last executing test programs: 6m17.222825591s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) sendto(r4, 0x0, 0x0, 0x5, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 6m11.927989664s ago: executing program 2 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) 5m57.616226742s ago: executing program 32 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) 4m31.726736261s ago: executing program 0 (id=187): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) accept4$unix(r2, 0x0, &(0x7f0000000280), 0x40800) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r9, &(0x7f0000003840)=[{&(0x7f00000037c0)="c0", 0x1}], 0x1, 0x5409, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 4m30.122444143s ago: executing program 0 (id=188): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @adiantum, 0x4, @desc1}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x1) 4m28.846127923s ago: executing program 0 (id=192): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000640)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(r3) 4m26.059830895s ago: executing program 0 (id=195): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents64(r2, &(0x7f0000000080)=""/58, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x5d, 0x1000000, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) epoll_create1(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m24.459879728s ago: executing program 0 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x400) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m23.940905452s ago: executing program 0 (id=199): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) accept4$unix(r2, 0x0, &(0x7f0000000280), 0x40800) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r11, &(0x7f0000003840)=[{&(0x7f00000037c0)="c0", 0x1}], 0x1, 0x5409, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 4m8.764794031s ago: executing program 33 (id=199): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) accept4$unix(r2, 0x0, &(0x7f0000000280), 0x40800) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r11, &(0x7f0000003840)=[{&(0x7f00000037c0)="c0", 0x1}], 0x1, 0x5409, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 4m0.273061207s ago: executing program 3 (id=250): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xd, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x9cb3ce4731392a25) lremovexattr(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)=@random={'trusted.', 'rpfilter\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r5, 0x9, 0x0, 0x3) 3m58.791920639s ago: executing program 3 (id=253): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @adiantum, 0x4, @desc1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fchmod(r8, 0x1) 3m55.514852704s ago: executing program 3 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 3m53.821608597s ago: executing program 3 (id=260): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000004c0)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@data_err_abort}, {@nogrpid}, {@init_itable}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 3m51.995176642s ago: executing program 3 (id=262): socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 3m50.325879265s ago: executing program 3 (id=268): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$setperm(0x5, 0x0, 0x3220120) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 3m35.222967163s ago: executing program 34 (id=268): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$setperm(0x5, 0x0, 0x3220120) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 3m6.959337655s ago: executing program 6 (id=342): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimes(&(0x7f0000000000)='./cgroup\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f00000006c0)={0x1, &(0x7f0000000680)=[{0x2, 0xd9, &(0x7f0000000540)="e84c15416b8a9406e4ffb2a74726224bfb2b7497cdf42d0b2fed8f062acc2cdb9e28c1cd22246a6a2bfbf3d3956067f46d65a3c5ca7b471178c6f23d462b3c4256acc0d50c7206332424885f3a4847cd53e4a243504f4abcfca2ebd0777208c6d506e601c48ffd3ce08b6d8c30090cf92f9abb57b663730fe6d414500db3939b5be173a29f04cacac60bdd30d36e7330a5d698569a5d1c334e094b2a6647d5841f29bcda8115c91add72a49962368d33fd4e05c7ff041c5d013b46d4634b1f034e7737247f9a3c3f81e9743bdf28d8595a286861d2e17a838a", 0x0, 0x1}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) r8 = timerfd_create(0x5, 0x180000) fchdir(r8) timerfd_settime(r8, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 3m5.484966946s ago: executing program 6 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0f, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) mount(0x0, 0x0, &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x48, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xab}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '.I'}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, 0x0, 0x4000000) 3m0.997591952s ago: executing program 6 (id=355): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xd, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x9cb3ce4731392a25) lremovexattr(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)=@random={'trusted.', 'rpfilter\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r7, 0x9, 0x0, 0x3) 2m59.641828812s ago: executing program 6 (id=357): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000300)='bond0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000380)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000080)={[{@grpid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noblock_validity}]}, 0x0, 0x526, &(0x7f0000000c00)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 2m56.09743158s ago: executing program 6 (id=362): chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @adiantum, 0x4, @desc1}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fchmod(r7, 0x1) 2m55.067162848s ago: executing program 6 (id=364): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) 2m41.790367952s ago: executing program 5 (id=388): openat$vcsu(0xffffffffffffff9c, 0x0, 0x80000, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 2m40.696906581s ago: executing program 5 (id=391): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0xfffffff7, 0x0, 0x0, 0x40f00, 0xc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 2m39.248733532s ago: executing program 35 (id=364): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) 2m38.524619127s ago: executing program 5 (id=398): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xd, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x9cb3ce4731392a25) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c2204a11928c85b2f54aaf638aa197"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r7, 0x9, 0x0, 0x3) 2m37.209513688s ago: executing program 5 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240)=r0, 0x12) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r6, 0x2007ffb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0xf6276ff64f0f99de, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) 2m35.326938012s ago: executing program 5 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000010000"], 0x48) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 2m34.255821011s ago: executing program 5 (id=407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000840)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b0000"], 0x48) sync() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f00000062c0)='./file0/file0\x00', &(0x7f0000006280)='./file1\x00') 2m18.442332715s ago: executing program 36 (id=407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000840)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b0000"], 0x48) sync() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f00000062c0)='./file0/file0\x00', &(0x7f0000006280)='./file1\x00') 29.880780945s ago: executing program 4 (id=628): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xd, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x9cb3ce4731392a25) lremovexattr(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)=@random={'trusted.', 'rpfilter\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c2204a11928c85b2f54aaf638aa197"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r7, 0x9, 0x0, 0x3) 26.282918523s ago: executing program 4 (id=634): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 21.791318889s ago: executing program 4 (id=638): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x6, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$radio(0x0, 0x3, 0x2) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000100)={0x3ff, 0x2, 0x10000, 0x10, 0x5, 0x8001, 0x2}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4000040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007ada2008340312e72"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b09000000000000010902"], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000040)={0x0, "c1e3c6e9d4e0668be33dfa93c2a82cbbd334b5351b615cf0fac06b6babfa8bf6", 0x1, 0xffffc7d7, 0x4000004, 0x2, 0x3}) 20.197611991s ago: executing program 8 (id=640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003000)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) symlinkat(0x0, 0xffffffffffffff9c, 0x0) geteuid() mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000280)='./bus/file0\x00', &(0x7f00000003c0), 0x808008, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, 0x0, 0x5005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) 20.153044101s ago: executing program 7 (id=643): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="6465636f646573206e6f6e650016ebd79f667a37426fe5de48d72003dd693ca31d610e5148d90cf3233a8fb1ba483209b043807e441711901ac57596aaf0270db3d2ab0cbc36ce76e32473be2637cbb7906d89e4209ab847218b"], 0xd) 18.270570047s ago: executing program 8 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r4, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 17.462813623s ago: executing program 4 (id=645): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket(0x840000000000, 0x3, 0xfc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x3000000, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x80, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2001}}, [@tmpl={0x144, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3}, {{@in=@multicast2, 0x4d3, 0x2b}, 0x2, @in=@dev, 0xffffffff, 0x1, 0x0, 0x0, 0x3, 0x2}, {{@in=@private=0xa010102, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x4, 0x2, 0x0, 0x0, 0x8eb6}]}]}, 0x1fc}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0xf00, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 16.869430097s ago: executing program 7 (id=646): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'syztnl2\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), r0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r6, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 16.069333244s ago: executing program 8 (id=648): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 15.2258722s ago: executing program 4 (id=650): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4000040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007ada2008340312e72"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b09000000000000010902"], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 15.031523472s ago: executing program 8 (id=651): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)={[&(0x7f00000000c0)='{.\x00', &(0x7f0000000100)='syzkaller\x00', &(0x7f0000000280)='\x00']}, 0x0) 14.311819677s ago: executing program 8 (id=653): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x20, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) pipe2(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x40004) unshare(0x64000680) 13.072565747s ago: executing program 7 (id=656): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/warn_count', 0x141603, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 11.761067377s ago: executing program 4 (id=659): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f00000003c0)=ANY=[], 0x1, 0x1523, &(0x7f00000029c0)="$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") prlimit64(0x0, 0xa, 0x0, 0x0) getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 11.069511652s ago: executing program 9 (id=660): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000f84ec6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xffffffff, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x10000, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002780)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r0) read$FUSE(r3, 0x0, 0x0) 6.712000347s ago: executing program 1 (id=663): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)={[&(0x7f00000000c0)='{.\x00', &(0x7f0000000100)='syzkaller\x00', &(0x7f0000000280)='\x00']}, 0x0) 6.207789031s ago: executing program 9 (id=664): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) open(0x0, 0x14000, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 6.145853221s ago: executing program 7 (id=665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x310e011, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) keyctl$setperm(0x5, r6, 0x52b242d) bind$inet6(r0, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) 5.860781253s ago: executing program 1 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x8000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x90, 0x0, 0x54, {0x0, 0x2, 0x7, 0x3, 0x8, 0x7e0, {0x0, 0x3d727124, 0x7ff, 0x0, 0x653, 0xd9c, 0x0, 0x1d3, 0x3, 0x6000, 0x8, r4, r5, 0x5, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x1, {0x8, 0x4, 0x1, 0xc, 0x8, 0x6, {0x0, 0x3, 0x6, 0x9, 0x2, 0x9, 0x8, 0xab, 0x54f, 0xa000, 0x2, r4, r5, 0x2, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) symlinkat(&(0x7f0000000000)='./file1\x00', r6, &(0x7f0000000080)='./file0/file1\x00') 4.863712441s ago: executing program 7 (id=667): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'syztnl2\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), r0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r6, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 4.616991023s ago: executing program 9 (id=668): syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f00000002c0)) write$FUSE_BMAP(r0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x58}}, 0x0) 4.615769624s ago: executing program 1 (id=669): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003000)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) symlinkat(0x0, 0xffffffffffffff9c, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) geteuid() ptrace$ARCH_SHSTK_STATUS(0x1e, r0, 0x0, 0x5005) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) 2.971552296s ago: executing program 7 (id=670): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @adiantum, 0x4, @desc1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fchmod(r7, 0x1) 2.895331217s ago: executing program 9 (id=671): setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0x5, &(0x7f0000000140)={0x3, 0x4, 0xfffffff7}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r7, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x4, 0x6, @remote}, 0x14) sendmmsg$sock(r7, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004834) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0xbc, 0x1f, 0x101, 0x70bd2d, 0x25dfdbfe, {0x1}, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/ttyS3\x00'}, @nested={0x97, 0x8d, 0x0, 0x1, [@generic="9c8c79fd8d09c25451af15c35742c70c0a1ef2", @generic, @generic="67e4a4c67891d13c1ce607697240c305ed029c1e4bd618295eda668a7d544f0d2df84110eebc4989534993b2d3d43b66b348f0a58e0928284848245790fa74d10b5e9824205a23f87e606bf365f78111dcd59fcfa6716de54c80e29d354290cb1d671e14a9674e39e99e1afa108493a85768e1623177abeef200706d8d5a4aaa"]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x5498a8b52a905021) 2.892411107s ago: executing program 1 (id=672): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 1.645948176s ago: executing program 1 (id=673): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) poll(0x0, 0x0, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 1.508323368s ago: executing program 9 (id=674): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @adiantum, 0x4, @desc1}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x1) 520.592735ms ago: executing program 1 (id=675): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/warn_count', 0x141603, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 189.337888ms ago: executing program 9 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000f84ec6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xffffffff, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x10000, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002780)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 0s ago: executing program 8 (id=677): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) kernel console output (not intermixed with test programs): 2 [ 221.920475][ T4368] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 0 [ 221.938168][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.992114][ T4550] EXT4-fs (loop5): unmounting filesystem. [ 221.999363][ T5597] device veth0_macvtap entered promiscuous mode [ 222.006733][ T5779] EXT4-fs (loop3): 1 orphan inode deleted [ 222.025732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.130581][ T5779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.161585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.213854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.268188][ T5597] device veth1_macvtap entered promiscuous mode [ 222.392274][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.469941][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.566670][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.628021][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.706349][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.194242][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.309646][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.364020][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.408224][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.419180][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.445782][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.472906][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.583865][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.653673][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.734339][ T5842] loop5: detected capacity change from 0 to 512 [ 223.748229][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.790421][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.825011][ T5842] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.279: inode has both inline data and extents flags [ 223.833733][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.898519][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.909327][ T5842] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.279: couldn't read orphan inode 15 (err -117) [ 223.931412][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.971407][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.989837][ T5842] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 224.002633][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.073754][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.248485][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.315063][ T5848] overlayfs: failed to resolve './file0/file1': -2 [ 224.318297][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.421459][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.456270][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.486789][ T5597] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.509717][ T5597] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.540347][ T5597] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.570543][ T5597] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.612894][ T4550] EXT4-fs (loop5): unmounting filesystem. [ 224.790630][ T5854] loop1: detected capacity change from 0 to 512 [ 224.843880][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.846260][ T5854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 224.880454][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.890941][ T5854] System zones: 1-12 [ 224.896750][ T5854] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.283: corrupted in-inode xattr [ 224.910219][ T5854] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.283: couldn't read orphan inode 15 (err -117) [ 224.926867][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.927455][ T5854] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.018640][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.178419][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.210760][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.006102][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 230.813635][ T5877] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 232.163308][ T5886] overlayfs: failed to resolve './file1': -2 [ 232.372345][ T5898] loop6: detected capacity change from 0 to 512 [ 232.460450][ T5898] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.291: inode has both inline data and extents flags [ 232.576247][ T5898] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.291: couldn't read orphan inode 15 (err -117) [ 232.615842][ T5898] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 232.864451][ T5905] overlayfs: failed to resolve './file1': -2 [ 233.049720][ T5907] loop4: detected capacity change from 0 to 512 [ 233.141057][ T4277] Bluetooth: hci6: command 0x1003 tx timeout [ 233.147363][ T4284] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 233.581020][ T5907] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.293: couldn't read orphan inode 26 (err -116) [ 233.600168][ T5907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 233.612412][ T5907] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.643203][ T5907] Quota error (device loop4): do_check_range: Getting block 59136 out of range 0-1 [ 233.901275][ T5913] loop1: detected capacity change from 0 to 512 [ 233.931312][ T5597] EXT4-fs (loop6): unmounting filesystem. [ 234.030067][ T5913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 234.125583][ T5913] System zones: 1-12 [ 234.171298][ T5913] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.295: corrupted in-inode xattr [ 234.629250][ T5913] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.295: couldn't read orphan inode 15 (err -117) [ 235.333416][ T5913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 235.405635][ T5919] overlayfs: failed to resolve './file1': -2 [ 235.461878][ T5928] loop6: detected capacity change from 0 to 512 [ 235.522659][ T5928] EXT4-fs (loop6): Test dummy encryption mode enabled [ 235.529458][ T5928] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 235.540305][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 235.625025][ T5928] EXT4-fs (loop6): 1 truncate cleaned up [ 235.630820][ T5928] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 236.193857][ T5936] loop4: detected capacity change from 0 to 16 [ 236.207704][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 236.246612][ T5936] erofs: (device loop4): mounted with root inode @ nid 36. [ 236.344018][ T4277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.353918][ T4277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.480778][ T4277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.490150][ T4277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.499440][ T4277] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 236.516739][ T4277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.674985][ T5936] xt_hashlimit: max too large, truncated to 1048576 [ 236.682243][ T5936] syz.4.299: attempt to access beyond end of device [ 236.682243][ T5936] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 236.683418][ T5597] EXT4-fs (loop6): unmounting filesystem. [ 236.705456][ T5936] syz.4.299: attempt to access beyond end of device [ 236.705456][ T5936] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 236.725245][ T5936] syz.4.299: attempt to access beyond end of device [ 236.725245][ T5936] loop4: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 236.742894][ T5936] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 236.753218][ T5936] syz.4.299: attempt to access beyond end of device [ 236.753218][ T5936] loop4: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 236.905113][ T5946] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 237.519298][ T5952] loop1: detected capacity change from 0 to 512 [ 237.741842][ T5952] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.305: inode has both inline data and extents flags [ 237.857722][ T5964] overlayfs: failed to resolve './file1': -2 [ 238.057079][ T5952] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.305: couldn't read orphan inode 15 (err -117) [ 238.321146][ T5952] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.581757][ T48] Bluetooth: hci6: command 0x0409 tx timeout [ 238.710933][ T5972] overlayfs: failed to resolve './file1': -2 [ 238.788643][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 239.226002][ T5976] loop5: detected capacity change from 0 to 512 [ 239.404799][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 239.592409][ T5976] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.308: couldn't read orphan inode 26 (err -116) [ 239.605948][ T5976] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 239.615467][ T5976] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.650743][ T5976] Quota error (device loop5): do_check_range: Getting block 59136 out of range 0-1 [ 240.041610][ T5985] loop4: detected capacity change from 0 to 16 [ 240.130849][ T5985] erofs: (device loop4): mounted with root inode @ nid 36. [ 240.397682][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.425582][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.517048][ T5987] xt_hashlimit: max too large, truncated to 1048576 [ 240.527387][ T5987] syz.4.310: attempt to access beyond end of device [ 240.527387][ T5987] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 240.589495][ T5987] syz.4.310: attempt to access beyond end of device [ 240.589495][ T5987] loop4: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 240.607314][ T5987] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 240.617628][ T5987] syz.4.310: attempt to access beyond end of device [ 240.617628][ T5987] loop4: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 241.067729][ T48] Bluetooth: hci6: command 0x041b tx timeout [ 241.084352][ T5778] EXT4-fs (loop3): unmounting filesystem. [ 241.095062][ T5937] device bridge_slave_0 entered promiscuous mode [ 241.347455][ T5989] loop1: detected capacity change from 0 to 512 [ 241.394693][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.445373][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.454024][ T5937] device bridge_slave_1 entered promiscuous mode [ 241.511096][ T5989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 241.529334][ T5989] System zones: 1-12 [ 241.541112][ T5989] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.309: corrupted in-inode xattr [ 241.629865][ T5989] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.309: couldn't read orphan inode 15 (err -117) [ 241.994692][ T5997] overlayfs: failed to resolve './file1': -2 [ 242.113087][ T5998] loop4: detected capacity change from 0 to 512 [ 242.145136][ T5998] EXT4-fs (loop4): Test dummy encryption mode enabled [ 242.151988][ T5998] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.158583][ T5989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 242.172306][ T4550] EXT4-fs (loop5): unmounting filesystem. [ 242.183990][ T5998] EXT4-fs (loop4): 1 truncate cleaned up [ 242.189670][ T5998] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 242.498412][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.360732][ T6007] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 243.538356][ T48] Bluetooth: hci6: command 0x040f tx timeout [ 243.564839][ T6009] hub 2-0:1.0: USB hub found [ 243.570676][ T6009] hub 2-0:1.0: 1 port detected [ 243.608434][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 243.609305][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 243.615402][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.589747][ T6017] overlayfs: failed to resolve './file1': -2 [ 245.460326][ T5937] team0: Port device team_slave_0 added [ 245.621269][ T4277] Bluetooth: hci6: command 0x0419 tx timeout [ 245.815543][ T6023] loop6: detected capacity change from 0 to 512 [ 245.901113][ T4910] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.070322][ T6023] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.319: inode has both inline data and extents flags [ 246.121946][ T6023] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.319: couldn't read orphan inode 15 (err -117) [ 246.124706][ T5937] team0: Port device team_slave_1 added [ 246.250502][ T6023] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 246.366639][ T4910] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.735814][ T6031] overlayfs: failed to resolve './file1': -2 [ 246.899534][ T6028] loop5: detected capacity change from 0 to 256 [ 247.007935][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.100430][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.104940][ T5597] EXT4-fs (loop6): unmounting filesystem. [ 247.164265][ T6034] loop4: detected capacity change from 0 to 16 [ 247.193647][ T6034] erofs: (device loop4): mounted with root inode @ nid 36. [ 247.202660][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.449024][ T4910] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.881327][ T6039] xt_hashlimit: max too large, truncated to 1048576 [ 247.890852][ T6039] syz.4.322: attempt to access beyond end of device [ 247.890852][ T6039] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 247.978182][ T6039] syz.4.322: attempt to access beyond end of device [ 247.978182][ T6039] loop4: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 248.009620][ T6039] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 248.019988][ T6039] syz.4.322: attempt to access beyond end of device [ 248.019988][ T6039] loop4: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 248.268670][ T6036] loop6: detected capacity change from 0 to 512 [ 248.284153][ T6036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.317111][ T6036] EXT4-fs (loop6): orphan cleanup on readonly fs [ 248.326969][ T6036] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 248.336699][ T6036] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 248.346325][ T6036] EXT4-fs error (device loop6): ext4_acquire_dquot:6809: comm syz.6.321: Failed to acquire dquot type 1 [ 248.364354][ T6036] EXT4-fs (loop6): 1 truncate cleaned up [ 248.377101][ T6036] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 248.417621][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.452927][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.787351][ T6046] loop4: detected capacity change from 0 to 1024 [ 248.822599][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.631384][ T6050] loop1: detected capacity change from 0 to 512 [ 249.690479][ T6046] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 249.756892][ T6050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 249.815764][ T5597] EXT4-fs (loop6): unmounting filesystem. [ 249.835902][ T6050] System zones: 1-12 [ 249.880616][ T6050] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.325: corrupted in-inode xattr [ 249.902320][ T4910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.279241][ T6050] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.325: couldn't read orphan inode 15 (err -117) [ 250.312591][ T6050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 250.404055][ T6057] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 251.040295][ T5937] device hsr_slave_0 entered promiscuous mode [ 251.385427][ T6067] hub 2-0:1.0: USB hub found [ 251.391048][ T6067] hub 2-0:1.0: 1 port detected [ 252.821148][ T6069] overlayfs: failed to resolve './file1': -2 [ 253.070809][ T5937] device hsr_slave_1 entered promiscuous mode [ 253.846867][ T6079] loop4: detected capacity change from 0 to 1024 [ 253.940674][ T4991] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 254.046091][ T6079] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.329: Invalid block bitmap block 0 in block_group 0 [ 254.061980][ T6079] Quota error (device loop4): write_blk: dquota write failed [ 254.069443][ T6079] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.079692][ T6079] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.329: Failed to acquire dquot type 0 [ 254.098928][ T6079] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.329: Freeing blocks not in datazone - block = 0, count = 4096 [ 254.115157][ T6079] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.329: Invalid inode bitmap blk 0 in block_group 0 [ 254.128776][ T6079] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 254.138544][ T6079] EXT4-fs (loop4): 1 orphan inode deleted [ 254.144414][ T6079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 254.181256][ T4361] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 254.346150][ T4991] usb 7-1: config 0 has no interfaces? [ 254.363826][ T4361] EXT4-fs error (device loop4): ext4_release_dquot:6845: comm kworker/u4:6: Failed to release dquot type 0 [ 254.383720][ T4991] usb 7-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 254.593478][ T4991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.661559][ T4991] usb 7-1: config 0 descriptor?? [ 254.702757][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.737774][ T5937] Cannot create hsr debugfs directory [ 254.811577][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 255.352488][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 255.446976][ T5937] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.464948][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.471308][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.514846][ T6087] loop4: detected capacity change from 0 to 16 [ 255.556745][ T6087] erofs: (device loop4): mounted with root inode @ nid 36. [ 255.806708][ T7] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 255.829261][ T5937] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.976201][ T6095] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 255.986601][ T6095] syz.4.333: attempt to access beyond end of device [ 255.986601][ T6095] loop4: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 256.370544][ T5937] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 256.414100][ T5937] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 256.562020][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.610495][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.662234][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.690407][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.698421][ T7] usb 2-1: Product: syz [ 256.761081][ T7] usb 2-1: Manufacturer: syz [ 256.780483][ T7] usb 2-1: SerialNumber: syz [ 257.562778][ T7] usb 2-1: 0:2 : does not exist [ 257.581767][ T7] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 257.796415][ T7] usb 2-1: USB disconnect, device number 6 [ 257.899942][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.120093][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.153840][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.164495][ T4256] usb 7-1: USB disconnect, device number 2 [ 258.171193][ T4378] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 258.171223][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.360505][ T4378] usb 6-1: Using ep0 maxpacket: 8 [ 258.372177][ T4378] usb 6-1: config 0 interface 0 has no altsetting 0 [ 258.409360][ T4378] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 258.481302][ T4378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.514825][ T4378] usb 6-1: config 0 descriptor?? [ 258.585754][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.787387][ T6131] hub 2-0:1.0: USB hub found [ 258.800630][ T6131] hub 2-0:1.0: 1 port detected [ 259.559857][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.569881][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.579877][ T4892] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.587012][ T4892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.616184][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.632311][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.651256][ T4892] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.658385][ T4892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.755285][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.760186][ T4378] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 259.764531][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.780289][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.790070][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.799068][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.807961][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.816680][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.828195][ T4378] dragonrise 0003:0079:0011.0002: item fetching failed at offset 3/5 [ 259.830986][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.939216][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.229721][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.425782][ T4378] dragonrise 0003:0079:0011.0002: parse failed [ 260.510608][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.520482][ T4378] dragonrise: probe of 0003:0079:0011.0002 failed with error -22 [ 260.564176][ T4378] usb 6-1: USB disconnect, device number 4 [ 260.732599][ T6140] loop1: detected capacity change from 0 to 16 [ 260.788955][ T6140] erofs: (device loop1): mounted with root inode @ nid 36. [ 261.133768][ T6145] xt_hashlimit: max too large, truncated to 1048576 [ 261.142111][ T6145] syz.1.341: attempt to access beyond end of device [ 261.142111][ T6145] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 261.165739][ T6145] syz.1.341: attempt to access beyond end of device [ 261.165739][ T6145] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 261.183625][ T6145] syz.1.341: attempt to access beyond end of device [ 261.183625][ T6145] loop1: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 261.201177][ T6145] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 261.211453][ T6145] syz.1.341: attempt to access beyond end of device [ 261.211453][ T6145] loop1: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 261.742403][ T6138] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 261.786095][ T27] audit: type=1326 audit(1762479559.265:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 261.849003][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.891654][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.972400][ T27] audit: type=1326 audit(1762479559.265:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 262.073117][ T6154] loop4: detected capacity change from 0 to 16 [ 262.113376][ T27] audit: type=1326 audit(1762479559.265:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 262.153396][ T6154] erofs: (device loop4): mounted with root inode @ nid 36. [ 262.165855][ T6155] loop1: detected capacity change from 0 to 256 [ 262.195920][ T6155] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 262.226709][ T27] audit: type=1326 audit(1762479559.265:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 262.380466][ T27] audit: type=1326 audit(1762479559.305:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 262.582173][ T6162] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 262.592567][ T6162] syz.4.345: attempt to access beyond end of device [ 262.592567][ T6162] loop4: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 263.075780][ T27] audit: type=1326 audit(1762479559.305:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 263.212822][ T27] audit: type=1326 audit(1762479559.305:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 263.290138][ T27] audit: type=1326 audit(1762479559.305:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 263.373458][ T27] audit: type=1326 audit(1762479559.305:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 263.416967][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.456905][ T27] audit: type=1326 audit(1762479559.305:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2527d8f6c9 code=0x7ffc0000 [ 263.479406][ T3597] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 263.538521][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.582504][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.607657][ T6174] netlink: 'syz.4.348': attribute type 3 has an invalid length. [ 264.295999][ T4910] device hsr_slave_0 left promiscuous mode [ 264.296802][ T3597] usb 6-1: config 0 has no interfaces? [ 264.311256][ T3597] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 264.320761][ T3597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.341722][ T3597] usb 6-1: config 0 descriptor?? [ 264.489797][ T4910] device hsr_slave_1 left promiscuous mode [ 264.516925][ T4910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.528536][ T4910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.633635][ T6181] hub 2-0:1.0: USB hub found [ 264.640620][ T6181] hub 2-0:1.0: 1 port detected [ 264.934209][ T6179] loop6: detected capacity change from 0 to 128 [ 265.033176][ T4256] usb 6-1: USB disconnect, device number 5 [ 265.141158][ T4910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.247151][ T4910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.308351][ T6179] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 265.368930][ T6179] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.462682][ T4910] device bridge_slave_1 left promiscuous mode [ 265.470247][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.523241][ T4910] device bridge_slave_0 left promiscuous mode [ 265.530130][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.096524][ T4910] device veth1_macvtap left promiscuous mode [ 266.102627][ T4910] device veth0_macvtap left promiscuous mode [ 266.110055][ T4910] device veth1_vlan left promiscuous mode [ 266.116054][ T4910] device veth0_vlan left promiscuous mode [ 266.361671][ T6197] loop1: detected capacity change from 0 to 512 [ 266.402164][ T6197] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 266.469454][ T6197] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.353: invalid indirect mapped block 4294967295 (level 0) [ 266.552059][ T5597] EXT4-fs (loop6): unmounting filesystem. [ 266.630851][ T6197] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.353: invalid indirect mapped block 4294967295 (level 1) [ 266.711008][ T6197] EXT4-fs (loop1): 1 orphan inode deleted [ 266.732093][ T6204] loop6: detected capacity change from 0 to 16 [ 266.754200][ T6197] EXT4-fs (loop1): 1 truncate cleaned up [ 266.759880][ T6197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 266.800892][ T6204] erofs: (device loop6): mounted with root inode @ nid 36. [ 267.295303][ T6211] xt_hashlimit: max too large, truncated to 1048576 [ 267.303944][ T6211] syz.6.355: attempt to access beyond end of device [ 267.303944][ T6211] loop6: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 267.334357][ T6211] syz.6.355: attempt to access beyond end of device [ 267.334357][ T6211] loop6: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 267.355297][ T6211] syz.6.355: attempt to access beyond end of device [ 267.355297][ T6211] loop6: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 267.375148][ T6211] erofs: (device loop6): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 267.385846][ T6211] syz.6.355: attempt to access beyond end of device [ 267.385846][ T6211] loop6: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 268.103119][ T6215] netlink: 44 bytes leftover after parsing attributes in process `syz.1.353'. [ 268.173932][ T6216] loop6: detected capacity change from 0 to 512 [ 268.211995][ T6216] EXT4-fs: quotafile must be on filesystem root [ 268.680400][ T6220] netlink: 'syz.4.358': attribute type 3 has an invalid length. [ 269.724568][ T4910] team0 (unregistering): Port device team_slave_1 removed [ 269.768389][ T6227] loop4: detected capacity change from 0 to 256 [ 269.797803][ T6227] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 269.868546][ T4910] team0 (unregistering): Port device team_slave_0 removed [ 269.989126][ T4910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.087289][ T4910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.090817][ T4910] bond0 (unregistering): Released all slaves [ 271.268853][ T6224] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 271.302345][ T6224] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 271.340595][ T6224] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 271.746060][ T6238] loop5: detected capacity change from 0 to 1024 [ 272.219928][ T6238] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.363: Invalid block bitmap block 0 in block_group 0 [ 272.417771][ T6238] __quota_error: 26 callbacks suppressed [ 272.417785][ T6238] Quota error (device loop5): write_blk: dquota write failed [ 272.432899][ T6238] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 272.443178][ T6238] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.363: Failed to acquire dquot type 0 [ 272.454834][ T6238] EXT4-fs error (device loop5): ext4_free_blocks:6205: comm syz.5.363: Freeing blocks not in datazone - block = 0, count = 4096 [ 272.570955][ T6238] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.363: Invalid inode bitmap blk 0 in block_group 0 [ 272.596283][ T4892] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 272.630226][ T4892] EXT4-fs error (device loop5): ext4_release_dquot:6845: comm kworker/u4:18: Failed to release dquot type 0 [ 272.670818][ T6238] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 272.717056][ T6238] EXT4-fs (loop5): 1 orphan inode deleted [ 272.740993][ T6238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 272.888106][ T6248] loop6: detected capacity change from 0 to 8192 [ 273.058543][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.944588][ T4550] EXT4-fs (loop5): unmounting filesystem. [ 273.988959][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.078334][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.094432][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.108772][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.129970][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.164627][ T5937] device veth0_vlan entered promiscuous mode [ 274.216876][ T5937] device veth1_vlan entered promiscuous mode [ 274.403209][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.442546][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.504298][ T5937] device veth0_macvtap entered promiscuous mode [ 274.531670][ T5937] device veth1_macvtap entered promiscuous mode [ 274.619193][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.668726][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.685706][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.730517][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.740337][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.783775][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.820607][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.850402][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.860226][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.910409][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.969955][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.011479][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.091011][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.111158][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.135818][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.148382][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.159155][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.169327][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.190143][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.221416][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.273952][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.315872][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 275.328310][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.542069][ T48] Bluetooth: hci0: command 0x1003 tx timeout [ 275.548507][ T4277] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 276.044218][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.077905][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.116153][ T6274] loop1: detected capacity change from 0 to 1024 [ 276.129067][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.149861][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.168137][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.209387][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.238334][ T6274] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 276.338281][ T5937] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.421176][ T6281] netlink: 'syz.4.369': attribute type 3 has an invalid length. [ 276.744513][ T5937] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.868623][ T5937] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.996305][ T5937] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.362596][ T6292] loop5: detected capacity change from 0 to 16 [ 278.366347][ T4510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.395428][ T27] audit: type=1326 audit(1762479575.875:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.426274][ T6292] erofs: (device loop5): mounted with root inode @ nid 36. [ 278.446827][ T4510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.519917][ T27] audit: type=1326 audit(1762479575.875:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.574718][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.618451][ T27] audit: type=1326 audit(1762479575.945:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.641057][ T27] audit: type=1326 audit(1762479575.945:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.658400][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.663383][ T27] audit: type=1326 audit(1762479575.945:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.694491][ T27] audit: type=1326 audit(1762479575.945:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.716692][ T27] audit: type=1326 audit(1762479575.945:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.739357][ T27] audit: type=1326 audit(1762479575.945:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.762440][ T27] audit: type=1326 audit(1762479575.945:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.839761][ T27] audit: type=1326 audit(1762479575.945:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 278.902439][ T6298] xt_hashlimit: max too large, truncated to 1048576 [ 278.913404][ T6298] syz.5.372: attempt to access beyond end of device [ 278.913404][ T6298] loop5: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 279.083736][ T6299] syz.5.372: attempt to access beyond end of device [ 279.083736][ T6299] loop5: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 279.114665][ T6299] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 279.125066][ T6299] syz.5.372: attempt to access beyond end of device [ 279.125066][ T6299] loop5: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 279.208278][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.250304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.676419][ T6308] loop7: detected capacity change from 0 to 512 [ 280.079818][ T6308] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.292: inode has both inline data and extents flags [ 280.370510][ T6308] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.292: couldn't read orphan inode 15 (err -117) [ 280.435109][ T6308] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 280.708185][ T6318] overlayfs: failed to resolve './file0/file1': -2 [ 280.990065][ T6321] loop5: detected capacity change from 0 to 512 [ 281.298404][ T6321] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 281.307861][ T6321] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.585664][ T5937] EXT4-fs (loop7): unmounting filesystem. [ 282.894320][ T4550] EXT4-fs (loop5): unmounting filesystem. [ 283.424299][ T6311] Bluetooth: hci0: Frame reassembly failed (-84) [ 283.633361][ T6311] Bluetooth: hci0: Frame reassembly failed (-84) [ 284.231656][ T6354] loop5: detected capacity change from 0 to 16 [ 284.306499][ T6356] netlink: 'syz.4.383': attribute type 3 has an invalid length. [ 284.485545][ T6354] erofs: (device loop5): mounted with root inode @ nid 36. [ 285.224454][ T6360] xt_hashlimit: max too large, truncated to 1048576 [ 285.234922][ T6360] syz.5.385: attempt to access beyond end of device [ 285.234922][ T6360] loop5: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 285.320718][ T6360] syz.5.385: attempt to access beyond end of device [ 285.320718][ T6360] loop5: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 285.352457][ T6360] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 285.362959][ T6360] syz.5.385: attempt to access beyond end of device [ 285.362959][ T6360] loop5: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 285.460519][ T48] Bluetooth: hci0: command 0x1003 tx timeout [ 285.528940][ T4284] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 286.037970][ T6350] overlayfs: failed to resolve './file1': -2 [ 286.068628][ T6350] loop1: detected capacity change from 0 to 512 [ 286.080669][ T6350] EXT4-fs (loop1): Test dummy encryption mode enabled [ 286.087455][ T6350] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.436341][ T6350] EXT4-fs (loop1): 1 truncate cleaned up [ 286.442091][ T6350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 286.739958][ T6372] loop7: detected capacity change from 0 to 512 [ 286.868070][ T6372] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.389: inode has both inline data and extents flags [ 287.015066][ T6372] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.389: couldn't read orphan inode 15 (err -117) [ 287.069235][ T6372] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 287.359082][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 287.397926][ T4378] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 287.435258][ T6385] overlayfs: failed to resolve './file0/file1': -2 [ 287.661962][ T4378] usb 5-1: config 0 has no interfaces? [ 287.667620][ T4378] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 287.687858][ T4378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.841956][ T6390] netlink: 'syz.1.392': attribute type 4 has an invalid length. [ 287.849665][ T6390] netlink: 17 bytes leftover after parsing attributes in process `syz.1.392'. [ 288.375572][ T4378] usb 5-1: config 0 descriptor?? [ 288.466167][ T5937] EXT4-fs (loop7): unmounting filesystem. [ 288.602710][ T4378] usb 5-1: USB disconnect, device number 6 [ 289.038930][ T6408] loop7: detected capacity change from 0 to 16 [ 289.068817][ T6408] erofs: (device loop7): mounted with root inode @ nid 36. [ 289.082155][ T6410] loop5: detected capacity change from 0 to 16 [ 289.091071][ T6410] erofs: (device loop5): mounted with root inode @ nid 36. [ 289.320558][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 289.320573][ T27] audit: type=1326 audit(1762479586.775:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 289.511478][ T27] audit: type=1326 audit(1762479586.775:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 289.855477][ T6415] xt_hashlimit: max too large, truncated to 1048576 [ 289.862707][ T6415] syz.5.398: attempt to access beyond end of device [ 289.862707][ T6415] loop5: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 289.891298][ T6415] syz.5.398: attempt to access beyond end of device [ 289.891298][ T6415] loop5: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 289.909802][ T6415] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 289.920104][ T6415] syz.5.398: attempt to access beyond end of device [ 289.920104][ T6415] loop5: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 289.946282][ T27] audit: type=1326 audit(1762479586.795:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 290.015306][ T27] audit: type=1326 audit(1762479586.795:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 290.248036][ T27] audit: type=1326 audit(1762479586.795:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 290.348530][ T27] audit: type=1326 audit(1762479586.855:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 290.371245][ T27] audit: type=1326 audit(1762479586.855:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 290.393579][ T27] audit: type=1326 audit(1762479586.855:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 290.415865][ T27] audit: type=1326 audit(1762479586.855:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 290.440811][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.693666][ T27] audit: type=1326 audit(1762479586.855:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8bd8f6c9 code=0x7ffc0000 [ 291.020746][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.051635][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.060196][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.070023][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.077376][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.199877][ T6437] loop7: detected capacity change from 0 to 512 [ 291.799176][ T6437] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.404: inode has both inline data and extents flags [ 292.048561][ T4500] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.080486][ T6437] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.404: couldn't read orphan inode 15 (err -117) [ 292.150779][ T6437] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 293.047754][ T4500] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.136969][ T6447] netlink: 'syz.5.405': attribute type 4 has an invalid length. [ 293.144876][ T6447] netlink: 17 bytes leftover after parsing attributes in process `syz.5.405'. [ 293.150495][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 293.331149][ T4500] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.450549][ T6451] loop5: detected capacity change from 0 to 1024 [ 293.457715][ T6451] EXT4-fs: Ignoring removed orlov option [ 293.640168][ T6461] overlayfs: failed to resolve './file0/file1': -2 [ 293.894095][ T6451] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 294.465069][ T5937] EXT4-fs (loop7): unmounting filesystem. [ 294.472596][ T4500] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.570031][ T6472] loop4: detected capacity change from 0 to 16 [ 294.671388][ T6472] erofs: (device loop4): mounted with root inode @ nid 36. [ 294.909802][ T6483] loop1: detected capacity change from 0 to 16 [ 294.949567][ T6483] erofs: (device loop1): mounted with root inode @ nid 36. [ 295.072576][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 295.140522][ T4378] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 295.220561][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 295.301086][ T6488] xt_hashlimit: max too large, truncated to 1048576 [ 295.311046][ T6488] syz.1.411: attempt to access beyond end of device [ 295.311046][ T6488] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 295.415851][ T6488] syz.1.411: attempt to access beyond end of device [ 295.415851][ T6488] loop1: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 295.452059][ T6488] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 295.463007][ T6488] syz.1.411: attempt to access beyond end of device [ 295.463007][ T6488] loop1: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 295.881911][ T4378] usb 8-1: config 0 has no interfaces? [ 295.887430][ T4378] usb 8-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 295.911068][ T4378] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.934346][ T4378] usb 8-1: config 0 descriptor?? [ 296.142560][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.149697][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.164517][ T4378] usb 8-1: USB disconnect, device number 2 [ 296.231469][ T6425] device bridge_slave_0 entered promiscuous mode [ 296.449381][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.461098][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.568008][ T6425] device bridge_slave_1 entered promiscuous mode [ 297.300438][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 297.308243][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.361079][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.153525][ T6425] team0: Port device team_slave_0 added [ 300.203173][ T6524] netlink: 'syz.7.417': attribute type 4 has an invalid length. [ 300.210976][ T6524] netlink: 17 bytes leftover after parsing attributes in process `syz.7.417'. [ 300.258591][ T6425] team0: Port device team_slave_1 added [ 300.581736][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 300.758283][ T6536] loop7: detected capacity change from 0 to 512 [ 300.830663][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.837625][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.865210][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.938023][ T6536] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.419: inode has both inline data and extents flags [ 301.001515][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.020860][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.089699][ T6536] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.419: couldn't read orphan inode 15 (err -117) [ 301.122529][ T6536] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 301.179321][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.425117][ T6544] overlayfs: failed to resolve './file0/file1': -2 [ 301.476803][ T6425] device hsr_slave_0 entered promiscuous mode [ 301.500154][ T6425] device hsr_slave_1 entered promiscuous mode [ 301.529726][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.558039][ T6425] Cannot create hsr debugfs directory [ 301.668946][ T5937] EXT4-fs (loop7): unmounting filesystem. [ 302.969517][ T4500] device hsr_slave_0 left promiscuous mode [ 303.010724][ T4500] device hsr_slave_1 left promiscuous mode [ 303.021016][ T4500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.028437][ T4500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.111023][ T4500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.118454][ T4500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.140260][ T4500] device bridge_slave_1 left promiscuous mode [ 303.159982][ T4500] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.234903][ T4500] device bridge_slave_0 left promiscuous mode [ 303.260646][ T4500] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.340798][ T4500] device veth1_macvtap left promiscuous mode [ 303.357059][ T4500] device veth0_macvtap left promiscuous mode [ 303.377345][ T4500] device veth1_vlan left promiscuous mode [ 303.410499][ T4500] device veth0_vlan left promiscuous mode [ 303.670902][ T4378] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 303.862245][ T4378] usb 2-1: config 0 has no interfaces? [ 303.868538][ T4378] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 303.897949][ T4378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.936909][ T4378] usb 2-1: config 0 descriptor?? [ 304.157066][ T4991] usb 2-1: USB disconnect, device number 7 [ 304.843361][ T4500] team0 (unregistering): Port device team_slave_1 removed [ 304.945918][ T4500] team0 (unregistering): Port device team_slave_0 removed [ 305.600009][ T4500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.829790][ T4500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.113820][ T4500] bond0 (unregistering): Released all slaves [ 307.797274][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.804435][ T6576] bridge0: port 2(bridge_slave_1) entered listening state [ 307.811772][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.818891][ T6576] bridge0: port 1(bridge_slave_0) entered listening state [ 307.871606][ T6576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.907475][ T6576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.936764][ T6586] loop4: detected capacity change from 0 to 256 [ 307.958310][ T6586] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 308.180893][ T6425] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 308.258471][ T6425] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 308.293835][ T6425] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 308.312358][ T6425] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 309.510776][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.703344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.721191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.593824][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.645995][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.677930][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.749038][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.756209][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.833126][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.843489][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.851959][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.859833][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.868074][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 310.896212][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.049280][ T6620] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 311.269205][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.455111][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.516936][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.525500][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.532612][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.558632][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.820928][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.546321][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.807300][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.855726][ T6632] loop1: detected capacity change from 0 to 512 [ 312.875845][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.932158][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.962558][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.980835][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 312.982919][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.031675][ T6632] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.435: inode has both inline data and extents flags [ 313.084423][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.094478][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.103000][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.126317][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.130733][ T6632] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.435: couldn't read orphan inode 15 (err -117) [ 313.142052][ T6636] loop7: detected capacity change from 0 to 16 [ 313.152457][ T6632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 313.197362][ T6636] erofs: (device loop7): mounted with root inode @ nid 36. [ 313.503641][ T6644] loop4: detected capacity change from 0 to 1024 [ 313.673506][ T6644] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.438: Invalid block bitmap block 0 in block_group 0 [ 313.794935][ T6644] __quota_error: 40 callbacks suppressed [ 313.794981][ T6644] Quota error (device loop4): write_blk: dquota write failed [ 313.809142][ T6644] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 313.819385][ T6644] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.438: Failed to acquire dquot type 0 [ 313.851633][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 313.875008][ T6644] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.438: Freeing blocks not in datazone - block = 0, count = 4096 [ 313.897692][ T6644] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.438: Invalid inode bitmap blk 0 in block_group 0 [ 313.924195][ T6644] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 313.935280][ T6644] EXT4-fs (loop4): 1 orphan inode deleted [ 313.941275][ T6644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 314.189895][ T4500] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 314.253445][ T4500] EXT4-fs error (device loop4): ext4_release_dquot:6845: comm kworker/u4:16: Failed to release dquot type 0 [ 314.430498][ T6636] syz.7.437: attempt to access beyond end of device [ 314.430498][ T6636] loop7: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 314.449616][ T6636] syz.7.437: attempt to access beyond end of device [ 314.449616][ T6636] loop7: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 314.467227][ T6636] erofs: (device loop7): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 314.477539][ T6636] syz.7.437: attempt to access beyond end of device [ 314.477539][ T6636] loop7: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 315.342090][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 315.351194][ T6612] chnl_net:caif_netlink_parms(): no params data found [ 315.400552][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 315.795792][ T6671] loop7: detected capacity change from 0 to 256 [ 316.733345][ T6674] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 317.004546][ T6671] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 317.041295][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.076922][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.114733][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.121063][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.133655][ T6612] device bridge_slave_0 entered promiscuous mode [ 317.145187][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.152784][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.161317][ T6612] device bridge_slave_1 entered promiscuous mode [ 317.176488][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.203753][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.253049][ T6681] loop1: detected capacity change from 0 to 16 [ 317.271422][ T6681] erofs: (device loop1): mounted with root inode @ nid 36. [ 317.380993][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 317.405309][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.437150][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.494340][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.588744][ T6691] xt_hashlimit: max too large, truncated to 1048576 [ 317.599785][ T6691] syz.1.445: attempt to access beyond end of device [ 317.599785][ T6691] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 317.704245][ T6691] syz.1.445: attempt to access beyond end of device [ 317.704245][ T6691] loop1: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 317.741332][ T6691] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 317.751780][ T6691] syz.1.445: attempt to access beyond end of device [ 317.751780][ T6691] loop1: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 318.364111][ T6612] team0: Port device team_slave_0 added [ 318.381997][ T6612] team0: Port device team_slave_1 added [ 318.425543][ T6700] loop4: detected capacity change from 0 to 512 [ 319.031746][ T6700] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.447: inode has both inline data and extents flags [ 319.073333][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.120445][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.160537][ T6700] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.447: couldn't read orphan inode 15 (err -117) [ 319.200281][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.218939][ T6700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 319.243171][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.250126][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.471194][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 319.491962][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.520479][ T4270] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 319.679231][ T6612] device hsr_slave_0 entered promiscuous mode [ 319.795258][ T6612] device hsr_slave_1 entered promiscuous mode [ 319.814012][ T6718] loop1: detected capacity change from 0 to 1024 [ 319.958278][ T6718] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.450: Invalid block bitmap block 0 in block_group 0 [ 319.979821][ T6718] Quota error (device loop1): write_blk: dquota write failed [ 319.987411][ T6718] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 319.997977][ T6718] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.450: Failed to acquire dquot type 0 [ 320.022191][ T6718] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.450: Freeing blocks not in datazone - block = 0, count = 4096 [ 320.037880][ T6718] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.450: Invalid inode bitmap blk 0 in block_group 0 [ 320.052908][ T6718] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 320.064401][ T6718] EXT4-fs (loop1): 1 orphan inode deleted [ 320.070271][ T6718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 320.211231][ T4368] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 320.278386][ T4368] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 0 [ 320.603836][ T6612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.611563][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 320.660557][ T6612] Cannot create hsr debugfs directory [ 320.790910][ T6724] loop4: detected capacity change from 0 to 16 [ 320.881506][ T6724] erofs: (device loop4): mounted with root inode @ nid 36. [ 321.010376][ T4270] usb 8-1: config 0 has no interfaces? [ 321.015893][ T4270] usb 8-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 321.033862][ T4270] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.212786][ T4270] usb 8-1: config 0 descriptor?? [ 321.342130][ T6726] syz.4.451: attempt to access beyond end of device [ 321.342130][ T6726] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 321.394236][ T6726] syz.4.451: attempt to access beyond end of device [ 321.394236][ T6726] loop4: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 321.431982][ T6726] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 321.442446][ T6726] syz.4.451: attempt to access beyond end of device [ 321.442446][ T6726] loop4: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 322.010591][ T4378] usb 8-1: USB disconnect, device number 3 [ 322.123561][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 322.324541][ T6733] loop4: detected capacity change from 0 to 1024 [ 322.379398][ T6733] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.452: Invalid block bitmap block 0 in block_group 0 [ 322.394444][ T6733] Quota error (device loop4): write_blk: dquota write failed [ 322.402898][ T6733] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 322.413335][ T6733] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.452: Failed to acquire dquot type 0 [ 322.435163][ T6733] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.452: Freeing blocks not in datazone - block = 0, count = 4096 [ 322.457842][ T6733] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.452: Invalid inode bitmap blk 0 in block_group 0 [ 322.474787][ T46] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 322.489123][ T6733] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 322.499034][ T6733] EXT4-fs (loop4): 1 orphan inode deleted [ 322.505621][ T6733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 322.654759][ T46] EXT4-fs error (device loop4): ext4_release_dquot:6845: comm kworker/u4:3: Failed to release dquot type 0 [ 323.032366][ T6612] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 323.618278][ T6743] loop7: detected capacity change from 0 to 16 [ 323.659324][ T6612] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 323.721545][ T6612] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 323.761239][ T6743] erofs: (device loop7): mounted with root inode @ nid 36. [ 324.249107][ T6747] erofs: (device loop7): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 324.259515][ T6747] syz.7.455: attempt to access beyond end of device [ 324.259515][ T6747] loop7: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 324.643162][ T6750] loop1: detected capacity change from 0 to 256 [ 324.668358][ T6750] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 324.700412][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.709079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.720414][ T6612] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 324.731185][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 324.752084][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.774369][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.803139][ T6425] device veth0_vlan entered promiscuous mode [ 324.867260][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.881682][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.897632][ T6755] loop7: detected capacity change from 0 to 512 [ 325.006904][ T6425] device veth1_vlan entered promiscuous mode [ 325.083745][ T6755] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.458: inode has both inline data and extents flags [ 325.308438][ T6755] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.458: couldn't read orphan inode 15 (err -117) [ 325.595041][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 325.653215][ T6755] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 325.661784][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 325.676950][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.693977][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.712933][ T6425] device veth0_macvtap entered promiscuous mode [ 325.753446][ T6425] device veth1_macvtap entered promiscuous mode [ 325.829822][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.841402][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.011197][ T6755] overlayfs: failed to resolve './file1': -2 [ 326.041629][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.073044][ T6772] loop4: detected capacity change from 0 to 512 [ 326.076837][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.213833][ T6772] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.459: inode has both inline data and extents flags [ 326.260849][ T6772] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.459: couldn't read orphan inode 15 (err -117) [ 326.310535][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.328905][ T6772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 326.358861][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.380438][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.416939][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.577044][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.588207][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.599667][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.610428][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.622073][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.630979][ T5937] EXT4-fs (loop7): unmounting filesystem. [ 326.637046][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.686497][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.715729][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.816270][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.855450][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.957393][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.068915][ T6782] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 327.338577][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.520112][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.530702][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.569596][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.660590][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.696268][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.721626][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.764638][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.824220][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.869311][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 327.941013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.954011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.079352][ T6786] loop1: detected capacity change from 0 to 1024 [ 328.090765][ T6786] EXT4-fs: Ignoring removed orlov option [ 328.225257][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.318690][ T6786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 329.072124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.596870][ T6425] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.605882][ T6425] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.614700][ T6425] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.623967][ T6425] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.594466][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.611031][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.619552][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.626680][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.682373][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 330.801009][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.860991][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.901602][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.908700][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.594925][ T6805] loop1: detected capacity change from 0 to 1024 [ 331.739569][ T6805] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.465: Invalid block bitmap block 0 in block_group 0 [ 331.756310][ T6805] Quota error (device loop1): write_blk: dquota write failed [ 331.764041][ T6805] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 331.774362][ T6805] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.465: Failed to acquire dquot type 0 [ 331.804214][ T6805] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.465: Freeing blocks not in datazone - block = 0, count = 4096 [ 331.826065][ T6805] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.465: Invalid inode bitmap blk 0 in block_group 0 [ 331.840014][ T6805] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 331.850882][ T6805] EXT4-fs (loop1): 1 orphan inode deleted [ 331.856731][ T6805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 331.926499][ T5909] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 331.926717][ T5909] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:22: Failed to release dquot type 0 [ 332.630651][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.650757][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.245444][ T6811] hub 2-0:1.0: USB hub found [ 333.252202][ T6811] hub 2-0:1.0: 1 port detected [ 333.882380][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.894559][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 333.895066][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.959363][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.038734][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.067204][ T27] audit: type=1326 audit(1762479631.545:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 334.107089][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.156532][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.453143][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.515141][ T27] audit: type=1326 audit(1762479631.585:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 334.649973][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.661480][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.700737][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.733714][ T27] audit: type=1326 audit(1762479631.745:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 335.163243][ T27] audit: type=1326 audit(1762479631.745:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 335.541457][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.658267][ T27] audit: type=1326 audit(1762479631.755:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 335.745805][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.779272][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.844865][ T27] audit: type=1326 audit(1762479631.975:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 335.866140][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.873284][ T6837] loop7: detected capacity change from 0 to 512 [ 335.892108][ T6839] loop1: detected capacity change from 0 to 16 [ 335.919331][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.953054][ T6839] erofs: (device loop1): mounted with root inode @ nid 36. [ 335.981073][ T27] audit: type=1326 audit(1762479631.985:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 335.994655][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.143348][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.171567][ T6837] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.471: couldn't read orphan inode 26 (err -116) [ 336.194937][ T6837] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 336.204719][ T6837] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.365151][ T6847] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 336.375586][ T6847] syz.1.472: attempt to access beyond end of device [ 336.375586][ T6847] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 336.906747][ T5937] EXT4-fs (loop7): unmounting filesystem. [ 336.930518][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 336.930531][ T27] audit: type=1326 audit(1762479631.995:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 337.120902][ T27] audit: type=1326 audit(1762479632.045:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 337.366793][ T6859] loop7: detected capacity change from 0 to 1024 [ 338.056789][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 338.066032][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 339.450876][ T6859] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.473: Invalid block bitmap block 0 in block_group 0 [ 339.471221][ T6859] Quota error (device loop7): write_blk: dquota write failed [ 339.478828][ T6859] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 339.489170][ T6859] EXT4-fs error (device loop7): ext4_acquire_dquot:6809: comm syz.7.473: Failed to acquire dquot type 0 [ 339.509478][ T6859] EXT4-fs error (device loop7): ext4_free_blocks:6205: comm syz.7.473: Freeing blocks not in datazone - block = 0, count = 4096 [ 339.532570][ T6859] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.473: Invalid inode bitmap blk 0 in block_group 0 [ 339.565090][ T6859] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 339.617295][ T6859] EXT4-fs (loop7): 1 orphan inode deleted [ 339.623402][ T6859] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 339.640059][ T6861] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 339.963270][ T6861] EXT4-fs error (device loop7): ext4_release_dquot:6845: comm kworker/u4:27: Failed to release dquot type 0 [ 340.134066][ T27] audit: type=1326 audit(1762479632.055:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 340.790447][ T27] audit: type=1326 audit(1762479632.065:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.7.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6be38f6c9 code=0x7ffc0000 [ 340.980308][ T6866] loop1: detected capacity change from 0 to 512 [ 341.154747][ T6868] loop8: detected capacity change from 0 to 256 [ 341.415931][ T6868] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 341.504364][ T6866] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.476: inode has both inline data and extents flags [ 341.610769][ T6866] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.476: couldn't read orphan inode 15 (err -117) [ 341.651349][ T6866] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 341.693288][ T5937] EXT4-fs (loop7): unmounting filesystem. [ 341.954771][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.991338][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.595342][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.623010][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 343.183922][ T6883] hub 2-0:1.0: USB hub found [ 343.190682][ T6883] hub 2-0:1.0: 1 port detected [ 343.813504][ T6888] loop7: detected capacity change from 0 to 512 [ 343.850932][ T6888] ext3: Unknown parameter 'permit_directio' [ 344.114302][ T6899] loop4: detected capacity change from 0 to 512 [ 344.170825][ T6899] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.482: couldn't read orphan inode 26 (err -116) [ 344.183240][ T6899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 344.192458][ T6899] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.214360][ T6897] Quota error (device loop4): do_check_range: Getting block 59136 out of range 0-1 [ 344.802309][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 344.882136][ T6914] loop7: detected capacity change from 0 to 16 [ 344.941103][ T6914] erofs: (device loop7): mounted with root inode @ nid 36. [ 345.230804][ T6921] xt_hashlimit: max too large, truncated to 1048576 [ 345.238462][ T6921] syz.7.483: attempt to access beyond end of device [ 345.238462][ T6921] loop7: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 345.266691][ T6921] syz.7.483: attempt to access beyond end of device [ 345.266691][ T6921] loop7: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 345.284399][ T6921] erofs: (device loop7): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 345.294705][ T6921] syz.7.483: attempt to access beyond end of device [ 345.294705][ T6921] loop7: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 345.732061][ T6612] device veth0_vlan entered promiscuous mode [ 345.817304][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.840902][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.910978][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.961128][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.985921][ T6939] loop7: detected capacity change from 0 to 256 [ 345.996436][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.013727][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.045665][ T6939] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 346.075770][ T6612] device veth1_vlan entered promiscuous mode [ 346.104569][ T6939] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 346.191534][ T6939] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 346.204036][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.238527][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.277749][ T6612] device veth0_macvtap entered promiscuous mode [ 346.368074][ T6949] loop8: detected capacity change from 0 to 16 [ 346.438466][ T6612] device veth1_macvtap entered promiscuous mode [ 346.503173][ T6949] erofs: (device loop8): mounted with root inode @ nid 36. [ 347.282160][ T6954] xt_hashlimit: max too large, truncated to 1048576 [ 347.289716][ T6954] syz.8.489: attempt to access beyond end of device [ 347.289716][ T6954] loop8: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 347.316106][ T6954] syz.8.489: attempt to access beyond end of device [ 347.316106][ T6954] loop8: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 347.338631][ T6954] syz.8.489: attempt to access beyond end of device [ 347.338631][ T6954] loop8: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 347.357676][ T6954] erofs: (device loop8): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 347.368628][ T6954] syz.8.489: attempt to access beyond end of device [ 347.368628][ T6954] loop8: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 348.600677][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.620789][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.715354][ T6962] loop4: detected capacity change from 0 to 512 [ 348.735292][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.797523][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.799163][ T6962] ext3: Unknown parameter 'permit_directio' [ 348.847303][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.898410][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.926442][ T6966] loop7: detected capacity change from 0 to 2048 [ 348.941483][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.034287][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.291194][ T6969] netlink: 'syz.8.491': attribute type 3 has an invalid length. [ 349.569487][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.589997][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.616642][ T6966] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 349.673729][ T6966] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.713822][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.810833][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.849015][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.880155][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.891874][ T6979] loop1: detected capacity change from 0 to 16 [ 349.915129][ T6979] erofs: (device loop1): mounted with root inode @ nid 36. [ 349.928834][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.955808][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.976628][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.014701][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.049438][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.147703][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.166645][ T6980] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.493: bg 0: block 345: padding at end of block bitmap is not set [ 350.179283][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.191575][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.209685][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.252838][ T6981] xt_hashlimit: max too large, truncated to 1048576 [ 350.260048][ T6981] syz.1.495: attempt to access beyond end of device [ 350.260048][ T6981] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 350.288412][ T6981] syz.1.495: attempt to access beyond end of device [ 350.288412][ T6981] loop1: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 350.305996][ T6981] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 350.316277][ T6981] syz.1.495: attempt to access beyond end of device [ 350.316277][ T6981] loop1: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 350.335927][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.358223][ T6980] EXT4-fs (loop7): Remounting filesystem read-only [ 350.370973][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.387313][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.419594][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.026572][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.162587][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.179221][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.188485][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.197325][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.208475][ T6612] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.249846][ T6612] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.278746][ T6612] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.287978][ T6612] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.459766][ T5937] EXT4-fs (loop7): unmounting filesystem. [ 352.416068][ T6999] loop1: detected capacity change from 0 to 16 [ 353.028607][ T6861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.034050][ T6999] erofs: (device loop1): mounted with root inode @ nid 36. [ 353.070544][ T6861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.258455][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.280229][ T6861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.303229][ T6861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.995606][ T7007] xt_hashlimit: max too large, truncated to 1048576 [ 354.002907][ T7007] syz.1.500: attempt to access beyond end of device [ 354.002907][ T7007] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 354.025596][ T7007] syz.1.500: attempt to access beyond end of device [ 354.025596][ T7007] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 354.047193][ T7007] syz.1.500: attempt to access beyond end of device [ 354.047193][ T7007] loop1: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 354.064916][ T7007] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 354.075229][ T7007] syz.1.500: attempt to access beyond end of device [ 354.075229][ T7007] loop1: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 354.093079][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 354.491375][ T7019] loop4: detected capacity change from 0 to 16 [ 354.596644][ T7019] erofs: (device loop4): mounted with root inode @ nid 36. [ 354.734194][ T7024] loop9: detected capacity change from 0 to 512 [ 354.900977][ T7024] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.506: inode has both inline data and extents flags [ 354.975111][ T7024] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.506: couldn't read orphan inode 15 (err -117) [ 355.048242][ T7024] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 355.336013][ T7034] syz.7.503[7034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.336109][ T7034] syz.7.503[7034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.352480][ T7034] loop7: detected capacity change from 0 to 256 [ 355.409009][ T7033] overlayfs: failed to resolve './file0/file1': -2 [ 355.420200][ T7034] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 356.618848][ T6612] EXT4-fs (loop9): unmounting filesystem. [ 357.596614][ T7051] loop9: detected capacity change from 0 to 16 [ 357.745966][ T7051] erofs: (device loop9): mounted with root inode @ nid 36. [ 358.143777][ T7057] xt_hashlimit: max too large, truncated to 1048576 [ 358.158592][ T7057] syz.9.507: attempt to access beyond end of device [ 358.158592][ T7057] loop9: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 358.293260][ T4378] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 358.294050][ T7057] syz.9.507: attempt to access beyond end of device [ 358.294050][ T7057] loop9: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 358.318392][ T7057] erofs: (device loop9): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 358.328709][ T7057] syz.9.507: attempt to access beyond end of device [ 358.328709][ T7057] loop9: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 358.634231][ T4378] usb 9-1: config 0 has no interfaces? [ 358.639836][ T4378] usb 9-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 358.733197][ T4378] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.773950][ T4378] usb 9-1: config 0 descriptor?? [ 361.170382][ T48] Bluetooth: hci6: command 0x0406 tx timeout [ 361.728000][ T14] usb 9-1: USB disconnect, device number 2 [ 361.835573][ T7082] loop1: detected capacity change from 0 to 512 [ 363.638473][ T7082] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.518: inode has both inline data and extents flags [ 363.812726][ T7082] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.518: couldn't read orphan inode 15 (err -117) [ 363.977334][ T7082] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 365.165112][ T7099] netlink: 'syz.9.520': attribute type 3 has an invalid length. [ 366.411916][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 366.462702][ T7108] loop8: detected capacity change from 0 to 16 [ 367.620746][ T7108] erofs: (device loop8): mounted with root inode @ nid 36. [ 367.943758][ T7108] xt_hashlimit: max too large, truncated to 1048576 [ 367.950993][ T7108] syz.8.525: attempt to access beyond end of device [ 367.950993][ T7108] loop8: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 368.004648][ T7108] syz.8.525: attempt to access beyond end of device [ 368.004648][ T7108] loop8: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 368.022426][ T7108] erofs: (device loop8): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 368.032794][ T7108] syz.8.525: attempt to access beyond end of device [ 368.032794][ T7108] loop8: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 368.101313][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.108566][ C0] bridge0: topology change detected, propagating [ 368.116488][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.123748][ C0] bridge0: topology change detected, propagating [ 368.393645][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.180558][ T128] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 369.226515][ T7143] loop9: detected capacity change from 0 to 512 [ 369.267324][ T7143] ext3: Unknown parameter 'permit_directio' [ 369.516243][ T128] usb 9-1: config 0 has no interfaces? [ 369.521880][ T128] usb 9-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 369.540503][ T128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.574051][ T128] usb 9-1: config 0 descriptor?? [ 370.614049][ T4270] usb 9-1: USB disconnect, device number 3 [ 370.664210][ T7156] loop9: detected capacity change from 0 to 16 [ 370.733791][ T7156] erofs: (device loop9): mounted with root inode @ nid 36. [ 371.271425][ T7166] loop8: detected capacity change from 0 to 512 [ 371.310411][ T7169] loop1: detected capacity change from 0 to 1024 [ 371.581395][ T7169] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.537: Invalid block bitmap block 0 in block_group 0 [ 371.597369][ T7169] Quota error (device loop1): write_blk: dquota write failed [ 371.605108][ T7169] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 371.615538][ T7169] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.537: Failed to acquire dquot type 0 [ 371.649329][ T7169] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.537: Freeing blocks not in datazone - block = 0, count = 4096 [ 371.679283][ T7169] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.537: Invalid inode bitmap blk 0 in block_group 0 [ 371.695487][ T9] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 371.707952][ T7169] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 371.718102][ T7169] EXT4-fs (loop1): 1 orphan inode deleted [ 371.724111][ T7169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 372.079516][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:0: Failed to release dquot type 0 [ 372.131441][ T7166] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.536: inode has both inline data and extents flags [ 372.268935][ T7166] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.536: couldn't read orphan inode 15 (err -117) [ 372.832558][ T7166] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 373.557327][ T6425] EXT4-fs (loop8): unmounting filesystem. [ 373.563982][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 373.813386][ T7186] loop8: detected capacity change from 0 to 16 [ 373.865275][ T7186] erofs: (device loop8): mounted with root inode @ nid 36. [ 374.129745][ T7189] xt_hashlimit: max too large, truncated to 1048576 [ 374.137179][ T7189] syz.8.539: attempt to access beyond end of device [ 374.137179][ T7189] loop8: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 374.165806][ T7189] syz.8.539: attempt to access beyond end of device [ 374.165806][ T7189] loop8: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 374.183470][ T7189] erofs: (device loop8): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 374.193875][ T7189] syz.8.539: attempt to access beyond end of device [ 374.193875][ T7189] loop8: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 375.496536][ T7204] loop7: detected capacity change from 0 to 256 [ 378.612658][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.618971][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.915066][ T7211] loop8: detected capacity change from 0 to 512 [ 380.392131][ T7211] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.543: couldn't read orphan inode 26 (err -116) [ 380.550719][ T7211] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 380.634731][ T7211] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.708765][ T7211] Quota error (device loop8): do_check_range: Getting block 59136 out of range 0-1 [ 381.830483][ T7222] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 381.902141][ T4323] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 381.978376][ T7234] loop4: detected capacity change from 0 to 512 [ 382.096525][ T7234] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.549: inode has both inline data and extents flags [ 382.131546][ T7234] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.549: couldn't read orphan inode 15 (err -117) [ 382.152386][ T4323] usb 2-1: config 0 has no interfaces? [ 382.158093][ T4323] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 382.178373][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.207193][ T4323] usb 2-1: config 0 descriptor?? [ 382.230766][ T7234] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 382.407193][ T7246] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 382.784772][ T4385] usb 2-1: USB disconnect, device number 8 [ 382.841885][ T6425] EXT4-fs (loop8): unmounting filesystem. [ 383.038059][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 383.044422][ T7251] loop8: detected capacity change from 0 to 16 [ 383.095927][ T7251] erofs: (device loop8): mounted with root inode @ nid 36. [ 383.331978][ T7258] loop4: detected capacity change from 0 to 16 [ 383.990740][ T7258] erofs: (device loop4): mounted with root inode @ nid 36. [ 384.282760][ T7268] xt_hashlimit: max too large, truncated to 1048576 [ 384.289950][ T7268] syz.4.554: attempt to access beyond end of device [ 384.289950][ T7268] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 384.317860][ T7268] syz.4.554: attempt to access beyond end of device [ 384.317860][ T7268] loop4: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 384.335587][ T7268] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 384.345935][ T7268] syz.4.554: attempt to access beyond end of device [ 384.345935][ T7268] loop4: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 386.355978][ T7298] loop8: detected capacity change from 0 to 256 [ 386.363116][ T7298] exfat: Bad value for 'uid' [ 388.100932][ T7] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 388.292009][ T7] usb 10-1: config 0 has no interfaces? [ 388.297739][ T7] usb 10-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 388.345702][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.382059][ T7] usb 10-1: config 0 descriptor?? [ 388.430431][ T4378] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 388.694340][ T4256] usb 10-1: USB disconnect, device number 2 [ 389.072273][ T4378] usb 5-1: config 0 has no interfaces? [ 389.077804][ T4378] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 389.095268][ T4378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.104981][ T4378] usb 5-1: config 0 descriptor?? [ 389.323353][ T7] usb 5-1: USB disconnect, device number 7 [ 389.910748][ T7344] loop9: detected capacity change from 0 to 1024 [ 390.151268][ T7344] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.571: Invalid block bitmap block 0 in block_group 0 [ 390.167470][ T7344] Quota error (device loop9): write_blk: dquota write failed [ 390.175247][ T7344] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 390.185950][ T7344] EXT4-fs error (device loop9): ext4_acquire_dquot:6809: comm syz.9.571: Failed to acquire dquot type 0 [ 390.206436][ T7344] EXT4-fs error (device loop9): ext4_free_blocks:6205: comm syz.9.571: Freeing blocks not in datazone - block = 0, count = 4096 [ 390.222977][ T7344] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.571: Invalid inode bitmap blk 0 in block_group 0 [ 390.237443][ T7344] EXT4-fs error (device loop9) in ext4_free_inode:362: Corrupt filesystem [ 390.279644][ T7344] EXT4-fs (loop9): 1 orphan inode deleted [ 390.285624][ T7344] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 390.366400][ T9] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-8 [ 390.366632][ T9] EXT4-fs error (device loop9): ext4_release_dquot:6845: comm kworker/u4:0: Failed to release dquot type 0 [ 391.046143][ T7362] loop4: detected capacity change from 0 to 512 [ 391.342155][ T7362] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.575: inode has both inline data and extents flags [ 391.420000][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 391.451967][ T7362] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.575: couldn't read orphan inode 15 (err -117) [ 391.474459][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 391.556899][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 391.597442][ T7362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 391.636621][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 391.720483][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 392.010816][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 392.018966][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 392.078825][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 392.114892][ T7378] loop8: detected capacity change from 0 to 256 [ 392.122955][ T7378] exfat: Bad value for 'uid' [ 393.125926][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.138966][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.150525][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.159944][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.168167][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.420715][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.428255][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.436406][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.443854][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.451553][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.451828][ T4259] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 393.459087][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.499665][ T4256] hid-generic 00A0:0005:0003.0003: unknown main item tag 0x0 [ 393.562617][ T4256] hid-generic 00A0:0005:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 393.793113][ T6612] EXT4-fs (loop9): unmounting filesystem. [ 393.800227][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 394.591298][ T5861] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 394.873148][ T5861] usb 9-1: config 0 has no interfaces? [ 394.878752][ T5861] usb 9-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 394.968742][ T5861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.091857][ T5861] usb 9-1: config 0 descriptor?? [ 396.211311][ T7426] loop1: detected capacity change from 0 to 512 [ 396.266016][ T7426] EXT4-fs: Ignoring removed nobh option [ 396.283614][ T7426] ext4: Bad value for 'resgid' [ 396.418432][ T7426] netlink: 96 bytes leftover after parsing attributes in process `syz.1.587'. [ 396.600608][ T4270] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 396.872153][ T4270] usb 10-1: config 0 has no interfaces? [ 396.897239][ T4270] usb 10-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 397.204551][ T4270] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.337511][ T4270] usb 10-1: config 0 descriptor?? [ 397.557380][ T4270] usb 10-1: USB disconnect, device number 3 [ 397.730758][ T4330] usb 9-1: USB disconnect, device number 4 [ 398.290791][ T7455] loop1: detected capacity change from 0 to 256 [ 398.476445][ T7458] hub 2-0:1.0: USB hub found [ 398.482921][ T7458] hub 2-0:1.0: 1 port detected [ 401.322545][ T7473] loop1: detected capacity change from 0 to 16 [ 401.607723][ T7473] erofs: (device loop1): mounted with root inode @ nid 36. [ 403.417896][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 403.488038][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 403.571922][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 403.608126][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 403.636965][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 403.803141][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 403.830389][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 403.837803][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 403.847695][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.105941][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.399191][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.433383][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.473330][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.503691][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.534124][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.554432][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.572948][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.709161][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.808992][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 404.946868][ T4270] hid-generic 00A0:0005:0003.0004: unknown main item tag 0x0 [ 405.198066][ T4270] hid-generic 00A0:0005:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 405.786315][ T7527] loop9: detected capacity change from 0 to 256 [ 406.102090][ T48] Bluetooth: hci7: command 0x1003 tx timeout [ 406.108701][ T4284] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 408.952336][ T7552] loop7: detected capacity change from 0 to 16 [ 409.135748][ T7549] loop8: detected capacity change from 0 to 1024 [ 409.181194][ T27] audit: type=1107 audit(1762479706.655:340): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 409.203952][ T7552] erofs: (device loop7): mounted with root inode @ nid 36. [ 409.325658][ T7561] netlink: 'syz.9.615': attribute type 4 has an invalid length. [ 409.333428][ T7561] netlink: 17 bytes leftover after parsing attributes in process `syz.9.615'. [ 409.987867][ T4896] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 410.701613][ T7568] hub 5-0:1.0: USB hub found [ 410.733272][ T7568] hub 5-0:1.0: 1 port detected [ 413.454604][ T7585] loop9: detected capacity change from 0 to 256 [ 414.162720][ T7596] loop8: detected capacity change from 0 to 256 [ 417.620969][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 418.719061][ T7610] loop4: detected capacity change from 0 to 16 [ 418.810887][ T7610] erofs: (device loop4): mounted with root inode @ nid 36. [ 419.157584][ T7615] netlink: 'syz.8.629': attribute type 4 has an invalid length. [ 419.165381][ T7615] netlink: 17 bytes leftover after parsing attributes in process `syz.8.629'. [ 420.720563][ T7619] syz.4.628: attempt to access beyond end of device [ 420.720563][ T7619] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 420.883671][ T7617] syz.4.628: attempt to access beyond end of device [ 420.883671][ T7617] loop4: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 420.901228][ T7617] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 420.911516][ T7617] syz.4.628: attempt to access beyond end of device [ 420.911516][ T7617] loop4: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 420.937654][ T7618] loop9: detected capacity change from 0 to 16 [ 420.954718][ T7618] erofs: (device loop9): mounted with root inode @ nid 36. [ 424.684353][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 424.758973][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 424.778881][ T7631] loop1: detected capacity change from 0 to 256 [ 424.780979][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.406507][ T7631] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 425.438919][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.474734][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.591717][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.600050][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.644341][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.684499][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.723528][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.760772][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.788824][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.816895][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.837199][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.855275][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.882373][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.900189][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.936767][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 425.955924][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 426.003768][ T125] hid-generic 00A0:0005:0003.0005: unknown main item tag 0x0 [ 427.310702][ T125] hid-generic 00A0:0005:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 427.420382][ T4256] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 427.557637][ T7675] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 429.093329][ T7685] loop1: detected capacity change from 0 to 256 [ 429.925750][ T4256] usb 5-1: device descriptor read/all, error -71 [ 431.079203][ T7691] netlink: 'syz.8.644': attribute type 4 has an invalid length. [ 431.086980][ T7691] netlink: 17 bytes leftover after parsing attributes in process `syz.8.644'. [ 433.210465][ T4256] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 433.576233][ T7717] tipc: Enabled bearer , priority 0 [ 433.765013][ T4256] usb 5-1: config 0 has no interfaces? [ 433.832517][ T4256] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 434.060946][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.161738][ T7715] tipc: Disabling bearer [ 434.181414][ T4256] usb 5-1: config 0 descriptor?? [ 434.208230][ T7727] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 434.217795][ T7727] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 434.228175][ T7727] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 434.478975][ T4256] usb 5-1: USB disconnect, device number 10 [ 434.539669][ T7731] loop9: detected capacity change from 0 to 512 [ 434.765799][ T7731] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.655: inode has both inline data and extents flags [ 434.957940][ T7731] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.655: couldn't read orphan inode 15 (err -117) [ 435.299940][ T7731] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 436.423612][ T6612] EXT4-fs (loop9): unmounting filesystem. [ 437.311537][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 437.507735][ T7749] netlink: 'syz.1.658': attribute type 4 has an invalid length. [ 437.515558][ T7749] netlink: 17 bytes leftover after parsing attributes in process `syz.1.658'. [ 437.590646][ T7753] loop4: detected capacity change from 0 to 256 [ 437.925103][ T7761] loop9: detected capacity change from 0 to 512 [ 437.932252][ T7761] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.209605][ T7761] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 438.232726][ T7761] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 439.790704][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.797038][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.023110][ T7817] loop7: detected capacity change from 0 to 512 [ 446.607103][ T7822] loop9: detected capacity change from 0 to 512 [ 446.662950][ T7822] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.674: inode has both inline data and extents flags [ 446.676831][ T7822] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.674: couldn't read orphan inode 15 (err -117) [ 446.710456][ T7822] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 446.781217][ T7817] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.670: inode has both inline data and extents flags [ 447.027900][ T7817] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.670: couldn't read orphan inode 15 (err -117) [ 447.048633][ T7830] overlayfs: failed to resolve './file1': -2 [ 447.108809][ T7817] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 447.315941][ T6612] EXT4-fs (loop9): unmounting filesystem. [ 447.694751][ T7844] loop9: detected capacity change from 0 to 512 [ 447.702361][ T7844] EXT4-fs: Ignoring removed mblk_io_submit option [ 447.756074][ T7844] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 447.795582][ T7844] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 448.118053][ T28] INFO: task syz.5.407:6467 blocked for more than 144 seconds. [ 448.203028][ T28] Not tainted syzkaller #0 [ 448.400152][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.930407][ T28] task:syz.5.407 state:D stack:28744 pid:6467 ppid:4550 flags:0x00004004 [ 448.939679][ T28] Call Trace: [ 449.030601][ T28] [ 449.068233][ T28] __schedule+0x10ec/0x40b0 [ 449.115449][ T28] ? __sched_text_start+0x8/0x8 [ 449.178517][ T28] ? lock_chain_count+0x20/0x20 [ 449.240558][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 449.294262][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 449.363264][ T28] ? rwsem_down_read_slowpath+0x50a/0x840 [ 449.421678][ T28] schedule+0xb9/0x180 [ 449.468188][ T28] schedule_preempt_disabled+0xf/0x20 [ 449.521590][ T28] rwsem_down_read_slowpath+0x4f4/0x840 [ 449.576576][ T28] ? down_write_killable_nested+0x90/0x90 [ 449.632816][ T28] ? read_lock_is_recursive+0x10/0x10 [ 449.679623][ T28] ? __rwlock_init+0x140/0x140 [ 449.770408][ T28] ? ksys_sync+0x150/0x150 [ 449.774873][ T28] down_read+0x94/0x2d0 [ 449.779043][ T28] ? ksys_sync+0x150/0x150 [ 449.810404][ T28] iterate_supers+0xa4/0x1d0 [ 449.815034][ T28] ksys_sync+0x91/0x150 [ 449.819204][ T28] ? sync_filesystem+0x220/0x220 [ 449.850402][ T28] ? syscall_enter_from_user_mode+0x21/0x80 [ 449.856334][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 449.900784][ T28] __ia32_sys_sync+0xa/0x10 [ 449.905348][ T28] do_syscall_64+0x4c/0xa0 [ 449.909773][ T28] ? clear_bhb_loop+0x60/0xb0 [ 449.950328][ T28] ? clear_bhb_loop+0x60/0xb0 [ 449.955037][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.990383][ T28] RIP: 0033:0x7f2d9b78f6c9 [ 449.994838][ T28] RSP: 002b:00007f2d9c5f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 450.041526][ T28] RAX: ffffffffffffffda RBX: 00007f2d9b9e6090 RCX: 00007f2d9b78f6c9 [ 450.049532][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.080389][ T28] RBP: 00007f2d9b9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.088407][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.160328][ T28] R13: 00007f2d9b9e6128 R14: 00007f2d9b9e6090 R15: 00007ffee7dee7e8 [ 450.168351][ T28] [ 450.190426][ T28] [ 450.190426][ T28] Showing all locks held in the system: [ 450.196140][ T5937] EXT4-fs (loop7): unmounting filesystem. [ 450.241042][ T28] 1 lock held by rcu_tasks_kthre/12: [ 450.246351][ T28] #0: ffffffff8cb2b630 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 450.302094][ T28] 1 lock held by rcu_tasks_trace/13: [ 450.307400][ T28] #0: ffffffff8cb2be50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 450.375484][ T28] 1 lock held by khungtaskd/28: [ 450.395367][ T28] #0: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 450.430466][ T28] 2 locks held by getty/4026: [ 450.435168][ T28] #0: ffff88814d702098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 450.478801][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 450.510480][ T28] 4 locks held by syz.0.199/5390: [ 450.515528][ T28] 1 lock held by syz.5.407/6467: [ 450.540387][ T28] #0: ffff88801b6c20e0 (&type->s_umount_key#31){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 450.603995][ T28] 2 locks held by syz.7.635/7657: [ 450.609040][ T28] 1 lock held by syz.1.675/7847: [ 450.642316][ T28] 2 locks held by rm/7855: [ 450.669427][ T28] [ 450.680419][ T28] ============================================= [ 450.680419][ T28] [ 450.730594][ T28] NMI backtrace for cpu 0 [ 450.734963][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 450.742170][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.752232][ T28] Call Trace: [ 450.755518][ T28] [ 450.758461][ T28] dump_stack_lvl+0x168/0x22e [ 450.763150][ T28] ? irq_work_queue+0xb8/0x140 [ 450.767932][ T28] ? show_regs_print_info+0x12/0x12 [ 450.773142][ T28] ? load_image+0x3b0/0x3b0 [ 450.777656][ T28] ? vprintk_emit+0x571/0x680 [ 450.782345][ T28] ? printk_sprint+0x460/0x460 [ 450.787127][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 450.792082][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 450.798246][ T28] ? _printk+0xcc/0x110 [ 450.802418][ T28] ? load_image+0x3b0/0x3b0 [ 450.806938][ T28] ? load_image+0x3b0/0x3b0 [ 450.811458][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 450.817524][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 450.823495][ T28] watchdog+0xeee/0xf30 [ 450.827641][ T28] ? watchdog+0x1ed/0xf30 [ 450.831959][ T28] kthread+0x29d/0x330 [ 450.836016][ T28] ? hungtask_pm_notify+0x40/0x40 [ 450.841031][ T28] ? kthread_blkcg+0xd0/0xd0 [ 450.845609][ T28] ret_from_fork+0x1f/0x30 [ 450.850019][ T28] [ 450.854409][ T28] Sending NMI from CPU 0 to CPUs 1: [ 450.859653][ C1] NMI backtrace for cpu 1 [ 450.859662][ C1] CPU: 1 PID: 7847 Comm: syz.1.675 Not tainted syzkaller #0 [ 450.859677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.859686][ C1] RIP: 0010:__lock_acquire+0x1449/0x7c50 [ 450.859707][ C1] Code: 00 00 00 42 80 3c 00 00 74 12 4c 89 e7 e8 bf f3 6d 00 49 b8 00 00 00 00 00 fc ff df 49 8b 1c 24 48 85 db 0f 94 c0 48 83 c3 f8 <0f> 94 c1 08 c1 4c 89 b4 24 90 00 00 00 0f 84 99 02 00 00 e8 0f a7 [ 450.859720][ C1] RSP: 0018:ffffc9000e99f220 EFLAGS: 00000097 [ 450.859734][ C1] RAX: 1ffffffff20f0500 RBX: ffffffff90b356a0 RCX: ffffffff81631130 [ 450.859745][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90ae22e0 [ 450.859754][ C1] RBP: ffffc9000e99f470 R08: dffffc0000000000 R09: fffffbfff215c45d [ 450.859765][ C1] R10: fffffbfff215c45d R11: 1ffffffff215c45c R12: ffffffff90782aa8 [ 450.859776][ C1] R13: 00000000cac8fbf7 R14: df8262430aad80f0 R15: ffff888074952890 [ 450.859787][ C1] FS: 00007eff8cb5f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 450.859800][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.859810][ C1] CR2: 000001bf00000000 CR3: 0000000028b85000 CR4: 00000000003506e0 [ 450.859823][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.859831][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.859840][ C1] Call Trace: [ 450.859845][ C1] [ 450.859860][ C1] ? verify_lock_unused+0x140/0x140 [ 450.859878][ C1] ? verify_lock_unused+0x140/0x140 [ 450.859896][ C1] ? finish_task_switch+0x265/0x8f0 [ 450.859913][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 450.859933][ C1] ? finish_task_switch+0x265/0x8f0 [ 450.859954][ C1] lock_acquire+0x1b4/0x490 [ 450.859970][ C1] ? __skb_try_recv_datagram+0x147/0x4d0 [ 450.859990][ C1] ? read_lock_is_recursive+0x10/0x10 [ 450.860007][ C1] ? __mutex_trylock_common+0x14f/0x250 [ 450.860026][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 450.860047][ C1] ? __skb_try_recv_datagram+0x147/0x4d0 [ 450.860061][ C1] ? _raw_spin_lock+0x40/0x40 [ 450.860079][ C1] ? __mutex_lock+0x19e/0xaf0 [ 450.860096][ C1] ? mark_lock+0x94/0x320 [ 450.860114][ C1] __skb_try_recv_datagram+0x147/0x4d0 [ 450.860131][ C1] ? sock_load_diag_module+0x130/0x130 [ 450.860151][ C1] __unix_dgram_recvmsg+0x2d1/0xd70 [ 450.860182][ C1] ? unix_unhash+0x10/0x10 [ 450.860202][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 450.860220][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 450.860236][ C1] ? mark_lock+0x94/0x320 [ 450.860254][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 450.860268][ C1] ? unix_dgram_sendmsg+0x16c0/0x16c0 [ 450.860284][ C1] ____sys_recvmsg+0x292/0x580 [ 450.860306][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 450.860327][ C1] ? import_iovec+0x6f/0xa0 [ 450.860348][ C1] ___sys_recvmsg+0x1b2/0x510 [ 450.860368][ C1] ? __sys_recvmsg+0x270/0x270 [ 450.860392][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 450.860413][ C1] ? __might_fault+0xc2/0x120 [ 450.860425][ C1] ? __might_fault+0xa6/0x120 [ 450.860437][ C1] do_recvmmsg+0x359/0x7d0 [ 450.860458][ C1] ? __sys_recvmmsg+0x280/0x280 [ 450.860476][ C1] ? do_futex+0x310/0x320 [ 450.860499][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 450.860516][ C1] ? rcu_read_lock_sched_held+0x86/0xf0 [ 450.860534][ C1] ? __se_sys_futex+0x14a/0x440 [ 450.860556][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 450.860575][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 450.860594][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 450.860613][ C1] do_syscall_64+0x4c/0xa0 [ 450.860627][ C1] ? clear_bhb_loop+0x60/0xb0 [ 450.860641][ C1] ? clear_bhb_loop+0x60/0xb0 [ 450.860656][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.860670][ C1] RIP: 0033:0x7eff8bd8f6c9 [ 450.860682][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.860694][ C1] RSP: 002b:00007eff8cb5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 450.860709][ C1] RAX: ffffffffffffffda RBX: 00007eff8bfe6090 RCX: 00007eff8bd8f6c9 [ 450.860719][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 450.860728][ C1] RBP: 00007eff8be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 450.860737][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 450.860745][ C1] R13: 00007eff8bfe6128 R14: 00007eff8bfe6090 R15: 00007ffe41ef0ad8 [ 450.860761][ C1] [ 451.702428][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 451.709304][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 451.716512][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.726572][ T28] Call Trace: [ 451.729862][ T28] [ 451.732795][ T28] dump_stack_lvl+0x168/0x22e [ 451.737480][ T28] ? memcpy+0x3c/0x60 [ 451.741475][ T28] ? show_regs_print_info+0x12/0x12 [ 451.746674][ T28] ? load_image+0x3b0/0x3b0 [ 451.751198][ T28] panic+0x2c9/0x710 [ 451.755100][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 451.760740][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 451.765252][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 451.770807][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 451.776969][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 451.783133][ T28] watchdog+0xf2d/0xf30 [ 451.787299][ T28] ? watchdog+0x1ed/0xf30 [ 451.791641][ T28] kthread+0x29d/0x330 [ 451.795715][ T28] ? hungtask_pm_notify+0x40/0x40 [ 451.800741][ T28] ? kthread_blkcg+0xd0/0xd0 [ 451.805340][ T28] ret_from_fork+0x1f/0x30 [ 451.809776][ T28] [ 451.813033][ T28] Kernel Offset: disabled [ 451.817343][ T28] Rebooting in 86400 seconds..