last executing test programs: 13m15.434586393s ago: executing program 1 (id=176): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) r1 = open(&(0x7f0000001840)='./bus\x00', 0xca02, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) write$binfmt_elf64(r1, 0x0, 0x78) 13m15.240817476s ago: executing program 1 (id=177): r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) 13m15.111785389s ago: executing program 1 (id=178): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x0, @empty}}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0x0, 0x0, 0x3000137) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1000}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13m13.587470933s ago: executing program 1 (id=183): keyctl$join(0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48cf, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@discard}, {@fat=@showexec}, {@uni_xlate}, {@utf8no}, {@rodir}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 13m13.283679568s ago: executing program 1 (id=184): syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb0102030109021b0001000020000904c40101fffd0180090582"], 0x0) 13m11.089407763s ago: executing program 1 (id=191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 13m9.985327911s ago: executing program 32 (id=191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 4m44.029215041s ago: executing program 4 (id=1174): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1dae00000000000000000000139d58f0865e72db75240000000018110000d9", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) 4m42.092358948s ago: executing program 4 (id=1177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000540), &(0x7f0000000a40)=@udp6=r3, 0x2}, 0x20) 4m40.9548864s ago: executing program 4 (id=1180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040004", 0x25}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e00090000000000000800000300000004000400"], 0x34}}, 0x84) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000480)=r10) 4m39.742432354s ago: executing program 4 (id=1184): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000006440)='attr\x00') renameat(r1, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54) 4m37.30559455s ago: executing program 4 (id=1189): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='sched_kthread_work_queue_work\x00', 0xffffffffffffffff, 0x0, 0x74}, 0x18) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, 0x0, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) 4m35.438032636s ago: executing program 4 (id=1192): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000dc0)='net/udp\x00') readv(r3, &(0x7f0000003140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000340)={@remote, @empty}, 0xc) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r8, 0x0, 0x7}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d63703836302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f636861727365743d637039353046716e695f786c6174653d302c696f636861727365743d69736f384911f71ae4811ada6f6465706167653d3933362c696f636861727365743d6d616363656e746575726f2c6572726f72733d636f6e74696e75652c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x362, &(0x7f0000000900)="$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") 4m20.194419339s ago: executing program 33 (id=1192): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000dc0)='net/udp\x00') readv(r3, &(0x7f0000003140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000340)={@remote, @empty}, 0xc) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r8, 0x0, 0x7}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d63703836302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f636861727365743d637039353046716e695f786c6174653d302c696f636861727365743d69736f384911f71ae4811ada6f6465706167653d3933362c696f636861727365743d6d616363656e746575726f2c6572726f72733d636f6e74696e75652c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x362, &(0x7f0000000900)="$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") 27.509852661s ago: executing program 2 (id=1627): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x7, 0x4) 27.194571247s ago: executing program 2 (id=1629): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1700000000000000020001dea8c3f1b1fc0cdc8f6cae0703f8fd035e8daa2c81b50163929976d4e6f3a261a428134e037eb55f2a2ad80cb42f67f9d4612a549b8c7f4c4cf88c2ae7c56b68e936811563ee8a6f8a8452d9fa4383ee24df61ef0000000001000000747deed6e900143c2422af28b1bd356ae4c2da8cbea2753317cf", @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = fsmount(r2, 0x0, 0x5) fchdir(r4) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffea2, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x10) pidfd_getfd(r8, r8, 0x0) flock(r6, 0x2) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r11, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 26.977369301s ago: executing program 2 (id=1630): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 24.470247369s ago: executing program 5 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x10}}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 23.079206746s ago: executing program 5 (id=1635): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 21.8709014s ago: executing program 5 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 21.748684072s ago: executing program 2 (id=1638): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x10c00, &(0x7f0000000100)=ANY=[], 0x3, 0x150f, &(0x7f0000000780)="$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") open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) 19.078932933s ago: executing program 5 (id=1639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000540), &(0x7f0000000a40)=@udp6=r3, 0x2}, 0x20) 18.21906813s ago: executing program 2 (id=1642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x4c0c5) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2804458, &(0x7f0000000000)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x502, &(0x7f0000000240)="$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") 16.176694199s ago: executing program 2 (id=1643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2804458, &(0x7f0000000000)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x502, &(0x7f0000000240)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 15.06876398s ago: executing program 3 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYRES32=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x4c0c5) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 14.909899543s ago: executing program 5 (id=1648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11.766582094s ago: executing program 3 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 10.666555655s ago: executing program 0 (id=1650): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(&(0x7f0000001800), 0x200, 0x608801) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x201, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, 0x0, 0x0, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x9) pwritev2(r6, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 9.736750422s ago: executing program 5 (id=1651): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)={0x3, 0x1007, 0x1, 0x3, 0x8001, 0x401}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) 7.704253901s ago: executing program 0 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x4c0c5) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2804458, &(0x7f0000000000)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x502, &(0x7f0000000240)="$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") 3.757657278s ago: executing program 3 (id=1653): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x24}}], 0x20, 0x24000010}}], 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40010062, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1], 0x58}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 3.598581871s ago: executing program 0 (id=1654): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1dae00000000000000000000139d58f0865e72db75240000000018110000d9", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) 2.620089309s ago: executing program 0 (id=1655): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000003fc0)=""/4112, 0x1010) 2.567278501s ago: executing program 3 (id=1656): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="070964a3967c00000100098a0000f7ff000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000008000"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x2000000000000329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3000000) 1.786619565s ago: executing program 0 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b32356d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d17c708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08cdc339081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9d6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f74a2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bcff00000000000000fec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420ae305fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42f48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fadf9ffffff238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3b99caf6b00d84a604047497022d9c30e23ef4df5c89644f48bb536f7946b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6020048cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffee738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c65a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c3329c8a6b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d2a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d009000000c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb7847c7148b6ce431bb90e29389f22fc5b59a70efaea2bd40195af4486220d70bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24622a4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744d9b6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de99258842cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b9906009af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}]}, 0x24}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1.318251744s ago: executing program 3 (id=1658): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 567.683698ms ago: executing program 0 (id=1659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109100, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) r2 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x0, 0x1fb, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) fadvise64(r3, 0xaa17, 0xff39, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0xac38, 0x9}}, 0x30) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x240000, 0x0) r4 = openat$incfs(r2, &(0x7f0000000040)='.log\x00', 0x103000, 0x40) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000001c0)={0x3, 0x7ff, 0x13, &(0x7f0000000080)=""/19}) 519.77588ms ago: executing program 34 (id=1643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2804458, &(0x7f0000000000)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x502, &(0x7f0000000240)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 0s ago: executing program 3 (id=1661): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0xfffffffc, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000280)={0x0, r10}) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, 0x0) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f00000002c0)={0x400002, r10}) kernel console output (not intermixed with test programs): ce=cf.91 [ 505.343809][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.665336][ T9] usb 4-1: config 0 descriptor?? [ 505.722903][ T9] usb 4-1: can't set config #0, error -71 [ 505.724669][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.739246][ T9] usb 4-1: USB disconnect, device number 13 [ 510.154720][ T9794] wg1 speed is unknown, defaulting to 1000 [ 510.689488][ T9812] loop2: detected capacity change from 0 to 256 [ 511.204197][ T9812] FAT-fs (loop2): Directory bread(block 64) failed [ 511.211121][ T9812] FAT-fs (loop2): Directory bread(block 65) failed [ 511.218742][ T9812] FAT-fs (loop2): Directory bread(block 66) failed [ 511.225517][ T9812] FAT-fs (loop2): Directory bread(block 67) failed [ 511.232618][ T9812] FAT-fs (loop2): Directory bread(block 68) failed [ 511.239435][ T9812] FAT-fs (loop2): Directory bread(block 69) failed [ 511.246588][ T9812] FAT-fs (loop2): Directory bread(block 70) failed [ 511.253242][ T9812] FAT-fs (loop2): Directory bread(block 71) failed [ 511.260352][ T9812] FAT-fs (loop2): Directory bread(block 72) failed [ 511.267045][ T9812] FAT-fs (loop2): Directory bread(block 73) failed [ 512.765095][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 512.911198][ T9817] (null): rxe_set_mtu: Set mtu to 1024 [ 513.096114][ T9817] rdma_rxe: rxe_newlink: failed to add wg1 [ 513.662605][ T9825] loop4: detected capacity change from 0 to 512 [ 513.724305][ T9825] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.933: iget: bad extended attribute block 1 [ 513.807917][ T9825] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.933: couldn't read orphan inode 15 (err -117) [ 514.031202][ T9825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.202769][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.933'. [ 514.219835][ T9835] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 514.224343][ T9836] overlayfs: failed to resolve './file0': -2 [ 515.280431][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.748230][ T9848] Illegal XDP return value 2025455659 on prog (id 318) dev N/A, expect packet loss! [ 515.942194][ T9850] syz.4.938 uses obsolete (PF_INET,SOCK_PACKET) [ 517.654118][ T9860] ip6gretap1: entered allmulticast mode [ 517.699111][ T9860] bridge0: port 3(syz_tun) entered blocking state [ 517.706242][ T9860] bridge0: port 3(syz_tun) entered disabled state [ 517.713539][ T9860] syz_tun: entered allmulticast mode [ 517.727020][ T9860] syz_tun: entered promiscuous mode [ 518.561809][ T9863] loop2: detected capacity change from 0 to 512 [ 518.588018][ T9863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 518.673262][ T9865] loop4: detected capacity change from 0 to 512 [ 518.689103][ T9863] EXT4-fs (loop2): 1 truncate cleaned up [ 518.705120][ T9863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.749231][ T9865] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.946: iget: bad extended attribute block 1 [ 518.805640][ T9865] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.946: couldn't read orphan inode 15 (err -117) [ 518.809205][ T9871] input: syz0 as /devices/virtual/input/input65 [ 518.831187][ T9865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.922948][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.946'. [ 518.939505][ T9872] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 519.556780][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.691184][ T9881] loop3: detected capacity change from 0 to 512 [ 519.768815][ T9881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.781547][ T9881] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.793796][ T9881] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.129480][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.975844][ T9909] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 526.530579][ T9915] loop0: detected capacity change from 0 to 512 [ 526.544316][ T9915] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 526.726059][ T9915] EXT4-fs (loop0): 1 truncate cleaned up [ 526.749455][ T9915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.699440][ T9909] loop4: detected capacity change from 0 to 1024 [ 528.291413][ T9909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.342168][ T9923] loop3: detected capacity change from 0 to 512 [ 528.364602][ T9909] fuse: Bad value for 'fd' [ 528.921399][ T9923] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.958: iget: bad extended attribute block 1 [ 529.053994][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.165513][ T9923] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.958: couldn't read orphan inode 15 (err -117) [ 529.223503][ T9923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.456448][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.958'. [ 529.472690][ T9926] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 529.698460][ T9918] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.946950][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.226426][ T9933] loop0: detected capacity change from 0 to 256 [ 533.551893][ T9936] syz.4.960 (9936) used greatest stack depth: 17032 bytes left [ 533.600876][ T9933] FAT-fs (loop0): Directory bread(block 64) failed [ 533.607582][ T9933] FAT-fs (loop0): Directory bread(block 65) failed [ 533.614212][ T9933] FAT-fs (loop0): Directory bread(block 66) failed [ 533.620846][ T9933] FAT-fs (loop0): Directory bread(block 67) failed [ 533.627506][ T9933] FAT-fs (loop0): Directory bread(block 68) failed [ 533.634067][ T9933] FAT-fs (loop0): Directory bread(block 69) failed [ 533.641844][ T9933] FAT-fs (loop0): Directory bread(block 70) failed [ 533.648556][ T9933] FAT-fs (loop0): Directory bread(block 71) failed [ 533.655278][ T9933] FAT-fs (loop0): Directory bread(block 72) failed [ 533.661812][ T9933] FAT-fs (loop0): Directory bread(block 73) failed [ 534.067464][ T9943] loop4: detected capacity change from 0 to 512 [ 534.423776][ T9943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.437286][ T9943] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.464208][ T9943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.056301][ T9952] bridge0: port 4(syz_tun) entered blocking state [ 535.063279][ T9952] bridge0: port 4(syz_tun) entered disabled state [ 535.070716][ T9952] syz_tun: entered allmulticast mode [ 535.084127][ T9952] syz_tun: entered promiscuous mode [ 535.735765][ T9958] overlayfs: failed to resolve './file1': -2 [ 536.359256][ T9961] overlayfs: failed to resolve './file0': -2 [ 538.484434][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 538.698663][ T9980] 9pnet_fd: Insufficient options for proto=fd [ 543.464681][T10008] loop2: detected capacity change from 0 to 128 [ 544.913434][T10022] loop2: detected capacity change from 0 to 512 [ 545.352828][T10022] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.980: iget: bad extended attribute block 1 [ 545.620380][T10022] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.980: couldn't read orphan inode 15 (err -117) [ 545.670362][T10022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.849474][T10030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 545.864953][T10030] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 546.032208][T10032] loop3: detected capacity change from 0 to 512 [ 546.051978][T10032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 546.141191][T10032] EXT4-fs (loop3): 1 truncate cleaned up [ 546.153946][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.183467][T10032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.400986][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.863810][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 549.782298][T10071] loop4: detected capacity change from 0 to 512 [ 549.870630][T10071] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.994: iget: bad extended attribute block 1 [ 549.906403][T10071] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.994: couldn't read orphan inode 15 (err -117) [ 549.942192][T10071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.258481][T10082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.994'. [ 550.282925][T10082] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 551.739721][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.964109][T10090] loop0: detected capacity change from 0 to 512 [ 552.004511][T10090] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.999: iget: bad extended attribute block 1 [ 552.089500][T10090] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.999: couldn't read orphan inode 15 (err -117) [ 553.069766][T10090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.874967][T10105] loop2: detected capacity change from 0 to 2048 [ 555.606577][T10077] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 556.375926][T10105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.766746][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.801228][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.130735][T10121] loop3: detected capacity change from 0 to 512 [ 558.393761][T10121] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1006: iget: bad extended attribute block 1 [ 558.706291][T10121] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1006: couldn't read orphan inode 15 (err -117) [ 558.834147][T10124] loop0: detected capacity change from 0 to 512 [ 558.932436][T10124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.946054][T10124] EXT4-fs (loop0): Test dummy encryption mode enabled [ 558.955305][T10121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.000313][T10124] EXT4-fs (loop0): 1 truncate cleaned up [ 559.020308][T10124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.799475][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1006'. [ 559.810700][T10121] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 559.860548][T10136] loop2: detected capacity change from 0 to 512 [ 559.921141][T10136] EXT4-fs: Ignoring removed mblk_io_submit option [ 560.061398][T10136] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 560.113273][T10136] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1009: attempt to clear invalid blocks 2 len 1 [ 560.280298][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.284824][T10136] EXT4-fs (loop2): Remounting filesystem read-only [ 561.056264][T10136] EXT4-fs (loop2): 1 truncate cleaned up [ 561.063186][T10136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.406497][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.272039][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.328509][T10155] loop4: detected capacity change from 0 to 512 [ 562.427359][T10155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.572919][T10162] overlayfs: failed to resolve './file0': -2 [ 562.653146][T10155] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.673539][T10155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.809097][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.815597][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.430334][T10174] loop3: detected capacity change from 0 to 1024 [ 563.471368][T10174] EXT4-fs (loop3): Test dummy encryption mode enabled [ 563.514888][T10174] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 563.577343][T10174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.658567][T10174] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 563.977511][T10178] xt_bpf: check failed: parse error [ 564.517271][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.200846][T10188] loop3: detected capacity change from 0 to 512 [ 565.295253][T10188] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 565.341693][T10188] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 565.356474][T10188] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.1019: corrupted in-inode xattr: e_value size too large [ 565.373528][T10188] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1019: couldn't read orphan inode 15 (err -117) [ 565.442355][T10188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.998218][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.422848][T10202] loop0: detected capacity change from 0 to 512 [ 568.435120][T10202] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 568.489890][T10202] EXT4-fs (loop0): 1 truncate cleaned up [ 568.509273][T10202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.558074][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.713348][T10207] loop3: detected capacity change from 0 to 512 [ 569.851684][T10207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.893947][T10207] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.140916][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.569262][T10221] loop2: detected capacity change from 0 to 512 [ 571.578122][T10221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 571.659291][T10222] overlayfs: failed to resolve './file0': -2 [ 571.766280][T10221] EXT4-fs (loop2): Test dummy encryption mode enabled [ 572.041378][T10221] EXT4-fs (loop2): 1 truncate cleaned up [ 572.106200][T10221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.088429][T10190] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 576.529189][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.145403][T10253] wg1 speed is unknown, defaulting to 1000 [ 577.559489][T10254] loop4: detected capacity change from 0 to 512 [ 577.759837][T10254] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 577.768301][T10254] System zones: 0-2, 18-18, 34-34 [ 577.797273][T10254] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #3: comm syz.4.1034: corrupted inode contents [ 577.813041][T10254] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #3: comm syz.4.1034: mark_inode_dirty error [ 577.835247][T10254] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #3: comm syz.4.1034: corrupted inode contents [ 577.848220][T10254] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.1034: mark_inode_dirty error [ 577.883411][T10254] Quota error (device loop4): write_blk: dquota write failed [ 577.891920][T10254] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 577.902088][T10254] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1034: Failed to acquire dquot type 0 [ 577.961686][T10254] EXT4-fs (loop4): 1 orphan inode deleted [ 577.974020][T10254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.004033][T10254] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.976837][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.222350][T10277] loop2: detected capacity change from 0 to 256 [ 580.254437][T10277] FAT-fs (loop2): Directory bread(block 64) failed [ 580.261216][T10277] FAT-fs (loop2): Directory bread(block 65) failed [ 580.267940][T10277] FAT-fs (loop2): Directory bread(block 66) failed [ 580.274466][T10277] FAT-fs (loop2): Directory bread(block 67) failed [ 580.287340][T10277] FAT-fs (loop2): Directory bread(block 68) failed [ 580.293892][T10277] FAT-fs (loop2): Directory bread(block 69) failed [ 580.300551][T10277] FAT-fs (loop2): Directory bread(block 70) failed [ 580.307339][T10277] FAT-fs (loop2): Directory bread(block 71) failed [ 580.313976][T10277] FAT-fs (loop2): Directory bread(block 72) failed [ 580.320561][T10277] FAT-fs (loop2): Directory bread(block 73) failed [ 580.467141][T10280] loop4: detected capacity change from 0 to 512 [ 580.494875][T10280] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1041: iget: bad extended attribute block 1 [ 580.509318][T10280] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1041: couldn't read orphan inode 15 (err -117) [ 580.552508][T10280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.745657][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1041'. [ 580.761086][T10280] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 580.948562][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.054849][ T9359] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 583.582647][ T9359] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 583.864399][ T9359] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 583.880255][ T9359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.944323][T10292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 583.999678][T10300] input: syz0 as /devices/virtual/input/input66 [ 585.174994][ T9359] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 585.220463][ T9359] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input67 [ 585.353326][ T9359] usb 5-1: USB disconnect, device number 7 [ 585.353379][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 585.610841][T10311] netlink: 'syz.2.1048': attribute type 3 has an invalid length. [ 585.620639][T10311] netlink: 'syz.2.1048': attribute type 3 has an invalid length. [ 585.628620][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 585.654026][T10311] usb usb1: check_ctrlrecip: process 10311 (syz.2.1048) requesting ep 01 but needs 81 [ 585.673374][T10312] 9pnet_fd: Insufficient options for proto=fd [ 586.575208][T10319] wg1 speed is unknown, defaulting to 1000 [ 586.715048][T10323] loop4: detected capacity change from 0 to 256 [ 586.744903][T10323] FAT-fs (loop4): Directory bread(block 64) failed [ 586.751464][T10323] FAT-fs (loop4): Directory bread(block 65) failed [ 586.758420][T10323] FAT-fs (loop4): Directory bread(block 66) failed [ 586.765065][T10323] FAT-fs (loop4): Directory bread(block 67) failed [ 586.771668][T10323] FAT-fs (loop4): Directory bread(block 68) failed [ 586.778253][T10323] FAT-fs (loop4): Directory bread(block 69) failed [ 586.785265][T10323] FAT-fs (loop4): Directory bread(block 70) failed [ 586.791813][T10323] FAT-fs (loop4): Directory bread(block 71) failed [ 586.798462][T10323] FAT-fs (loop4): Directory bread(block 72) failed [ 586.805165][T10323] FAT-fs (loop4): Directory bread(block 73) failed [ 587.736681][T10331] loop4: detected capacity change from 0 to 16 [ 587.795691][T10331] erofs: (device loop4): mounted with root inode @ nid 36. [ 588.589106][T10336] loop3: detected capacity change from 0 to 512 [ 588.761467][T10336] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 588.771312][T10336] EXT4-fs (loop3): orphan cleanup on readonly fs [ 588.781898][T10336] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 588.792674][T10336] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 588.822536][T10336] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 588.840977][T10336] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1055: bg 0: block 40: padding at end of block bitmap is not set [ 588.857276][T10336] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 588.869270][T10336] EXT4-fs (loop3): 1 truncate cleaned up [ 588.881446][T10336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 589.641229][T10331] syz.4.1054: attempt to access beyond end of device [ 589.641229][T10331] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 590.876559][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.181327][T10353] loop2: detected capacity change from 0 to 512 [ 591.345871][T10353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.368346][T10353] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.739241][T10360] 9pnet_fd: Insufficient options for proto=fd [ 591.809787][T10355] netlink: 'syz.0.1061': attribute type 3 has an invalid length. [ 591.817767][T10355] netlink: 'syz.0.1061': attribute type 3 has an invalid length. [ 591.825609][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 591.839392][T10355] usb usb1: check_ctrlrecip: process 10355 (syz.0.1061) requesting ep 01 but needs 81 [ 592.473142][T10358] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 592.618978][T10374] loop0: detected capacity change from 0 to 256 [ 592.975273][T10374] FAT-fs (loop0): Directory bread(block 64) failed [ 592.981865][T10374] FAT-fs (loop0): Directory bread(block 65) failed [ 592.988624][T10374] FAT-fs (loop0): Directory bread(block 66) failed [ 592.995454][T10374] FAT-fs (loop0): Directory bread(block 67) failed [ 593.002122][T10374] FAT-fs (loop0): Directory bread(block 68) failed [ 593.008682][T10374] FAT-fs (loop0): Directory bread(block 69) failed [ 593.015315][T10374] FAT-fs (loop0): Directory bread(block 70) failed [ 593.021850][T10374] FAT-fs (loop0): Directory bread(block 71) failed [ 593.028468][T10374] FAT-fs (loop0): Directory bread(block 72) failed [ 593.035993][T10374] FAT-fs (loop0): Directory bread(block 73) failed [ 593.109101][T10372] input: syz0 as /devices/virtual/input/input68 [ 595.984564][T10393] loop3: detected capacity change from 0 to 40427 [ 596.015657][T10393] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 596.058472][T10393] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 596.087699][T10393] F2FS-fs (loop3): Unrecognized mount option "1844674407370955161518446744073709551615" or missing value [ 597.553047][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.629774][T10403] 9pnet_fd: Insufficient options for proto=fd [ 598.635138][T10412] netlink: 'syz.3.1072': attribute type 3 has an invalid length. [ 598.644456][T10412] netlink: 'syz.3.1072': attribute type 3 has an invalid length. [ 598.653010][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 598.675533][T10412] usb usb1: check_ctrlrecip: process 10412 (syz.3.1072) requesting ep 01 but needs 81 [ 601.632983][T10426] loop2: detected capacity change from 0 to 256 [ 602.527839][T10420] input: syz0 as /devices/virtual/input/input69 [ 602.549963][T10426] FAT-fs (loop2): Directory bread(block 64) failed [ 602.557104][T10426] FAT-fs (loop2): Directory bread(block 65) failed [ 602.563765][T10426] FAT-fs (loop2): Directory bread(block 66) failed [ 602.570413][T10426] FAT-fs (loop2): Directory bread(block 67) failed [ 602.577118][T10426] FAT-fs (loop2): Directory bread(block 68) failed [ 602.583824][T10426] FAT-fs (loop2): Directory bread(block 69) failed [ 602.590447][T10426] FAT-fs (loop2): Directory bread(block 70) failed [ 602.597024][T10426] FAT-fs (loop2): Directory bread(block 71) failed [ 602.603586][T10426] FAT-fs (loop2): Directory bread(block 72) failed [ 602.610200][T10426] FAT-fs (loop2): Directory bread(block 73) failed [ 602.689384][T10429] loop0: detected capacity change from 0 to 512 [ 602.717572][T10429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 602.837688][T10429] EXT4-fs (loop0): Test dummy encryption mode enabled [ 602.913911][T10429] EXT4-fs (loop0): 1 truncate cleaned up [ 602.963825][T10429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.540293][T10437] loop3: detected capacity change from 0 to 2048 [ 603.685070][T10431] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 603.826636][T10437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.572132][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.782477][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.867685][T10434] loop2: detected capacity change from 0 to 40427 [ 606.046690][T10434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 606.109843][T10451] (null): rxe_set_mtu: Set mtu to 1024 [ 606.146191][T10451] rdma_rxe: rxe_newlink: failed to add wg1 [ 606.673165][T10457] loop0: detected capacity change from 0 to 512 [ 606.711141][T10457] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 606.775723][T10457] EXT4-fs (loop0): 1 truncate cleaned up [ 606.782604][T10457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.137244][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.283207][T10473] loop0: detected capacity change from 0 to 256 [ 609.178370][T10473] FAT-fs (loop0): Directory bread(block 64) failed [ 609.185074][T10473] FAT-fs (loop0): Directory bread(block 65) failed [ 609.191626][T10473] FAT-fs (loop0): Directory bread(block 66) failed [ 609.198178][T10473] FAT-fs (loop0): Directory bread(block 67) failed [ 609.204826][T10473] FAT-fs (loop0): Directory bread(block 68) failed [ 609.212078][T10473] FAT-fs (loop0): Directory bread(block 69) failed [ 609.218672][T10473] FAT-fs (loop0): Directory bread(block 70) failed [ 609.225197][T10473] FAT-fs (loop0): Directory bread(block 71) failed [ 609.231746][T10473] FAT-fs (loop0): Directory bread(block 72) failed [ 609.238275][T10473] FAT-fs (loop0): Directory bread(block 73) failed [ 609.612901][T10475] input: syz0 as /devices/virtual/input/input70 [ 609.647370][T10481] loop0: detected capacity change from 0 to 512 [ 609.869386][T10481] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1089: iget: bad extended attribute block 1 [ 609.882495][T10481] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1089: couldn't read orphan inode 15 (err -117) [ 610.153577][T10481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.385549][T10487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 610.400192][T10487] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 610.663705][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.186294][T10497] loop0: detected capacity change from 0 to 2048 [ 614.344803][T10498] (null): rxe_set_mtu: Set mtu to 1024 [ 614.352720][T10498] rdma_rxe: rxe_newlink: failed to add wg1 [ 615.490641][T10497] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 615.807545][T10503] loop0: detected capacity change from 0 to 512 [ 615.896259][T10503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 615.947489][T10503] EXT4-fs (loop0): 1 truncate cleaned up [ 615.969767][T10503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.035620][T10506] 9pnet_fd: Insufficient options for proto=fd [ 616.185279][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.391383][T10515] loop0: detected capacity change from 0 to 512 [ 616.445323][T10515] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1098: iget: bad extended attribute block 1 [ 616.502869][T10515] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1098: couldn't read orphan inode 15 (err -117) [ 616.535428][T10518] loop3: detected capacity change from 0 to 256 [ 616.585426][T10518] FAT-fs (loop3): Directory bread(block 64) failed [ 616.592037][T10518] FAT-fs (loop3): Directory bread(block 65) failed [ 616.598898][T10518] FAT-fs (loop3): Directory bread(block 66) failed [ 616.605552][T10518] FAT-fs (loop3): Directory bread(block 67) failed [ 616.612146][T10518] FAT-fs (loop3): Directory bread(block 68) failed [ 616.618813][T10518] FAT-fs (loop3): Directory bread(block 69) failed [ 616.625475][T10518] FAT-fs (loop3): Directory bread(block 70) failed [ 616.632005][T10518] FAT-fs (loop3): Directory bread(block 71) failed [ 616.638648][T10518] FAT-fs (loop3): Directory bread(block 72) failed [ 616.645663][T10518] FAT-fs (loop3): Directory bread(block 73) failed [ 616.696438][T10515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.656379][T10519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1098'. [ 617.671142][T10519] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 618.034571][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.670840][T10534] loop0: detected capacity change from 0 to 2048 [ 619.804462][T10534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.365353][T10537] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 622.289957][T10546] (null): rxe_set_mtu: Set mtu to 1024 [ 622.296479][T10546] rdma_rxe: rxe_newlink: failed to add wg1 [ 622.679599][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.799988][T10549] loop4: detected capacity change from 0 to 512 [ 622.841748][T10549] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 622.941562][T10549] EXT4-fs (loop4): 1 truncate cleaned up [ 623.148626][T10549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.183838][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'. [ 623.923908][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.040256][T10560] loop0: detected capacity change from 0 to 512 [ 624.063142][T10560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 624.107691][T10560] EXT4-fs (loop0): Test dummy encryption mode enabled [ 624.203565][T10562] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.268884][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.275338][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.315597][T10560] EXT4-fs (loop0): 1 truncate cleaned up [ 624.430545][T10560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.593635][T10566] input: syz0 as /devices/virtual/input/input71 [ 625.611934][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.742523][T10581] loop4: detected capacity change from 0 to 512 [ 626.053158][T10581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.066250][T10581] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.085347][T10581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.306209][T10601] loop4: detected capacity change from 0 to 512 [ 629.341422][T10601] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1116: iget: bad extended attribute block 1 [ 629.385217][T10601] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1116: couldn't read orphan inode 15 (err -117) [ 629.421148][T10601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.871461][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 630.106087][T10601] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 630.490655][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1117'. [ 631.653106][T10614] usb usb1: check_ctrlrecip: process 10614 (syz.0.1118) requesting ep 01 but needs 81 [ 632.118294][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.167286][T10620] input: syz0 as /devices/virtual/input/input72 [ 632.527334][T10623] xt_TPROXY: Can be used only with -p tcp or -p udp [ 633.765869][T10639] ip6gretap1: entered allmulticast mode [ 633.805270][T10639] bridge0: port 3(syz_tun) entered blocking state [ 633.812299][T10639] bridge0: port 3(syz_tun) entered disabled state [ 633.819634][T10639] syz_tun: entered allmulticast mode [ 633.832863][T10639] syz_tun: entered promiscuous mode [ 634.439942][T10640] loop2: detected capacity change from 0 to 512 [ 634.547886][T10640] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 634.631263][T10640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 634.654389][T10640] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1123: corrupted in-inode xattr: e_value size too large [ 634.670374][T10640] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1123: couldn't read orphan inode 15 (err -117) [ 634.695388][T10640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.540534][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'. [ 636.380242][T10649] loop3: detected capacity change from 0 to 512 [ 636.411340][T10649] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 636.508326][T10649] EXT4-fs (loop3): 1 truncate cleaned up [ 636.558518][T10649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.828301][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.847704][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.186089][T10660] usb usb1: check_ctrlrecip: process 10660 (syz.2.1130) requesting ep 01 but needs 81 [ 639.727988][T10664] input: syz0 as /devices/virtual/input/input73 [ 640.812423][T10679] loop2: detected capacity change from 0 to 2048 [ 640.852208][T10679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.433741][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.744876][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'. [ 642.465675][T10688] (null): rxe_set_mtu: Set mtu to 1024 [ 642.493493][T10688] rdma_rxe: rxe_newlink: failed to add wg1 [ 643.815353][T10696] loop2: detected capacity change from 0 to 512 [ 644.018691][T10696] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 644.069942][T10696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 644.084504][T10696] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1139: corrupted in-inode xattr: e_value size too large [ 644.105725][T10696] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1139: couldn't read orphan inode 15 (err -117) [ 644.135337][T10696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.281394][T10701] loop4: detected capacity change from 0 to 512 [ 645.319164][T10701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 645.407111][T10701] EXT4-fs (loop4): Test dummy encryption mode enabled [ 645.461573][T10701] EXT4-fs (loop4): 1 truncate cleaned up [ 645.498307][T10701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.640001][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.732139][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.397581][T10723] input: syz0 as /devices/virtual/input/input74 [ 648.664052][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 649.602443][T10732] input: syz0 as /devices/virtual/input/input75 [ 650.243950][T10737] usb usb1: check_ctrlrecip: process 10737 (syz.0.1149) requesting ep 01 but needs 81 [ 651.448144][T10742] loop3: detected capacity change from 0 to 512 [ 651.460012][T10742] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 651.472276][T10742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 651.480770][T10742] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.1150: corrupted in-inode xattr: e_value size too large [ 651.503650][T10742] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1150: couldn't read orphan inode 15 (err -117) [ 651.516701][T10742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.174943][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.317302][T10747] loop2: detected capacity change from 0 to 512 [ 652.358445][T10747] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 652.470853][T10747] EXT4-fs (loop2): 1 truncate cleaned up [ 652.492729][T10747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.671198][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.148455][T10756] loop0: detected capacity change from 0 to 256 [ 653.173804][T10756] FAT-fs (loop0): Directory bread(block 64) failed [ 653.181990][T10756] FAT-fs (loop0): Directory bread(block 65) failed [ 653.188726][T10756] FAT-fs (loop0): Directory bread(block 66) failed [ 653.195360][T10756] FAT-fs (loop0): Directory bread(block 67) failed [ 653.201987][T10756] FAT-fs (loop0): Directory bread(block 68) failed [ 653.208705][T10756] FAT-fs (loop0): Directory bread(block 69) failed [ 653.215324][T10756] FAT-fs (loop0): Directory bread(block 70) failed [ 653.221855][T10756] FAT-fs (loop0): Directory bread(block 71) failed [ 653.228507][T10756] FAT-fs (loop0): Directory bread(block 72) failed [ 653.235192][T10756] FAT-fs (loop0): Directory bread(block 73) failed [ 653.507612][T10764] input: syz0 as /devices/virtual/input/input76 [ 653.930040][T10759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1154'. [ 654.233838][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1157'. [ 655.045355][T10774] (null): rxe_set_mtu: Set mtu to 1024 [ 655.051640][T10774] rdma_rxe: rxe_newlink: failed to add wg1 [ 655.150310][T10771] loop4: detected capacity change from 0 to 512 [ 655.157760][T10771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 655.458358][T10771] EXT4-fs (loop4): Test dummy encryption mode enabled [ 655.680226][T10771] EXT4-fs (loop4): 1 truncate cleaned up [ 655.689714][T10771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.001383][T10780] loop0: detected capacity change from 0 to 512 [ 656.106383][T10780] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 656.146543][T10780] EXT4-fs (loop0): 1 truncate cleaned up [ 656.180924][T10780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.296088][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.406344][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.093120][T10800] loop2: detected capacity change from 0 to 256 [ 658.363367][T10800] FAT-fs (loop2): Directory bread(block 64) failed [ 658.375760][T10800] FAT-fs (loop2): Directory bread(block 65) failed [ 658.383226][T10800] FAT-fs (loop2): Directory bread(block 66) failed [ 658.430649][T10800] FAT-fs (loop2): Directory bread(block 67) failed [ 658.438610][T10800] FAT-fs (loop2): Directory bread(block 68) failed [ 658.446768][T10800] FAT-fs (loop2): Directory bread(block 69) failed [ 658.487322][T10800] FAT-fs (loop2): Directory bread(block 70) failed [ 658.499340][T10800] FAT-fs (loop2): Directory bread(block 71) failed [ 658.506711][T10800] FAT-fs (loop2): Directory bread(block 72) failed [ 658.513261][T10800] FAT-fs (loop2): Directory bread(block 73) failed [ 658.520086][T10801] input: syz0 as /devices/virtual/input/input77 [ 660.062111][T10812] loop3: detected capacity change from 0 to 512 [ 660.075659][T10812] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 660.190951][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1169'. [ 661.133855][T10819] usb usb1: check_ctrlrecip: process 10819 (syz.4.1170) requesting ep 01 but needs 81 [ 661.358606][T10812] EXT4-fs (loop3): 1 truncate cleaned up [ 661.407842][T10812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.774902][T10822] loop0: detected capacity change from 0 to 2048 [ 661.816440][T10822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.860791][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.758844][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.967072][T10841] loop3: detected capacity change from 0 to 512 [ 664.132493][T10841] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1178: iget: bad extended attribute block 1 [ 664.152346][T10841] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1178: couldn't read orphan inode 15 (err -117) [ 664.174936][T10841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.514955][T10847] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 665.002507][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.340875][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 668.779897][T10876] usb usb1: check_ctrlrecip: process 10876 (syz.2.1183) requesting ep 01 but needs 81 [ 668.960892][T10879] loop4: detected capacity change from 0 to 512 [ 669.021651][T10879] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1189: iget: bad extended attribute block 1 [ 669.056242][T10879] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1189: couldn't read orphan inode 15 (err -117) [ 669.098238][T10879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.269218][T10887] overlayfs: failed to resolve './file0': -2 [ 670.063917][T10889] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 670.304308][ T6642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.332736][T10892] loop2: detected capacity change from 0 to 512 [ 670.372750][T10892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 670.438393][T10892] EXT4-fs (loop2): Test dummy encryption mode enabled [ 670.515199][T10892] EXT4-fs (loop2): 1 truncate cleaned up [ 670.522047][T10892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.082201][T10902] loop4: detected capacity change from 0 to 256 [ 671.185560][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'. [ 671.391764][T10902] FAT-fs (loop4): Directory bread(block 64) failed [ 671.577836][T10902] FAT-fs (loop4): Directory bread(block 65) failed [ 671.736822][T10902] FAT-fs (loop4): Directory bread(block 66) failed [ 671.805151][T10902] FAT-fs (loop4): Directory bread(block 67) failed [ 671.844526][T10902] FAT-fs (loop4): Directory bread(block 68) failed [ 671.851255][T10902] FAT-fs (loop4): Directory bread(block 69) failed [ 671.858654][T10902] FAT-fs (loop4): Directory bread(block 70) failed [ 671.865609][T10902] FAT-fs (loop4): Directory bread(block 71) failed [ 671.872646][T10902] FAT-fs (loop4): Directory bread(block 72) failed [ 671.880321][T10902] FAT-fs (loop4): Directory bread(block 73) failed [ 671.953219][T10908] loop3: detected capacity change from 0 to 512 [ 671.978923][T10908] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 672.039020][T10908] EXT4-fs (loop3): 1 truncate cleaned up [ 672.061907][T10908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.237135][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.128064][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.596777][T10928] usb usb1: check_ctrlrecip: process 10928 (syz.0.1199) requesting ep 01 but needs 81 [ 674.447023][T10930] loop2: detected capacity change from 0 to 512 [ 674.518652][T10930] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1200: iget: bad extended attribute block 1 [ 674.637612][T10930] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1200: couldn't read orphan inode 15 (err -117) [ 674.688027][T10930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.865084][T10935] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 675.311678][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.749875][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 678.228489][T10955] loop0: detected capacity change from 0 to 512 [ 678.341736][T10955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.354394][T10955] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.367075][T10955] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.851622][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 679.053188][T10968] (null): rxe_set_mtu: Set mtu to 1024 [ 679.093755][T10968] rdma_rxe: rxe_newlink: failed to add wg1 [ 679.769463][T10971] loop0: detected capacity change from 0 to 512 [ 679.811838][T10971] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1210: iget: bad extended attribute block 1 [ 679.851019][T10971] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1210: couldn't read orphan inode 15 (err -117) [ 679.933114][T10979] usb usb1: check_ctrlrecip: process 10979 (syz.3.1211) requesting ep 01 but needs 81 [ 681.643811][T10971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.052068][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 682.212169][T10987] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 683.287129][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.384116][T10986] input: syz0 as /devices/virtual/input/input78 [ 685.686563][T11007] 9pnet_fd: Insufficient options for proto=fd [ 685.715762][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.722331][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.164974][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'. [ 688.956835][T11026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 688.967244][T11026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 688.976747][T11026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 688.992806][T11026] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 689.001882][T11026] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 689.011000][T11026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 689.068757][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 689.101545][T11024] wg1 speed is unknown, defaulting to 1000 [ 690.790983][T11033] (null): rxe_set_mtu: Set mtu to 1024 [ 691.045920][T11026] Bluetooth: hci4: command tx timeout [ 691.087261][ T6642] bridge0: port 4(syz_tun) entered disabled state [ 691.336486][ T6642] syz_tun (unregistering): left allmulticast mode [ 691.342970][ T6642] syz_tun (unregistering): left promiscuous mode [ 691.346815][T11041] loop2: detected capacity change from 0 to 512 [ 691.354799][ T6642] bridge0: port 4(syz_tun) entered disabled state [ 691.409092][T11041] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 691.451416][T11041] EXT4-fs (loop2): 1 truncate cleaned up [ 691.461438][T11041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.555112][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.579385][T11033] rdma_rxe: rxe_newlink: failed to add wg1 [ 691.712203][ T6094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.126894][T11026] Bluetooth: hci4: command tx timeout [ 693.267472][ T6094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.286487][ T2959] infiniband syz0: set down [ 693.299383][ T9359] wg1 speed is unknown, defaulting to 1000 [ 693.321912][ T9359] wg1 speed is unknown, defaulting to 1000 [ 693.378697][T11067] loop2: detected capacity change from 0 to 512 [ 693.407533][T11067] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 693.437858][T11067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 693.451269][T11067] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1232: corrupted in-inode xattr: e_value size too large [ 693.488878][T11067] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1232: couldn't read orphan inode 15 (err -117) [ 693.504750][T11067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.688081][ T6094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.222568][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 694.366826][ T6094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.820121][T11024] chnl_net:caif_netlink_parms(): no params data found [ 695.360658][T11026] Bluetooth: hci4: command tx timeout [ 695.392048][T11077] loop0: detected capacity change from 0 to 2048 [ 695.452780][T11077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.597353][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.626748][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.782885][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.795580][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.808156][T11024] bridge_slave_0: entered allmulticast mode [ 696.176014][T11024] bridge_slave_0: entered promiscuous mode [ 696.620401][T11086] input: syz0 as /devices/virtual/input/input79 [ 696.637180][T11091] loop2: detected capacity change from 0 to 512 [ 696.671077][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.714813][T11091] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 696.725078][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.732279][T11024] bridge_slave_1: entered allmulticast mode [ 696.788514][T11024] bridge_slave_1: entered promiscuous mode [ 696.811110][T11091] EXT4-fs (loop2): 1 truncate cleaned up [ 696.818879][T11091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.541407][T11026] Bluetooth: hci4: command tx timeout [ 697.796186][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.237949][T11104] usb usb1: check_ctrlrecip: process 11104 (syz.3.1241) requesting ep 01 but needs 81 [ 698.473730][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 699.077538][T11024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.137939][ T6094] bridge0: port 3(ip6gretap1) entered disabled state [ 699.254387][ T6094] ip6gretap1 (unregistering): left promiscuous mode [ 699.261583][ T6094] bridge0: port 3(ip6gretap1) entered disabled state [ 699.437954][T11024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.699433][T11114] loop3: detected capacity change from 0 to 2048 [ 699.751125][T11114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.897568][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.079519][T11024] team0: Port device team_slave_0 added [ 700.133570][T11024] team0: Port device team_slave_1 added [ 700.263004][T11116] input: syz0 as /devices/virtual/input/input80 [ 700.486667][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1246'. [ 700.624810][T11133] (null): rxe_set_mtu: Set mtu to 1024 [ 700.642028][T11133] rdma_rxe: rxe_newlink: failed to add wg1 [ 701.202036][T11024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.209675][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.294259][T11024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.475868][T11024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.486162][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.598465][T11024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.269746][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1250'. [ 702.308572][T11144] loop0: detected capacity change from 0 to 512 [ 702.319303][T11144] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 702.350644][T11144] EXT4-fs (loop0): 1 truncate cleaned up [ 702.361414][T11144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.618872][T11024] hsr_slave_0: entered promiscuous mode [ 702.668270][T11024] hsr_slave_1: entered promiscuous mode [ 702.678542][T11024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.687425][T11024] Cannot create hsr debugfs directory [ 702.781188][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.914066][T11159] loop2: detected capacity change from 0 to 2048 [ 703.089426][T11159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.321552][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.656377][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 703.733221][T11177] usb usb1: check_ctrlrecip: process 11177 (syz.0.1251) requesting ep 01 but needs 81 [ 704.630089][T11178] (null): rxe_set_mtu: Set mtu to 1024 [ 704.635982][T11178] rdma_rxe: rxe_newlink: failed to add wg1 [ 704.663053][T11180] loop0: detected capacity change from 0 to 16 [ 704.682372][T11180] erofs: (device loop0): mounted with root inode @ nid 36. [ 704.896721][ T6094] IPVS: stopping backup sync thread 8351 ... [ 706.312360][T11199] loop2: detected capacity change from 0 to 512 [ 706.338511][T11199] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 706.397393][ T9359] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 706.443426][T11199] EXT4-fs (loop2): 1 truncate cleaned up [ 706.460433][T11199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.696831][ T9359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 706.715542][ T9359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 706.730093][ T9359] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 706.741202][ T9359] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 706.741422][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.774804][ T9359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.785123][T11185] input: syz0 as /devices/virtual/input/input81 [ 706.851721][ T9359] usb 4-1: config 0 descriptor?? [ 706.890818][T11024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 706.917858][T11193] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 707.013285][T11024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 707.222114][T11024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 707.247592][T11024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 707.361844][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 708.005567][ T9359] nzxt-smart2 0003:1E71:2019.000C: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.3-1/input0 [ 708.153766][ T6094] hsr_slave_0: left promiscuous mode [ 708.183752][ T9359] usb 4-1: USB disconnect, device number 14 [ 708.276684][ T6094] hsr_slave_1: left promiscuous mode [ 708.318458][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.408041][T11222] fido_id[11222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 708.428196][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.661943][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.833569][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.184885][T11229] usb usb1: check_ctrlrecip: process 11229 (syz.3.1264) requesting ep 01 but needs 81 [ 709.341171][ T6094] bridge_slave_1: left allmulticast mode [ 709.349500][ T6094] bridge_slave_1: left promiscuous mode [ 709.357924][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.649783][ T6094] bridge_slave_0: left allmulticast mode [ 709.737801][ T6094] bridge_slave_0: left promiscuous mode [ 709.743701][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.712399][ T6094] veth1_macvtap: left promiscuous mode [ 710.747325][ T6094] veth0_macvtap: left promiscuous mode [ 710.774726][ T6094] veth1_vlan: left promiscuous mode [ 710.803361][ T6094] veth0_vlan: left promiscuous mode [ 711.390806][T11246] loop2: detected capacity change from 0 to 512 [ 711.416800][T11246] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 711.441653][ T6094] infiniband syz0: set down [ 711.466650][T11246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 711.476175][T11246] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1268: corrupted in-inode xattr: e_value size too large [ 711.490663][T11246] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1268: couldn't read orphan inode 15 (err -117) [ 711.508302][T11246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.640580][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.370458][T11251] input: syz0 as /devices/virtual/input/input82 [ 712.648474][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 712.692197][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 712.736777][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.777444][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.895687][ T1141] smc: removing ib device syz0 [ 713.511938][ T6094] bond0 (unregistering): Released all slaves [ 713.784624][ T23] wg1 speed is unknown, defaulting to 1000 [ 714.069959][T11260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.163083][T11260] batadv_slave_0: entered promiscuous mode [ 714.235329][T11024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.324801][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1270'. [ 714.865060][T11024] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.951630][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.959655][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.042111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.049302][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.205389][T11279] usb usb1: check_ctrlrecip: process 11279 (syz.3.1274) requesting ep 01 but needs 81 [ 716.465313][T11024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.093779][T11024] veth0_vlan: entered promiscuous mode [ 717.129363][T11024] veth1_vlan: entered promiscuous mode [ 717.202463][T11024] veth0_macvtap: entered promiscuous mode [ 717.247490][T11024] veth1_macvtap: entered promiscuous mode [ 717.269677][T11315] loop0: detected capacity change from 0 to 512 [ 717.282851][T11315] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 717.294741][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.312531][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.332849][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.346754][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.347867][T11315] EXT4-fs (loop0): 1 truncate cleaned up [ 717.359303][T11024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.374315][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.385593][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.395763][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.406306][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.407600][T11315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.416159][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.416178][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.418040][T11024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.503025][T11024] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.511940][T11024] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.520819][T11024] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.538528][T11024] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.617594][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.761592][ T7147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.841711][ T7147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.251969][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.260963][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.299094][T11326] input: syz0 as /devices/virtual/input/input83 [ 720.710697][T11350] ip6gretap1: entered allmulticast mode [ 720.723463][T11350] bridge0: port 3(syz_tun) entered blocking state [ 720.730879][T11350] bridge0: port 3(syz_tun) entered disabled state [ 720.737535][T11350] syz_tun: entered allmulticast mode [ 720.744204][T11350] syz_tun: entered promiscuous mode [ 720.750419][T11350] bridge0: port 3(syz_tun) entered blocking state [ 720.757136][T11350] bridge0: port 3(syz_tun) entered forwarding state [ 720.769858][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1281'. [ 721.503056][T11355] loop3: detected capacity change from 0 to 2048 [ 721.664166][T11364] loop2: detected capacity change from 0 to 512 [ 721.911378][T11364] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 721.972608][T11355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.022119][T11364] EXT4-fs (loop2): 1 truncate cleaned up [ 722.061453][T11364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.412036][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.435065][T11368] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 722.799510][T11381] xt_TPROXY: Can be used only with -p tcp or -p udp [ 723.130940][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.184760][ T5851] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 723.574215][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 723.630726][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 723.745031][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 723.914157][ T5851] usb 6-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 724.115503][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.243398][ T5851] usb 6-1: config 0 descriptor?? [ 724.307535][T11357] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 724.454731][T11397] input: syz0 as /devices/virtual/input/input84 [ 724.926565][ T5851] usbhid 6-1:0.0: can't add hid device: -71 [ 724.933599][ T5851] usbhid: probe of 6-1:0.0 failed with error -71 [ 724.981151][ T5851] usb 6-1: USB disconnect, device number 2 [ 726.792387][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1292'. [ 727.621519][T11428] loop5: detected capacity change from 0 to 512 [ 727.713346][T11428] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 727.867245][T11428] EXT4-fs (loop5): 1 truncate cleaned up [ 727.889177][T11428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.047109][T11024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.594127][T11450] xt_TPROXY: Can be used only with -p tcp or -p udp [ 728.735010][ T5935] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 729.025229][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 729.217558][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 729.278754][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 729.354838][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 729.407218][ T5935] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 729.437498][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.633389][ T5935] usb 4-1: config 0 descriptor?? [ 729.643964][T11448] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 729.866345][T11458] input: syz0 as /devices/virtual/input/input85 [ 730.105312][ T5935] nzxt-smart2 0003:1E71:2019.000D: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.3-1/input0 [ 730.291977][ T23] usb 4-1: USB disconnect, device number 15 [ 730.849102][T11468] input: syz0 as /devices/virtual/input/input86 [ 731.312489][T11475] loop0: detected capacity change from 0 to 128 [ 732.123670][T11475] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 732.184109][T11475] ext4 filesystem being mounted at /334/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 732.402733][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1303'. [ 732.650588][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 732.743871][T11488] loop2: detected capacity change from 0 to 512 [ 732.800935][T11488] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1305: iget: bad extended attribute block 1 [ 732.953105][T11488] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1305: couldn't read orphan inode 15 (err -117) [ 732.978351][T11488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.120546][T11500] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 734.273298][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.286104][T11511] input: syz0 as /devices/virtual/input/input87 [ 734.744794][ T8] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 735.767563][T11528] syz.5.1309: attempt to access beyond end of device [ 735.767563][T11528] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 735.875153][T11528] FAT-fs (loop11): unable to read boot sector [ 736.954934][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 737.012761][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 737.791485][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 737.805921][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 737.816265][ T8] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 737.827341][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.837331][T11548] usb usb1: check_ctrlrecip: process 11548 (syz.3.1314) requesting ep 01 but needs 81 [ 737.855742][ T8] usb 3-1: config 0 descriptor?? [ 737.864991][ T8] usb 3-1: can't set config #0, error -71 [ 737.879427][ T8] usb 3-1: USB disconnect, device number 10 [ 738.616513][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'. [ 739.027284][T11569] xt_TPROXY: Can be used only with -p tcp or -p udp [ 739.229600][T11575] loop2: detected capacity change from 0 to 512 [ 739.318680][T11575] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1318: iget: bad extended attribute block 1 [ 739.332293][T11575] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1318: couldn't read orphan inode 15 (err -117) [ 739.362321][T11575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.650649][T11582] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 740.221361][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.144940][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 742.189007][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 742.202286][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 742.218054][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 742.231970][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 742.245851][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 742.258974][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.273277][ T9] usb 6-1: config 0 descriptor?? [ 742.297193][T11600] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 742.751568][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 742.764969][ T9] usbhid: probe of 6-1:0.0 failed with error -71 [ 742.783366][ T9] usb 6-1: USB disconnect, device number 3 [ 743.131553][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 743.933845][T11621] loop5: detected capacity change from 0 to 512 [ 743.973370][T11621] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 744.017394][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 744.158960][T11632] (null): rxe_set_mtu: Set mtu to 1024 [ 744.177751][T11632] wg1 speed is unknown, defaulting to 1000 [ 744.198156][T11621] EXT4-fs (loop5): 1 truncate cleaned up [ 744.233207][T11621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.276551][T11632] wg1 speed is unknown, defaulting to 1000 [ 744.369791][T11632] wg1 speed is unknown, defaulting to 1000 [ 744.539423][T11635] overlayfs: failed to resolve './file0': -2 [ 744.569184][T11024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.473049][T11632] infiniband syz0: set active [ 746.484975][ T5935] wg1 speed is unknown, defaulting to 1000 [ 746.494265][T11632] infiniband syz0: added wg1 [ 746.519573][T11632] syz0: rxe_create_cq: returned err = -12 [ 746.537473][T11632] infiniband syz0: Couldn't create ib_mad CQ [ 746.544184][T11632] infiniband syz0: Couldn't open port 1 [ 746.752693][T11632] RDS/IB: syz0: added [ 746.768005][T11632] smc: adding ib device syz0 with port count 1 [ 746.774255][T11632] smc: ib device syz0 port 1 has pnetid [ 746.785176][ T5935] wg1 speed is unknown, defaulting to 1000 [ 746.803848][T11632] wg1 speed is unknown, defaulting to 1000 [ 746.900577][T11656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 747.094662][T11632] wg1 speed is unknown, defaulting to 1000 [ 747.142780][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.149463][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.666171][T11632] wg1 speed is unknown, defaulting to 1000 [ 748.042992][T11632] wg1 speed is unknown, defaulting to 1000 [ 750.089571][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 750.619765][T11695] loop2: detected capacity change from 0 to 512 [ 750.751078][T11695] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 750.814874][T11695] EXT4-fs (loop2): 1 truncate cleaned up [ 750.853030][T11695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.972242][T11702] overlayfs: failed to resolve './file0': -2 [ 751.284591][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.153597][T11730] input: syz0 as /devices/virtual/input/input88 [ 755.573835][T11748] xt_TPROXY: Can be used only with -p tcp or -p udp [ 755.951510][T11750] overlayfs: failed to resolve './file0': -2 [ 756.262100][T11761] loop0: detected capacity change from 0 to 512 [ 756.294394][T11761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 756.367712][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 756.661011][T11761] EXT4-fs (loop0): 1 truncate cleaned up [ 756.838791][T11761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.271174][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.868933][T11790] wg1 speed is unknown, defaulting to 1000 [ 759.210130][T11791] loop3: detected capacity change from 0 to 512 [ 759.363930][T11791] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 759.372803][T11791] System zones: 0-2, 18-18, 34-34 [ 759.414213][T11791] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.1356: corrupted inode contents [ 759.433868][T11791] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #3: comm syz.3.1356: mark_inode_dirty error [ 759.453897][T11791] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.1356: corrupted inode contents [ 759.472626][T11791] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1356: mark_inode_dirty error [ 759.494989][T11791] Quota error (device loop3): write_blk: dquota write failed [ 759.503076][T11791] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 759.513298][T11791] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1356: Failed to acquire dquot type 0 [ 759.574362][T11791] EXT4-fs (loop3): 1 orphan inode deleted [ 759.586800][T11791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.603650][T11791] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.620449][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 760.897663][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1358'. [ 760.968863][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:1: Failed to release dquot type 1 [ 761.009802][T11811] overlayfs: failed to resolve './file0': -2 [ 761.032486][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.277229][T11811] bridge0: port 3(syz_tun) entered disabled state [ 761.283849][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.291267][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.643737][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 762.247862][T11811] bridge0: entered allmulticast mode [ 762.646618][T11833] xt_TPROXY: Can be used only with -p tcp or -p udp [ 764.201648][T11835] loop3: detected capacity change from 0 to 40427 [ 764.249515][T11835] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 764.252447][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1366'. [ 764.283961][T11835] F2FS-fs (loop3): invalid crc value [ 764.365144][T11858] (null): rxe_set_mtu: Set mtu to 1024 [ 764.391282][T11858] rdma_rxe: rxe_newlink: failed to add wg1 [ 764.469850][T11835] F2FS-fs (loop3): Found nat_bits in checkpoint [ 764.952237][T11835] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 765.494538][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'. [ 768.070603][ T28] audit: type=1800 audit(1753753581.671:64): pid=11879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1363" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 768.231151][T11882] loop0: detected capacity change from 0 to 512 [ 768.398354][T11882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 768.467173][ T5787] syz-executor: attempt to access beyond end of device [ 768.467173][ T5787] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 768.504095][ T5787] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 768.524117][T11882] EXT4-fs (loop0): 1 truncate cleaned up [ 768.556007][T11882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.627332][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1371'. [ 769.304298][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.859168][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1374'. [ 769.868403][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1374'. [ 770.843716][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 771.604736][T11912] syz0: rxe_newlink: already configured on wg1 [ 772.432759][T11922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 773.235687][T11936] loop3: detected capacity change from 0 to 512 [ 773.496949][T11939] loop2: detected capacity change from 0 to 256 [ 774.111144][T11936] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 774.315026][T11936] EXT4-fs (loop3): 1 truncate cleaned up [ 774.340640][T11936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.399037][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.738108][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 776.386019][T11026] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 776.560016][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'. [ 777.539652][T11970] (null): rxe_set_mtu: Set mtu to 1024 [ 777.606599][T11970] rdma_rxe: rxe_newlink: failed to add wg1 [ 779.187987][T11999] loop5: detected capacity change from 0 to 512 [ 779.238207][T11999] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 779.271281][T11999] EXT4-fs (loop5): 1 truncate cleaned up [ 779.358036][T11999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.490478][T12006] loop3: detected capacity change from 0 to 512 [ 779.599106][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 780.390405][T12006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.403487][T12006] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.944531][T11024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.202822][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'. [ 781.242328][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'. [ 782.670594][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.841098][T10260] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 783.044763][T10260] usb 3-1: Using ep0 maxpacket: 16 [ 783.056269][T10260] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 783.069185][T10260] usb 3-1: config 0 has no interface number 0 [ 783.075786][T10260] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.091184][T10260] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.101497][T10260] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 783.111760][T10260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.125775][T10260] usb 3-1: config 0 descriptor?? [ 783.702431][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 783.769699][T10260] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.000E/input/input89 [ 783.865365][T10260] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.000E/input/input90 [ 783.888064][ T9] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 783.909348][ T9] usb 4-1: config 0 has no interface number 0 [ 783.923093][ T9] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 783.930252][T10260] uclogic 0003:28BD:0071.000E: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 783.960304][ T9] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 784.003516][ T9] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 784.035142][T10260] usb 3-1: USB disconnect, device number 11 [ 784.035970][ T9] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 784.102810][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 784.139557][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.173829][ T9] usb 4-1: Product: syz [ 784.175715][T12038] fido_id[12038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 784.189856][ T9] usb 4-1: Manufacturer: syz [ 784.214490][ T9] usb 4-1: SerialNumber: syz [ 784.249136][ T9] usb 4-1: config 0 descriptor?? [ 784.284466][ T9] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 784.306211][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input91 [ 784.741530][ T9] usb 4-1: USB disconnect, device number 16 [ 784.756435][ T9] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 785.132530][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 785.824849][T12045] loop0: detected capacity change from 0 to 512 [ 785.844858][T12045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 786.089415][T12045] EXT4-fs (loop0): 1 truncate cleaned up [ 786.106482][T12045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.297601][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.608862][T12063] loop0: detected capacity change from 0 to 512 [ 787.663368][T12063] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1409: iget: bad extended attribute block 1 [ 787.731140][T12063] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1409: couldn't read orphan inode 15 (err -117) [ 787.792389][T12063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.241791][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1409'. [ 788.626493][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.827932][T12074] usb usb1: check_ctrlrecip: process 12074 (syz.0.1412) requesting ep 01 but needs 81 [ 789.623788][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1415'. [ 790.671846][T12091] loop3: detected capacity change from 0 to 512 [ 790.749194][T12091] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 790.833305][T12091] EXT4-fs (loop3): 1 truncate cleaned up [ 790.840462][T12091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.905507][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.359728][T12102] overlayfs: failed to resolve './file0': -2 [ 792.149729][T12104] loop3: detected capacity change from 0 to 512 [ 792.197099][T12104] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1420: iget: bad extended attribute block 1 [ 792.240200][T12104] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1420: couldn't read orphan inode 15 (err -117) [ 792.262242][T12104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.387557][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1420'. [ 793.043541][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.096956][T12113] usb usb1: check_ctrlrecip: process 12113 (syz.5.1422) requesting ep 01 but needs 81 [ 794.586799][T12115] loop5: detected capacity change from 0 to 8192 [ 794.650280][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'. [ 794.776801][T12115] FAT-fs (loop5): bogus number of directory entries (9) [ 795.267873][T12115] FAT-fs (loop5): Can't find a valid FAT filesystem [ 795.414109][T12129] loop0: detected capacity change from 0 to 512 [ 795.465155][T12129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 795.505181][T12129] EXT4-fs (loop0): 1 truncate cleaned up [ 795.511986][T12129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.625023][T12133] bridge: RTM_NEWNEIGH with invalid ether address [ 795.693241][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.832234][T12137] loop0: detected capacity change from 0 to 512 [ 795.873793][T12137] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1429: iget: bad extended attribute block 1 [ 795.903016][T12140] usb usb1: check_ctrlrecip: process 12140 (syz.5.1431) requesting ep 01 but needs 81 [ 795.935727][T12137] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1429: couldn't read orphan inode 15 (err -117) [ 795.990237][T12137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 796.182847][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1429'. [ 796.217081][T12149] syz.3.1432[12149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 796.217653][T12149] syz.3.1432[12149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 796.239621][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 796.260565][T12149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.586030][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 797.605012][T12106] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 797.653816][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.666928][T12149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.948124][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 797.959781][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 797.975003][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 797.989172][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 798.001356][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 798.012137][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.038082][ T9] usb 6-1: config 0 descriptor?? [ 798.064266][T12145] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 798.282487][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 798.999634][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 799.006146][ T9] usbhid: probe of 6-1:0.0 failed with error -71 [ 799.025290][ T9] usb 6-1: USB disconnect, device number 4 [ 800.473254][T12169] loop5: detected capacity change from 0 to 40427 [ 800.578501][T12175] xt_TPROXY: Can be used only with -p tcp or -p udp [ 800.659484][T12169] F2FS-fs (loop5): Found nat_bits in checkpoint [ 800.924720][T12169] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 801.075989][T12182] syz.5.1439: attempt to access beyond end of device [ 801.075989][T12182] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 801.158886][T12185] loop0: detected capacity change from 0 to 512 [ 801.215075][T12185] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1442: iget: bad extended attribute block 1 [ 801.268851][T12185] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1442: couldn't read orphan inode 15 (err -117) [ 801.308385][T12185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.453991][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1442'. [ 802.155737][T11024] syz-executor: attempt to access beyond end of device [ 802.155737][T11024] loop5: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 802.188640][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.220234][T11024] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 802.244028][T11024] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 803.571298][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 804.498616][T12203] input: syz0 as /devices/virtual/input/input92 [ 804.850734][T12211] loop3: detected capacity change from 0 to 512 [ 804.927014][T12211] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 805.155372][T12211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 805.214582][T12211] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.1447: corrupted in-inode xattr: e_value size too large [ 805.315215][T12211] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1447: couldn't read orphan inode 15 (err -117) [ 805.413287][T12217] loop0: detected capacity change from 0 to 2048 [ 805.437811][T12211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.529640][T12217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.620560][T12221] loop2: detected capacity change from 0 to 256 [ 805.627988][T12221] exfat: Deprecated parameter 'namecase' [ 805.633758][T12221] exfat: Deprecated parameter 'namecase' [ 805.673931][T12221] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 806.034321][T12225] loop5: detected capacity change from 0 to 128 [ 806.609726][T12228] wg1 speed is unknown, defaulting to 1000 [ 806.743590][T12231] xt_TPROXY: Can be used only with -p tcp or -p udp [ 807.247456][T12233] loop2: detected capacity change from 0 to 512 [ 807.301312][T12233] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1452: iget: bad extended attribute block 1 [ 807.328450][T12233] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1452: couldn't read orphan inode 15 (err -117) [ 807.344165][T12233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.558601][T12235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1452'. [ 808.219698][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.575137][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.581479][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.824812][T12216] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 810.609811][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.704142][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'. [ 811.619127][T12258] wg1 speed is unknown, defaulting to 1000 [ 813.789759][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.480157][T12279] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 815.420657][T12287] xt_TPROXY: Can be used only with -p tcp or -p udp [ 815.603889][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1462'. [ 815.764803][T11026] Bluetooth: hci4: command 0x0406 tx timeout [ 817.700279][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1466'. [ 818.711739][ T1141] Bluetooth: hci0: Frame reassembly failed (-84) [ 819.929857][T12316] loop3: detected capacity change from 0 to 16 [ 819.968626][T12316] erofs: (device loop3): mounted with root inode @ nid 36. [ 820.011455][T12316] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 820.498259][T12323] wg1 speed is unknown, defaulting to 1000 [ 821.644874][T11026] Bluetooth: hci0: command 0x1003 tx timeout [ 821.658886][ T5102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 823.096275][T12337] loop2: detected capacity change from 0 to 4096 [ 823.123613][T12337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.819847][T12343] 9pnet_fd: Insufficient options for proto=fd [ 829.556138][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.074022][T12385] loop0: detected capacity change from 0 to 256 [ 831.189658][T12385] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 831.205984][T12385] exFAT-fs (loop0): failed to load alloc-bitmap [ 831.213180][T12385] exFAT-fs (loop0): failed to recognize exfat type [ 834.575959][T12385] loop0: detected capacity change from 0 to 131072 [ 834.636522][T12385] F2FS-fs (loop0): invalid crc value [ 834.656703][T12385] F2FS-fs (loop0): SIT is corrupted node# 0 vs 1 [ 834.672206][T12385] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 834.927686][T12401] 9pnet_fd: Insufficient options for proto=fd [ 837.049263][T12414] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 838.038738][T12420] loop0: detected capacity change from 0 to 256 [ 838.125992][T12420] FAT-fs (loop0): Directory bread(block 64) failed [ 838.164677][T12420] FAT-fs (loop0): Directory bread(block 65) failed [ 838.203713][T12420] FAT-fs (loop0): Directory bread(block 66) failed [ 838.240736][T12420] FAT-fs (loop0): Directory bread(block 67) failed [ 838.287585][T12420] FAT-fs (loop0): Directory bread(block 68) failed [ 838.294147][T12420] FAT-fs (loop0): Directory bread(block 69) failed [ 838.323804][T12420] FAT-fs (loop0): Directory bread(block 70) failed [ 838.333837][T12420] FAT-fs (loop0): Directory bread(block 71) failed [ 838.366540][T12420] FAT-fs (loop0): Directory bread(block 72) failed [ 838.373092][T12420] FAT-fs (loop0): Directory bread(block 73) failed [ 838.447059][T12424] loop5: detected capacity change from 0 to 512 [ 838.545838][T12424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.594667][T12424] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 839.627817][T12432] input: syz0 as /devices/virtual/input/input94 [ 839.965801][T11024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.077237][T12446] loop5: detected capacity change from 0 to 256 [ 841.089406][T12446] exfat: Unknown parameter 'fsmagic' [ 845.042322][ T7007] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 846.683554][T12462] loop2: detected capacity change from 0 to 2048 [ 847.823945][T12462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.990730][T12468] 9pnet_fd: Insufficient options for proto=fd [ 848.887009][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.826572][T12479] (null): rxe_set_mtu: Set mtu to 1024 [ 849.851582][T12479] rdma_rxe: rxe_newlink: failed to add wg1 [ 851.811857][T12486] input: syz0 as /devices/virtual/input/input95 [ 852.232661][T12502] syzkaller0: entered promiscuous mode [ 852.238309][T12502] syzkaller0: entered allmulticast mode [ 854.144642][T12519] overlayfs: missing 'lowerdir' [ 854.706508][T12520] loop2: detected capacity change from 0 to 2048 [ 854.953823][T12520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.049503][T12528] loop5: detected capacity change from 0 to 128 [ 855.164699][ T28] audit: type=1800 audit(1753753670.081:65): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1520" name="bus" dev="loop5" ino=1048616 res=0 errno=0 [ 855.324340][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.441711][T12528] syz.5.1520: attempt to access beyond end of device [ 855.441711][T12528] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 855.465746][T12531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1522'. [ 855.480524][T12531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1522'. [ 855.834969][T12536] 9pnet_fd: Insufficient options for proto=fd [ 856.814532][T12545] loop0: detected capacity change from 0 to 128 [ 857.213792][T12545] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 857.495811][T12545] ext4 filesystem being mounted at /395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 858.118264][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 858.194557][T12551] input: syz0 as /devices/virtual/input/input96 [ 858.528150][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1532'. [ 858.538287][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1532'. [ 858.679705][T12569] loop0: detected capacity change from 0 to 2048 [ 858.795469][T12569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.287169][T12549] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 860.586206][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.663896][T12581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1535'. [ 863.388069][T12613] loop0: detected capacity change from 0 to 256 [ 863.442909][T12613] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 863.475415][T12613] exFAT-fs (loop0): failed to load alloc-bitmap [ 863.493801][T12613] exFAT-fs (loop0): failed to recognize exfat type [ 864.784895][T12629] wg1 speed is unknown, defaulting to 1000 [ 865.885531][T12630] loop3: detected capacity change from 0 to 512 [ 866.164038][T12630] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 866.172430][T12630] System zones: 0-2, 18-18, 34-34 [ 866.201730][T12630] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.1546: corrupted inode contents [ 866.216119][T12630] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #3: comm syz.3.1546: mark_inode_dirty error [ 866.239555][T12630] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.1546: corrupted inode contents [ 866.253750][T12630] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1546: mark_inode_dirty error [ 866.280299][T12630] Quota error (device loop3): write_blk: dquota write failed [ 866.288516][T12630] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 866.298704][T12630] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1546: Failed to acquire dquot type 0 [ 866.335575][T12630] EXT4-fs (loop3): 1 orphan inode deleted [ 866.348146][T12630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.368496][T12630] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 867.151654][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.649244][T12650] loop2: detected capacity change from 0 to 256 [ 868.690216][T12650] exFAT-fs (loop2): Invalid exboot-signature(sector = 6): 0x00000e45 [ 868.706679][T12650] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0xb119ab07) [ 868.734439][T12650] exFAT-fs (loop2): invalid boot region [ 868.759907][T12650] exFAT-fs (loop2): failed to recognize exfat type [ 868.829248][T12653] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1553'. [ 868.863901][T12653] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1553'. [ 870.159143][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.166791][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.236293][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1554'. [ 872.701622][T12682] wg1 speed is unknown, defaulting to 1000 [ 875.571246][T12710] loop0: detected capacity change from 0 to 512 [ 876.904716][ T5792] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 877.115094][ T5792] usb 6-1: Using ep0 maxpacket: 32 [ 877.122002][ T5792] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 877.141282][ T5792] usb 6-1: config 0 has no interface number 0 [ 877.170581][ T5792] usb 6-1: config 0 interface 230 has no altsetting 0 [ 877.213018][ T5792] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 877.228434][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.247288][ T5792] usb 6-1: Product: syz [ 877.251641][ T5792] usb 6-1: Manufacturer: syz [ 877.260377][ T5792] usb 6-1: SerialNumber: syz [ 877.275878][ T5792] usb 6-1: config 0 descriptor?? [ 877.296552][ T5792] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 877.456441][ T5792] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 877.579048][ T5792] usb 6-1: USB disconnect, device number 5 [ 879.443773][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 880.222028][T12751] netlink: 'syz.3.1573': attribute type 4 has an invalid length. [ 880.428619][T12736] loop5: detected capacity change from 0 to 40427 [ 880.487153][T12736] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 880.552057][T12736] F2FS-fs (loop5): invalid crc value [ 880.617166][T12736] F2FS-fs (loop5): Found nat_bits in checkpoint [ 883.061377][T12778] overlayfs: failed to resolve './file0': -2 [ 888.024996][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1587'. [ 890.611366][T12826] overlayfs: failed to resolve './file0': -2 [ 891.215671][T12832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1593'. [ 891.236346][T12832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1593'. [ 891.616217][T12839] wg1 speed is unknown, defaulting to 1000 [ 892.442622][T12840] loop3: detected capacity change from 0 to 512 [ 893.090229][T12844] xt_TPROXY: Can be used only with -p tcp or -p udp [ 894.374314][T12840] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 900.015559][T12884] wg1 speed is unknown, defaulting to 1000 [ 900.615754][T12885] loop2: detected capacity change from 0 to 512 [ 900.761707][T12885] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 900.770271][T12885] System zones: 0-2, 18-18, 34-34 [ 900.802045][T12885] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1604: corrupted inode contents [ 900.816265][T12885] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.1604: mark_inode_dirty error [ 900.831488][T12885] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1604: corrupted inode contents [ 900.847784][T12885] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1604: mark_inode_dirty error [ 900.863329][T12885] Quota error (device loop2): write_blk: dquota write failed [ 900.871652][T12885] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 900.881869][T12885] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1604: Failed to acquire dquot type 0 [ 900.939199][T12885] EXT4-fs (loop2): 1 orphan inode deleted [ 900.950601][T12885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.984791][T12885] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 901.682386][ T6094] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 902.688951][ T6094] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:8: Failed to release dquot type 1 [ 902.773628][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.872469][T12905] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1610'. [ 903.963827][T12906] 9pnet_fd: Insufficient options for proto=fd [ 903.995896][T12908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 904.008663][T12908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 904.249994][T12916] loop3: detected capacity change from 0 to 256 [ 904.257473][T12916] exfat: Unknown parameter 'fsmagic' [ 906.726258][T12918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1612'. [ 907.861715][ T5792] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 908.107272][ T5792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 908.960008][ T5792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 909.086278][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.094286][ T5792] usb 4-1: Product: syz [ 909.104713][ T5792] usb 4-1: Manufacturer: syz [ 909.109475][ T5792] usb 4-1: SerialNumber: syz [ 909.147273][T12922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 909.350962][T12933] loop2: detected capacity change from 0 to 512 [ 909.369959][T12933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 909.468399][T12935] wg1 speed is unknown, defaulting to 1000 [ 909.969550][T12936] loop5: detected capacity change from 0 to 512 [ 910.161735][T12933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 910.326585][T12933] System zones: 0-2, 18-18, 34-34 [ 910.450360][T12936] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 910.458781][T12936] System zones: 0-2, 18-18, 34-34 [ 910.481279][T12936] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #3: comm syz.5.1617: corrupted inode contents [ 910.496122][T12936] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #3: comm syz.5.1617: mark_inode_dirty error [ 910.511638][T12936] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #3: comm syz.5.1617: corrupted inode contents [ 910.526441][T12936] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1617: mark_inode_dirty error [ 910.547244][T12936] Quota error (device loop5): write_blk: dquota write failed [ 910.555560][T12936] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 910.565727][T12936] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1617: Failed to acquire dquot type 0 [ 911.510588][T12936] EXT4-fs (loop5): 1 orphan inode deleted [ 911.523472][T12936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.539440][T12936] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.656475][T12933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.687463][T12933] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.213991][ T5792] cdc_ncm 4-1:1.0: bind() failure [ 912.219734][ T59] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 912.252430][ T5792] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 912.274822][ T59] EXT4-fs error (device loop5): ext4_release_dquot:6974: comm kworker/u4:4: Failed to release dquot type 1 [ 912.287290][ T5792] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 912.334746][ T5792] usbtest: probe of 4-1:1.1 failed with error -71 [ 912.379732][ T5792] usb 4-1: USB disconnect, device number 17 [ 912.406056][T11024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.558721][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.630996][T12948] loop3: detected capacity change from 0 to 256 [ 914.631716][T12958] 9pnet_fd: Insufficient options for proto=fd [ 914.788664][T12962] loop2: detected capacity change from 0 to 256 [ 914.799721][T12962] exfat: Unknown parameter 'fsmagic' [ 919.107315][T12984] wg1 speed is unknown, defaulting to 1000 [ 919.988536][T12985] loop0: detected capacity change from 0 to 512 [ 920.565247][T12985] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 920.573635][T12985] System zones: 0-2, 18-18, 34-34 [ 920.626769][T12985] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.1628: corrupted inode contents [ 920.643133][T12985] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #3: comm syz.0.1628: mark_inode_dirty error [ 920.697087][T12985] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.1628: corrupted inode contents [ 920.710242][T12985] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1628: mark_inode_dirty error [ 920.734171][T12985] Quota error (device loop0): write_blk: dquota write failed [ 920.742522][T12985] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 920.752740][T12985] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1628: Failed to acquire dquot type 0 [ 920.787488][T12985] EXT4-fs (loop0): 1 orphan inode deleted [ 920.801121][T12985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.815699][T12985] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.611859][ T1141] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 921.664815][ T1141] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 1 [ 921.722472][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.776726][T12999] 9pnet_fd: Insufficient options for proto=fd [ 922.992219][T13005] xt_hashlimit: max too large, truncated to 1048576 [ 923.167641][T13007] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 925.684497][T13017] loop2: detected capacity change from 0 to 256 [ 926.685595][T13017] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 926.814407][T13017] syz.2.1638: attempt to access beyond end of device [ 926.814407][T13017] loop2: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 926.837673][T13017] syz.2.1638: attempt to access beyond end of device [ 926.837673][T13017] loop2: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 926.862919][ T28] audit: type=1800 audit(1753753741.791:66): pid=13017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1638" name="file1" dev="loop2" ino=1048617 res=0 errno=0 [ 927.329457][T13017] exFAT-fs (loop2): invalid start cluster (520) [ 927.539649][T13022] (null): rxe_set_mtu: Set mtu to 1024 [ 927.545508][T13022] rdma_rxe: rxe_newlink: failed to add wg1 [ 928.468972][T13032] loop2: detected capacity change from 0 to 512 [ 928.505117][T13032] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 928.513353][T13032] System zones: 0-2, 18-18, 34-34 [ 928.537004][T13032] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1642: corrupted inode contents [ 928.549951][T13032] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.1642: mark_inode_dirty error [ 928.564726][T13032] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1642: corrupted inode contents [ 928.577891][T13032] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1642: mark_inode_dirty error [ 928.592052][T13032] Quota error (device loop2): write_blk: dquota write failed [ 928.600622][T13032] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 928.610823][T13032] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1642: Failed to acquire dquot type 0 [ 928.640861][T13032] EXT4-fs (loop2): 1 orphan inode deleted [ 928.653740][T13032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 928.669429][T13032] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.563570][ T6172] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 929.580133][ T6172] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:10: Failed to release dquot type 1 [ 929.640880][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.119737][T13044] 9pnet_fd: Insufficient options for proto=fd [ 930.313285][T13047] xt_TPROXY: Can be used only with -p tcp or -p udp [ 930.932829][T13051] wg1 speed is unknown, defaulting to 1000 [ 931.076161][T13053] loop2: detected capacity change from 0 to 512 [ 931.379150][T13056] wg1 speed is unknown, defaulting to 1000 [ 932.360721][T13057] loop3: detected capacity change from 0 to 1024 [ 932.372404][T13057] EXT4-fs: Ignoring removed orlov option [ 932.378237][T13057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 932.659382][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.678466][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.932318][T13053] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 932.940784][T13053] System zones: 0-2, 18-18, 34-34 [ 932.994423][T13057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 933.302117][T13053] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1643: corrupted inode contents [ 933.318495][T13053] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.1643: mark_inode_dirty error [ 933.340161][T13053] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1643: corrupted inode contents [ 933.361802][T13053] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1643: mark_inode_dirty error [ 933.377791][T13053] Quota error (device loop2): write_blk: dquota write failed [ 933.385927][T13053] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 933.396108][T13053] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1643: Failed to acquire dquot type 0 [ 933.667130][T13053] EXT4-fs (loop2): 1 orphan inode deleted [ 933.674181][T13053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.694900][T13053] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.704289][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.919841][T13074] loop0: detected capacity change from 0 to 128 [ 936.259747][T13074] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 936.276594][T13074] ext4 filesystem being mounted at /427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 937.987539][T13083] xt_hashlimit: max too large, truncated to 1048576 [ 938.299581][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 939.294842][T13089] loop0: detected capacity change from 0 to 512 [ 941.850688][T13089] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 942.440410][T13098] (null): rxe_set_mtu: Set mtu to 1024 [ 942.580004][T13098] rdma_rxe: rxe_newlink: failed to add wg1 [ 943.677170][T13107] xt_TPROXY: Can be used only with -p tcp or -p udp [ 945.381157][T13118] loop0: detected capacity change from 0 to 16 [ 945.416436][T13118] erofs: (device loop0): mounted with root inode @ nid 36. [ 945.456441][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 945.487810][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 945.515261][T13046] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.528609][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 945.664714][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 23 @ nid 36 [ 945.673896][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 22 @ nid 36 [ 945.685343][T13119] erofs: (device loop0): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 945.752993][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 21 @ nid 36 [ 945.783870][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 20 @ nid 36 [ 945.817943][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 945.844892][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 945.865419][T13118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 945.902669][T13118] syz.0.1659: attempt to access beyond end of device [ 945.902669][T13118] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 945.946219][T13118] syz.0.1659: attempt to access beyond end of device [ 945.946219][T13118] loop0: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 945.984828][T13118] syz.0.1659: attempt to access beyond end of device [ 945.984828][T13118] loop0: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 946.025888][T13118] syz.0.1659: attempt to access beyond end of device [ 946.025888][T13118] loop0: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 946.055104][T13118] ================================================================== [ 946.063202][T13118] BUG: KASAN: slab-use-after-free in z_erofs_transform_plain+0x38c/0x460 [ 946.071638][T13118] Read of size 4095 at addr ffff88802d84a400 by task syz.0.1659/13118 [ 946.079798][T13118] [ 946.082143][T13118] CPU: 0 PID: 13118 Comm: syz.0.1659 Not tainted 6.6.100-syzkaller #0 [ 946.090310][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.100389][T13118] Call Trace: [ 946.103678][T13118] [ 946.106632][T13118] dump_stack_lvl+0x16c/0x230 [ 946.111332][T13118] ? __lock_acquire+0x7c80/0x7c80 [ 946.116374][T13118] ? show_regs_print_info+0x20/0x20 [ 946.121609][T13118] ? load_image+0x3b0/0x3b0 [ 946.126140][T13118] ? __virt_addr_valid+0x469/0x540 [ 946.131276][T13118] print_report+0xac/0x200 [ 946.135711][T13118] ? z_erofs_transform_plain+0x38c/0x460 [ 946.141357][T13118] kasan_report+0x117/0x150 [ 946.145881][T13118] ? z_erofs_transform_plain+0x38c/0x460 [ 946.151552][T13118] kasan_check_range+0x288/0x290 [ 946.156510][T13118] ? z_erofs_transform_plain+0x38c/0x460 [ 946.162161][T13118] __asan_memcpy+0x29/0x70 [ 946.166619][T13118] z_erofs_transform_plain+0x38c/0x460 [ 946.172111][T13118] ? z_erofs_lz4_decompress+0x1720/0x1720 [ 946.177849][T13118] z_erofs_decompress_queue+0x16fb/0x2650 [ 946.183605][T13118] ? z_erofs_onlinepage_endio+0x350/0x350 [ 946.189367][T13118] ? slab_free_freelist_hook+0x130/0x1b0 [ 946.195044][T13118] ? bio_truncate+0x6f0/0x6f0 [ 946.199743][T13118] ? z_erofs_decompressqueue_endio+0x5a0/0x5a0 [ 946.205921][T13118] z_erofs_runqueue+0x18a3/0x19d0 [ 946.210977][T13118] ? z_erofs_do_read_page+0x3680/0x3680 [ 946.216560][T13118] ? _raw_spin_unlock+0x28/0x40 [ 946.221440][T13118] ? lockref_put_or_lock+0x72/0xb0 [ 946.226576][T13118] z_erofs_readahead+0xa7c/0xd50 [ 946.231556][T13118] ? z_erofs_read_folio+0x540/0x540 [ 946.236766][T13118] ? __mod_lruvec_page_state+0xa5/0x420 [ 946.242335][T13118] ? folio_add_lru+0x320/0xd50 [ 946.247131][T13118] ? blk_start_plug+0x6e/0x1a0 [ 946.251917][T13118] read_pages+0x177/0x840 [ 946.256266][T13118] ? __lock_acquire+0x7c80/0x7c80 [ 946.261309][T13118] ? page_cache_ra_unbounded+0x770/0x770 [ 946.266974][T13118] ? folio_add_lru+0xd50/0xd50 [ 946.271769][T13118] ? folio_add_lru+0x54f/0xd50 [ 946.276558][T13118] ? filemap_add_folio+0x192/0x3c0 [ 946.281695][T13118] page_cache_ra_unbounded+0x692/0x770 [ 946.287189][T13118] force_page_cache_ra+0x2c1/0x320 [ 946.292323][T13118] generic_fadvise+0x44f/0x730 [ 946.297110][T13118] ? dump_task+0x5f0/0x5f0 [ 946.301550][T13118] ? __fget_files+0x28/0x4d0 [ 946.306170][T13118] ? __fdget+0x180/0x210 [ 946.310443][T13118] __x64_sys_fadvise64+0x140/0x180 [ 946.315576][T13118] do_syscall_64+0x55/0xb0 [ 946.320022][T13118] ? clear_bhb_loop+0x40/0x90 [ 946.324706][T13118] ? clear_bhb_loop+0x40/0x90 [ 946.329404][T13118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.335328][T13118] RIP: 0033:0x7fbe6078e9a9 [ 946.339770][T13118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.359385][T13118] RSP: 002b:00007fbe615e5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 946.367816][T13118] RAX: ffffffffffffffda RBX: 00007fbe609b6160 RCX: 00007fbe6078e9a9 [ 946.375805][T13118] RDX: 000000000000ff39 RSI: 000000000000aa17 RDI: 0000000000000006 [ 946.383784][T13118] RBP: 00007fbe60810d69 R08: 0000000000000000 R09: 0000000000000000 [ 946.391770][T13118] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 946.399766][T13118] R13: 0000000000000000 R14: 00007fbe609b6160 R15: 00007ffd85b71aa8 [ 946.407764][T13118] [ 946.410815][T13118] [ 946.413144][T13118] The buggy address belongs to the physical page: [ 946.419573][T13118] page:ffffea0000b61280 refcount:2 mapcount:0 mapping:ffff88805a188270 index:0x1 pfn:0x2d84a [ 946.420258][T11026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 946.429717][T13118] memcg:ffff88807bca4000 [ 946.429728][T13118] aops:z_erofs_cache_aops ino:0 [ 946.429747][T13118] flags: 0xfff40000008028(uptodate|lru|private|node=0|zone=1|lastcpupid=0x7ff) [ 946.429771][T13118] page_type: 0xffffffff() [ 946.429786][T13118] raw: 00fff40000008028 ffffea0000bab888 ffffea0000877ec8 ffff88805a188270 [ 946.429802][T13118] raw: 0000000000000001 ffff88805bd60000 00000002ffffffff ffff88807bca4000 [ 946.429811][T13118] page dumped because: kasan: bad access detected [ 946.429823][T13118] page_owner tracks the page as allocated [ 946.429829][T13118] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13119, tgid 13115 (syz.0.1659), ts 945609796137, free_ts 945468719537 [ 946.440884][T11026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 946.441242][T13118] post_alloc_hook+0x1cd/0x210 [ 946.447389][T11026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 946.454993][T13118] get_page_from_freelist+0x195c/0x19f0 [ 946.455023][T13118] __alloc_pages+0x1e3/0x460 [ 946.455046][T13118] z_erofs_do_read_page+0x20c0/0x3680 [ 946.455063][T13118] z_erofs_read_folio+0x213/0x540 [ 946.461395][T11026] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 946.467944][T13118] filemap_read_folio+0x167/0x760 [ 946.467964][T13118] do_read_cache_folio+0x470/0x7e0 [ 946.467980][T13118] erofs_bread+0x16f/0x630 [ 946.468003][T13118] erofs_namei+0x28c/0xf00 [ 946.478352][T11026] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 946.483073][T13118] erofs_lookup+0x135/0x310 [ 946.489558][T11026] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 946.510910][T13118] path_openat+0x10b8/0x3190 [ 946.510941][T13118] do_filp_open+0x1c5/0x3d0 [ 946.510971][T13118] do_sys_openat2+0x12c/0x1c0 [ 946.510990][T13118] __x64_sys_openat+0x139/0x160 [ 946.511008][T13118] do_syscall_64+0x55/0xb0 [ 946.511025][T13118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.511051][T13118] page last free stack trace: [ 946.511056][T13118] free_unref_page_prepare+0x7ce/0x8e0 [ 946.606848][T13123] wg1 speed is unknown, defaulting to 1000 [ 946.608145][T13118] free_unref_page_list+0xbe/0x860 [ 946.644430][T13118] release_pages+0x1fa0/0x2220 [ 946.649213][T13118] tlb_flush_mmu+0x368/0x4f0 [ 946.653825][T13118] tlb_finish_mmu+0xc3/0x1d0 [ 946.658438][T13118] exit_mmap+0x3f0/0xb50 [ 946.662696][T13118] __mmput+0x118/0x3c0 [ 946.666780][T13118] exit_mm+0x1da/0x2c0 [ 946.670865][T13118] do_exit+0x88e/0x23c0 [ 946.675042][T13118] do_group_exit+0x21b/0x2d0 [ 946.679653][T13118] get_signal+0x12fc/0x1400 [ 946.684175][T13118] arch_do_signal_or_restart+0x96/0x780 [ 946.689744][T13118] exit_to_user_mode_loop+0x70/0x110 [ 946.695047][T13118] exit_to_user_mode_prepare+0xb1/0x140 [ 946.700616][T13118] syscall_exit_to_user_mode+0x1a/0x50 [ 946.706104][T13118] do_syscall_64+0x61/0xb0 [ 946.710539][T13118] [ 946.712876][T13118] Memory state around the buggy address: [ 946.718549][T13118] ffff88802d84af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.726621][T13118] ffff88802d84af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 946.734693][T13118] >ffff88802d84b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 946.742765][T13118] ^ [ 946.746846][T13118] ffff88802d84b080: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb [ 946.754927][T13118] ffff88802d84b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 946.762997][T13118] ================================================================== [ 946.910489][T13126] overlayfs: missing 'lowerdir' SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 947.361221][T13118] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 947.368451][T13118] CPU: 1 PID: 13118 Comm: syz.0.1659 Not tainted 6.6.100-syzkaller #0 [ 947.376606][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.386667][T13118] Call Trace: [ 947.389950][T13118] [ 947.392892][T13118] dump_stack_lvl+0x16c/0x230 [ 947.397588][T13118] ? show_regs_print_info+0x20/0x20 [ 947.402796][T13118] ? load_image+0x3b0/0x3b0 [ 947.407320][T13118] panic+0x2c0/0x710 [ 947.411243][T13118] ? bpf_jit_dump+0xd0/0xd0 [ 947.415772][T13118] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 947.421688][T13118] ? _raw_spin_unlock+0x40/0x40 [ 947.426563][T13118] ? print_memory_metadata+0x314/0x400 [ 947.432037][T13118] ? z_erofs_transform_plain+0x38c/0x460 [ 947.437685][T13118] check_panic_on_warn+0x84/0xa0 [ 947.442649][T13118] ? z_erofs_transform_plain+0x38c/0x460 [ 947.448298][T13118] end_report+0x6f/0x140 [ 947.452579][T13118] kasan_report+0x128/0x150 [ 947.457100][T13118] ? z_erofs_transform_plain+0x38c/0x460 [ 947.462757][T13118] kasan_check_range+0x288/0x290 [ 947.467719][T13118] ? z_erofs_transform_plain+0x38c/0x460 [ 947.473373][T13118] __asan_memcpy+0x29/0x70 [ 947.477809][T13118] z_erofs_transform_plain+0x38c/0x460 [ 947.483290][T13118] ? z_erofs_lz4_decompress+0x1720/0x1720 [ 947.489030][T13118] z_erofs_decompress_queue+0x16fb/0x2650 [ 947.494795][T13118] ? z_erofs_onlinepage_endio+0x350/0x350 [ 947.500535][T13118] ? slab_free_freelist_hook+0x130/0x1b0 [ 947.506199][T13118] ? bio_truncate+0x6f0/0x6f0 [ 947.510891][T13118] ? z_erofs_decompressqueue_endio+0x5a0/0x5a0 [ 947.517069][T13118] z_erofs_runqueue+0x18a3/0x19d0 [ 947.522121][T13118] ? z_erofs_do_read_page+0x3680/0x3680 [ 947.527697][T13118] ? _raw_spin_unlock+0x28/0x40 [ 947.532569][T13118] ? lockref_put_or_lock+0x72/0xb0 [ 947.537702][T13118] z_erofs_readahead+0xa7c/0xd50 [ 947.542666][T13118] ? z_erofs_read_folio+0x540/0x540 [ 947.547900][T13118] ? __mod_lruvec_page_state+0xa5/0x420 [ 947.553471][T13118] ? folio_add_lru+0x320/0xd50 [ 947.558256][T13118] ? blk_start_plug+0x6e/0x1a0 [ 947.563043][T13118] read_pages+0x177/0x840 [ 947.567418][T13118] ? __lock_acquire+0x7c80/0x7c80 [ 947.572488][T13118] ? page_cache_ra_unbounded+0x770/0x770 [ 947.578156][T13118] ? folio_add_lru+0xd50/0xd50 [ 947.582949][T13118] ? folio_add_lru+0x54f/0xd50 [ 947.587748][T13118] ? filemap_add_folio+0x192/0x3c0 [ 947.592906][T13118] page_cache_ra_unbounded+0x692/0x770 [ 947.598413][T13118] force_page_cache_ra+0x2c1/0x320 [ 947.603571][T13118] generic_fadvise+0x44f/0x730 [ 947.608370][T13118] ? dump_task+0x5f0/0x5f0 [ 947.612828][T13118] ? __fget_files+0x28/0x4d0 [ 947.617457][T13118] ? __fdget+0x180/0x210 [ 947.621732][T13118] __x64_sys_fadvise64+0x140/0x180 [ 947.626889][T13118] do_syscall_64+0x55/0xb0 [ 947.631330][T13118] ? clear_bhb_loop+0x40/0x90 [ 947.636032][T13118] ? clear_bhb_loop+0x40/0x90 [ 947.640738][T13118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.646678][T13118] RIP: 0033:0x7fbe6078e9a9 [ 947.651124][T13118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.670770][T13118] RSP: 002b:00007fbe615e5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 947.679221][T13118] RAX: ffffffffffffffda RBX: 00007fbe609b6160 RCX: 00007fbe6078e9a9 [ 947.687223][T13118] RDX: 000000000000ff39 RSI: 000000000000aa17 RDI: 0000000000000006 [ 947.695221][T13118] RBP: 00007fbe60810d69 R08: 0000000000000000 R09: 0000000000000000 [ 947.703220][T13118] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 947.711209][T13118] R13: 0000000000000000 R14: 00007fbe609b6160 R15: 00007ffd85b71aa8 [ 947.719202][T13118] [ 947.722578][T13118] Kernel Offset: disabled [ 947.726910][T13118] Rebooting in 86400 seconds..