last executing test programs: 15.352349412s ago: executing program 4 (id=7225): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x8, 0x0, 0x10000) ioctl$TIOCSBRK(r0, 0x5427) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500), 0xbf) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe3f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20000002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7f06) 12.139104803s ago: executing program 4 (id=7240): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYRES16], 0xd, 0x2a0, &(0x7f0000000840)="$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") syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = open(0x0, 0x181042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000500), 0xbf) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe3f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp], 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20000002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendfile(r0, r0, &(0x7f0000000240), 0x7f06) 8.244393411s ago: executing program 1 (id=7252): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, 0x0, 0xc080) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$selinux_avc_cache_stats(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000002280)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x9, 0x1, 0xffff0001, 0x10001, 0x4, 0x76, 0x5, 0x0, 0x6, 0x88, 0x80000000, 0x10000, 0x6, 0x5, 0x8, 0x49d, 0xa94, 0xabe, 0x1, 0x6, 0x6, 0x101, 0x0, 0x5d, 0x73f9d07d, 0x3, 0xd96, 0x0, 0x3, 0x1, 0xd9ea, 0x7, 0x1, 0x80000001, 0x1, 0x5, 0x1, 0x6, 0x9, 0x7330, 0x6, 0xc9b, 0x0, 0x7fff, 0x73, 0x6, 0x9, 0x5, 0xffff, 0x6, 0x4, 0x1, 0xdd, 0x6, 0xef83, 0x564c, 0x0, 0x6, 0x5, 0x1, 0x4, 0x4, 0x12, 0x9b9a, 0x308, 0x100, 0x5, 0x4, 0x2, 0x10, 0x8, 0xa, 0x1, 0x4, 0x0, 0x1, 0x1, 0x5, 0x1000, 0x6, 0x6, 0x7, 0xec, 0x1, 0xb2d9, 0x7, 0xd, 0x6, 0x7, 0x8341, 0x49, 0x8, 0x0, 0xd4, 0x5, 0x1442, 0x40, 0x7, 0x200, 0x7fffffff, 0x1, 0x4f, 0x8, 0xfffffffb, 0x5, 0x7fff, 0x0, 0x3, 0xc4, 0xfffffc01, 0x4, 0x2, 0x80000000, 0x400, 0xb, 0x0, 0xc2, 0xffffffff, 0x1, 0x3, 0x6, 0x80000001, 0x6, 0x6, 0x80, 0x3, 0x4]}}) socket(0x10, 0x3, 0x0) 8.239225101s ago: executing program 4 (id=7253): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150d, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00000007000000f7ffffff0600000004000000", @ANYRES32, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000040000000e000000000000000000000000000052d1c73ef8367337838caccde9122b8fe9cb15f6734d45afb1d4b28067cc2573c6ded1ccf2a11f9b312387e0e08c55f2dc4afe714f2dab85f8ae4c67f20c0582b58029f90892a3a9a45c7e42db84c354ae2089802a1d114fae9eb60f354fdaa97782688167d8a7e759feb9f8833ae189e93c2f71"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x23}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb", 0x87}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c43", 0x36}], 0x6, 0x8) r8 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x22, &(0x7f0000000480), 0xff, 0x451, &(0x7f0000000d00)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mount$bind(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x131411, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x1, 0x1}}, 0xe8) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 8.119597545s ago: executing program 0 (id=7255): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000d8d60b007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000008c0)=""/246, 0xf6}], 0x1, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r6, 0xee01, 0x0) 6.786078979s ago: executing program 2 (id=7257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 6.771241771s ago: executing program 4 (id=7258): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000003c0)='./file1\x00') chdir(&(0x7f00000000c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c06050a020b0243000400ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4", 0x8e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x8020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x212, &(0x7f00000001c0)="$eJzsmTFrFEEUx/8zu7d3CSJYaGFzFgEjmL3dPZU0FrEXhETU8jCbcDrJyWXBJCAYbGz8AH4Ri1QWdnbWFioIFqYUBcEnOzuTnbi5M3sSm7wf3N5/37z35s3s3lu4BcMwJ5ZPH799eHFjfukygFOYQdPYv3ilj3T837/0Gka+WT/9ZLccKSIFAKLS6v9l/gDA6wUPeFqkJXKjgRmTcwlSa0wBtyFxyYzfgUBoa6UyOoXAPWN+4OjBlBEqFfcHanmlr9Jopa8C5CrJD12ADtS/tyOwDKBlphBOfRtb2w97ChgWQqVWNMjOUxmqK8btn65vQeK6swX59br7/NlOfh4ae2T3D0AMidjoLgQWjZ5HE2EYts1pGjvrP++X+b3isjnrP+pKWv+2EXXFmbn/N9cY8YuqQ/YOqzh/J6KjZQ4mugTHI/I66kfJdjUqmCBPTSH+tOQ/6H3Lub3dtyod/iAix+fzsdTzeOJwUcNZNy4AlaF300rdPDTq7AHLBXd/HGHvwJG3RNE/hA9cdPqT7zwVOtnao87G1vZcf623mq6m60nSvRZdiaKrSUf35uI4pv+1dH+advI3RvgGIsBmL8uG8SaQDeP986Q4Oh138dXgq46Ruv9JzP4kso8Xvezm4XMI85H6O1ez3sjiGYZhGIZhGIZhGIZhGIZhatGGgPmvUth3YlX85JZ+ofU7AAD//ynzZU4=") mkdir(0x0, 0x0) r3 = eventfd2(0x0, 0x80800) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb2938c66", 0x8}], 0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 6.208042585s ago: executing program 1 (id=7259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x0, 0x5, 0xa60, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x42, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x97, &(0x7f0000000580)={@empty, @remote, @void, {@ipv4={0x800, @igmp={{0x12, 0x4, 0x1, 0x1, 0x89, 0x64, 0x0, 0x8, 0x2, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x3, "b3"}, @timestamp_addr={0x44, 0xc, 0x28, 0x1, 0xe, [{@multicast2, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x9f, 0x3, 0x0, [{@remote, 0x6}, {@multicast2, 0x200}, {@broadcast, 0x3}, {@local, 0x3}]}]}}, {0x16, 0x4, 0x0, @remote, "d26ac030d90bc5a9ec10b4744df431926e82b4b31eb548ee1651d511c85b21f98b2cd63fb38faac6bb749603398dd4eef762e6b4d66ac3a1b4"}}}}}, &(0x7f0000000280)={0x0, 0x4, [0x212, 0x2eb, 0x4b7, 0x4ad]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200"/106], 0x110) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.206519636s ago: executing program 0 (id=7260): write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 6.185185148s ago: executing program 2 (id=7261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) sendmmsg$inet6(r5, &(0x7f0000006200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x28, 0x7ffffff7}}], 0x1, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 5.292962411s ago: executing program 2 (id=7264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f00000008c0)=""/246, 0xf6}], 0x1, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 5.167181275s ago: executing program 4 (id=7265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000107d1ece31000000000001090224000100000000090400000203000000092100000001220b0009058103"], 0x0) 4.882947588s ago: executing program 1 (id=7266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000340)}], 0x1, 0x1000000, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000001400)=""/236, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)) 4.875178099s ago: executing program 3 (id=7267): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f000000b800)={0x2020, 0x0, 0x0}, 0xe80) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x28, 0x1ff, 0x2020202, 0x4, 0x6, 0x9, 0x1e}}, 0x50) 4.791428819s ago: executing program 3 (id=7268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8c}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x60, r5, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0xffffffffffffffe6, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0x63, 0x4e20, 0x4, @empty, 0x8040}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 4.502779412s ago: executing program 4 (id=7269): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000001c0000000000001b6119600400004235fff69cfaaeed3f00"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) 4.452548798s ago: executing program 0 (id=7271): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, 0x0, 0xc080) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$selinux_avc_cache_stats(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000002280)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x9, 0x1, 0xffff0001, 0x10001, 0x4, 0x76, 0x5, 0x0, 0x6, 0x88, 0x80000000, 0x10000, 0x6, 0x5, 0x8, 0x49d, 0xa94, 0xabe, 0x1, 0x6, 0x6, 0x101, 0x0, 0x5d, 0x73f9d07d, 0x3, 0xd96, 0x0, 0x3, 0x1, 0xd9ea, 0x7, 0x1, 0x80000001, 0x1, 0x5, 0x1, 0x6, 0x9, 0x7330, 0x6, 0xc9b, 0x0, 0x7fff, 0x73, 0x6, 0x9, 0x5, 0xffff, 0x6, 0x4, 0x1, 0xdd, 0x6, 0xef83, 0x564c, 0x0, 0x6, 0x5, 0x1, 0x4, 0x4, 0x12, 0x9b9a, 0x308, 0x100, 0x5, 0x4, 0x2, 0x10, 0x8, 0xa, 0x1, 0x4, 0x0, 0x1, 0x1, 0x5, 0x1000, 0x6, 0x6, 0x7, 0xec, 0x1, 0xb2d9, 0x7, 0xd, 0x6, 0x7, 0x8341, 0x49, 0x8, 0x0, 0xd4, 0x5, 0x1442, 0x40, 0x7, 0x200, 0x7fffffff, 0x1, 0x4f, 0x8, 0xfffffffb, 0x5, 0x7fff, 0x0, 0x3, 0xc4, 0xfffffc01, 0x4, 0x2, 0x80000000, 0x400, 0xb, 0x0, 0xc2, 0xffffffff, 0x1, 0x3, 0x6, 0x80000001, 0x6, 0x6, 0x80, 0x3, 0x4]}}) socket(0x10, 0x3, 0x0) 3.803700292s ago: executing program 1 (id=7272): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) lstat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x4000) 3.802586553s ago: executing program 2 (id=7273): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8c}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x60, r5, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0xffffffffffffffe6, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0x63, 0x4e20, 0x4, @empty, 0x8040}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 3.277643483s ago: executing program 0 (id=7274): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) rt_tgsigqueueinfo(r3, r3, 0x10, &(0x7f0000000140)={0x3d, 0x3, 0xfffffff9}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x28, 0x8000) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000000c0)={0x56, 0x9, 0x2, {0xfbff}, {0x6, 0x1000}, @ramp={0x9, 0x0, {0x6e1, 0x4d, 0x2, 0x4}}}) ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x0, 0x0, 0xfffffffffffffe33}, &(0x7f0000000480)=[{}, {}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fdatasync(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2404c085) r5 = syz_open_procfs(r0, &(0x7f00000001c0)='net/dev\x00') read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r6, 0x40087101, 0x20001100) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x10000, 0x9, 0xa, 0xf9, "f39351dcc9760de538043095267da9d366449f", 0x7, 0xfff}) 3.276977213s ago: executing program 3 (id=7275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) sendmmsg$inet6(r5, &(0x7f0000006200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x28, 0x7ffffff7}}], 0x1, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 2.662960254s ago: executing program 2 (id=7276): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000003c0)='./file1\x00') chdir(&(0x7f00000000c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c06050a020b0243000400ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4", 0x8e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x8020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x212, &(0x7f00000001c0)="$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") mkdir(0x0, 0x0) r3 = eventfd2(0x0, 0x80800) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb2938c66", 0x8}], 0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 1.988266251s ago: executing program 0 (id=7277): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 1.986206422s ago: executing program 1 (id=7278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000d8d60b007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f00000008c0)=""/246, 0xf6}], 0x1, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r7, 0xee01, 0x0) 1.984838872s ago: executing program 2 (id=7279): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.983418972s ago: executing program 3 (id=7280): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@noauto_da_alloc}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000000)='./file0\x00', r3, 0x0, 0x2) 1.733475751s ago: executing program 3 (id=7281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000c80)="c6d662691e065ad2817002cc47bb24fd097fa81ace3534089f7d5629d54265561692322203bcd691dac3b3753d5c", &(0x7f0000000080)=@tcp6}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x12f201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 2.85768ms ago: executing program 0 (id=7282): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) epoll_create1(0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0xf00, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 930.98µs ago: executing program 1 (id=7283): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x19) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) 0s ago: executing program 3 (id=7284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)) kernel console output (not intermixed with test programs): xecutor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.379027][T28818] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1894.396843][T28839] loop2: detected capacity change from 0 to 512 [ 1894.400387][T28818] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1894.427594][ T30] audit: type=1326 audit(1729542175.124:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28836 comm="syz.1.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.446126][T28842] device syzkaller0 entered promiscuous mode [ 1894.451222][ T30] audit: type=1326 audit(1729542175.124:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28836 comm="syz.1.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.480352][ T30] audit: type=1326 audit(1729542175.124:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28836 comm="syz.1.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.510970][ T30] audit: type=1326 audit(1729542175.124:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28836 comm="syz.1.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.532884][T28839] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1894.535256][ T30] audit: type=1326 audit(1729542175.124:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28836 comm="syz.1.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.567588][ T30] audit: type=1326 audit(1729542175.124:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28836 comm="syz.1.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.577518][T27251] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1894.597882][ T30] audit: type=1326 audit(1729542175.134:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28836 comm="syz.1.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.621715][ T30] audit: type=1326 audit(1729542175.134:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28836 comm="syz.1.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.646155][ T30] audit: type=1326 audit(1729542175.134:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28836 comm="syz.1.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1894.935806][T28846] loop3: detected capacity change from 0 to 512 [ 1894.951232][T28850] loop1: detected capacity change from 0 to 1024 [ 1895.010314][T28850] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1895.017908][T28846] EXT4-fs (loop3): 1 orphan inode deleted [ 1895.032348][T27251] usb 1-1: Using ep0 maxpacket: 16 [ 1895.039155][T28846] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1895.052795][T28850] netlink: 'syz.1.6843': attribute type 4 has an invalid length. [ 1895.054114][T28846] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 1895.077531][T28850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6843'. [ 1895.157654][T27251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.177511][T27251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.207216][T27251] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1895.231003][T28860] netlink: 2692 bytes leftover after parsing attributes in process `syz.2.6837'. [ 1895.240464][T27251] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1895.928370][T27251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.948393][T27251] usb 1-1: config 0 descriptor?? [ 1896.036834][T28868] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1896.465929][T28874] loop4: detected capacity change from 0 to 256 [ 1896.517575][T27251] usbhid 1-1:0.0: can't add hid device: -71 [ 1896.528611][T27251] usbhid: probe of 1-1:0.0 failed with error -71 [ 1896.543031][T27251] usb 1-1: USB disconnect, device number 17 [ 1897.870466][T28898] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1897.972524][T28906] overlayfs: missing 'lowerdir' [ 1898.932212][T28913] loop4: detected capacity change from 0 to 1024 [ 1899.047135][T28913] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1899.232113][T28913] netlink: 'syz.4.6860': attribute type 4 has an invalid length. [ 1899.302652][T28913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1899.315786][T28932] loop3: detected capacity change from 0 to 512 [ 1899.550522][T28932] EXT4-fs (loop3): 1 orphan inode deleted [ 1899.556691][T28932] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1899.571143][T28932] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 1899.594293][T28940] loop4: detected capacity change from 0 to 256 [ 1900.115003][T28950] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1900.129999][T28952] loop3: detected capacity change from 0 to 512 [ 1900.238129][T28952] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1900.305930][T28952] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 1900.757786][T28968] overlayfs: missing 'lowerdir' [ 1901.264525][T28973] loop1: detected capacity change from 0 to 1024 [ 1901.281768][T28977] loop4: detected capacity change from 0 to 128 [ 1901.288008][T28975] futex_wake_op: syz.0.6878 tries to shift op by -1; fix this program [ 1901.312478][T28980] loop3: detected capacity change from 0 to 512 [ 1901.367430][T28973] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1901.386950][T28980] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1901.400121][T28980] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 1901.440251][T28973] netlink: 'syz.1.6876': attribute type 4 has an invalid length. [ 1901.448205][T28973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6876'. [ 1901.701593][T28993] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1902.123467][T28503] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000074f) [ 1902.131222][T28503] FAT-fs (loop4): Filesystem has been set read-only [ 1902.138327][T28503] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000074f) [ 1902.209777][T29003] loop0: detected capacity change from 0 to 512 [ 1902.303301][T29003] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.6885: corrupted inode contents [ 1902.316483][T29003] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #3: comm syz.0.6885: mark_inode_dirty error [ 1902.329393][T29003] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.6885: corrupted inode contents [ 1902.342545][T29003] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.6885: mark_inode_dirty error [ 1902.354334][T29003] __quota_error: 1 callbacks suppressed [ 1902.354351][T29003] Quota error (device loop0): write_blk: dquota write failed [ 1902.367108][T29003] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1902.376887][T29003] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.6885: Failed to acquire dquot type 0 [ 1902.389845][T29003] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.6885: corrupted inode contents [ 1902.403123][T29003] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #16: comm syz.0.6885: mark_inode_dirty error [ 1902.415343][T29003] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.6885: corrupted inode contents [ 1902.435639][T29011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.442523][T29011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.450266][T29011] device bridge_slave_0 entered promiscuous mode [ 1902.457226][T29011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.464382][T29011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.471722][T29011] device bridge_slave_1 entered promiscuous mode [ 1902.484019][T29003] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.6885: mark_inode_dirty error [ 1902.502115][T29003] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.6885: corrupted inode contents [ 1902.514397][T29003] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1902.526077][T29003] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.6885: corrupted inode contents [ 1902.543462][T29003] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.6885: mark_inode_dirty error [ 1902.559191][T29003] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1902.624598][T29019] overlayfs: missing 'lowerdir' [ 1902.721404][T29003] EXT4-fs (loop0): 1 truncate cleaned up [ 1902.758821][T29003] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1902.799484][T29003] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff) [ 1902.919614][T29011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.926470][T29011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1902.933623][T29011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.940479][T29011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1902.967102][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1902.974909][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.983704][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.015112][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1903.040320][T29030] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1903.044948][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.052671][ T9530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1903.111164][T29034] loop3: detected capacity change from 0 to 128 [ 1903.117569][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1903.126119][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.132979][ T9530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1903.154040][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1903.169628][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1903.202998][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1903.231743][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1903.247956][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1903.258887][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1903.291470][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1903.308833][T29011] device veth0_vlan entered promiscuous mode [ 1903.316557][T29039] loop1: detected capacity change from 0 to 1024 [ 1903.321698][T29011] device veth1_macvtap entered promiscuous mode [ 1903.329824][ T359] device bridge_slave_1 left promiscuous mode [ 1903.335767][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.343974][ T359] device bridge_slave_0 left promiscuous mode [ 1903.351668][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.372653][ T359] device veth1_macvtap left promiscuous mode [ 1903.380058][ T359] device veth0_vlan left promiscuous mode [ 1903.380969][T29039] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1903.393251][T29046] loop0: detected capacity change from 0 to 1024 [ 1903.450484][T29046] EXT4-fs (loop0): Ignoring removed orlov option [ 1903.456715][T29046] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1903.469048][T29046] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noauto_da_alloc,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1903.638481][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1903.652135][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1903.697401][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1903.715192][T29039] netlink: 'syz.1.6895': attribute type 4 has an invalid length. [ 1903.724125][T29039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6895'. [ 1903.735281][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1903.746781][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1903.751082][T29055] loop2: detected capacity change from 0 to 512 [ 1903.757456][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1903.769166][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1903.781403][T28708] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /16/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1903.802025][T28708] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 1903.831722][T28708] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 1903.843850][T28708] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #2: comm syz-executor: mark_inode_dirty error [ 1903.862676][ T8155] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm kworker/u4:8: Invalid inode table block 0 in block_group 0 [ 1903.901308][T29055] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1903.912892][T29055] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 1904.191141][T28686] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 1904.208277][T28686] FAT-fs (loop3): Filesystem has been set read-only [ 1904.557207][T28686] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 1904.578037][T29069] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1904.697584][T29072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.704440][T29072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.711858][T29072] device bridge_slave_0 entered promiscuous mode [ 1904.726299][T29072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.734009][T29072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.793442][T29082] overlayfs: missing 'workdir' [ 1904.886956][T29072] device bridge_slave_1 entered promiscuous mode [ 1904.968456][T29085] loop2: detected capacity change from 0 to 256 [ 1905.081775][T29072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.088686][T29072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1905.095735][T29072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.102568][T29072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1905.123949][T29087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.130858][T29087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.138107][T29087] device bridge_slave_0 entered promiscuous mode [ 1905.145156][T29087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.152031][T29087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.159280][T29087] device bridge_slave_1 entered promiscuous mode [ 1905.309550][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.316801][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.339753][T29098] loop1: detected capacity change from 0 to 512 [ 1905.381072][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1905.388590][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1905.398358][T29098] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1905.416103][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1905.424563][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1905.432982][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.439858][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1905.458027][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1905.466291][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1905.475256][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.482120][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1905.546897][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1905.557233][T29103] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1905.563923][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1905.605039][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1905.613577][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1905.624957][T29101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1905.633768][T29101] device bridge_slave_1 left promiscuous mode [ 1905.640133][T29101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.648488][T29101] device bridge_slave_0 left promiscuous mode [ 1905.676980][T29101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.736625][T29109] netlink: 2692 bytes leftover after parsing attributes in process `syz.1.6912'. [ 1905.948730][T29072] device veth0_vlan entered promiscuous mode [ 1905.958615][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1905.966906][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1905.975885][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1905.983689][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1905.995900][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1906.003867][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1906.047691][ T8155] device veth1_macvtap left promiscuous mode [ 1906.053563][ T8155] device veth0_vlan left promiscuous mode [ 1906.351189][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1906.366119][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1906.377558][T29072] device veth1_macvtap entered promiscuous mode [ 1906.388506][T29118] device pim6reg1 entered promiscuous mode [ 1906.403142][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1906.410873][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1906.419139][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1906.436486][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1906.444921][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1906.453508][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1906.461353][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1906.495010][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1906.513402][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1906.521999][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.528884][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1906.536507][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1906.546041][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1906.554574][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.561459][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1906.585245][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1906.599857][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1906.610721][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1906.622395][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1906.632923][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1906.642168][T29124] binder: 29121:29124 ioctl 4018620d 0 returned -22 [ 1906.658676][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1906.675139][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1906.687720][T29124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1906.707973][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1906.721977][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1906.735077][T29087] device veth0_vlan entered promiscuous mode [ 1906.743956][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1906.755474][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1906.778757][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1906.791150][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1906.802856][T29087] device veth1_macvtap entered promiscuous mode [ 1906.830201][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1906.877082][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1906.887045][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1906.915906][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1906.936315][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1907.012490][T29137] loop2: detected capacity change from 0 to 256 [ 1907.339192][T29141] overlayfs: missing 'workdir' [ 1907.579861][T29145] loop1: detected capacity change from 0 to 512 [ 1907.591635][ T8155] device veth0_vlan left promiscuous mode [ 1907.624821][T29145] EXT4-fs (loop1): 1 orphan inode deleted [ 1907.630503][T29145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1907.643811][T29145] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 1907.731160][T29151] tipc: Started in network mode [ 1907.735894][T29151] tipc: Node identity 2, cluster identity 4711 [ 1907.742212][T29151] tipc: Node number set to 2 [ 1908.624954][T29163] loop2: detected capacity change from 0 to 512 [ 1908.885121][ T30] audit: type=1326 audit(1729542189.634:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1908.955229][ T30] audit: type=1326 audit(1729542189.664:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1908.971888][T29163] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1908.989708][T29163] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 1909.015040][ T30] audit: type=1326 audit(1729542189.664:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1911.136719][T29186] fuse: Bad value for 'fd' [ 1911.151706][ T30] audit: type=1326 audit(1729542189.664:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1911.156692][T29191] loop3: detected capacity change from 0 to 256 [ 1911.187021][T29192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1911.198950][T29188] loop4: detected capacity change from 0 to 512 [ 1911.217360][T29192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29192 comm=syz.2.6933 [ 1911.236278][ T30] audit: type=1326 audit(1729542189.664:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1911.268187][ T30] audit: type=1326 audit(1729542189.744:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1911.291670][ T30] audit: type=1326 audit(1729542189.744:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1911.321266][ T30] audit: type=1326 audit(1729542189.744:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1911.345528][ T30] audit: type=1326 audit(1729542189.744:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1911.369217][ T30] audit: type=1326 audit(1729542189.744:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29168 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x7ffc0000 [ 1911.411094][T29188] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1911.424011][T29188] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 1911.587003][T29201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1912.169811][T29206] loop0: detected capacity change from 0 to 512 [ 1912.190157][T29206] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1912.193887][T29210] loop2: detected capacity change from 0 to 512 [ 1912.227050][T29206] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 1912.277649][ T316] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1912.289314][T29210] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.6941: corrupted inode contents [ 1912.334293][T29210] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #3: comm syz.2.6941: mark_inode_dirty error [ 1912.346154][T29210] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.6941: corrupted inode contents [ 1912.359309][T29210] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.6941: mark_inode_dirty error [ 1912.370956][T29210] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.6941: Failed to acquire dquot type 0 [ 1912.383359][T29210] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.6941: corrupted inode contents [ 1912.395620][T29210] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #16: comm syz.2.6941: mark_inode_dirty error [ 1912.396868][T29222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6944'. [ 1912.487543][T29210] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.6941: corrupted inode contents [ 1912.499825][T29210] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.6941: mark_inode_dirty error [ 1912.517594][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 1912.527927][T29210] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.6941: corrupted inode contents [ 1912.542939][T29210] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1912.564599][T29210] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.6941: corrupted inode contents [ 1912.577779][T29210] EXT4-fs error (device loop2): ext4_truncate:4303: inode #16: comm syz.2.6941: mark_inode_dirty error [ 1912.589189][T29210] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1912.598832][T29210] EXT4-fs (loop2): 1 truncate cleaned up [ 1912.604590][T29210] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1912.615831][T29210] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038 (0x7fffffff) [ 1912.647651][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.658700][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.677787][ T316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1912.691684][ T316] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1912.702170][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.714819][ T316] usb 2-1: config 0 descriptor?? [ 1913.107629][ T316] usbhid 2-1:0.0: can't add hid device: -71 [ 1913.115705][ T316] usbhid: probe of 2-1:0.0 failed with error -71 [ 1913.127123][ T316] usb 2-1: USB disconnect, device number 13 [ 1913.222552][T29235] loop0: detected capacity change from 0 to 1024 [ 1913.229030][T29238] fuse: Bad value for 'fd' [ 1913.239547][T29240] loop3: detected capacity change from 0 to 1024 [ 1913.266094][T29245] loop2: detected capacity change from 0 to 512 [ 1913.269230][T29235] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1913.297427][T29235] netlink: 'syz.0.6947': attribute type 4 has an invalid length. [ 1913.305066][T29235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1913.316160][T29240] EXT4-fs (loop3): Ignoring removed orlov option [ 1913.322488][T29240] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1913.363352][T29240] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noauto_da_alloc,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1913.391078][T29245] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.6949: corrupted inode contents [ 1913.404118][T29245] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #3: comm syz.2.6949: mark_inode_dirty error [ 1913.416975][T29245] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.6949: corrupted inode contents [ 1913.438862][T29245] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.6949: mark_inode_dirty error [ 1913.452043][T29245] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.6949: Failed to acquire dquot type 0 [ 1913.464971][T29245] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.6949: corrupted inode contents [ 1913.477608][T29245] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #16: comm syz.2.6949: mark_inode_dirty error [ 1913.489888][T29245] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.6949: corrupted inode contents [ 1913.514588][T29245] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.6949: mark_inode_dirty error [ 1913.527170][T29245] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.6949: corrupted inode contents [ 1913.539954][T29245] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1913.551249][T29245] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.6949: corrupted inode contents [ 1913.567712][T29245] EXT4-fs error (device loop2): ext4_truncate:4303: inode #16: comm syz.2.6949: mark_inode_dirty error [ 1913.579599][T29245] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1913.607362][T29245] EXT4-fs (loop2): 1 truncate cleaned up [ 1913.627451][T29245] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1913.636015][T29261] device syzkaller0 entered promiscuous mode [ 1913.639563][T29245] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 1914.043332][T29265] loop1: detected capacity change from 0 to 512 [ 1914.235874][T29277] futex_wake_op: syz.0.6957 tries to shift op by -1; fix this program [ 1914.254940][T29280] syz.3.6959[29280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1914.255051][T29280] syz.3.6959[29280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1914.271937][T29280] 9pnet: Insufficient options for proto=fd [ 1914.285254][T29282] fuse: Bad value for 'fd' [ 1914.308114][T29280] 9pnet: Insufficient options for proto=fd [ 1915.298929][T29296] loop1: detected capacity change from 0 to 512 [ 1915.356614][T29296] EXT4-fs (loop1): 1 orphan inode deleted [ 1915.365207][T29296] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1915.381922][T29296] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 1915.417214][T29314] fuse: Bad value for 'fd' [ 1916.174817][T29323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6974'. [ 1916.959452][ T8158] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1917.244676][ T8158] usb 4-1: Using ep0 maxpacket: 16 [ 1917.270820][T29346] device pim6reg1 entered promiscuous mode [ 1917.370428][T29347] binder: 29343:29347 ioctl 4018620d 0 returned -22 [ 1917.381917][T29347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6980'. [ 1917.446646][ T8158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.458723][ T8158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.474505][ T8158] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1917.487643][ T8158] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1917.496536][ T8158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.506278][ T8158] usb 4-1: config 0 descriptor?? [ 1917.857546][ T8158] usbhid 4-1:0.0: can't add hid device: -71 [ 1917.863467][ T8158] usbhid: probe of 4-1:0.0 failed with error -71 [ 1917.878545][ T8158] usb 4-1: USB disconnect, device number 14 [ 1917.893320][T29353] loop1: detected capacity change from 0 to 40427 [ 1917.907833][T29353] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1917.917804][T29353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1917.926738][T29353] F2FS-fs (loop1): invalid crc value [ 1917.933937][T29353] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1917.980287][T29353] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1917.987193][T29353] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1918.305079][T29385] device syzkaller0 entered promiscuous mode [ 1918.389280][T29391] device pim6reg1 entered promiscuous mode [ 1918.399194][T29393] loop1: detected capacity change from 0 to 256 [ 1918.412120][T29395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6994'. [ 1918.420917][T29395] device bridge_slave_1 left promiscuous mode [ 1918.426933][T29395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.434684][T29395] device bridge_slave_0 left promiscuous mode [ 1918.441007][T29395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.898944][T29406] fuse: Bad value for 'fd' [ 1919.022421][T29414] loop0: detected capacity change from 0 to 256 [ 1920.106595][T29421] device syzkaller0 entered promiscuous mode [ 1920.154221][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7006'. [ 1920.174428][T29428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29428 comm=syz.2.7006 [ 1920.424590][T29436] loop3: detected capacity change from 0 to 512 [ 1920.482397][T29439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7006'. [ 1920.559473][T29436] EXT4-fs (loop3): 1 orphan inode deleted [ 1920.566204][T29436] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1920.589001][T29436] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 1921.800216][T29458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7011'. [ 1921.841180][T29460] loop3: detected capacity change from 0 to 512 [ 1921.848487][T29462] loop0: detected capacity change from 0 to 256 [ 1921.905455][T29460] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1921.916869][T29460] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 1921.929477][T27335] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1922.829770][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1922.829784][ T30] audit: type=1326 audit(1729542203.584:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1922.880128][ T30] audit: type=1326 audit(1729542203.624:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1922.907541][T27335] usb 2-1: Using ep0 maxpacket: 16 [ 1922.919080][ T30] audit: type=1326 audit(1729542203.624:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1922.950124][ T30] audit: type=1326 audit(1729542203.624:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1922.976685][ T30] audit: type=1326 audit(1729542203.624:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1923.000598][ T30] audit: type=1326 audit(1729542203.624:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1923.024464][ T30] audit: type=1326 audit(1729542203.634:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1923.048381][ T30] audit: type=1326 audit(1729542203.634:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1923.072969][T27335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1923.084483][ T30] audit: type=1326 audit(1729542203.664:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1923.108904][T27335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1923.118844][T27335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1923.133183][ T30] audit: type=1326 audit(1729542203.664:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29472 comm="syz.0.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1467f1eff9 code=0x7ffc0000 [ 1923.157829][T27335] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1923.166876][T27335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.184960][T27335] usb 2-1: config 0 descriptor?? [ 1923.211624][T29487] loop3: detected capacity change from 0 to 256 [ 1923.233322][T29487] FAT-fs (loop3): Directory bread(block 64) failed [ 1923.239792][T29487] FAT-fs (loop3): Directory bread(block 65) failed [ 1923.246179][T29487] FAT-fs (loop3): Directory bread(block 66) failed [ 1923.253024][T29487] FAT-fs (loop3): Directory bread(block 67) failed [ 1923.262970][T29487] FAT-fs (loop3): Directory bread(block 68) failed [ 1923.269422][T29487] FAT-fs (loop3): Directory bread(block 69) failed [ 1923.275838][T29487] FAT-fs (loop3): Directory bread(block 70) failed [ 1923.282467][T29487] FAT-fs (loop3): Directory bread(block 71) failed [ 1923.288972][T29487] FAT-fs (loop3): Directory bread(block 72) failed [ 1923.295213][T29487] FAT-fs (loop3): Directory bread(block 73) failed [ 1925.577622][T29495] loop1: detected capacity change from 0 to 512 [ 1925.608225][T27335] usbhid 2-1:0.0: can't add hid device: -71 [ 1925.614103][T27335] usbhid: probe of 2-1:0.0 failed with error -71 [ 1925.643961][T27335] usb 2-1: USB disconnect, device number 14 [ 1925.647556][T29495] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1925.660650][T29495] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 1926.231317][T29519] loop2: detected capacity change from 0 to 256 [ 1926.258060][T29524] device syzkaller0 entered promiscuous mode [ 1926.456857][T29531] loop0: detected capacity change from 0 to 256 [ 1926.478153][T29533] loop1: detected capacity change from 0 to 1024 [ 1927.641969][T29536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 1927.651386][T29536] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 1927.659901][T29536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 1927.669339][T29536] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 1927.687890][T29533] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1927.715821][T29533] netlink: 'syz.1.7036': attribute type 4 has an invalid length. [ 1927.723568][T29533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7036'. [ 1928.269176][T29548] loop3: detected capacity change from 0 to 512 [ 1928.324540][T29555] loop0: detected capacity change from 0 to 512 [ 1928.331427][T29548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1928.342706][T29548] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 1928.400794][T29555] EXT4-fs (loop0): 1 orphan inode deleted [ 1928.408512][T29555] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1928.426695][T29555] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 1928.486093][T29563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7044'. [ 1928.963387][T29567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29567 comm=syz.4.7044 [ 1929.389226][T29575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7044'. [ 1929.455006][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7047'. [ 1929.689938][T29581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29581 comm=syz.3.7047 [ 1931.096267][T29593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7047'. [ 1931.359570][T29598] loop4: detected capacity change from 0 to 1024 [ 1931.534171][T29598] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1931.806731][T29598] netlink: 'syz.4.7052': attribute type 4 has an invalid length. [ 1931.828348][T29598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7052'. [ 1931.849073][T29612] loop2: detected capacity change from 0 to 512 [ 1931.914632][T29612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1931.927007][T29613] loop3: detected capacity change from 0 to 256 [ 1931.964372][T29612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 1931.972538][T29612] System zones: 1-12 [ 1932.008468][T29612] EXT4-fs (loop2): 1 truncate cleaned up [ 1932.014523][T29612] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 1932.185513][T29619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7058'. [ 1932.492714][T29622] loop2: detected capacity change from 0 to 512 [ 1932.500045][T29624] loop4: detected capacity change from 0 to 1024 [ 1932.569902][T29622] EXT4-fs (loop2): 1 orphan inode deleted [ 1932.575459][T29622] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1932.586433][T29622] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038 (0x7fffffff) [ 1932.937333][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1932.937350][ T30] audit: type=1326 audit(1729542213.564:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.0.7061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1467f1eff9 code=0x0 [ 1932.968579][T29624] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1933.222444][T29638] loop3: detected capacity change from 0 to 1024 [ 1933.232260][T29638] EXT4-fs (loop3): Ignoring removed orlov option [ 1933.238518][T29638] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1933.251545][T29638] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noauto_da_alloc,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1933.314187][T29087] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /34/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1933.336621][T29087] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 1933.372627][T29087] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 1933.383367][T29087] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #2: comm syz-executor: mark_inode_dirty error [ 1933.404009][T29642] syz.0.7065[29642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1933.404068][ T415] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 1933.404080][T29642] syz.0.7065[29642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1933.657511][T29654] netlink: 2692 bytes leftover after parsing attributes in process `syz.2.7064'. [ 1933.709058][T29651] device syzkaller0 entered promiscuous mode [ 1933.888963][T29657] loop4: detected capacity change from 0 to 512 [ 1933.933790][T29658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.941004][T29658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.941210][T29657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1933.948427][T29658] device bridge_slave_0 entered promiscuous mode [ 1933.977248][T29658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.984448][T29658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.992432][T29658] device bridge_slave_1 entered promiscuous mode [ 1934.001564][T29657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 1934.009488][T29657] System zones: 1-12 [ 1934.013428][T29666] tipc: Started in network mode [ 1934.018131][T29657] EXT4-fs (loop4): 1 truncate cleaned up [ 1934.018143][T29666] tipc: Node identity 2, cluster identity 4711 [ 1934.018154][T29666] tipc: Node number set to 2 [ 1934.023628][T29657] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 1934.130710][T29674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7075'. [ 1934.148601][T29658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.155470][T29658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1934.162586][T29658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.169369][T29658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.209440][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1934.218309][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.226512][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.248344][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1934.256780][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.263716][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.271143][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1934.279676][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.286513][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1934.309656][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1934.317777][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1934.336243][T29658] device veth0_vlan entered promiscuous mode [ 1934.353472][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1934.367228][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1934.376366][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1934.384354][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1934.417135][T29683] loop4: detected capacity change from 0 to 1024 [ 1934.436081][T29658] device veth1_macvtap entered promiscuous mode [ 1934.449857][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1934.465417][T29683] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1934.519853][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1934.539504][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1934.544370][T29688] incfs: Can't find or create .index dir in ./file0 [ 1934.561386][T29688] incfs: mount failed -5 [ 1934.700361][T29693] loop3: detected capacity change from 0 to 1024 [ 1934.714801][ T10] device bridge_slave_1 left promiscuous mode [ 1934.722114][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.768950][ T10] device bridge_slave_0 left promiscuous mode [ 1934.775026][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.849557][T29693] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1934.924757][ T10] device veth0_vlan left promiscuous mode [ 1934.994946][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.038147][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.052933][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.064840][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.087113][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.132281][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.144885][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.157354][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.182505][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.286759][T29011] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.415344][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.426040][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.436958][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.449104][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.465074][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.480943][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.499437][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.614627][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.663170][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.685910][T29658] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1935.758187][T29717] loop1: detected capacity change from 0 to 512 [ 1935.800546][T29720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.807430][T29720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.814856][T29720] device bridge_slave_0 entered promiscuous mode [ 1935.821234][T29717] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1935.832176][T29717] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff) [ 1935.834051][T29720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.851539][T29720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.892638][T29720] device bridge_slave_1 entered promiscuous mode [ 1936.003674][T29720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.010550][T29720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1936.017654][T29720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.024417][T29720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1936.055722][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1936.064718][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.073128][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.106389][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1936.114898][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.121764][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1936.129673][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1936.138156][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.144997][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1936.152319][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1936.160253][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1936.239244][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1936.253163][T29732] loop2: detected capacity change from 0 to 1024 [ 1936.263067][T29720] device veth0_vlan entered promiscuous mode [ 1936.279778][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1936.293970][T29720] device veth1_macvtap entered promiscuous mode [ 1936.313334][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1936.321883][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1936.329412][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1936.341833][T29729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.356999][T29729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.358106][T29732] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1936.364615][T29729] device bridge_slave_0 entered promiscuous mode [ 1936.414624][T29729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.422485][T29729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.441022][T29729] device bridge_slave_1 entered promiscuous mode [ 1936.450752][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1936.465492][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1936.596809][ T10] device bridge_slave_1 left promiscuous mode [ 1936.614129][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.632476][T29741] binder: 29739:29741 ioctl 4018620d 0 returned -22 [ 1936.639436][ T10] device bridge_slave_0 left promiscuous mode [ 1936.646321][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.675473][ T10] device veth0_vlan left promiscuous mode [ 1936.980024][T29741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7090'. [ 1937.005337][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.052469][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.099536][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.148195][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.168248][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1937.177038][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.184900][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1937.208590][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.239399][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.242087][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1937.268719][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.286309][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1937.303552][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.309842][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.310424][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1937.351549][T29759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29759 comm=syz.4.7098 [ 1937.361570][T28460] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1937.366448][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1937.457849][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1937.466106][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.472973][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1937.487905][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1937.507810][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1937.515786][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1937.525536][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1937.561606][T29758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7098'. [ 1937.743951][T29761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7098'. [ 1937.866806][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1937.917353][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1937.941488][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1937.990155][T29729] device veth0_vlan entered promiscuous mode [ 1937.996504][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1938.007963][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1938.008061][T29763] loop1: detected capacity change from 0 to 2048 [ 1938.037872][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1938.064345][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1938.086940][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1938.109136][T29729] device veth1_macvtap entered promiscuous mode [ 1938.155738][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1938.167996][T29763] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1938.191479][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1938.200830][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1938.231620][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1938.243711][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1938.290248][T29776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7102'. [ 1938.309533][T29776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29776 comm=syz.3.7102 [ 1938.391866][T29766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1938.467639][T29766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1938.474974][T29766] device bridge_slave_0 entered promiscuous mode [ 1938.485136][T29766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.492199][T29766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.499629][T29766] device bridge_slave_1 entered promiscuous mode [ 1938.804539][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7102'. [ 1938.847010][T29784] loop0: detected capacity change from 0 to 512 [ 1938.892168][ T10] device bridge_slave_1 left promiscuous mode [ 1938.898431][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.909992][ T10] device bridge_slave_0 left promiscuous mode [ 1938.920040][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1938.933885][ T10] device veth1_macvtap left promiscuous mode [ 1938.944857][ T10] device veth0_vlan left promiscuous mode [ 1938.954082][T29784] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1938.988556][T29784] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 1939.334372][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1939.343749][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1939.366379][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1939.388056][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1939.407244][T16790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.414116][T16790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1939.448184][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1939.461467][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1939.485995][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1939.509323][T16790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1939.516183][T16790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1939.535721][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1939.547339][T29790] loop3: detected capacity change from 0 to 40427 [ 1939.550920][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1939.578920][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1939.594971][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1939.610967][T29790] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1939.623040][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1939.627530][T29790] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1939.635482][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1939.652132][T29790] F2FS-fs (loop3): invalid crc value [ 1939.658116][T29795] syz.4.7107[29795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1939.658187][T29795] syz.4.7107[29795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1939.674179][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1939.701350][T29795] incfs: Can't find or create .index dir in ./file0 [ 1939.708193][T29795] incfs: mount failed -5 [ 1939.751798][T29790] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1939.758476][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1939.792716][T29766] device veth0_vlan entered promiscuous mode [ 1939.810503][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1939.821458][T29803] loop4: detected capacity change from 0 to 512 [ 1939.837903][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1939.851450][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1939.873132][T29803] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1939.874427][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1939.889465][T29803] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 1939.901736][T29790] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1939.908986][T29790] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1939.952516][T29766] device veth1_macvtap entered promiscuous mode [ 1939.998496][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1940.006217][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1940.033398][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1940.159457][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1940.167616][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1940.176306][ T10] tipc: Left network mode [ 1940.334707][T29814] loop2: detected capacity change from 0 to 512 [ 1940.441634][T29814] EXT4-fs (loop2): 1 orphan inode deleted [ 1940.447195][T29814] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1940.458426][T29817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7111'. [ 1940.467107][T29817] device bridge_slave_1 left promiscuous mode [ 1940.575491][T29817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1940.580943][T29826] loop1: detected capacity change from 0 to 1024 [ 1940.582947][T29814] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 1940.601666][T29817] device bridge_slave_0 left promiscuous mode [ 1940.607961][T29817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1941.061475][T29826] EXT4-fs (loop1): Ignoring removed orlov option [ 1941.139654][T29826] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1941.243082][T29826] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noauto_da_alloc,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1941.382396][T29836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7115'. [ 1941.393160][T29836] device bridge_slave_1 left promiscuous mode [ 1941.401636][T29836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.409972][T29836] device bridge_slave_0 left promiscuous mode [ 1941.417900][T29836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1941.447627][T29840] loop1: detected capacity change from 0 to 512 [ 1941.483807][T29840] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1941.500708][T29840] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 1941.500953][T29844] binder: 29837:29844 ioctl 4018620d 0 returned -22 [ 1941.601272][T29844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7117'. [ 1941.759639][ T10] device veth0_vlan left promiscuous mode [ 1941.778031][T29857] loop2: detected capacity change from 0 to 512 [ 1941.819262][T29860] loop4: detected capacity change from 0 to 1024 [ 1941.868676][T29857] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1941.879864][T29857] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 1941.935064][T29860] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1941.953141][T29860] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 1942.169959][ T30] audit: type=1326 audit(1729542222.924:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.0.7126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1467f1eff9 code=0x0 [ 1942.357889][T29882] incfs: Can't find or create .index dir in ./file0 [ 1942.364517][T29882] incfs: mount failed -5 [ 1942.421246][T29884] loop4: detected capacity change from 0 to 256 [ 1942.464769][T29884] FAT-fs (loop4): Directory bread(block 64) failed [ 1942.471541][T29884] FAT-fs (loop4): Directory bread(block 65) failed [ 1942.478082][T29884] FAT-fs (loop4): Directory bread(block 66) failed [ 1942.484598][T29884] FAT-fs (loop4): Directory bread(block 67) failed [ 1942.491080][T29884] FAT-fs (loop4): Directory bread(block 68) failed [ 1942.497526][T29884] FAT-fs (loop4): Directory bread(block 69) failed [ 1942.503924][T29884] FAT-fs (loop4): Directory bread(block 70) failed [ 1942.510260][T29884] FAT-fs (loop4): Directory bread(block 71) failed [ 1942.516571][T29884] FAT-fs (loop4): Directory bread(block 72) failed [ 1942.522938][T29884] FAT-fs (loop4): Directory bread(block 73) failed [ 1942.637490][T29887] loop2: detected capacity change from 0 to 256 [ 1942.638898][T29888] loop1: detected capacity change from 0 to 256 [ 1943.414094][T29887] FAT-fs (loop2): Directory bread(block 64) failed [ 1943.537805][T29887] FAT-fs (loop2): Directory bread(block 65) failed [ 1943.557843][T29887] FAT-fs (loop2): Directory bread(block 66) failed [ 1943.561104][T29898] loop3: detected capacity change from 0 to 1024 [ 1943.570424][T29887] FAT-fs (loop2): Directory bread(block 67) failed [ 1943.597294][T29887] FAT-fs (loop2): Directory bread(block 68) failed [ 1943.658315][T29900] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 1943.674327][T29900] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 1943.684713][T29900] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 1943.695017][T29900] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 1943.769716][T29887] FAT-fs (loop2): Directory bread(block 69) failed [ 1943.776087][T29887] FAT-fs (loop2): Directory bread(block 70) failed [ 1943.783356][T29887] FAT-fs (loop2): Directory bread(block 71) failed [ 1943.789971][T29887] FAT-fs (loop2): Directory bread(block 72) failed [ 1943.796425][T29887] FAT-fs (loop2): Directory bread(block 73) failed [ 1945.079702][T29898] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1945.505974][T29915] loop4: detected capacity change from 0 to 2048 [ 1945.617111][T29918] loop1: detected capacity change from 0 to 1024 [ 1945.626229][T29915] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1945.707790][T29918] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1945.754267][T29918] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038 (0x7fffffff) [ 1945.784055][T29931] loop4: detected capacity change from 0 to 512 [ 1945.879692][T29935] loop0: detected capacity change from 0 to 512 [ 1945.888600][T29931] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1945.899653][T29931] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 1946.865155][ T30] audit: type=1326 audit(1729542227.114:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29932 comm="syz.1.7140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x0 [ 1946.936098][T29948] fuse: Bad value for 'group_id' [ 1946.969834][T29950] loop2: detected capacity change from 0 to 512 [ 1947.018343][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.019499][T29935] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.7141: corrupted inode contents [ 1947.040921][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.044197][T29935] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #3: comm syz.0.7141: mark_inode_dirty error [ 1947.052116][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.062741][T29935] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.7141: corrupted inode contents [ 1947.073773][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.125695][T29935] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.7141: mark_inode_dirty error [ 1947.140148][T29935] Quota error (device loop0): write_blk: dquota write failed [ 1947.148816][T29935] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1947.160055][T29935] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.7141: Failed to acquire dquot type 0 [ 1947.174194][T29935] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7141: corrupted inode contents [ 1947.195034][T29950] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.7145: corrupted inode contents [ 1947.220336][T29935] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #16: comm syz.0.7141: mark_inode_dirty error [ 1947.230107][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.237241][T29935] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7141: corrupted inode contents [ 1947.253808][T29950] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #3: comm syz.2.7145: mark_inode_dirty error [ 1947.255987][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.265008][T29935] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.7141: mark_inode_dirty error [ 1947.275830][T29950] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.7145: corrupted inode contents [ 1947.287732][T29958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7144'. [ 1947.298502][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.309393][T29950] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.7145: mark_inode_dirty error [ 1947.317124][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.327716][T29935] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7141: corrupted inode contents [ 1947.338506][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.350303][T29950] Quota error (device loop2): write_blk: dquota write failed [ 1947.359870][T29935] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1947.367029][T29950] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1947.375673][T29729] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1947.385419][T29950] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.7145: Failed to acquire dquot type 0 [ 1947.395516][T29935] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7141: corrupted inode contents [ 1947.419151][T29935] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.7141: mark_inode_dirty error [ 1947.419359][T29950] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.7145: corrupted inode contents [ 1947.442412][T29950] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #16: comm syz.2.7145: mark_inode_dirty error [ 1947.442509][T29935] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1947.453867][T29950] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.7145: corrupted inode contents [ 1947.474511][T29950] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.7145: mark_inode_dirty error [ 1947.482342][T29935] EXT4-fs (loop0): 1 truncate cleaned up [ 1947.486156][T29950] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.7145: corrupted inode contents [ 1947.491297][T29935] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1947.503234][T29950] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1947.514162][T29935] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 1947.523057][T29950] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.7145: corrupted inode contents [ 1947.544141][T29950] EXT4-fs error (device loop2): ext4_truncate:4303: inode #16: comm syz.2.7145: mark_inode_dirty error [ 1947.555327][T29950] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1947.564630][T29950] EXT4-fs (loop2): 1 truncate cleaned up [ 1947.570252][T29950] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1947.581224][T29950] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 1948.706496][T29969] loop2: detected capacity change from 0 to 512 [ 1948.821604][T29969] EXT4-fs (loop2): 1 orphan inode deleted [ 1948.827181][T29969] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1948.839607][T29969] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 1949.203546][T29973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.215920][T29973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.255052][T29973] device bridge_slave_0 entered promiscuous mode [ 1949.302916][T29973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.350361][ T6] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1949.357871][T29973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.365085][T29973] device bridge_slave_1 entered promiscuous mode [ 1949.431022][T29973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.437916][T29973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1949.444995][T29973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.451786][T29973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1949.480337][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1949.488322][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.495600][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.515715][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1949.534999][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.541885][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1949.560133][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1949.576961][T29984] loop4: detected capacity change from 0 to 40427 [ 1949.586415][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.593293][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1949.600883][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 1949.613414][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1949.613490][T29987] fuse: Bad value for 'group_id' [ 1949.621635][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1949.635591][T29984] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1949.644002][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1949.652377][T29984] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1949.657678][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1949.669763][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1949.680540][T29984] F2FS-fs (loop4): invalid crc value [ 1949.681645][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1949.696364][ T8155] device bridge_slave_1 left promiscuous mode [ 1949.703032][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.710893][ T8155] device bridge_slave_0 left promiscuous mode [ 1949.713052][T29984] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1949.716924][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.731184][ T8155] device veth0_vlan left promiscuous mode [ 1949.777608][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1949.797555][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1949.807110][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1949.820069][ T6] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1949.823086][T29984] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1949.829802][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.838108][T29984] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1949.845039][ T6] usb 2-1: config 0 descriptor?? [ 1950.234809][T29973] device veth0_vlan entered promiscuous mode [ 1950.248394][T29973] device veth1_macvtap entered promiscuous mode [ 1950.353489][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1950.361760][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1950.369988][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1950.382422][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1950.391295][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1950.399557][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1950.538493][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1950.704375][ T30] audit: type=1326 audit(1729542231.214:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30004 comm="syz.3.7151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1c1ff9 code=0x0 [ 1950.745620][T30012] loop0: detected capacity change from 0 to 512 [ 1950.790373][T30012] EXT4-fs (loop0): 1 orphan inode deleted [ 1950.796043][T30012] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1950.807344][T30012] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038 (0x7fffffff) [ 1950.807614][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 1950.834658][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 1950.845475][ T6] usb 2-1: USB disconnect, device number 15 [ 1950.888257][T30017] deleting an unspecified loop device is not supported. [ 1950.895420][T30022] loop2: detected capacity change from 0 to 1024 [ 1950.918836][T30022] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1951.811983][T30038] loop0: detected capacity change from 0 to 512 [ 1951.870225][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1951.880952][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1951.894489][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1951.905481][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1951.930684][T30044] loop4: detected capacity change from 0 to 512 [ 1951.933053][T30038] EXT4-fs (loop0): 1 orphan inode deleted [ 1951.945859][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1951.956499][T30038] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1951.967606][T30038] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 1951.977889][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1952.023824][T30044] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1952.047594][T30044] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 1952.071869][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1952.090248][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1952.678352][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1952.719296][T29766] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1952.813614][T30057] loop1: detected capacity change from 0 to 512 [ 1952.906417][T30057] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1952.917606][T30057] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038 (0x7fffffff) [ 1953.059364][T30067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.066445][T30067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.074635][T30067] device bridge_slave_0 entered promiscuous mode [ 1953.083998][T30067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.091337][T30067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.098980][T30067] device bridge_slave_1 entered promiscuous mode [ 1953.197376][T30067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.204334][T30067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1953.211535][T30067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.218467][T30067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1953.298203][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1953.309396][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.323602][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.368460][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1953.376678][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.383549][ T8155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1953.416971][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1953.437123][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.443998][ T8155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1953.477173][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1953.488263][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1953.509811][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1953.541692][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1953.552650][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1953.567996][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1953.589129][T30067] device veth0_vlan entered promiscuous mode [ 1953.599828][ T415] device veth1_macvtap left promiscuous mode [ 1953.605714][ T415] device veth0_vlan left promiscuous mode [ 1953.712153][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1953.724493][T30080] loop4: detected capacity change from 0 to 512 [ 1953.778936][T30067] device veth1_macvtap entered promiscuous mode [ 1953.790042][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1953.794032][T30080] EXT4-fs (loop4): 1 orphan inode deleted [ 1953.798541][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1953.812993][T30080] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1953.824816][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1953.824964][T30080] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038 (0x7fffffff) [ 1953.837823][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1953.896726][ T30] audit: type=1326 audit(1729542234.644:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30081 comm="syz.1.7178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c775a9ff9 code=0x0 [ 1954.483181][T30097] loop3: detected capacity change from 0 to 512 [ 1954.518508][T30097] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1954.531085][T30097] EXT4-fs (loop3): 1 truncate cleaned up [ 1954.536585][T30097] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier=0x0000000000000007,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1954.761325][T30104] binder: 30101:30104 ioctl 4018620d 0 returned -22 [ 1954.782629][T30104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1954.964436][T30112] loop2: detected capacity change from 0 to 512 [ 1955.049832][T30112] EXT4-fs (loop2): 1 orphan inode deleted [ 1955.056179][T30112] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1955.068550][T30112] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 1955.535584][T30126] loop4: detected capacity change from 0 to 512 [ 1955.573015][T30126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1955.584051][T30126] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 1955.617517][ T6] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1955.640465][T30132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7188'. [ 1956.187512][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 1956.307606][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1956.327496][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1956.347281][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1956.637486][ T6] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1956.646575][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.668120][ T6] usb 1-1: config 0 descriptor?? [ 1956.758868][T30137] loop4: detected capacity change from 0 to 40427 [ 1956.779011][T30137] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1956.785332][T30137] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1956.828348][T30137] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1956.888131][T30137] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1956.898126][T30137] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1956.915956][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1957.000022][T30163] loop3: detected capacity change from 0 to 512 [ 1957.017660][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 1957.023967][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 1957.031382][T30163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1957.034027][ T6] usb 1-1: USB disconnect, device number 18 [ 1957.044977][T30163] EXT4-fs (loop3): 1 truncate cleaned up [ 1957.052402][T30163] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier=0x0000000000000007,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1957.579061][T30167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1957.673183][T30171] loop2: detected capacity change from 0 to 512 [ 1957.838249][T30174] loop1: detected capacity change from 0 to 128 [ 1957.883146][T30171] EXT4-fs (loop2): 1 orphan inode deleted [ 1957.888798][T30171] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1957.900012][T30171] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 1957.906770][T30178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7199'. [ 1957.936038][T30181] loop4: detected capacity change from 0 to 512 [ 1958.086822][T30181] EXT4-fs (loop4): 1 orphan inode deleted [ 1958.099809][T30181] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1958.111164][T30181] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 1958.148175][T30189] loop0: detected capacity change from 0 to 512 [ 1958.232970][T30192] loop3: detected capacity change from 0 to 1024 [ 1958.241678][T30189] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.7202: corrupted inode contents [ 1958.268000][T30189] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #3: comm syz.0.7202: mark_inode_dirty error [ 1958.297976][T30189] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.7202: corrupted inode contents [ 1958.335485][T30189] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.7202: mark_inode_dirty error [ 1958.350203][T30192] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1958.379760][T30189] Quota error (device loop0): write_blk: dquota write failed [ 1958.393504][T30189] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1958.426149][T30189] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.7202: Failed to acquire dquot type 0 [ 1958.453106][T30189] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7202: corrupted inode contents [ 1958.483911][T30189] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #16: comm syz.0.7202: mark_inode_dirty error [ 1958.500999][T30189] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7202: corrupted inode contents [ 1958.536810][T30189] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.7202: mark_inode_dirty error [ 1958.557831][T30189] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7202: corrupted inode contents [ 1958.592982][T30189] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1958.617945][T30189] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7202: corrupted inode contents [ 1958.639439][T30189] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.7202: mark_inode_dirty error [ 1958.651648][T30189] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1958.664082][T30189] EXT4-fs (loop0): 1 truncate cleaned up [ 1958.677048][T28663] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f) [ 1958.684831][T30189] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1958.684929][T30189] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038 (0x7fffffff) [ 1958.774807][T28663] FAT-fs (loop1): Filesystem has been set read-only [ 1958.782218][T28663] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f) [ 1958.818346][T30204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30204 comm=syz.2.7206 [ 1959.192311][ T8155] tipc: Left network mode [ 1959.501397][T30208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7206'. [ 1959.604955][T30213] loop0: detected capacity change from 0 to 512 [ 1959.662766][T30213] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1959.687727][T30213] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038 (0x7fffffff) [ 1959.712324][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1959.759880][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1959.773442][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1959.798150][T30214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.805359][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1959.816291][T30214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.824041][T30214] device bridge_slave_0 entered promiscuous mode [ 1959.830864][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1959.836860][T30214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1959.848092][T30214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.855467][T30214] device bridge_slave_1 entered promiscuous mode [ 1959.864628][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1959.900456][T30228] loop2: detected capacity change from 0 to 512 [ 1959.913423][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1959.925348][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1959.939024][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1959.949842][T29973] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1960.021956][T30228] EXT4-fs (loop2): 1 orphan inode deleted [ 1960.032118][T30228] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1960.043614][T30228] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 1960.162498][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1960.176709][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1960.204603][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1960.253343][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1960.273579][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1960.280460][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1960.317607][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1960.337829][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1960.356369][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.361451][T30236] loop4: detected capacity change from 0 to 512 [ 1960.363379][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1960.403733][ T8155] device veth0_vlan left promiscuous mode [ 1960.421583][T30236] EXT4-fs (loop4): 1 orphan inode deleted [ 1960.433778][T30236] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1960.465037][T30236] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038 (0x7fffffff) [ 1960.507958][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1960.537393][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1960.545822][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1960.570226][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1960.605636][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1960.613581][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1960.622477][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1960.633455][T30238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1960.640547][T30238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.648754][T30238] device bridge_slave_0 entered promiscuous mode [ 1960.664534][T30214] device veth0_vlan entered promiscuous mode [ 1960.676715][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1960.695066][T30238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.702271][T30238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.710561][T30238] device bridge_slave_1 entered promiscuous mode [ 1960.723693][T30214] device veth1_macvtap entered promiscuous mode [ 1960.752601][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1960.790353][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1960.830776][T30253] loop2: detected capacity change from 0 to 1024 [ 1960.856433][T30255] loop1: detected capacity change from 0 to 256 [ 1960.901703][T30253] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1960.922507][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1960.929894][T30253] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 1960.931212][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1961.018098][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1961.039085][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1961.047128][T16790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.054005][T16790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.062001][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1961.100137][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1961.109800][T16790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.116635][T16790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.297127][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1961.298493][T30262] loop4: detected capacity change from 0 to 512 [ 1961.311695][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1961.326694][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1961.334485][T30264] loop2: detected capacity change from 0 to 1024 [ 1961.335153][T30250] loop0: detected capacity change from 0 to 40427 [ 1961.341746][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1961.355154][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1961.359609][T30262] EXT4-fs (loop4): 1 orphan inode deleted [ 1961.364004][T30264] EXT4-fs (loop2): Ignoring removed orlov option [ 1961.374732][T30264] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1961.378839][T30262] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1961.392813][T30262] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff) [ 1961.403315][T30250] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1961.411301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1961.422115][T30250] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1961.431954][T30250] F2FS-fs (loop0): Unrecognized mount option "00000000000000000000" or missing value [ 1961.433538][T30238] device veth0_vlan entered promiscuous mode [ 1961.449756][T30264] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noauto_da_alloc,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1961.501411][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1961.510490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1961.517842][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1961.533942][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1961.542375][T30238] device veth1_macvtap entered promiscuous mode [ 1961.576871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1961.585266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1961.607156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1961.625678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1961.650393][T30067] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /10/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1961.684717][T30272] loop3: detected capacity change from 0 to 512 [ 1961.728869][T30272] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1961.748590][T30067] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 1961.766490][T30272] EXT4-fs (loop3): 1 truncate cleaned up [ 1961.772574][T30067] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 1961.789836][T30272] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier=0x0000000000000007,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1961.812651][T30067] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #2: comm syz-executor: mark_inode_dirty error [ 1961.886376][ T8155] device bridge_slave_1 left promiscuous mode [ 1961.907993][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 1961.926937][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.019911][ T8155] device bridge_slave_0 left promiscuous mode [ 1962.027049][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.048169][ T30] audit: type=1326 audit(1729542242.734:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.1.7223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f030b446ff9 code=0x0 [ 1962.194014][ T8155] device veth1_macvtap left promiscuous mode [ 1962.224949][ T8155] device veth0_vlan left promiscuous mode [ 1962.381831][T30279] device veth1_macvtap left promiscuous mode [ 1962.387827][T30279] device macsec0 entered promiscuous mode [ 1962.415899][T30284] loop4: detected capacity change from 0 to 256 [ 1962.451932][T30286] loop0: detected capacity change from 0 to 512 [ 1962.518070][T30286] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1962.534232][T30286] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff) [ 1962.786504][T30295] loop1: detected capacity change from 0 to 256 [ 1962.829611][T30290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.836836][T30290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.844357][T30290] device bridge_slave_0 entered promiscuous mode [ 1962.875118][T30290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.894995][T30290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.912007][T30290] device bridge_slave_1 entered promiscuous mode [ 1963.191469][T30307] loop3: detected capacity change from 0 to 512 [ 1963.271978][T30290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.278863][T30290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1963.286066][T30290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.292961][T30290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1963.318267][T30307] EXT4-fs (loop3): 1 orphan inode deleted [ 1963.325686][T30307] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1963.337645][T30307] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 1963.348106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1963.418791][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.426216][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.447589][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1963.455822][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1963.464550][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.471408][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1963.478726][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1963.566697][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1963.722573][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.729465][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1963.750205][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1963.758675][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1963.766535][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1963.775352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1963.790568][T30316] loop1: detected capacity change from 0 to 1024 [ 1963.801841][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1963.810189][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1963.818764][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1963.826644][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1963.834672][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1963.842638][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1963.851304][T30290] device veth0_vlan entered promiscuous mode [ 1963.868817][T30316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1963.873554][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1963.879466][T30316] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 1963.887867][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1963.908317][T30290] device veth1_macvtap entered promiscuous mode [ 1963.930882][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1963.940032][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1963.949219][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1963.985792][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1963.997836][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1964.118355][ T8155] device bridge_slave_1 left promiscuous mode [ 1964.126459][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.937735][ T30] audit: type=1326 audit(1729542245.674:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30326 comm="syz.3.7233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b46cfdff9 code=0x0 [ 1965.001912][ T8155] device bridge_slave_0 left promiscuous mode [ 1965.174000][T30334] 9pnet: Insufficient options for proto=fd [ 1965.185665][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.207793][ T8155] device veth0_vlan left promiscuous mode [ 1965.268683][T30339] loop2: detected capacity change from 0 to 512 [ 1965.300895][T30341] loop0: detected capacity change from 0 to 512 [ 1965.565571][T30339] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1965.588275][T30341] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1965.615269][T30347] loop4: detected capacity change from 0 to 256 [ 1965.625673][T30341] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 1965.637610][T30339] EXT4-fs (loop2): 1 truncate cleaned up [ 1965.643220][T30339] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier=0x0000000000000007,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1965.651567][T30325] loop1: detected capacity change from 0 to 40427 [ 1965.727780][T30325] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1965.735532][T30325] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1965.743822][T30325] F2FS-fs (loop1): Unrecognized mount option "00000000000000000000" or missing value [ 1966.166001][T30356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7241'. [ 1966.174841][T30356] device bridge_slave_1 left promiscuous mode [ 1966.205139][T30356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.222606][T30356] device bridge_slave_0 left promiscuous mode [ 1966.230056][T30356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.449481][T30367] device veth1_macvtap left promiscuous mode [ 1966.471551][T30367] device macsec0 entered promiscuous mode [ 1969.408130][T27251] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1969.437762][ T30] audit: type=1326 audit(1729542249.414:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30389 comm="syz.1.7250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f030b446ff9 code=0x0 [ 1969.565461][T30405] loop4: detected capacity change from 0 to 256 [ 1969.572883][T30403] loop1: detected capacity change from 0 to 512 [ 1969.605530][T30409] loop0: detected capacity change from 0 to 512 [ 1969.657097][T30409] EXT4-fs (loop0): 1 orphan inode deleted [ 1969.662817][T27251] usb 4-1: Using ep0 maxpacket: 16 [ 1969.668518][T30409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1969.679968][T30409] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038 (0x7fffffff) [ 1969.688704][T30403] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #3: comm syz.1.7252: corrupted inode contents [ 1969.801508][T30403] EXT4-fs error (device loop1): ext4_dirty_inode:6038: inode #3: comm syz.1.7252: mark_inode_dirty error [ 1969.814956][T30403] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #3: comm syz.1.7252: corrupted inode contents [ 1969.828020][T30403] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.7252: mark_inode_dirty error [ 1969.841622][T30403] Quota error (device loop1): write_blk: dquota write failed [ 1969.849620][T30403] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1970.085967][T30403] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.7252: Failed to acquire dquot type 0 [ 1970.114664][T30403] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.7252: corrupted inode contents [ 1970.126472][T27251] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1970.127727][T30403] EXT4-fs error (device loop1): ext4_dirty_inode:6038: inode #16: comm syz.1.7252: mark_inode_dirty error [ 1970.137238][T27251] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1970.148591][T30403] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.7252: corrupted inode contents [ 1970.158087][T27251] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1970.169954][T30403] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.7252: mark_inode_dirty error [ 1970.182268][T27251] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1970.193414][T30403] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.7252: corrupted inode contents [ 1970.202128][T27251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.213951][T30403] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 1970.222077][T27251] usb 4-1: config 0 descriptor?? [ 1970.233210][T30403] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #16: comm syz.1.7252: corrupted inode contents [ 1970.246342][T30403] EXT4-fs error (device loop1): ext4_truncate:4303: inode #16: comm syz.1.7252: mark_inode_dirty error [ 1970.257567][T30403] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 1970.266768][T30403] EXT4-fs (loop1): 1 truncate cleaned up [ 1970.272362][T30403] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1970.283242][T30403] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 1970.353707][T30421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30421 comm=syz.3.7256 [ 1970.388189][T27251] usbhid 4-1:0.0: can't add hid device: -71 [ 1970.394053][T27251] usbhid: probe of 4-1:0.0 failed with error -71 [ 1970.890391][T30425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7256'. [ 1971.497093][T27251] usb 4-1: USB disconnect, device number 15 [ 1971.614709][T30432] loop4: detected capacity change from 0 to 1024 [ 1971.917835][T30432] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1972.436719][T30454] loop2: detected capacity change from 0 to 512 [ 1972.541917][T30454] EXT4-fs (loop2): 1 orphan inode deleted [ 1972.548382][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1972.562267][T30454] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1972.584108][T30454] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 1972.595088][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1972.660499][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1972.689826][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1972.721184][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1972.732121][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1972.743022][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1972.770247][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1972.837898][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1972.858068][T29720] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1973.272899][T30473] loop0: detected capacity change from 0 to 512 [ 1973.329367][T30473] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.7271: corrupted inode contents [ 1973.341242][T30473] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #3: comm syz.0.7271: mark_inode_dirty error [ 1973.354306][T30473] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.7271: corrupted inode contents [ 1973.366133][T30473] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.7271: mark_inode_dirty error [ 1973.380431][T30473] Quota error (device loop0): write_blk: dquota write failed [ 1973.387769][T30473] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1973.397703][T30473] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.7271: Failed to acquire dquot type 0 [ 1973.409496][T30473] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7271: corrupted inode contents [ 1973.421418][T30473] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #16: comm syz.0.7271: mark_inode_dirty error [ 1973.432830][T30473] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7271: corrupted inode contents [ 1973.447678][T30473] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.7271: mark_inode_dirty error [ 1973.459065][T30473] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7271: corrupted inode contents [ 1973.471023][T30473] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1973.479677][T30473] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.7271: corrupted inode contents [ 1973.491508][T30473] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.7271: mark_inode_dirty error [ 1973.502554][T30473] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1973.511701][T30473] EXT4-fs (loop0): 1 truncate cleaned up [ 1973.517164][T30473] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1973.528031][T30473] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038 (0x7fffffff) [ 1973.895505][ T359] device veth0_vlan left promiscuous mode [ 1973.919953][T30484] loop1: detected capacity change from 0 to 512 [ 1973.970016][T30484] EXT4-fs (loop1): 1 orphan inode deleted [ 1973.975620][T30484] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1973.988918][T30484] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 1975.075965][T30506] loop2: detected capacity change from 0 to 1024 [ 1975.138886][T30506] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1975.412886][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.423444][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.433999][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.444718][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.455468][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.466138][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.476694][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.487178][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.497770][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.508285][T30290] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1975.734719][T30514] loop1: detected capacity change from 0 to 512 [ 1975.746351][T30518] loop3: detected capacity change from 0 to 1024 [ 1975.823222][T30514] EXT4-fs (loop1): 1 orphan inode deleted [ 1975.828890][T30514] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1975.841522][T30514] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 1975.844680][T30518] EXT4-fs (loop3): Ignoring removed orlov option [ 1975.861948][T30518] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1975.887125][T30518] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noauto_da_alloc,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1976.528760][ T8155] device bridge_slave_1 left promiscuous mode [ 1976.534827][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.543838][ T8155] device bridge_slave_0 left promiscuous mode [ 1976.552419][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.560500][ T8155] device veth1_macvtap left promiscuous mode [ 1976.566458][ T8155] device veth0_vlan left promiscuous mode SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=4 req=7270 state=1 status=67 (errno 9: Bad file descriptor) [ 1977.873334][T30567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.880465][T30567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.888223][T30567] device bridge_slave_0 entered promiscuous mode [ 1977.895056][T30567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.902285][T30567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.909745][T30567] device bridge_slave_1 entered promiscuous mode [ 1977.957992][T30567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.964845][T30567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1977.971981][T30567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.978743][T30567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1977.999568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1978.006929][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.014029][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.022887][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1978.031172][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.038114][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1978.048526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1978.056484][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.063436][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1978.075562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1978.084325][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1978.099054][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1978.109995][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1978.118045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1978.125188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1978.134923][T30567] device veth0_vlan entered promiscuous mode [ 1978.144477][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1978.153196][T30567] device veth1_macvtap entered promiscuous mode [ 1978.162502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1978.173478][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1978.528236][ T8155] device veth0_vlan left promiscuous mode [ 1979.070045][ T8155] tipc: Left network mode [ 1980.008167][ T8155] device bridge_slave_1 left promiscuous mode [ 1980.014089][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.021522][ T8155] device bridge_slave_0 left promiscuous mode [ 1980.027456][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.035332][ T8155] device bridge_slave_1 left promiscuous mode [ 1980.041306][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.048542][ T8155] device bridge_slave_0 left promiscuous mode [ 1980.054445][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.062440][ T8155] device veth1_macvtap left promiscuous mode [ 1980.068298][ T8155] device veth0_vlan left promiscuous mode [ 1980.074079][ T8155] device veth0_vlan left promiscuous mode [ 1980.079822][ T8155] device veth0_vlan left promiscuous mode