1): 1 truncate cleaned up [ 262.401568][ T3432] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 262.557770][ T284] EXT4-fs (loop1): unmounting filesystem. [ 265.854870][ T3459] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 266.761883][ T3469] netlink: 'syz.3.780': attribute type 4 has an invalid length. [ 268.135122][ T3486] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 268.969535][ T3489] netlink: 'syz.2.787': attribute type 4 has an invalid length. [ 269.289026][ T3501] netlink: 'syz.1.784': attribute type 4 has an invalid length. [ 271.443041][ T3527] netlink: 'syz.1.796': attribute type 4 has an invalid length. [ 272.103013][ T3532] netlink: 'syz.3.797': attribute type 4 has an invalid length. [ 273.523166][ T3549] netlink: 'syz.2.802': attribute type 4 has an invalid length. [ 274.190932][ T3565] loop3: detected capacity change from 0 to 16 [ 274.219973][ T3565] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 274.230925][ T3565] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 274.616179][ T3555] loop1: detected capacity change from 0 to 40427 [ 274.643562][ T3555] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 274.655482][ T3555] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 274.762014][ T3555] F2FS-fs (loop1): invalid crc value [ 274.803951][ T3555] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.903946][ T3570] loop3: detected capacity change from 0 to 40427 [ 274.918990][ T3570] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 274.940971][ T3555] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 274.948123][ T3570] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 274.960524][ T3555] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 274.968321][ T3570] F2FS-fs (loop3): invalid crc value [ 275.046486][ T3570] F2FS-fs (loop3): Found nat_bits in checkpoint [ 275.201585][ T3585] netlink: 'syz.4.811': attribute type 4 has an invalid length. [ 275.481095][ T3570] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 275.596715][ T3570] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 275.633100][ T914] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 275.648832][ T914] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 275.961463][ T914] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 275.971082][ T914] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 277.395361][ T3598] netlink: 'syz.2.813': attribute type 4 has an invalid length. [ 277.612319][ T3613] netlink: 'syz.1.816': attribute type 4 has an invalid length. [ 278.735957][ T3611] netlink: 'syz.0.810': attribute type 4 has an invalid length. [ 279.380353][ T3633] netlink: 'syz.2.818': attribute type 4 has an invalid length. [ 280.232525][ T3643] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 280.419226][ T3645] netlink: 'syz.1.824': attribute type 4 has an invalid length. [ 281.757274][ T3647] loop3: detected capacity change from 0 to 40427 [ 281.764398][ T3647] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 281.805885][ T3647] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 283.466678][ T3664] netlink: 'syz.0.830': attribute type 4 has an invalid length. [ 283.483470][ T3662] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 283.509999][ T3647] F2FS-fs (loop3): invalid crc value [ 283.531289][ T3647] F2FS-fs (loop3): Found nat_bits in checkpoint [ 284.765715][ T3681] netlink: 'syz.1.832': attribute type 4 has an invalid length. [ 284.777215][ T3682] netlink: 'syz.2.834': attribute type 4 has an invalid length. [ 285.110529][ T3692] loop3: detected capacity change from 0 to 512 [ 285.124685][ T3692] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 285.151328][ T3692] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 285.174161][ T3692] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 285.184648][ T3692] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 285.192551][ T3692] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 285.201153][ T3692] EXT4-fs (loop3): orphan cleanup on readonly fs [ 285.806202][ T3696] netlink: 'syz.4.833': attribute type 4 has an invalid length. [ 285.873454][ T3699] netlink: 'syz.2.837': attribute type 4 has an invalid length. [ 285.946465][ T3692] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.835: bg 0: block 34: padding at end of block bitmap is not set [ 286.127059][ T3692] Quota error (device loop3): write_blk: dquota write failed [ 286.143807][ T3692] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 286.154330][ T3692] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.835: Failed to acquire dquot type 1 [ 286.166942][ T3692] EXT4-fs (loop3): 1 truncate cleaned up [ 286.172766][ T3692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 286.304104][ T3707] netlink: 'syz.2.839': attribute type 4 has an invalid length. [ 286.540667][ T283] EXT4-fs (loop3): unmounting filesystem. [ 287.098078][ T3712] netlink: 'syz.3.841': attribute type 4 has an invalid length. [ 288.238874][ T3724] netlink: 'syz.4.843': attribute type 4 has an invalid length. [ 288.674936][ T3732] netlink: 'syz.3.848': attribute type 4 has an invalid length. [ 288.805128][ T3738] loop1: detected capacity change from 0 to 40427 [ 288.870742][ T3744] netlink: 'syz.2.849': attribute type 4 has an invalid length. [ 289.065919][ T3738] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 289.108829][ T3738] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 289.156466][ T3738] F2FS-fs (loop1): invalid crc value [ 289.296369][ T3738] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.349622][ T3738] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 289.357063][ T3738] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.763091][ T3757] netlink: 'syz.3.852': attribute type 4 has an invalid length. [ 291.602798][ T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 291.630234][ T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 292.453976][ T3771] netlink: 'syz.3.856': attribute type 4 has an invalid length. [ 292.884565][ T3782] netlink: 'syz.2.858': attribute type 4 has an invalid length. [ 294.068276][ T3804] netlink: 'syz.0.864': attribute type 4 has an invalid length. [ 294.328270][ T3805] netlink: 'syz.3.859': attribute type 4 has an invalid length. [ 296.493860][ T3831] netlink: 'syz.0.870': attribute type 4 has an invalid length. [ 296.721906][ T3834] loop1: detected capacity change from 0 to 512 [ 296.770568][ T3834] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 296.830144][ T3834] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 296.936905][ T3834] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 297.128745][ T3838] netlink: 'syz.3.873': attribute type 4 has an invalid length. [ 297.337023][ T3834] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 297.349302][ T3834] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 297.370145][ T3834] EXT4-fs (loop1): orphan cleanup on readonly fs [ 297.395860][ T3834] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.872: bg 0: block 34: padding at end of block bitmap is not set [ 297.445055][ T3834] Quota error (device loop1): write_blk: dquota write failed [ 297.455164][ T3834] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 297.466157][ T3834] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.872: Failed to acquire dquot type 1 [ 297.477985][ T3834] EXT4-fs (loop1): 1 truncate cleaned up [ 297.484038][ T3834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 300.103681][ T3859] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 300.131732][ T284] EXT4-fs (loop1): unmounting filesystem. [ 301.209250][ T3869] loop1: detected capacity change from 0 to 40427 [ 301.216284][ T3869] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 301.434191][ T3869] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 301.463955][ T3869] F2FS-fs (loop1): invalid crc value [ 301.506747][ T3886] netlink: 'syz.0.885': attribute type 4 has an invalid length. [ 301.617141][ T3869] F2FS-fs (loop1): Found nat_bits in checkpoint [ 301.754763][ T3869] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 301.761827][ T3869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 302.799170][ T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 302.816284][ T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 302.857437][ T3895] netlink: 'syz.4.886': attribute type 4 has an invalid length. [ 304.454236][ T3919] netlink: 'syz.0.889': attribute type 4 has an invalid length. [ 307.897846][ T3951] loop3: detected capacity change from 0 to 40427 [ 307.904985][ T3951] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 307.914991][ T3951] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 307.940971][ T3951] F2FS-fs (loop3): invalid crc value [ 309.118966][ T3968] netlink: 'syz.1.905': attribute type 4 has an invalid length. [ 309.172702][ T3951] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.214265][ T3951] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 309.226741][ T3951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 309.528741][ T3981] netlink: 'syz.1.908': attribute type 4 has an invalid length. [ 311.831757][ T4004] loop3: detected capacity change from 0 to 16 [ 311.960780][ T4004] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 311.971681][ T4004] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 312.083592][ T358] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 312.273534][ T358] usb 2-1: Using ep0 maxpacket: 16 [ 312.280490][ T358] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 312.306715][ T358] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 312.341514][ T358] usb 2-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.411824][ T358] usb 2-1: config 1 interface 0 has no altsetting 0 [ 312.430166][ T358] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.447875][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 312.463674][ T358] usb 2-1: SerialNumber: syz [ 312.550348][ T4000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 312.560781][ T4016] netlink: 'syz.2.918': attribute type 4 has an invalid length. [ 312.628218][ T4000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 312.749066][ T4009] loop3: detected capacity change from 0 to 40427 [ 312.761629][ T4009] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 312.769639][ T4009] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 312.778841][ T4009] F2FS-fs (loop3): invalid crc value [ 312.785523][ T4009] F2FS-fs (loop3): Found nat_bits in checkpoint [ 312.850066][ T4009] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 312.857400][ T4009] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 313.564799][ T4000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 313.572145][ T4000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 315.241254][ T4041] netlink: 'syz.4.922': attribute type 4 has an invalid length. [ 315.276696][ T311] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 315.300529][ T311] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 316.708971][ T4052] netlink: 'syz.0.924': attribute type 4 has an invalid length. [ 316.732965][ T4051] netlink: 'syz.4.926': attribute type 4 has an invalid length. [ 316.776011][ T358] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 316.850235][ T358] usb 2-1: USB disconnect, device number 6 [ 317.636225][ T4064] netlink: 'syz.0.927': attribute type 4 has an invalid length. [ 317.935175][ T4072] netlink: 'syz.1.930': attribute type 4 has an invalid length. [ 318.173043][ T4079] loop3: detected capacity change from 0 to 512 [ 318.212382][ T4079] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 318.227145][ T4079] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 318.237253][ T4079] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 318.247854][ T4079] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 318.255999][ T4079] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 318.265595][ T4079] EXT4-fs (loop3): orphan cleanup on readonly fs [ 318.272445][ T4079] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.931: bg 0: block 34: padding at end of block bitmap is not set [ 318.287133][ T4079] Quota error (device loop3): write_blk: dquota write failed [ 318.294727][ T4079] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 318.304913][ T4079] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.931: Failed to acquire dquot type 1 [ 318.316784][ T4079] EXT4-fs (loop3): 1 truncate cleaned up [ 318.322649][ T4079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 318.368157][ T283] EXT4-fs (loop3): unmounting filesystem. [ 320.672753][ T4109] netlink: 'syz.1.940': attribute type 4 has an invalid length. [ 321.493884][ T4114] loop1: detected capacity change from 0 to 512 [ 321.538290][ T4114] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 321.906434][ T4114] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 321.945170][ T4114] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 321.964789][ T4114] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 321.976835][ T4114] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 321.987205][ T4114] EXT4-fs (loop1): orphan cleanup on readonly fs [ 322.033918][ T4114] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.945: bg 0: block 34: padding at end of block bitmap is not set [ 322.077256][ T4114] Quota error (device loop1): write_blk: dquota write failed [ 322.093146][ T4114] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 322.194800][ T4114] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.945: Failed to acquire dquot type 1 [ 322.203343][ T4124] netlink: 'syz.4.941': attribute type 4 has an invalid length. [ 322.219385][ T4114] EXT4-fs (loop1): 1 truncate cleaned up [ 322.225440][ T4114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 322.382855][ T284] EXT4-fs (loop1): unmounting filesystem. [ 322.709366][ T4135] Zero length message leads to an empty skb [ 325.633021][ T4159] netlink: 'syz.3.954': attribute type 4 has an invalid length. [ 327.281886][ T4179] loop1: detected capacity change from 0 to 512 [ 327.289893][ T4179] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 327.299781][ T4179] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 327.309656][ T4179] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 327.915212][ T4179] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 327.924678][ T4179] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 327.934462][ T4179] EXT4-fs (loop1): orphan cleanup on readonly fs [ 327.941384][ T4179] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.958: bg 0: block 34: padding at end of block bitmap is not set [ 327.963680][ T4179] Quota error (device loop1): write_blk: dquota write failed [ 327.980266][ T4179] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 327.996507][ T4179] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.958: Failed to acquire dquot type 1 [ 328.008260][ T4179] EXT4-fs (loop1): 1 truncate cleaned up [ 328.015267][ T4179] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 328.121673][ T4190] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 328.886980][ T4197] loop3: detected capacity change from 0 to 512 [ 328.944105][ T284] EXT4-fs (loop1): unmounting filesystem. [ 328.950314][ T4197] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 328.975107][ T4197] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 328.985984][ T4197] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 329.175878][ T4197] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 329.248275][ T4197] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 329.260476][ T4197] EXT4-fs (loop3): orphan cleanup on readonly fs [ 329.284832][ T4197] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.967: bg 0: block 34: padding at end of block bitmap is not set [ 329.346949][ T4197] Quota error (device loop3): write_blk: dquota write failed [ 329.401128][ T4197] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 329.596435][ T4197] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.967: Failed to acquire dquot type 1 [ 330.131855][ T4214] netlink: 'syz.2.969': attribute type 4 has an invalid length. [ 330.674719][ T4197] EXT4-fs (loop3): 1 truncate cleaned up [ 330.750521][ T4197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 331.068531][ T283] EXT4-fs (loop3): unmounting filesystem. [ 332.691049][ T4247] netlink: 'syz.4.978': attribute type 4 has an invalid length. [ 332.940723][ T4249] loop3: detected capacity change from 0 to 128 [ 333.586110][ T4250] loop1: detected capacity change from 0 to 16 [ 334.577103][ T4250] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 334.588061][ T4250] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 334.990029][ T443] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 335.017286][ T4262] loop3: detected capacity change from 0 to 512 [ 335.176933][ T4262] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 335.187214][ T4262] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 335.209858][ T4262] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 335.234832][ T4266] netlink: 'syz.2.981': attribute type 4 has an invalid length. [ 335.348771][ T4262] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 335.360019][ T4262] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 335.368506][ T4270] loop1: detected capacity change from 0 to 512 [ 335.368556][ T4262] EXT4-fs (loop3): orphan cleanup on readonly fs [ 335.387701][ T4262] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.983: bg 0: block 34: padding at end of block bitmap is not set [ 335.402313][ T4270] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 335.412372][ T4270] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 335.422220][ T4270] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 335.422337][ T4262] Quota error (device loop3): write_blk: dquota write failed [ 335.449890][ T4270] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 335.457958][ T4262] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 335.463682][ T4270] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 335.475676][ T4262] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.983: Failed to acquire dquot type 1 [ 335.491422][ T4270] EXT4-fs (loop1): orphan cleanup on readonly fs [ 335.498411][ T4262] EXT4-fs (loop3): 1 truncate cleaned up [ 335.502015][ T4270] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.985: bg 0: block 34: padding at end of block bitmap is not set [ 335.576362][ T4262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 335.583517][ T4270] Quota error (device loop1): write_blk: dquota write failed [ 335.604204][ T4270] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 335.620054][ T4270] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.985: Failed to acquire dquot type 1 [ 335.711586][ T4270] EXT4-fs (loop1): 1 truncate cleaned up [ 335.717611][ T4270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 336.085311][ T284] EXT4-fs (loop1): unmounting filesystem. [ 336.093273][ T283] EXT4-fs (loop3): unmounting filesystem. [ 338.488628][ T4318] netlink: 'syz.3.996': attribute type 4 has an invalid length. [ 338.825469][ T4320] loop1: detected capacity change from 0 to 512 [ 338.900399][ T4320] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 338.964730][ T4320] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 339.292428][ T4320] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 339.314570][ T4320] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 339.372459][ T4320] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 339.380770][ T4320] EXT4-fs (loop1): orphan cleanup on readonly fs [ 339.929528][ T4320] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.999: bg 0: block 34: padding at end of block bitmap is not set [ 339.944429][ T4320] Quota error (device loop1): write_blk: dquota write failed [ 339.951939][ T4320] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 339.962296][ T4320] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.999: Failed to acquire dquot type 1 [ 339.974641][ T4320] EXT4-fs (loop1): 1 truncate cleaned up [ 340.831594][ T4320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 340.967843][ T284] EXT4-fs (loop1): unmounting filesystem. [ 341.100750][ T4347] loop3: detected capacity change from 0 to 40427 [ 341.274185][ T4347] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 341.282274][ T4347] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 341.358139][ T4347] F2FS-fs (loop3): invalid crc value [ 341.447537][ T4347] F2FS-fs (loop3): Found nat_bits in checkpoint [ 341.723499][ T4347] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 342.087258][ T4347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 342.170878][ T4369] netlink: 'syz.1.1013': attribute type 4 has an invalid length. [ 343.378051][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 343.390038][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 346.872015][ T4434] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 347.701776][ T4449] loop3: detected capacity change from 0 to 512 [ 347.715151][ T4449] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 347.753633][ T4449] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 347.782600][ T4449] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 347.816939][ T4449] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 347.830341][ T4449] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 347.839015][ T4449] EXT4-fs (loop3): orphan cleanup on readonly fs [ 347.846033][ T4449] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1034: bg 0: block 34: padding at end of block bitmap is not set [ 347.863300][ T4449] Quota error (device loop3): write_blk: dquota write failed [ 347.870896][ T4449] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 347.880897][ T4449] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.1034: Failed to acquire dquot type 1 [ 347.893712][ T4449] EXT4-fs (loop3): 1 truncate cleaned up [ 347.899574][ T4449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 347.925529][ T283] EXT4-fs (loop3): unmounting filesystem. [ 349.181669][ T4475] netlink: 'syz.4.1042': attribute type 4 has an invalid length. [ 349.984862][ T4487] loop3: detected capacity change from 0 to 512 [ 349.997151][ T4487] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 350.026974][ T4487] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 350.043679][ T4487] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 350.072732][ T4487] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 350.083507][ T4487] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 350.091767][ T4487] EXT4-fs (loop3): orphan cleanup on readonly fs [ 350.161814][ T4487] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1047: bg 0: block 34: padding at end of block bitmap is not set [ 350.176605][ T4487] Quota error (device loop3): write_blk: dquota write failed [ 350.184058][ T4487] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 350.194624][ T4487] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.1047: Failed to acquire dquot type 1 [ 350.212885][ T4487] EXT4-fs (loop3): 1 truncate cleaned up [ 350.225488][ T4487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 350.324549][ T283] EXT4-fs (loop3): unmounting filesystem. [ 350.677477][ T4501] netlink: 'syz.1.1045': attribute type 4 has an invalid length. [ 351.563506][ T4513] loop1: detected capacity change from 0 to 512 [ 351.577993][ T4513] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 351.587932][ T4512] loop3: detected capacity change from 0 to 512 [ 351.599022][ T4513] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 351.621043][ T4513] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 351.645990][ T4513] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 351.653935][ T4513] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 351.662116][ T4513] EXT4-fs (loop1): orphan cleanup on readonly fs [ 351.669495][ T4513] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1052: bg 0: block 34: padding at end of block bitmap is not set [ 351.684818][ T4513] Quota error (device loop1): write_blk: dquota write failed [ 351.692307][ T4513] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 351.703345][ T4513] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.1052: Failed to acquire dquot type 1 [ 351.716323][ T4513] EXT4-fs (loop1): 1 truncate cleaned up [ 351.723964][ T4512] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.1053: corrupted inode contents [ 351.736355][ T4513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 351.745623][ T4512] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #16: comm syz.3.1053: mark_inode_dirty error [ 351.765094][ T4512] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.1053: corrupted inode contents [ 351.777861][ T4512] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1053: mark_inode_dirty error [ 351.789453][ T4512] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.1053: corrupted inode contents [ 351.801740][ T4512] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 351.811034][ T4512] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.1053: corrupted inode contents [ 351.823282][ T4512] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.1053: mark_inode_dirty error [ 351.834990][ T4512] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 351.844338][ T4512] EXT4-fs (loop3): 1 truncate cleaned up [ 351.850171][ T4512] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 351.859408][ T4512] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.870326][ T597] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 351.884010][ T597] EXT4-fs error (device loop3): ext4_release_dquot:6825: comm kworker/u4:6: Failed to release dquot type 1 [ 351.994817][ T284] EXT4-fs (loop1): unmounting filesystem. [ 352.300621][ T4530] netlink: 'syz.4.1056': attribute type 4 has an invalid length. [ 352.719835][ T4535] netlink: 'syz.1.1057': attribute type 4 has an invalid length. [ 353.730547][ T4546] loop1: detected capacity change from 0 to 40427 [ 353.745686][ T4546] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 354.084578][ T4546] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 354.112963][ T4546] F2FS-fs (loop1): invalid crc value [ 354.185726][ T283] EXT4-fs (loop3): unmounting filesystem. [ 354.199855][ T4546] F2FS-fs (loop1): Found nat_bits in checkpoint [ 354.227119][ T4561] netlink: 'syz.2.1062': attribute type 4 has an invalid length. [ 354.285578][ T4546] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 354.472148][ T4546] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 355.322448][ T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 355.343789][ T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 356.532731][ T4597] loop1: detected capacity change from 0 to 16 [ 356.554559][ T4597] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 356.565669][ T4597] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 356.613998][ T443] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.854750][ T4621] netlink: 'syz.1.1079': attribute type 4 has an invalid length. [ 361.122975][ T4668] netlink: 'syz.0.1091': attribute type 4 has an invalid length. [ 362.181956][ T4683] netlink: 'syz.3.1093': attribute type 4 has an invalid length. [ 362.778976][ T4692] netlink: 'syz.2.1097': attribute type 4 has an invalid length. [ 363.246793][ T4701] netlink: 'syz.3.1099': attribute type 4 has an invalid length. [ 364.614676][ T4718] loop1: detected capacity change from 0 to 512 [ 364.639524][ T4718] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 364.653702][ T4718] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 364.665230][ T4718] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 364.675545][ T4718] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 364.683874][ T4718] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 364.692105][ T4718] EXT4-fs (loop1): orphan cleanup on readonly fs [ 364.700091][ T4718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1106: bg 0: block 34: padding at end of block bitmap is not set [ 364.720913][ T4718] Quota error (device loop1): write_blk: dquota write failed [ 364.728489][ T4718] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 364.738643][ T4718] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.1106: Failed to acquire dquot type 1 [ 364.750518][ T4718] EXT4-fs (loop1): 1 truncate cleaned up [ 364.756626][ T4718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 365.009090][ T284] EXT4-fs (loop1): unmounting filesystem. [ 365.589791][ T4738] netlink: 'syz.0.1109': attribute type 4 has an invalid length. [ 367.746766][ T4761] netlink: 'syz.3.1116': attribute type 4 has an invalid length. [ 367.836792][ T4744] loop1: detected capacity change from 0 to 40427 [ 367.944019][ T4744] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 367.972039][ T4744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 368.247497][ T4744] F2FS-fs (loop1): invalid crc value [ 368.320997][ T4744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 368.521826][ T4744] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 368.529000][ T4744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 370.117272][ T4794] loop1: detected capacity change from 0 to 128 [ 372.227902][ T4797] netlink: 'syz.2.1124': attribute type 4 has an invalid length. [ 372.776099][ T4813] netlink: 'syz.3.1131': attribute type 4 has an invalid length. [ 374.180300][ T4824] netlink: 'syz.3.1134': attribute type 4 has an invalid length. [ 374.294192][ T4825] netlink: 'syz.2.1132': attribute type 4 has an invalid length. [ 377.621945][ T4851] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 379.410311][ T4877] netlink: 'syz.3.1147': attribute type 4 has an invalid length. [ 379.785383][ T4885] netlink: 'syz.4.1148': attribute type 4 has an invalid length. [ 380.713721][ T4905] netlink: 'syz.2.1152': attribute type 4 has an invalid length. [ 381.209045][ T4913] netlink: 'syz.3.1158': attribute type 4 has an invalid length. [ 383.522206][ T4929] loop1: detected capacity change from 0 to 512 [ 383.550754][ T4929] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1162: corrupted inode contents [ 383.563094][ T4929] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #16: comm syz.1.1162: mark_inode_dirty error [ 383.575157][ T4929] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1162: corrupted inode contents [ 383.587359][ T4929] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1162: mark_inode_dirty error [ 383.605950][ T4929] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1162: corrupted inode contents [ 383.618400][ T4929] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 383.627403][ T4929] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1162: corrupted inode contents [ 383.639652][ T4929] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.1162: mark_inode_dirty error [ 383.651274][ T4929] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 383.667211][ T4929] EXT4-fs (loop1): 1 truncate cleaned up [ 383.672868][ T4929] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 383.683015][ T4929] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.694052][ T308] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 384.097371][ T308] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:4: Failed to release dquot type 1 [ 384.529551][ T284] EXT4-fs (loop1): unmounting filesystem. [ 384.998448][ T311] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 385.008389][ T311] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:5: Failed to release dquot type 1 [ 385.132375][ T4966] netlink: 'syz.3.1171': attribute type 4 has an invalid length. [ 385.799717][ T4977] netlink: 'syz.2.1173': attribute type 4 has an invalid length. [ 387.195042][ T5004] loop1: detected capacity change from 0 to 128 [ 388.842523][ T5007] netlink: 'syz.4.1182': attribute type 4 has an invalid length. [ 390.570271][ T5021] netlink: 'syz.2.1186': attribute type 4 has an invalid length. [ 391.157793][ T5041] netlink: 'syz.3.1189': attribute type 4 has an invalid length. [ 395.071866][ T5083] netlink: 'syz.3.1201': attribute type 4 has an invalid length. [ 396.841724][ T5098] loop1: detected capacity change from 0 to 512 [ 396.873892][ T5098] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 396.937851][ T5098] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 396.988034][ T5098] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 397.131981][ T5098] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 397.147443][ T5098] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 397.164710][ T5098] EXT4-fs (loop1): orphan cleanup on readonly fs [ 397.171711][ T5098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1208: bg 0: block 34: padding at end of block bitmap is not set [ 397.263703][ T5098] Quota error (device loop1): write_blk: dquota write failed [ 397.271228][ T5098] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 397.297681][ T5098] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.1208: Failed to acquire dquot type 1 [ 397.343878][ T5098] EXT4-fs (loop1): 1 truncate cleaned up [ 397.369823][ T5098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 397.724567][ T284] EXT4-fs (loop1): unmounting filesystem. [ 400.397895][ T5142] netlink: 'syz.2.1216': attribute type 4 has an invalid length. [ 410.207561][ T5267] loop1: detected capacity change from 0 to 40427 [ 410.311261][ T5267] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 410.624289][ T5267] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 410.731036][ T5267] F2FS-fs (loop1): invalid crc value [ 410.780061][ T5267] F2FS-fs (loop1): Found nat_bits in checkpoint [ 410.865940][ T5267] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 410.873069][ T5267] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 415.052162][ T5331] loop1: detected capacity change from 0 to 40427 [ 415.077500][ T5331] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 415.089048][ T5331] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.120887][ T5331] F2FS-fs (loop1): invalid crc value [ 415.162130][ T5331] F2FS-fs (loop1): Found nat_bits in checkpoint [ 415.236628][ T5331] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 415.251963][ T5331] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 416.208819][ T1371] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 416.975316][ T1371] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 418.545331][ T5378] loop1: detected capacity change from 0 to 16 [ 418.634319][ T5378] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 418.645297][ T5378] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 418.706818][ T5153] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 420.978746][ T5403] loop1: detected capacity change from 0 to 512 [ 422.240260][ T5403] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1288: corrupted inode contents [ 422.372613][ T5403] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #16: comm syz.1.1288: mark_inode_dirty error [ 422.547392][ T5403] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1288: corrupted inode contents [ 422.738851][ T5403] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1288: mark_inode_dirty error [ 422.754643][ T5403] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1288: corrupted inode contents [ 422.770206][ T5403] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 422.779386][ T5403] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1288: corrupted inode contents [ 424.179335][ T5403] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.1288: mark_inode_dirty error [ 424.601264][ T5435] netlink: 'syz.3.1290': attribute type 4 has an invalid length. [ 425.187265][ T5403] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 425.277110][ T5403] EXT4-fs (loop1): 1 truncate cleaned up [ 425.296440][ T304] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 425.357002][ T5403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 425.370099][ T304] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:3: Failed to release dquot type 1 [ 425.385896][ T5403] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.417258][ T284] EXT4-fs (loop1): unmounting filesystem. [ 443.096416][ T5630] netlink: 'syz.1.1346': attribute type 4 has an invalid length. [ 444.683015][ T5647] netlink: 'syz.3.1352': attribute type 4 has an invalid length. [ 447.425852][ T5678] loop1: detected capacity change from 0 to 512 [ 447.476682][ T5678] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 447.509600][ T5678] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 447.524646][ T5678] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 447.539655][ T5678] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 447.547783][ T5678] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 447.558712][ T5678] EXT4-fs (loop1): orphan cleanup on readonly fs [ 447.567819][ T5678] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1359: bg 0: block 34: padding at end of block bitmap is not set [ 447.583824][ T5678] Quota error (device loop1): write_blk: dquota write failed [ 447.591465][ T5678] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 447.739650][ T5678] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.1359: Failed to acquire dquot type 1 [ 447.777506][ T5678] EXT4-fs (loop1): 1 truncate cleaned up [ 447.785322][ T5678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 448.506961][ T284] EXT4-fs (loop1): unmounting filesystem. [ 452.230120][ T5735] loop1: detected capacity change from 0 to 16 [ 452.324077][ T5735] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 452.335146][ T5735] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 452.633204][ T5742] loop1: detected capacity change from 0 to 512 [ 452.682223][ T5742] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 452.709967][ T5742] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 452.733463][ T5742] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 452.784075][ T5742] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 452.791999][ T5742] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e11c, mo2=0000] [ 452.858884][ T5742] EXT4-fs (loop1): orphan cleanup on readonly fs [ 453.387949][ T5742] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1375: bg 0: block 34: padding at end of block bitmap is not set [ 453.648620][ T5742] Quota error (device loop1): write_blk: dquota write failed [ 453.683503][ T5742] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 453.739270][ T5742] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.1375: Failed to acquire dquot type 1 [ 453.771615][ T5742] EXT4-fs (loop1): 1 truncate cleaned up [ 453.777858][ T5742] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 454.458114][ T284] EXT4-fs (loop1): unmounting filesystem. [ 458.831907][ T5807] loop1: detected capacity change from 0 to 40427 [ 458.916644][ T5807] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 458.953638][ T5807] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 458.982511][ T5807] F2FS-fs (loop1): invalid crc value [ 460.118852][ T5807] F2FS-fs (loop1): Found nat_bits in checkpoint [ 460.344289][ T5807] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 460.351408][ T5807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 461.464577][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 461.629873][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 464.771373][ T5884] loop1: detected capacity change from 0 to 40427 [ 464.784575][ T5884] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 464.792353][ T5884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 464.804406][ T5884] F2FS-fs (loop1): invalid crc value [ 466.302378][ T5884] F2FS-fs (loop1): Found nat_bits in checkpoint [ 466.357527][ T5884] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 466.364773][ T5884] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 468.983331][ T597] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 468.992780][ T597] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 469.159171][ T5920] netlink: 'syz.2.1419': attribute type 4 has an invalid length. [ 471.312312][ T5949] netlink: 'syz.3.1425': attribute type 4 has an invalid length. [ 472.479033][ T5972] netlink: 'syz.4.1434': attribute type 4 has an invalid length. [ 472.714395][ T5962] loop1: detected capacity change from 0 to 40427 [ 472.764908][ T5962] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 472.782166][ T5962] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 472.862763][ T5962] F2FS-fs (loop1): invalid crc value [ 472.888727][ T5962] F2FS-fs (loop1): Found nat_bits in checkpoint [ 472.927202][ T5962] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 472.934596][ T5962] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 473.934161][ T5985] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 474.003850][ T5985] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 476.787754][ T6019] loop1: detected capacity change from 0 to 512 [ 476.911413][ T6019] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1447: corrupted inode contents [ 477.046623][ T6019] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #16: comm syz.1.1447: mark_inode_dirty error [ 477.169465][ T6019] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1447: corrupted inode contents [ 477.189006][ T6019] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1447: mark_inode_dirty error [ 477.204041][ T6019] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1447: corrupted inode contents [ 477.473934][ T6019] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 477.624734][ T6019] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1447: corrupted inode contents [ 477.648478][ T6019] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.1447: mark_inode_dirty error [ 477.696914][ T6019] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 478.519105][ T6034] netlink: 'syz.2.1450': attribute type 4 has an invalid length. [ 478.529342][ T6019] EXT4-fs (loop1): 1 truncate cleaned up [ 478.535127][ T6019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 478.544445][ T8] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 478.544459][ T6019] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.873601][ T8] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 1 [ 483.055663][ T6083] netlink: 'syz.2.1461': attribute type 4 has an invalid length. [ 484.752815][ T6096] netlink: 'syz.3.1464': attribute type 4 has an invalid length. [ 486.726911][ T284] EXT4-fs (loop1): unmounting filesystem. [ 486.743700][ T597] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 486.758720][ T597] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:6: Failed to release dquot type 1 [ 489.709674][ T6137] netlink: 'syz.3.1473': attribute type 4 has an invalid length. [ 493.908687][ T6196] netlink: 'syz.0.1489': attribute type 4 has an invalid length. [ 518.775228][ T6445] netlink: 'syz.2.1553': attribute type 4 has an invalid length. [ 519.029814][ T6451] netlink: 'syz.4.1558': attribute type 4 has an invalid length. [ 523.871181][ T6492] netlink: 'syz.0.1563': attribute type 4 has an invalid length. [ 529.575250][ T6573] netlink: 'syz.3.1591': attribute type 4 has an invalid length. [ 558.260251][ T6901] netlink: 'syz.4.1671': attribute type 4 has an invalid length. [ 583.570174][ T28] audit: type=1400 audit(1748942205.961:200): avc: denied { create } for pid=7153 comm="syz.4.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.612474][ T28] audit: type=1400 audit(1748942205.961:201): avc: denied { setopt } for pid=7153 comm="syz.4.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 586.093826][ T28] audit: type=1400 audit(1748942208.481:202): avc: denied { bind } for pid=7172 comm="syz.3.1749" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.183464][ T28] audit: type=1400 audit(1748942208.481:203): avc: denied { node_bind } for pid=7172 comm="syz.3.1749" saddr=172.20.20.13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 586.286034][ T28] audit: type=1400 audit(1748942208.481:204): avc: denied { connect } for pid=7172 comm="syz.3.1749" laddr=172.20.20.13 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.373470][ T28] audit: type=1400 audit(1748942208.481:205): avc: denied { write } for pid=7172 comm="syz.3.1749" laddr=172.20.20.13 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.396715][ T28] audit: type=1400 audit(1748942208.511:206): avc: denied { create } for pid=7177 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 586.545522][ T28] audit: type=1400 audit(1748942208.941:207): avc: denied { block_suspend } for pid=7177 comm="syz.2.1751" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 586.567861][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1754'. [ 587.891058][ T28] audit: type=1400 audit(1748942210.281:208): avc: denied { ioctl } for pid=7200 comm="syz.0.1758" path="socket:[35745]" dev="sockfs" ino=35745 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 588.688685][ T7226] syz.2.1762[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.689008][ T7226] syz.2.1762[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.864262][ T28] audit: type=1400 audit(1748942212.261:209): avc: denied { setopt } for pid=7244 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 589.932397][ T28] audit: type=1400 audit(1748942212.301:210): avc: denied { bind } for pid=7244 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 593.692386][ T28] audit: type=1400 audit(1748942216.061:211): avc: denied { sqpoll } for pid=7267 comm="syz.2.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 594.352237][ T28] audit: type=1400 audit(1748942216.711:212): avc: denied { create } for pid=7308 comm="syz.4.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 595.665602][ T28] audit: type=1400 audit(1748942216.711:213): avc: denied { bind } for pid=7308 comm="syz.4.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 595.695278][ T28] audit: type=1400 audit(1748942216.711:214): avc: denied { listen } for pid=7308 comm="syz.4.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 595.771818][ T28] audit: type=1400 audit(1748942216.711:215): avc: denied { connect } for pid=7308 comm="syz.4.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 595.799175][ T28] audit: type=1326 audit(1748942216.711:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04378e969 code=0x7ffc0000 [ 595.829696][ T28] audit: type=1326 audit(1748942216.711:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04378e969 code=0x7ffc0000 [ 596.637403][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 596.646463][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 596.655366][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 596.732008][ T28] audit: type=1326 audit(1748942216.711:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb04378e969 code=0x7ffc0000 [ 596.794703][ T28] audit: type=1326 audit(1748942216.711:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04378e969 code=0x7ffc0000 [ 596.835052][ T28] audit: type=1326 audit(1748942216.711:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04378e969 code=0x7ffc0000 [ 597.069584][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.076748][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.076844][ T28] audit: type=1326 audit(1748942216.711:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb04378e969 code=0x7ffc0000 [ 597.112991][ T28] audit: type=1326 audit(1748942216.711:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04378e969 code=0x7ffc0000 [ 597.178440][ T7347] device veth1_macvtap left promiscuous mode [ 597.185735][ T7343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1796'. [ 597.199376][ T7347] device macsec0 entered promiscuous mode [ 598.274618][ T7360] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1805'. [ 603.565897][ T7425] netlink: 'syz.4.1822': attribute type 4 has an invalid length. [ 608.022320][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 608.022334][ T28] audit: type=1400 audit(1748942230.411:238): avc: denied { bind } for pid=7468 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 608.633479][ T7478] overlayfs: failed to clone upperpath [ 608.841381][ T28] audit: type=1400 audit(1748942231.001:239): avc: denied { mount } for pid=7473 comm="syz.2.1840" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 610.419617][ T7515] tipc: Can't bind to reserved service type 1 [ 612.374302][ T7541] overlayfs: failed to clone upperpath [ 619.580844][ T7628] cgroup: Invalid name [ 620.461137][ T28] audit: type=1400 audit(1748942242.831:240): avc: denied { setopt } for pid=7638 comm="syz.3.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 620.480934][ T28] audit: type=1400 audit(1748942242.831:241): avc: denied { write } for pid=7638 comm="syz.3.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 624.359470][ T7695] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1903'. [ 624.376357][ T28] audit: type=1400 audit(1748942246.771:242): avc: denied { accept } for pid=7694 comm="syz.4.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 625.846109][ T28] audit: type=1400 audit(1748942248.241:243): avc: denied { read } for pid=7719 comm="syz.3.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 625.880100][ T28] audit: type=1400 audit(1748942248.271:244): avc: denied { accept } for pid=7719 comm="syz.3.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 627.487491][ T28] audit: type=1400 audit(1748942249.881:245): avc: denied { read } for pid=7734 comm="syz.1.1915" path="socket:[37485]" dev="sockfs" ino=37485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 635.680251][ T28] audit: type=1400 audit(1748942258.071:246): avc: denied { name_bind } for pid=7808 comm="syz.4.1935" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 635.869705][ T7824] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1941'. [ 637.149564][ T28] audit: type=1400 audit(1748942259.541:247): avc: denied { write } for pid=7837 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 637.364202][ T7845] process 'syz.3.1947' launched '/dev/fd/9' with NULL argv: empty string added [ 637.383975][ T28] audit: type=1400 audit(1748942259.781:248): avc: denied { execute } for pid=7844 comm="syz.3.1947" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 637.645317][ T28] audit: type=1400 audit(1748942259.781:249): avc: denied { execute_no_trans } for pid=7844 comm="syz.3.1947" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 640.455149][ T28] audit: type=1400 audit(1748942262.851:250): avc: denied { write } for pid=7889 comm="syz.2.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 640.455221][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 641.309535][ T28] audit: type=1400 audit(1748942262.851:251): avc: denied { nlmsg_write } for pid=7889 comm="syz.2.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 642.460844][ T28] audit: type=1400 audit(1748942264.851:252): avc: denied { watch } for pid=7917 comm="syz.4.1970" path="/415" dev="tmpfs" ino=2164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 644.995095][ T7975] 9pnet_fd: Insufficient options for proto=fd [ 645.246296][ T28] audit: type=1400 audit(1748942267.641:253): avc: denied { ioctl } for pid=7980 comm="syz.3.1993" path="socket:[37913]" dev="sockfs" ino=37913 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.271798][ T7981] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 645.286607][ T28] audit: type=1400 audit(1748942267.661:254): avc: denied { write } for pid=7980 comm="syz.3.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 646.344738][ T8006] syz.2.2000[8006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.344817][ T8006] syz.2.2000[8006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.448531][ T8015] 9pnet_fd: Insufficient options for proto=fd [ 646.577588][ T28] audit: type=1400 audit(1748942268.971:255): avc: denied { create } for pid=8023 comm="syz.4.2008" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 646.961188][ T28] audit: type=1400 audit(1748942269.351:256): avc: denied { mounton } for pid=8023 comm="syz.4.2008" path="/419/file0" dev="tmpfs" ino=2191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 646.984807][ T28] audit: type=1400 audit(1748942269.351:257): avc: denied { bind } for pid=8023 comm="syz.4.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 647.004929][ T28] audit: type=1400 audit(1748942269.361:258): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=2191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 648.584631][ T8053] 9pnet_fd: Insufficient options for proto=fd [ 651.762825][ T8094] 9pnet_fd: Insufficient options for proto=fd [ 654.020891][ T8127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8127 comm=syz.0.2039 [ 657.252080][ T28] audit: type=1400 audit(1748942279.641:259): avc: denied { write } for pid=8165 comm="syz.4.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 657.401947][ T8179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8179 comm=syz.3.2052 [ 659.902849][ T8220] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2060'. [ 669.138459][ T8314] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2087'. [ 671.388124][ T8358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8358 comm=syz.3.2100 [ 674.685801][ T8413] syz.4.2119 (8413) used greatest stack depth: 20688 bytes left [ 685.258826][ T8599] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2174'. [ 685.438551][ T8605] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2176'. [ 688.283534][ T8649] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2189'. [ 698.773044][ T8781] syz.0.2230[8781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.773121][ T8781] syz.0.2230[8781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.787439][ T8781] syz.0.2230[8781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.838100][ T8781] syz.0.2230[8781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 702.956192][ T28] audit: type=1400 audit(1748942325.351:260): avc: denied { setopt } for pid=8817 comm="syz.4.2239" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 703.023527][ T28] audit: type=1400 audit(1748942325.391:261): avc: denied { wake_alarm } for pid=8817 comm="syz.4.2239" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 703.047240][ T28] audit: type=1400 audit(1748942325.391:262): avc: denied { read } for pid=8817 comm="syz.4.2239" path="socket:[39982]" dev="sockfs" ino=39982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 703.073365][ T28] audit: type=1400 audit(1748942325.441:263): avc: denied { name_bind } for pid=8817 comm="syz.4.2239" src=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 703.715465][ T28] audit: type=1400 audit(1748942325.931:264): avc: denied { read } for pid=8832 comm="syz.2.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 705.932640][ T8866] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8866 comm=syz.4.2253 [ 708.694391][ T8902] syz.1.2265 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 708.722172][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2265'. [ 709.727374][ T28] audit: type=1400 audit(1748942332.121:265): avc: denied { write } for pid=8920 comm="syz.1.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 709.754184][ T8921] syz.1.2269[8921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 709.754274][ T8921] syz.1.2269[8921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 709.785100][ T8921] syz.1.2269[8921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 709.814960][ T8921] syz.1.2269[8921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 720.820339][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 720.846971][ T28] audit: type=1400 audit(1748942343.211:266): avc: denied { bind } for pid=9067 comm="syz.3.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 720.972174][ T28] audit: type=1400 audit(1748942343.211:267): avc: denied { setopt } for pid=9067 comm="syz.3.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 721.082978][ T9076] netlink: 'syz.0.2307': attribute type 6 has an invalid length. [ 724.339438][ T9139] netlink: 'syz.1.2330': attribute type 27 has an invalid length. [ 724.426837][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.434026][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.975918][ T9187] fuse: Bad value for 'user_id' [ 726.028853][ T9187] overlayfs: failed to clone upperpath [ 728.979873][ T9218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2355'. [ 830.843422][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 830.850389][ C1] (detected by 1, t=10002 jiffies, g=44633, q=3 ncpus=2) [ 830.857499][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295020299-4295010297), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 830.870849][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g44633 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 830.882031][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 830.891983][ C1] rcu: RCU grace-period kthread stack dump: [ 830.897859][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 830.908641][ C1] Call Trace: [ 830.911909][ C1] [ 830.914829][ C1] __schedule+0xb87/0x14e0 [ 830.919259][ C1] ? release_firmware_map_entry+0x194/0x194 [ 830.925142][ C1] ? __mod_timer+0x7ae/0xb30 [ 830.929728][ C1] schedule+0xbd/0x170 [ 830.933785][ C1] schedule_timeout+0x12c/0x2e0 [ 830.938624][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 830.944073][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 830.949522][ C1] ? __cfi_process_timeout+0x10/0x10 [ 830.954797][ C1] ? prepare_to_swait_event+0x308/0x320 [ 830.960333][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 830.965178][ C1] ? rcu_gp_init+0xf10/0xf10 [ 830.969762][ C1] rcu_gp_kthread+0x95/0x370 [ 830.974345][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 830.979533][ C1] ? set_cpus_allowed_ptr+0x82/0xc0 [ 830.984722][ C1] ? __kasan_check_read+0x11/0x20 [ 830.989737][ C1] ? __kthread_parkme+0x142/0x180 [ 830.994755][ C1] kthread+0x281/0x320 [ 830.998813][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 831.004093][ C1] ? __cfi_kthread+0x10/0x10 [ 831.008682][ C1] ret_from_fork+0x1f/0x30 [ 831.013111][ C1] [ 831.016120][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 831.022427][ C1] Sending NMI from CPU 1 to CPUs 0: [ 831.027636][ C0] NMI backtrace for cpu 0 [ 831.027645][ C0] CPU: 0 PID: 9237 Comm: syz.2.2364 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0 [ 831.027660][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.027674][ C0] RIP: 0010:update_stack_state+0x99/0x480 [ 831.027694][ C0] Code: 00 00 00 eb 21 4c 8d 73 38 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 c2 44 7f 00 49 8b 06 48 83 c0 10 48 89 45 a0 <44> 89 f8 83 e0 01 48 f7 d8 4c 89 fa 48 83 e2 fe 48 21 d0 48 89 45 [ 831.027706][ C0] RSP: 0018:ffffc90000007698 EFLAGS: 00000082 [ 831.027719][ C0] RAX: ffffc90000007b70 RBX: ffffc900000077e8 RCX: 0000000000007800 [ 831.027730][ C0] RDX: dffffc0000000000 RSI: ffffc90000007b70 RDI: ffffc90000007840 [ 831.027740][ C0] RBP: ffffc90000007758 R08: ffffc900000078b0 R09: ffffc900000078a8 [ 831.027751][ C0] R10: 0000000000000001 R11: 1ffff92000000efd R12: 0000000000000000 [ 831.027760][ C0] R13: dffffc0000000000 R14: ffffc90000007820 R15: ffffc90000007b70 [ 831.027771][ C0] FS: 00007f0a8341e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 831.027784][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.027794][ C0] CR2: 000000110c2a02db CR3: 00000001398db000 CR4: 00000000003506b0 [ 831.027807][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 831.027815][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 831.027824][ C0] Call Trace: [ 831.027828][ C0] [ 831.027837][ C0] unwind_next_frame+0x3d5/0x700 [ 831.027853][ C0] ? __kernel_text_address+0xd/0x30 [ 831.027870][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 831.027886][ C0] arch_stack_walk+0x124/0x150 [ 831.027907][ C0] ? kasan_save_alloc_info+0x25/0x30 [ 831.027924][ C0] stack_trace_save+0x98/0xe0 [ 831.027939][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 831.027954][ C0] ? __stack_depot_save+0x36/0x480 [ 831.027979][ C0] ? memset+0x35/0x40 [ 831.027996][ C0] kasan_set_track+0x4b/0x70 [ 831.028008][ C0] ? kasan_set_track+0x4b/0x70 [ 831.028020][ C0] ? kasan_save_alloc_info+0x25/0x30 [ 831.028045][ C0] ? __sigqueue_alloc+0x13f/0x210 [ 831.028063][ C0] kasan_save_alloc_info+0x25/0x30 [ 831.028079][ C0] __kasan_slab_alloc+0x72/0x80 [ 831.028094][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 831.028109][ C0] ? __sigqueue_alloc+0x13f/0x210 [ 831.028126][ C0] ? __sigqueue_alloc+0x13f/0x210 [ 831.028143][ C0] kmem_cache_alloc+0x16e/0x330 [ 831.028157][ C0] ? __sigqueue_alloc+0x13f/0x210 [ 831.028174][ C0] __sigqueue_alloc+0x13f/0x210 [ 831.028191][ C0] __send_signal_locked+0x19d/0xb70 [ 831.028206][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 831.028226][ C0] send_signal_locked+0x422/0x580 [ 831.028242][ C0] do_send_sig_info+0xd6/0x210 [ 831.028258][ C0] group_send_sig_info+0x118/0x2b0 [ 831.028275][ C0] ? __cfi_group_send_sig_info+0x10/0x10 [ 831.028293][ C0] do_bpf_send_signal+0x82/0x150 [ 831.028312][ C0] irq_work_run_list+0x18b/0x2b0 [ 831.028327][ C0] ? irq_work_run+0xf0/0xf0 [ 831.028343][ C0] irq_work_run+0x6a/0xf0 [ 831.028357][ C0] __sysvec_irq_work+0x75/0x1c0 [ 831.028375][ C0] sysvec_irq_work+0xa1/0xc0 [ 831.028388][ C0] [ 831.028392][ C0] [ 831.028397][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 831.028410][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 831.028428][ C0] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 0a 7e 56 01 5d c3 0f 1f 84 00 00 00 00 [ 831.028440][ C0] RSP: 0018:ffffc900114b7c20 EFLAGS: 00000246 [ 831.028451][ C0] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 831.028460][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 831.028469][ C0] RBP: ffffc900114b7c20 R08: dffffc0000000000 R09: fffff52002296f81 [ 831.028479][ C0] R10: 0000000000000000 R11: ffffffff81341840 R12: 0000000000000000 [ 831.028488][ C0] R13: dffffc0000000001 R14: ffffffff86488b50 R15: dffffc0000000000 [ 831.028500][ C0] ? __cfi_native_apic_msr_write+0x10/0x10 [ 831.028520][ C0] x2apic_send_IPI_self+0x6f/0x80 [ 831.028537][ C0] arch_irq_work_raise+0x98/0xf0 [ 831.028554][ C0] __irq_work_queue_local+0x115/0x190 [ 831.028570][ C0] irq_work_queue+0x9e/0x150 [ 831.028584][ C0] bpf_send_signal_common+0x2b2/0x420 [ 831.028603][ C0] ? __set_printk_clr_event+0x80/0x80 [ 831.028622][ C0] bpf_send_signal+0x19/0x20 [ 831.028636][ C0] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 831.028655][ C0] bpf_trace_run2+0xff/0x250 [ 831.028671][ C0] ? __cfi_bpf_trace_run2+0x10/0x10 [ 831.028689][ C0] __bpf_trace_sys_enter+0x62/0x70 [ 831.028703][ C0] trace_sys_enter+0x3d/0x50 [ 831.028715][ C0] syscall_trace_enter+0xf3/0x150 [ 831.028729][ C0] syscall_enter_from_user_mode+0x1f/0x30 [ 831.028744][ C0] do_syscall_64+0x24/0xa0 [ 831.028761][ C0] ? clear_bhb_loop+0x15/0x70 [ 831.028773][ C0] ? clear_bhb_loop+0x15/0x70 [ 831.028786][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.028805][ C0] RIP: 0033:0x7f0a8252ab39 [ 831.028815][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 831.028826][ C0] RSP: 002b:00007f0a8341db40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 831.028840][ C0] RAX: ffffffffffffffda RBX: 00007f0a827b5fa8 RCX: 00007f0a8252ab39 [ 831.028850][ C0] RDX: 00007f0a8341db40 RSI: 00007f0a8341dc70 RDI: 0000000000000011 [ 831.028860][ C0] RBP: 00007f0a827b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 831.028869][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a827b5fac [ 831.028878][ C0] R13: 0000000000000000 R14: 00007ffc6379b540 R15: 00007ffc6379b628 [ 831.028890][ C0] [ 1002.263425][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 271s! [ 1002.272350][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 271s! [ 1002.281225][ C0] Showing busy workqueues and worker pools: [ 1002.287116][ C0] workqueue events: flags=0x0 [ 1002.291796][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.291851][ C0] pending: psi_avgs_work [ 1002.291884][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.291927][ C0] pending: vmstat_shepherd [ 1002.291954][ C0] workqueue events_long: flags=0x0 [ 1002.321749][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=68/256 refcnt=69 [ 1002.321789][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 1002.322543][ C0] , br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 1002.322646][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=46/256 refcnt=47 [ 1002.322680][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 1002.323240][ C0] workqueue events_unbound: flags=0x2 [ 1002.511658][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 1002.511695][ C0] in-flight: 8:bpf_map_free_deferred [ 1002.511730][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 1002.511767][ C0] workqueue events_power_efficient: flags=0x80 [ 1002.538227][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 1002.538280][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, check_lifetime [ 1002.538382][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.538423][ C0] pending: gc_worker [ 1002.538445][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1002.577196][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.577246][ C0] pending: vmstat_update [ 1002.577279][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.577316][ C0] pending: vmstat_update [ 1002.577342][ C0] workqueue writeback: flags=0x4a [ 1002.606721][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1002.606758][ C0] pending: wb_workfn [ 1002.606780][ C0] workqueue kblockd: flags=0x18 [ 1002.622998][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 1002.623036][ C0] pending: blk_mq_timeout_work [ 1002.623140][ C0] workqueue dm_bufio_cache: flags=0x8 [ 1002.641378][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.641429][ C0] pending: work_fn [ 1002.641462][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 1002.658748][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 1002.658794][ C0] pending: addrconf_verify_work [ 1002.658826][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 1002.658886][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 1002.658926][ C0] pending: addrconf_verify_work [ 1002.658952][ C0] inactive: addrconf_verify_work [ 1002.658981][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1002.703597][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1002.703634][ C0] pending: wg_packet_handshake_send_worker [ 1002.703667][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1002.722229][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.722277][ C0] pending: wg_packet_encrypt_worker [ 1002.722314][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.722352][ C0] pending: wg_packet_encrypt_worker [ 1002.722388][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1002.753935][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.753983][ C0] pending: wg_packet_encrypt_worker [ 1002.754020][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.754068][ C0] pending: wg_packet_encrypt_worker [ 1002.754100][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1002.785632][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.785684][ C0] pending: wg_packet_encrypt_worker [ 1002.785720][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.785759][ C0] pending: wg_packet_encrypt_worker [ 1002.785794][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1002.817411][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.817459][ C0] pending: wg_packet_encrypt_worker [ 1002.817497][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.817535][ C0] pending: wg_packet_encrypt_worker [ 1002.817567][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1002.849131][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.849177][ C0] pending: wg_packet_encrypt_worker [ 1002.849215][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.849248][ C0] pending: wg_packet_encrypt_worker [ 1002.849279][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1002.880832][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.880882][ C0] pending: wg_packet_encrypt_worker [ 1002.880919][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.880958][ C0] pending: wg_packet_encrypt_worker [ 1002.880990][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1002.912621][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.912668][ C0] pending: wg_packet_encrypt_worker [ 1002.912706][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.912744][ C0] pending: wg_packet_encrypt_worker [ 1002.912777][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1002.944322][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.944372][ C0] pending: wg_packet_encrypt_worker [ 1002.944409][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.944448][ C0] pending: wg_packet_encrypt_worker [ 1002.944480][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1002.976014][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.976069][ C0] pending: wg_packet_encrypt_worker [ 1002.976105][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.976145][ C0] pending: wg_packet_encrypt_worker [ 1002.976176][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1003.007716][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.007766][ C0] pending: wg_packet_encrypt_worker [ 1003.007803][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.007841][ C0] pending: wg_packet_encrypt_worker [ 1003.007874][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1003.039415][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.039464][ C0] pending: wg_packet_encrypt_worker [ 1003.039502][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.039540][ C0] pending: wg_packet_encrypt_worker [ 1003.039571][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1003.071123][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.071175][ C0] pending: wg_packet_encrypt_worker [ 1003.071210][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.071249][ C0] pending: wg_packet_encrypt_worker [ 1003.071283][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=271s workers=5 idle: 43 1371 6564 597