last executing test programs: 16.223802405s ago: executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {0x4}, {0x7, 0x0, 0x4}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0x78}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x25]}}, 0x0, 0x2a}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 16.085418596s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='hrtimer_init\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'\x00', 0x41}) 15.998543799s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 15.934411309s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) 15.920248932s ago: executing program 2: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) setgroups(0x0, 0x0) setresuid(0x0, r2, 0x0) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 15.876327559s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace(0x10, 0x1) r0 = inotify_init1(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4203, r1, 0x0, &(0x7f0000000000)) 1.911850796s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.904838357s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 1.840300737s ago: executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) 1.833055709s ago: executing program 1: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") truncate(&(0x7f0000000180)='./file2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket(0x1d, 0x3, 0x1) write$vga_arbiter(r1, 0x0, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x700, 0x4, 0x3e, {{0x12, 0x4, 0x0, 0x10, 0x48, 0x67, 0x0, 0xfd, 0x29, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xfd, [@remote, @remote]}, @timestamp_addr={0x44, 0x24, 0x57, 0x1, 0x4, [{@empty, 0x4}, {@remote, 0x10000}, {@multicast2, 0x2}, {@empty, 0x3}]}]}}}}}) getsockopt$nfc_llcp(r2, 0x65, 0x6, 0x0, 0x20000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1a00050000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) fcntl$setpipe(r3, 0x407, 0x7000000) 1.668467684s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 1.595373575s ago: executing program 1: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = memfd_create(&(0x7f0000000580)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3\xceB\xfc\xd4c\x1a\x8d>Xt\xdd\xbb\x80!Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6\xde7\x17\x95$\xdd\x8ew\a\xe5\x1f\xe0:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\t\xdbb\x9d\x9dN\xa2\xee\xb8\xf6\xe2\xb4c\xc4\xb0\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\f=_\t\x18L&\xaf\xb4v\"ukO\xa6\xf3\xde\x96\x85\xc5\xdd\x12|C.\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[], 0xfffffcdd) 1.035208412s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x210001, &(0x7f0000000100)={[{@inline_dentry}, {@alloc_mode_def}, {@discard}, {@jqfmt_vfsold}, {@usrjquota={'usrjquota', 0x3d, '!'}}, {@lazytime}, {@norecovery}, {@disable_ext_identify}, {@inline_xattr}, {@adaptive_mode}]}, 0x1, 0x550e, &(0x7f000000ae80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x6, 0xffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffd50, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r3, 0x0, 0xda00) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x0, {@ip4=@local, 0x86dd}}}]}, 0x38}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r8}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x18) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes256, 0x4, @desc4}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r10, &(0x7f00000003c0), 0x3beb9) 934.130246ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 912.66778ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 874.482506ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000080), &(0x7f00000003c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x4004662b, 0x20001412) 786.212009ms ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}]}, 0x28}}, 0x0) 764.120243ms ago: executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4e, 0xc2, 0xb5, 0x20, 0x424, 0x7505, 0x32a8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0xce, 0xfb}}]}}]}}, 0x0) 628.311794ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x43}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x22) 539.112778ms ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 523.87988ms ago: executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000004380)={0x2020}, 0x1633) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000078, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) 317.579952ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}}, 0x0) 298.600144ms ago: executing program 3: mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getrlimit(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x308, 0x0, 0x308, 0x308, 0x220, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 293.849555ms ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="a81bab221b4a9db303d226ce7cb8", 0x1}, {&(0x7f0000000600)='Z', 0x1}, {&(0x7f0000000700)="c8", 0x1}, {&(0x7f0000000800)="ed", 0x1}, {&(0x7f00000008c0)="d0", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)='&', 0x1}, {&(0x7f0000000d00)="8f", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)="990e0c0eadc3fb46ba6b74c1b7707224ccfcd08e2e784324433c7fb152c89305f6cabd7938862e09a185cf4f06335008ee96b94e4e7d77591cd4d001524e1c8b7e8eff6132dff8bb6fb86532ceac76c39f2f19b9a55957ba8d6ae96a6f73624a4918af718cbb9732e5eb58c13a976cfbce791d3bb06871722c5dadbf3fa9a151d1", 0x81}, {&(0x7f0000001040)='\f', 0xfffffeb0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001380)="be", 0x1}], 0x1}}], 0x5, 0x4008440) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=',', 0x1}], 0x1}}], 0x1, 0x4000000) 271.503658ms ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) readahead(r2, 0x0, 0x0) 240.871873ms ago: executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 230.731265ms ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000010000008500000086", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000100)='./cgroup/../file0\x00', 0x64) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x1000, [{0x0, 0x2, 0x3}]}, @enum]}}, &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) 219.213886ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000001180), 0xff, 0x451, &(0x7f00000020c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 131.99401ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0xa898cf170ab9f9b9, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x12}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000d00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000480)=""/83, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4004550d, 0x0) kernel console output (not intermixed with test programs): 4][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.646323][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.654218][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 429.666157][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 429.674282][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 429.684195][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 429.692251][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 429.779948][ T28] audit: type=1326 audit(1717453618.960:22229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e07cf69 code=0x7ffc0000 [ 429.803903][ T28] audit: type=1326 audit(1717453618.960:22230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e07cf69 code=0x7ffc0000 [ 429.828075][ T28] audit: type=1326 audit(1717453618.960:22231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f358e07cf69 code=0x7ffc0000 [ 429.852094][ T28] audit: type=1326 audit(1717453618.960:22232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e07cf69 code=0x7ffc0000 [ 429.876127][ T28] audit: type=1326 audit(1717453618.960:22233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e07cf69 code=0x7ffc0000 [ 429.908392][ T28] audit: type=1326 audit(1717453618.960:22234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f358e07cf69 code=0x7ffc0000 [ 429.908471][ T585] device bridge_slave_1 left promiscuous mode [ 429.932566][ T28] audit: type=1326 audit(1717453619.046:22235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e07cf69 code=0x7ffc0000 [ 429.947517][ T585] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.962348][ T28] audit: type=1326 audit(1717453619.068:22236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e07cf69 code=0x7ffc0000 [ 429.993155][ T585] device bridge_slave_0 left promiscuous mode [ 430.030580][ T585] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.049030][ T585] device veth1_macvtap left promiscuous mode [ 430.056998][T17816] loop2: detected capacity change from 0 to 256 [ 430.064102][ T585] device veth0_vlan left promiscuous mode [ 430.073018][T17816] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x02a07125, utbl_chksum : 0xe619d30d) [ 430.658794][ T475] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 430.688471][T17861] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.695329][T17861] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.702527][T17861] device bridge_slave_0 entered promiscuous mode [ 430.709170][T17861] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.716060][T17861] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.723135][T17861] device bridge_slave_1 entered promiscuous mode [ 430.770064][T17861] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.776906][T17861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.783983][T17861] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.790798][T17861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.813401][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 430.820867][ T763] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.827970][ T763] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.839243][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.847230][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.854062][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.863653][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.871670][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.878493][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.894109][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.901820][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.915688][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.923931][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.929143][ T39] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 430.932169][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.946176][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.953977][T17861] device veth0_vlan entered promiscuous mode [ 430.966048][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.974836][T17861] device veth1_macvtap entered promiscuous mode [ 430.984039][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.993775][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.022691][ T475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.034280][ T475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.090772][ T475] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 431.099689][ T475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.108026][ T475] usb 1-1: config 0 descriptor?? [ 431.125371][ T585] device bridge_slave_1 left promiscuous mode [ 431.131373][ T585] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.138924][ T585] device bridge_slave_0 left promiscuous mode [ 431.144911][ T585] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.152378][ T585] device veth1_macvtap left promiscuous mode [ 431.158239][ T585] device veth0_vlan left promiscuous mode [ 431.164761][T17871] loop4: detected capacity change from 0 to 128 [ 431.199356][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 431.236716][ T39] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 431.237555][T17881] loop2: detected capacity change from 0 to 16 [ 431.251256][T17881] erofs: (device loop2): mounted with root inode @ nid 36. [ 431.348562][ T39] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 431.356046][ T39] usb 4-1: can't read configurations, error -61 [ 431.497582][ T39] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 431.508150][T17891] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.514974][T17891] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.522894][T17891] device bridge_slave_0 entered promiscuous mode [ 431.529809][T17891] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.536884][T17891] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.544169][T17891] device bridge_slave_1 entered promiscuous mode [ 431.593771][T17891] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.600723][T17891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.607779][T17891] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.614607][T17891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.637187][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.644491][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.651846][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.660571][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.668983][ T2805] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.675822][ T2805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.686010][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.694046][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.700865][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.721183][T17891] device veth0_vlan entered promiscuous mode [ 431.728347][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.730767][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 431.737492][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.748809][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.756003][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.763257][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.771035][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.778758][ T39] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 431.786060][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.819066][T17891] device veth1_macvtap entered promiscuous mode [ 431.830836][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.842200][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.898434][ T39] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 431.905890][ T39] usb 4-1: can't read configurations, error -61 [ 431.912496][ T39] usb usb4-port1: attempt power cycle [ 432.025683][T17919] loop2: detected capacity change from 0 to 512 [ 432.032441][T17919] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.032718][T17912] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.039332][T17919] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 432.046174][T17912] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.057916][T17919] EXT4-fs (loop2): 1 truncate cleaned up [ 432.062910][T17912] device bridge_slave_0 entered promiscuous mode [ 432.068000][T17919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 432.086259][T17912] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.093156][T17912] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.101051][T17912] device bridge_slave_1 entered promiscuous mode [ 432.108757][T17891] EXT4-fs (loop2): unmounting filesystem. [ 432.157529][T17912] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.161513][ T475] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0065/input/input108 [ 432.164377][T17912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.177257][ T475] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0065/input/input109 [ 432.183125][T17912] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.195691][ T475] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0065/input/input110 [ 432.201525][T17912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.221278][ T585] device bridge_slave_1 left promiscuous mode [ 432.221957][ T475] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0065/input/input111 [ 432.231266][ T585] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.240862][ T475] uclogic 0003:256C:006D.0065: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 432.259709][ T585] device bridge_slave_0 left promiscuous mode [ 432.265869][ T585] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.274002][ T585] device veth1_macvtap left promiscuous mode [ 432.279920][ T585] device veth0_vlan left promiscuous mode [ 432.299350][ T39] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 432.371541][ T24] usb 1-1: USB disconnect, device number 60 [ 432.383120][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 432.390390][ T2805] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.399361][ T2805] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.420701][ T39] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 432.433499][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.441203][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.466322][T17912] device veth0_vlan entered promiscuous mode [ 432.473905][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.482329][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.490854][ T2805] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.497713][ T2805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.505072][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.513190][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.521230][ T2805] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.528074][ T2805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.538621][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 432.546695][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.554327][ T39] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 432.561939][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 432.569784][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.577356][ T39] usb 4-1: can't read configurations, error -61 [ 432.583798][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.591932][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.600147][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.608089][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.616275][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.623507][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.641820][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.650719][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.665721][T17912] device veth1_macvtap entered promiscuous mode [ 432.682273][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 432.690426][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.698816][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.716971][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.718624][ T39] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 432.729194][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.821614][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 432.860218][ T39] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 432.871822][T17954] loop0: detected capacity change from 0 to 16 [ 432.879154][T17954] erofs: (device loop0): mounted with root inode @ nid 36. [ 432.971551][ T39] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 432.978960][ T39] usb 4-1: can't read configurations, error -61 [ 432.986988][ T39] usb usb4-port1: unable to enumerate USB device [ 433.106903][T17967] loop0: detected capacity change from 0 to 256 [ 433.116265][T17967] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x02a07125, utbl_chksum : 0xe619d30d) [ 433.223131][ T585] device bridge_slave_1 left promiscuous mode [ 433.229153][ T585] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.236446][ T585] device bridge_slave_0 left promiscuous mode [ 433.242489][ T585] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.251028][ T585] device veth1_macvtap left promiscuous mode [ 433.256911][ T585] device veth0_vlan left promiscuous mode [ 433.384358][T17978] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.391425][T17978] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.398429][T17978] device bridge_slave_0 entered promiscuous mode [ 433.405524][T17978] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.412417][T17978] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.419847][T17978] device bridge_slave_1 entered promiscuous mode [ 433.466765][T17978] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.473704][T17978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.480768][T17978] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.487582][T17978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.508689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.516509][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.524065][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.533197][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.541171][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.547989][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.557036][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.565415][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.572242][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.585048][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.595414][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.611990][T17978] device veth0_vlan entered promiscuous mode [ 433.618562][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.626713][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.634576][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.641729][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.654970][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.663753][T17978] device veth1_macvtap entered promiscuous mode [ 433.675639][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.683785][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.808204][T17983] loop4: detected capacity change from 0 to 40427 [ 433.815037][T17983] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 433.822685][T17983] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 433.831555][T17983] F2FS-fs (loop4): invalid crc value [ 433.838281][T17983] F2FS-fs (loop4): Found nat_bits in checkpoint [ 433.871772][T17983] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 433.878650][T17983] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 433.910225][T17978] syz-executor.4: attempt to access beyond end of device [ 433.910225][T17978] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 434.042901][ T585] device bridge_slave_1 left promiscuous mode [ 434.048849][ T585] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.056137][ T585] device bridge_slave_0 left promiscuous mode [ 434.062127][ T585] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.074851][ T585] device veth1_macvtap left promiscuous mode [ 434.080870][ T585] device veth0_vlan left promiscuous mode [ 434.121454][ T28] kauditd_printk_skb: 9503 callbacks suppressed [ 434.121468][ T28] audit: type=1400 audit(1717453623.617:31740): avc: denied { setopt } for pid=17999 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 434.228476][ T475] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 434.453704][T18032] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 434.474613][T18034] loop2: detected capacity change from 0 to 256 [ 434.483686][T18034] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 434.520248][T18042] loop2: detected capacity change from 0 to 2048 [ 434.539358][T18042] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 434.550424][T18042] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 434.564122][ T475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.565336][T18042] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 434.583533][ T475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.587918][T18042] EXT4-fs (loop2): This should not happen!! Data will be lost [ 434.587918][T18042] [ 434.608841][ T475] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 434.617746][ T475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.618259][T18042] EXT4-fs (loop2): Total free blocks count 0 [ 434.632089][T18049] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 434.638909][ T475] usb 1-1: config 0 descriptor?? [ 434.644494][T18042] EXT4-fs (loop2): Free/Dirty block details [ 434.652406][T18049] EXT4-fs (loop2): This should not happen!! Data will be lost [ 434.652406][T18049] [ 434.655071][T18042] EXT4-fs (loop2): free_blocks=2415919104 [ 434.673611][T18042] EXT4-fs (loop2): dirty_blocks=48 [ 434.674151][T18049] EXT4-fs (loop2): Total free blocks count 0 [ 434.751668][T18062] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 435.712032][ T475] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0066/input/input112 [ 435.724558][ T475] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0066/input/input113 [ 435.737462][ T475] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0066/input/input114 [ 435.750656][ T475] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0066/input/input115 [ 435.763730][ T475] uclogic 0003:256C:006D.0066: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 435.906650][ T475] usb 1-1: USB disconnect, device number 61 [ 436.158264][T18149] loop4: detected capacity change from 0 to 2048 [ 436.169349][T18149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 436.181576][T18149] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 436.196634][T18149] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 436.208726][T18149] EXT4-fs (loop4): This should not happen!! Data will be lost [ 436.208726][T18149] [ 436.218184][T18149] EXT4-fs (loop4): Total free blocks count 0 [ 436.223973][T18149] EXT4-fs (loop4): Free/Dirty block details [ 436.228303][T18154] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 436.229925][T18149] EXT4-fs (loop4): free_blocks=2415919104 [ 436.247614][T18149] EXT4-fs (loop4): dirty_blocks=48 [ 436.250850][T18154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 436.250850][T18154] [ 436.252558][T18149] EXT4-fs (loop4): Block reservation details [ 436.408338][T18181] syz-executor.2[18181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.408388][T18181] syz-executor.2[18181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.674553][T18214] syz-executor.2[18214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.686165][T18214] syz-executor.2[18214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.741259][T18219] syz-executor.4[18219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.752944][T18219] syz-executor.4[18219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.825483][T18227] loop4: detected capacity change from 0 to 2048 [ 436.852423][ T28] audit: type=1400 audit(1717453626.546:31741): avc: denied { write } for pid=18228 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.872919][ T28] audit: type=1400 audit(1717453626.546:31742): avc: denied { nlmsg_write } for pid=18228 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.895283][T18227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 436.907930][T18227] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 436.922931][T18227] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 436.934951][T18227] EXT4-fs (loop4): This should not happen!! Data will be lost [ 436.934951][T18227] [ 436.944457][T18227] EXT4-fs (loop4): Total free blocks count 0 [ 436.950237][T18227] EXT4-fs (loop4): Free/Dirty block details [ 436.956281][T18227] EXT4-fs (loop4): free_blocks=2415919104 [ 436.961914][T18227] EXT4-fs (loop4): dirty_blocks=32 [ 436.966788][T18227] EXT4-fs (loop4): Block reservation details [ 436.972617][T18227] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 436.978546][T18235] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 30 with error 28 [ 437.013857][T18241] syz-executor.2[18241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.013913][T18241] syz-executor.2[18241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.051013][T18246] syz-executor.4[18246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.062679][T18246] syz-executor.4[18246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.147982][T18260] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.359137][T18271] loop4: detected capacity change from 0 to 40427 [ 437.368726][T18271] F2FS-fs (loop4): Found nat_bits in checkpoint [ 437.413012][T18271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 437.440485][T17978] syz-executor.4: attempt to access beyond end of device [ 437.440485][T17978] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 438.041198][T18311] loop2: detected capacity change from 0 to 128 [ 438.048870][T18311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 438.057471][T18311] ext4 filesystem being mounted at /root/syzkaller-testdir2095574724/syzkaller.U9nKTh/94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 438.110424][T17891] EXT4-fs (loop2): unmounting filesystem. [ 438.856268][T18338] loop2: detected capacity change from 0 to 2048 [ 438.881325][T18338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 438.894260][T18338] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 438.909168][T18338] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 438.921316][T18338] EXT4-fs (loop2): This should not happen!! Data will be lost [ 438.921316][T18338] [ 438.930874][T18338] EXT4-fs (loop2): Total free blocks count 0 [ 438.936802][T18338] EXT4-fs (loop2): Free/Dirty block details [ 438.942902][T18338] EXT4-fs (loop2): free_blocks=2415919104 [ 438.948785][T18341] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 438.961200][T18338] EXT4-fs (loop2): dirty_blocks=48 [ 438.966138][T18338] EXT4-fs (loop2): Block reservation details [ 438.971921][T18341] EXT4-fs (loop2): This should not happen!! Data will be lost [ 438.971921][T18341] [ 439.002237][T18343] loop2: detected capacity change from 0 to 128 [ 439.010340][T18343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 439.018819][T18343] ext4 filesystem being mounted at /root/syzkaller-testdir2095574724/syzkaller.U9nKTh/100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 439.082905][T17891] EXT4-fs (loop2): unmounting filesystem. [ 439.303079][T18348] loop2: detected capacity change from 0 to 40427 [ 439.312902][T18348] F2FS-fs (loop2): Found nat_bits in checkpoint [ 439.358684][T18348] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 439.381943][T18348] syz-executor.2: attempt to access beyond end of device [ 439.381943][T18348] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 439.410339][T17891] syz-executor.2: attempt to access beyond end of device [ 439.410339][T17891] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 439.561192][T18354] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.568041][T18354] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.575333][T18354] device bridge_slave_0 entered promiscuous mode [ 439.582484][T18354] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.589359][T18354] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.596444][T18354] device bridge_slave_1 entered promiscuous mode [ 439.643096][T18354] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.649965][T18354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.657072][T18354] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.663837][T18354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.692177][ T763] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.699336][ T763] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.706499][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 439.714579][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 439.738277][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.746455][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.754184][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.761762][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.769288][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 439.777185][ T763] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.783931][ T763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.791062][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.798887][ T763] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.805622][ T763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.812734][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 439.820375][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 439.831014][T18354] device veth0_vlan entered promiscuous mode [ 439.841526][T18354] device veth1_macvtap entered promiscuous mode [ 439.851011][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.861314][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 439.871386][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 439.892640][ T28] audit: type=1400 audit(1717453629.808:31743): avc: denied { read } for pid=18368 comm="syz-executor.4" path="socket:[109110]" dev="sockfs" ino=109110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 440.175457][ T917] device bridge_slave_1 left promiscuous mode [ 440.181518][ T917] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.188735][ T917] device bridge_slave_0 left promiscuous mode [ 440.194124][ T323] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 440.202118][ T917] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.210167][ T917] device veth1_macvtap left promiscuous mode [ 440.216103][ T917] device veth0_vlan left promiscuous mode [ 440.529349][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.540086][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.549607][ T323] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 440.558428][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.566673][ T323] usb 3-1: config 0 descriptor?? [ 441.014125][ T323] hid (null): bogus close delimiter [ 441.218979][ T323] usb 3-1: language id specifier not provided by device, defaulting to English [ 441.666343][ T323] uclogic 0003:256C:006D.0067: interface is invalid, ignoring [ 441.853964][ T2805] usb 3-1: USB disconnect, device number 37 [ 442.415097][T18436] loop4: detected capacity change from 0 to 512 [ 442.432985][T18436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 442.442072][T18436] ext4 filesystem being mounted at /root/syzkaller-testdir1562191935/syzkaller.kqzP6W/100/file0 supports timestamps until 2038 (0x7fffffff) [ 442.471293][T17978] EXT4-fs (loop4): unmounting filesystem. [ 442.553673][T18450] loop4: detected capacity change from 0 to 512 [ 442.560520][T18450] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 442.570631][T18450] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 442.589199][T18450] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 442.601523][T18450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 442.609875][T18450] ext2 filesystem being mounted at /root/syzkaller-testdir1562191935/syzkaller.kqzP6W/105/file0 supports timestamps until 2038 (0x7fffffff) [ 442.636072][T17978] EXT4-fs (loop4): unmounting filesystem. [ 442.952500][ T6] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 443.082826][T18467] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program [ 443.115263][T18474] loop2: detected capacity change from 0 to 16 [ 443.122086][T18474] erofs: (device loop2): mounted with root inode @ nid 36. [ 443.283520][T18476] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.290847][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.291520][T18476] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.308526][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.309135][T18476] device bridge_slave_0 entered promiscuous mode [ 443.318033][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 443.324830][T18476] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.339914][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.340018][T18476] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.348267][ T6] usb 5-1: config 0 descriptor?? [ 443.354988][T18476] device bridge_slave_1 entered promiscuous mode [ 443.405059][T18476] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.412010][T18476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.419088][T18476] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.425896][T18476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.449272][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.456615][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.463575][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.472147][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.480149][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.486987][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.504016][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.511947][ T2805] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.518776][ T2805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.525910][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.533541][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.547872][T18476] device veth0_vlan entered promiscuous mode [ 443.553899][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.562081][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.569911][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.577109][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.591150][T18476] device veth1_macvtap entered promiscuous mode [ 443.597766][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.610867][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.619201][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.736143][ T43] device bridge_slave_1 left promiscuous mode [ 443.738268][ T28] audit: type=1400 audit(1717453633.938:31744): avc: denied { watch } for pid=18488 comm="syz-executor.2" path="/root/syzkaller-testdir828719305/syzkaller.MMQlr6/4/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 443.742182][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.777258][ T43] device bridge_slave_0 left promiscuous mode [ 443.783701][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.791624][ T6] hid (null): bogus close delimiter [ 443.797845][ T43] device veth1_macvtap left promiscuous mode [ 443.799164][T18493] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program [ 443.803691][ T43] device veth0_vlan left promiscuous mode [ 443.862121][T18500] loop2: detected capacity change from 0 to 512 [ 443.869288][T18500] EXT4-fs: Ignoring removed nobh option [ 443.877458][T18500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 443.886214][T18500] ext4 filesystem being mounted at /root/syzkaller-testdir828719305/syzkaller.MMQlr6/9/file0 supports timestamps until 2038 (0x7fffffff) [ 443.904066][ T28] audit: type=1400 audit(1717453634.121:31745): avc: denied { execute_no_trans } for pid=18499 comm="syz-executor.2" path="/root/syzkaller-testdir828719305/syzkaller.MMQlr6/9/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 443.982451][T18476] EXT4-fs (loop2): unmounting filesystem. [ 443.996191][T18505] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 443.996638][ T6] usb 5-1: language id specifier not provided by device, defaulting to English [ 444.004059][T18505] bpf_get_probe_write_proto: 4 callbacks suppressed [ 444.004074][T18505] syz-executor.2[18505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.018683][T18505] syz-executor.2[18505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.416480][ T6] uclogic 0003:256C:006D.0068: interface is invalid, ignoring [ 444.616673][ T39] usb 5-1: USB disconnect, device number 48 [ 444.681493][T18529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 444.732474][T18539] loop2: detected capacity change from 0 to 256 [ 444.741491][T18539] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 444.757054][ T28] audit: type=1400 audit(1717453635.033:31746): avc: denied { reparent } for pid=18538 comm="syz-executor.2" name="file0" dev="loop2" ino=1049055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 444.787311][T18541] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 444.794983][T18541] syz-executor.2[18541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.795026][T18541] syz-executor.2[18541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.840346][T18545] loop2: detected capacity change from 0 to 256 [ 444.875815][T18549] syz-executor.2[18549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.875855][T18549] syz-executor.2[18549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.986540][T18563] loop2: detected capacity change from 0 to 128 [ 445.005808][T18563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 445.014264][T18563] ext4 filesystem being mounted at /root/syzkaller-testdir828719305/syzkaller.MMQlr6/37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 445.059398][T18476] EXT4-fs (loop2): unmounting filesystem. [ 445.094967][T18570] loop2: detected capacity change from 0 to 256 [ 445.515671][ T763] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 445.741325][T18602] device pim6reg1 entered promiscuous mode [ 445.851320][ T763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.862057][ T763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.871700][ T763] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 445.880550][ T763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.888775][ T763] usb 5-1: config 0 descriptor?? [ 446.102895][ T2805] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 446.317861][ T763] hid (null): bogus close delimiter [ 446.343496][T18614] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.350445][T18614] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.357867][T18614] device bridge_slave_0 entered promiscuous mode [ 446.366164][T18614] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.372994][T18614] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.380309][T18614] device bridge_slave_1 entered promiscuous mode [ 446.427077][T18614] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.433914][T18614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.441008][T18614] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.447803][T18614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.467015][ T2805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.471362][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.477988][ T2805] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.497602][ T2805] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.506550][ T2805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.506799][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.521545][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.522814][ T2805] usb 3-1: config 0 descriptor?? [ 446.528603][ T763] usb 5-1: language id specifier not provided by device, defaulting to English [ 446.551957][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.559912][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.566770][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.574368][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.582302][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.589126][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.596248][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.603882][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.619442][T18614] device veth0_vlan entered promiscuous mode [ 446.626175][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.634304][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.642004][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.649178][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.662026][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.670935][T18614] device veth1_macvtap entered promiscuous mode [ 446.679903][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.692231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.700299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 446.830469][ T43] device bridge_slave_1 left promiscuous mode [ 446.836378][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.844034][ T43] device bridge_slave_0 left promiscuous mode [ 446.850042][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.857647][ T43] device veth1_macvtap left promiscuous mode [ 446.863505][ T43] device veth0_vlan left promiscuous mode [ 446.961098][ T2805] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0 [ 446.968399][ T2805] plantronics 0003:047F:FFFF.006A: No inputs registered, leaving [ 446.969712][ T763] uclogic 0003:256C:006D.0069: interface is invalid, ignoring [ 446.976981][ T2805] plantronics 0003:047F:FFFF.006A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 447.176557][ T333] usb 5-1: USB disconnect, device number 49 [ 447.212728][ T2805] usb 3-1: USB disconnect, device number 38 [ 447.289646][T18631] device pim6reg1 entered promiscuous mode [ 447.929754][ T763] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 447.946952][ T28] audit: type=1326 audit(1717453638.444:31747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e47cf69 code=0x7ffc0000 [ 447.981884][ T28] audit: type=1326 audit(1717453638.444:31748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e47cf69 code=0x7ffc0000 [ 448.006505][ T28] audit: type=1326 audit(1717453638.444:31749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf7e47cf69 code=0x7ffc0000 [ 448.020851][T18666] loop2: detected capacity change from 0 to 1024 [ 448.031235][ T28] audit: type=1326 audit(1717453638.444:31750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e47cf69 code=0x7ffc0000 [ 448.038694][T18666] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 448.062227][ T28] audit: type=1326 audit(1717453638.444:31751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e47cf69 code=0x7ffc0000 [ 448.071623][T18666] EXT4-fs (loop2): invalid journal inode [ 448.094024][ T28] audit: type=1326 audit(1717453638.444:31752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf7e47cf69 code=0x7ffc0000 [ 448.099421][T18666] EXT4-fs (loop2): can't get journal size [ 448.123381][ T28] audit: type=1326 audit(1717453638.444:31753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e47cf69 code=0x7ffc0000 [ 448.152807][ T28] audit: type=1326 audit(1717453638.444:31754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e47cf69 code=0x7ffc0000 [ 448.153335][T18666] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #2: comm syz-executor.2: blocks 48-48 from inode overlap system zone [ 448.182035][ T28] audit: type=1326 audit(1717453638.444:31755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf7e47cf69 code=0x7ffc0000 [ 448.191697][T18666] EXT4-fs (loop2): failed to initialize system zone (-117) [ 448.221987][ T763] usb 5-1: Using ep0 maxpacket: 8 [ 448.222224][T18666] EXT4-fs (loop2): mount failed [ 448.253245][T18673] device syzkaller0 entered promiscuous mode [ 448.330906][ T763] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.340854][ T763] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 448.349582][ T763] usb 5-1: config 1 has no interface number 1 [ 448.355509][ T763] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 448.368092][ T763] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.517807][T18691] loop1: detected capacity change from 0 to 512 [ 448.526301][ T763] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.528262][T18691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 448.535179][ T763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.543975][T18691] ext4 filesystem being mounted at /root/syzkaller-testdir1928117841/syzkaller.KXbaDV/25/file0 supports timestamps until 2038 (0x7fffffff) [ 448.551710][ T763] usb 5-1: Product: syz [ 448.569793][ T763] usb 5-1: Manufacturer: syz [ 448.574175][ T763] usb 5-1: SerialNumber: syz [ 448.580918][T18691] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz-executor.1: corrupted inode contents [ 448.593036][T18691] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor.1: mark_inode_dirty error [ 448.604619][T18691] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz-executor.1: corrupted inode contents [ 448.617156][T18691] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 448.636708][T18614] EXT4-fs (loop1): unmounting filesystem. [ 448.652099][T18696] overlayfs: './file0' not a directory [ 448.871192][ T763] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 448.878971][ T763] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 448.884872][ T763] usb 5-1: 2:1 : invalid channels 0 [ 448.910215][ T763] usb 5-1: USB disconnect, device number 50 [ 449.056489][T18760] loop1: detected capacity change from 0 to 256 [ 449.065345][T18760] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 449.205327][T18770] loop1: detected capacity change from 0 to 128 [ 449.213112][T18770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 449.221521][T18770] ext4 filesystem being mounted at /root/syzkaller-testdir1928117841/syzkaller.KXbaDV/43/mnt supports timestamps until 2038 (0x7fffffff) [ 449.236804][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.252435][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.265324][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.280847][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.293482][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.309169][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.321893][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.337478][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.350101][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.365757][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.378674][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.394219][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.406876][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.422346][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.435037][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.450575][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.463156][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.481416][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.496174][T18787] bridge0: port 3(gretap0) entered blocking state [ 449.502507][T18787] bridge0: port 3(gretap0) entered disabled state [ 449.509228][T18770] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 449.525423][T18787] device gretap0 entered promiscuous mode [ 449.527710][T18770] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 449.531065][T18787] bridge0: port 3(gretap0) entered blocking state [ 449.549356][T18787] bridge0: port 3(gretap0) entered forwarding state [ 449.556238][T18789] device gretap0 left promiscuous mode [ 449.561630][T18789] bridge0: port 3(gretap0) entered disabled state [ 449.562446][T18614] EXT4-fs (loop1): unmounting filesystem. [ 449.649378][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 449.649394][ T28] audit: type=1326 audit(1717453640.279:31800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e47cf69 code=0x0 [ 449.754620][T18820] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 449.754633][ T28] audit: type=1400 audit(1717453640.386:31801): avc: denied { nlmsg_read } for pid=18819 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.791259][T18822] loop1: detected capacity change from 0 to 256 [ 449.823234][ T28] audit: type=1400 audit(1717453640.472:31802): avc: denied { setattr } for pid=18821 comm="syz-executor.1" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.975871][T18841] loop4: detected capacity change from 0 to 512 [ 449.982947][T18841] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 450.056379][T18841] kvm: pic: non byte write [ 450.060812][T18841] kvm: pic: non byte read [ 450.065142][T18841] kvm: pic: non byte write [ 450.069494][T18841] kvm: pic: non byte write [ 450.073681][T18841] kvm: pic: non byte write [ 450.077968][T18841] kvm: pic: non byte write [ 450.082137][T18841] kvm: pic: non byte write [ 450.086485][T18841] kvm: pic: non byte write [ 450.090647][T18841] kvm: pic: non byte write [ 450.094961][T18841] kvm: pic: non byte write [ 450.099145][T18841] kvm: pic: non byte write [ 450.857723][T18873] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.898170][T18879] loop1: detected capacity change from 0 to 256 [ 450.918864][T18884] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 450.934584][T18886] loop4: detected capacity change from 0 to 256 [ 450.939305][T18888] loop1: detected capacity change from 0 to 512 [ 450.941457][T18886] exfat: Unknown parameter '18446744073709551615' [ 450.948354][T18888] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 451.013828][T18888] kvm: pic: non byte read [ 451.080202][ T323] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 451.119645][T18898] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 451.131260][T18898] File: /root/syzkaller-testdir1562191935/syzkaller.kqzP6W/143/memory.events PID: 18898 Comm: syz-executor.4 [ 451.305786][ T323] usb 3-1: Using ep0 maxpacket: 16 [ 451.415675][ T323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 451.565343][ T323] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 451.574449][ T323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.582308][ T323] usb 3-1: Product: syz [ 451.586266][ T323] usb 3-1: Manufacturer: syz [ 451.590767][ T323] usb 3-1: SerialNumber: syz [ 451.602490][ T323] usb 3-1: config 0 descriptor?? [ 451.640394][ T323] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 451.647924][ T323] usb 3-1: Detected FT232R [ 451.789467][T18929] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 451.927662][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 452.040080][ T323] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 452.058787][ T323] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 452.065596][ T323] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 452.073968][ T323] usb 3-1: USB disconnect, device number 39 [ 452.080236][ T323] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 452.089444][ T323] ftdi_sio 3-1:0.0: device disconnected [ 452.333481][T18953] loop4: detected capacity change from 0 to 512 [ 452.340222][T18953] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 452.408410][T18953] kvm: pic: non byte read [ 452.785680][ T333] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 452.809381][T18960] overlayfs: statfs failed on './file0' [ 452.870199][T18964] loop1: detected capacity change from 0 to 2048 [ 452.890667][T18964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 452.909647][T18614] EXT4-fs (loop1): unmounting filesystem. [ 453.018953][T18972] device syzkaller0 entered promiscuous mode [ 453.028928][ T333] usb 3-1: Using ep0 maxpacket: 8 [ 453.196303][T18989] device pim6reg1 entered promiscuous mode [ 453.281582][T18999] device syzkaller0 entered promiscuous mode [ 453.326621][ T333] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=68.e0 [ 453.335704][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.346998][ T333] usb 3-1: Product: syz [ 453.349110][T19005] loop1: detected capacity change from 0 to 16 [ 453.350990][ T333] usb 3-1: Manufacturer: syz [ 453.357746][T19005] erofs: (device loop1): mounted with root inode @ nid 36. [ 453.361418][ T333] usb 3-1: SerialNumber: syz [ 453.372029][T19005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 453.373735][ T333] usb 3-1: config 0 descriptor?? [ 453.381667][T19005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 453.395402][T19005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 453.404553][T19005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 453.413463][T19005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 453.422243][T19005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 453.437072][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.445114][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.453027][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.460961][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.469040][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.476971][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.484757][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.492587][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.500550][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.508457][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.516252][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.524207][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.532130][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.540102][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.547983][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.555797][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.563621][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.571449][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.579340][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.587144][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.594942][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.602781][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.610583][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.618452][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.626548][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.631896][ T763] usb 3-1: USB disconnect, device number 40 [ 453.634531][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.647994][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.655825][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.663737][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.671536][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.679376][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.687285][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.695468][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.703377][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.711218][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.719232][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.727155][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.735057][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.742970][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.750872][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.758692][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.766490][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.774952][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.782888][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.790833][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.798638][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.806460][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.814274][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.822400][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.830367][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.838376][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.846305][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.854445][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.862448][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.870370][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.878323][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.886236][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.894166][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.902092][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.910018][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.917966][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.925927][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.933904][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.941791][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.949646][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.957634][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.965617][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.973638][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.981615][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.989610][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 453.997602][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.005619][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.013897][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.021896][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.029930][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.037889][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.045932][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.053961][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.062440][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.070831][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.078851][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.086816][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.094787][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.103827][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.120761][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.129679][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.139406][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.148090][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.159306][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.168111][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.176096][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.186773][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.196991][ T28] audit: type=1326 audit(1717453645.161:31803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 454.198233][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.228510][ T28] audit: type=1326 audit(1717453645.161:31804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 454.240680][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.252668][ T28] audit: type=1326 audit(1717453645.161:31805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 454.285561][ T28] audit: type=1326 audit(1717453645.161:31806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 454.296374][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.309562][ T28] audit: type=1326 audit(1717453645.161:31807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 454.341409][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.349646][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.359319][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.367170][ T28] audit: type=1326 audit(1717453645.332:31808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 454.393034][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.401167][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.407483][ T28] audit: type=1326 audit(1717453645.343:31809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 454.409568][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.433213][ T28] audit: type=1326 audit(1717453645.343:31810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 454.454897][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.468531][ T28] audit: type=1326 audit(1717453645.343:31811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde13c7a6e7 code=0x7ffc0000 [ 454.481159][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.505315][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.513209][ T28] audit: type=1326 audit(1717453645.343:31812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde13c403c9 code=0x7ffc0000 [ 454.537127][T19015] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.544265][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.552242][T19015] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.559565][T19015] device bridge_slave_0 entered promiscuous mode [ 454.566337][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.575488][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.578441][T19018] loop2: detected capacity change from 0 to 40427 [ 454.583396][ T28] audit: type=1326 audit(1717453645.343:31813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde13c7a6e7 code=0x7ffc0000 [ 454.591353][T19018] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 454.613862][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.621367][T19018] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 454.628942][T19015] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.637902][T19018] F2FS-fs (loop2): invalid crc value [ 454.643991][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.649279][ T28] audit: type=1326 audit(1717453645.343:31814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde13c403c9 code=0x7ffc0000 [ 454.656911][T19015] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.680664][ T28] audit: type=1326 audit(1717453645.343:31815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde13c7a6e7 code=0x7ffc0000 [ 454.681169][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.687679][ T28] audit: type=1326 audit(1717453645.343:31816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde13c403c9 code=0x7ffc0000 [ 454.711863][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.743383][T19015] device bridge_slave_1 entered promiscuous mode [ 454.752116][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.764918][ T28] audit: type=1326 audit(1717453645.343:31817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde13c7a6e7 code=0x7ffc0000 [ 454.765418][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.797673][T19018] F2FS-fs (loop2): Found nat_bits in checkpoint [ 454.798559][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.818259][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.834370][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.853011][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.869258][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.884466][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.892652][T19018] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 454.894894][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.902359][T19018] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 454.907831][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.935556][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.948807][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.955476][T19015] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.957408][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.963576][T19015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.963673][T19015] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.971663][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 454.978418][T19015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.985437][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.000025][T19018] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 455.000516][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.024880][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.033184][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.051202][ T763] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.060009][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.068232][ T763] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.075581][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.085498][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.103631][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.113638][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.117145][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.121239][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.129118][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.144839][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.145682][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.152888][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.161310][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.168733][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.176524][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.184272][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.190833][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.191347][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 455.199237][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.207100][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.214305][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.229618][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.237501][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.244071][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.252104][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.267070][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 455.271550][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.277821][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.282661][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.298574][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.306675][ T917] device bridge_slave_1 left promiscuous mode [ 455.312354][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.314220][ T917] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.321576][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.335242][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.343472][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.348500][ T917] device bridge_slave_0 left promiscuous mode [ 455.354837][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.367696][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.371733][ T917] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.375795][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.391353][ T917] device veth1_macvtap left promiscuous mode [ 455.391919][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.397440][ T917] device veth0_vlan left promiscuous mode [ 455.405471][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.419179][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.427270][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.435312][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.445121][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.458450][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.469827][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.477870][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.491692][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.499967][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.508201][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.516301][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.524341][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.532372][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.540433][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.548473][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.556593][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.564651][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.572897][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.581735][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.589770][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.597803][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.605819][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.613848][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.622608][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.630673][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.638734][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.646720][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.654721][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.662760][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.670837][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.678873][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.686884][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.694935][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.702907][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.713032][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.721061][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.729151][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.737309][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.745303][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.753492][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.761522][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.769549][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.777524][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.785512][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.793817][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.802030][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.810175][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.818157][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.827513][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.835433][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.843948][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.851917][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.861031][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.872144][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 455.873810][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.880323][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.894624][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.896489][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 455.912657][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.917794][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.928302][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.931499][T19015] device veth0_vlan entered promiscuous mode [ 455.943850][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 455.951805][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.951846][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.966717][T19015] device veth1_macvtap entered promiscuous mode [ 455.974685][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.982350][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.982475][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 455.989776][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.006051][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.014416][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.017091][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.031937][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.036259][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.040588][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.052125][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.056053][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.071940][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.075521][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.089618][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.098346][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.109306][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.117743][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.125902][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.135715][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.145056][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.153877][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.163711][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.172428][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.180759][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.192015][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.200473][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.208769][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.216789][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.218723][T19061] device syzkaller0 entered promiscuous mode [ 456.224937][T18614] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 456.321142][T19067] loop4: detected capacity change from 0 to 1024 [ 456.327967][T19067] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 456.353776][T19067] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f00cc01c, mo2=0002] [ 456.364906][T19067] System zones: 0-1, 3-36 [ 456.374841][T19067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 456.422276][T19059] loop2: detected capacity change from 0 to 40427 [ 456.436226][T17978] EXT4-fs (loop4): unmounting filesystem. [ 456.442778][T19059] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 456.458024][T19059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 456.471791][T19059] F2FS-fs (loop2): invalid crc value [ 456.506660][T19059] F2FS-fs (loop2): Found nat_bits in checkpoint [ 456.551993][T19059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 456.559101][T19059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 456.585253][T19084] loop4: detected capacity change from 0 to 512 [ 456.589872][T19059] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 456.591983][T19084] ext4: Unknown parameter 'obj_user' [ 456.605610][T19074] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.612638][T19074] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.621179][T19074] device bridge_slave_0 entered promiscuous mode [ 456.634973][T19074] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.653798][T19074] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.677563][T19074] device bridge_slave_1 entered promiscuous mode [ 456.911923][ T917] device bridge_slave_1 left promiscuous mode [ 456.918291][ T917] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.926672][ T917] device bridge_slave_0 left promiscuous mode [ 456.932857][ T917] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.944515][ T917] device veth1_macvtap left promiscuous mode [ 456.950567][ T917] device veth0_vlan left promiscuous mode [ 457.354924][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.364498][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.397304][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.410055][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.419273][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.426136][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.433377][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.441575][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.449952][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.456828][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.464013][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 457.472008][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.479924][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 457.487984][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 457.496464][T19106] syz-executor.4[19106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.496527][T19106] syz-executor.4[19106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.504532][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.527147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 457.535187][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 457.550849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 457.559061][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.566219][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 457.574100][T19074] device veth0_vlan entered promiscuous mode [ 457.587771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.597124][T19074] device veth1_macvtap entered promiscuous mode [ 457.606725][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 457.614747][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 457.624050][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 457.632034][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.653498][T19114] input: syz1 as /devices/virtual/input/input116 [ 457.856034][ T763] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 458.061153][ T323] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 458.079758][ T763] usb 5-1: Using ep0 maxpacket: 8 [ 458.268308][T19134] loop1: detected capacity change from 0 to 40427 [ 458.275472][T19134] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 458.282865][T19134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 458.291710][T19134] F2FS-fs (loop1): invalid crc value [ 458.298049][T19134] F2FS-fs (loop1): Found nat_bits in checkpoint [ 458.326951][T19134] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 458.333905][T19134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 458.341289][ T763] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=68.e0 [ 458.350043][ T763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.357889][ T763] usb 5-1: Product: syz [ 458.358394][T19134] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 458.361921][ T763] usb 5-1: Manufacturer: syz [ 458.361936][ T763] usb 5-1: SerialNumber: syz [ 458.380047][ T763] usb 5-1: config 0 descriptor?? [ 458.390336][T19140] syz-executor.3[19140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.390415][T19140] syz-executor.3[19140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.402097][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.429005][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.438648][ T323] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 458.447563][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.456077][ T323] usb 3-1: config 0 descriptor?? [ 458.616727][ T475] usb 5-1: USB disconnect, device number 51 [ 458.671966][T19160] device pim6reg1 entered promiscuous mode [ 458.900932][ T323] lg-g15 0003:046D:C222.006B: unknown main item tag 0x0 [ 458.908169][ T323] lg-g15 0003:046D:C222.006B: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 459.090238][ T323] usb 3-1: USB disconnect, device number 41 [ 459.114377][ T28] kauditd_printk_skb: 516 callbacks suppressed [ 459.114390][ T28] audit: type=1400 audit(1717453650.429:32334): avc: denied { mounton } for pid=19167 comm="syz-executor.4" path="/root/syzkaller-testdir1562191935/syzkaller.kqzP6W/175/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 459.230410][T19173] SELinux: Context $ is not valid (left unmapped). [ 459.237186][ T28] audit: type=1400 audit(1717453650.568:32335): avc: denied { relabelto } for pid=19172 comm="syz-executor.3" name="file0" dev="sda1" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="$" [ 459.266233][ T28] audit: type=1400 audit(1717453650.600:32336): avc: denied { unlink } for pid=19015 comm="syz-executor.3" name="file0" dev="sda1" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="$" [ 459.279821][T19178] device syzkaller0 entered promiscuous mode [ 459.349571][T19189] loop4: detected capacity change from 0 to 16 [ 459.356371][T19189] erofs: (device loop4): mounted with root inode @ nid 36. [ 459.454256][T19204] input: syz1 as /devices/virtual/input/input117 [ 459.542851][T19214] device syzkaller0 entered promiscuous mode [ 459.993430][T19246] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.008064][T19246] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.018487][ T475] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 460.023388][T19246] device bridge_slave_0 entered promiscuous mode [ 460.053293][T19246] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.063474][T19246] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.087674][T19246] device bridge_slave_1 entered promiscuous mode [ 460.223183][T19246] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.230065][T19246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.237144][T19246] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.243937][T19246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.276588][T19265] loop2: detected capacity change from 0 to 256 [ 460.291187][ T43] device bridge_slave_1 left promiscuous mode [ 460.302565][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.317612][ T43] device bridge_slave_0 left promiscuous mode [ 460.327994][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.335995][ T43] device veth1_macvtap left promiscuous mode [ 460.341885][ T43] device veth0_vlan left promiscuous mode [ 460.382094][ T475] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.397100][ T475] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.411175][ T475] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 460.420240][ T475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.432413][ T475] usb 5-1: config 0 descriptor?? [ 460.485584][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.492861][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.500931][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.519711][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.532869][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.545746][T19279] device pim6reg1 entered promiscuous mode [ 460.553342][T19283] loop3: detected capacity change from 0 to 16 [ 460.560584][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.570058][T19283] erofs: (device loop3): mounted with root inode @ nid 36. [ 460.583793][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.591439][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.599902][T19246] device veth0_vlan entered promiscuous mode [ 460.606181][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.613402][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.624824][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.632722][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.642051][T19246] device veth1_macvtap entered promiscuous mode [ 460.652282][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 460.665732][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 460.667043][T19287] loop3: detected capacity change from 0 to 1024 [ 460.673835][T19289] SELinux: Context system_u:object_r:dhcp_etc_t:s0 is not valid (left unmapped). [ 460.683389][T19287] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 460.689351][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.705859][ T28] audit: type=1400 audit(1717453652.135:32337): avc: denied { relabelto } for pid=19288 comm="syz-executor.1" name="syz1" dev="cgroup2" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcp_etc_t:s0" [ 460.709258][T19015] EXT4-fs (loop3): unmounting filesystem. [ 460.735893][ T28] audit: type=1400 audit(1717453652.135:32338): avc: denied { associate } for pid=19288 comm="syz-executor.1" name="syz1" dev="cgroup2" ino=93 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcp_etc_t:s0" [ 460.766628][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.774601][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.800215][T19294] loop0: detected capacity change from 0 to 512 [ 460.810495][T19294] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 460.827508][T19294] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 460.835951][T19294] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 2683928664 (level 1) [ 460.850418][T19294] EXT4-fs (loop0): Remounting filesystem read-only [ 460.856882][T19294] EXT4-fs (loop0): 1 truncate cleaned up [ 460.863262][T19294] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 460.874557][T19294] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 460.884232][ T28] audit: type=1400 audit(1717453652.328:32339): avc: denied { quotaon } for pid=19293 comm="syz-executor.0" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 460.910115][T19246] EXT4-fs (loop0): unmounting filesystem. [ 460.942454][ T475] lg-g15 0003:046D:C222.006C: unknown main item tag 0x0 [ 460.950123][ T475] lg-g15 0003:046D:C222.006C: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 461.131329][ T475] usb 5-1: USB disconnect, device number 52 [ 461.165127][ T39] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 461.202177][ T323] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 461.397935][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 461.425874][ T323] usb 2-1: Using ep0 maxpacket: 16 [ 461.529396][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 461.537846][ T323] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 461.542045][ T39] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 461.559526][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.567932][ T39] usb 4-1: config 0 descriptor?? [ 461.606568][ T39] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 461.715030][ T323] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 461.723940][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.731758][ T323] usb 2-1: Product: syz [ 461.735746][ T323] usb 2-1: Manufacturer: syz [ 461.740233][ T323] usb 2-1: SerialNumber: syz [ 461.745069][ T323] usb 2-1: config 0 descriptor?? [ 461.780696][ T323] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 461.801459][ T323] usb 2-1: Detected FT232R [ 461.815852][ T6] usb 4-1: USB disconnect, device number 51 [ 461.940903][T19334] loop0: detected capacity change from 0 to 40427 [ 462.102746][T19351] loop0: detected capacity change from 0 to 128 [ 462.109670][T19351] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 462.124646][ T43] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 462.218104][ T323] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 462.236937][ T323] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 462.245168][ T323] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 462.253752][ T323] usb 2-1: USB disconnect, device number 42 [ 462.259923][ T323] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 462.269293][ T323] ftdi_sio 2-1:0.0: device disconnected [ 462.400765][T19372] netlink: 'syz-executor.0': attribute type 298 has an invalid length. [ 462.436457][T19370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 462.468811][T19383] loop0: detected capacity change from 0 to 1024 [ 462.475407][T19383] EXT4-fs: Ignoring removed i_version option [ 462.481773][T19383] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 462.492788][T19383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 462.509148][T19246] EXT4-fs (loop0): unmounting filesystem. [ 462.526587][T19391] syz-executor.3[19391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.526627][T19391] syz-executor.3[19391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.562648][T19395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 462.705722][T19411] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 462.807343][T19431] loop3: detected capacity change from 0 to 512 [ 462.813721][T19431] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.820307][T19431] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 462.830163][T19431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 462.841609][T19431] System zones: 1-12 [ 462.846219][T19431] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 462.867504][T19431] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 462.880232][T19431] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 462.893300][T19431] EXT4-fs warning (device loop3): dx_probe:832: inode #2: comm syz-executor.3: Unrecognised inode hash code 4 [ 462.905481][T19431] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 462.928587][T19015] EXT4-fs (loop3): unmounting filesystem. [ 462.996528][T19447] loop0: detected capacity change from 0 to 1024 [ 463.022578][T19447] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 463.038273][T19246] EXT4-fs (loop0): unmounting filesystem. [ 463.353948][T19494] loop0: detected capacity change from 0 to 1024 [ 463.364963][T19494] EXT4-fs: Ignoring removed nobh option [ 463.370500][T19494] EXT4-fs: Invalid commit interval 2147483647, must be smaller than 21474836 [ 463.626526][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 463.704126][T19515] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 463.925403][T19526] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 464.224868][T19537] loop0: detected capacity change from 0 to 512 [ 464.262549][T19537] EXT4-fs (loop0): 1 truncate cleaned up [ 464.268097][T19537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 464.289449][T19537] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz-executor.0: bg 0: block 7: invalid block bitmap [ 464.370996][T19246] EXT4-fs (loop0): unmounting filesystem. [ 464.452391][T19559] loop3: detected capacity change from 0 to 1024 [ 464.476352][T19559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 464.499355][T19015] EXT4-fs (loop3): unmounting filesystem. [ 464.540650][T19573] input: syz0 as /devices/virtual/input/input119 [ 464.689305][T19601] input: syz0 as /devices/virtual/input/input120 [ 464.716835][T19605] fuse: Bad value for 'fd' [ 464.734318][T19608] fuse: Bad value for 'fd' [ 464.874629][ T28] audit: type=1326 audit(1717453656.619:32340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 464.901896][ T28] audit: type=1326 audit(1717453656.619:32341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 464.929662][ T28] audit: type=1326 audit(1717453656.641:32342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 464.954168][ T28] audit: type=1326 audit(1717453656.641:32343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 464.979239][ T28] audit: type=1326 audit(1717453656.641:32344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 465.014812][ T28] audit: type=1326 audit(1717453656.641:32345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 465.044401][ T28] audit: type=1326 audit(1717453656.641:32346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13c7cf69 code=0x7ffc0000 [ 465.068807][ T28] audit: type=1326 audit(1717453656.641:32347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde13c7a6e7 code=0x7ffc0000 [ 465.095161][ T28] audit: type=1326 audit(1717453656.641:32348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde13c403c9 code=0x7ffc0000 [ 465.124088][ T28] audit: type=1326 audit(1717453656.641:32349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde13c7a6e7 code=0x7ffc0000 [ 465.234936][T19580] loop1: detected capacity change from 0 to 131072 [ 465.242514][T19580] F2FS-fs (loop1): invalid crc value [ 465.248874][T19580] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 465.278111][T19580] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 465.806186][T19674] 9pnet_fd: Insufficient options for proto=fd [ 465.843064][T19661] loop0: detected capacity change from 0 to 40427 [ 465.856594][T19661] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 465.868770][T19661] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 465.882171][T19661] F2FS-fs (loop0): Found nat_bits in checkpoint [ 465.945481][T19661] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 465.956433][T19661] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 465.986874][T19661] syz-executor.0: attempt to access beyond end of device [ 465.986874][T19661] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 466.165885][T19714] loop3: detected capacity change from 0 to 512 [ 466.174477][T19714] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.191554][T19714] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 466.217426][T19714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 466.236437][T19714] System zones: 1-12 [ 466.251015][T19714] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 466.279832][T19714] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 466.310399][T19714] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 466.339019][T19714] EXT4-fs warning (device loop3): dx_probe:832: inode #2: comm syz-executor.3: Unrecognised inode hash code 4 [ 466.376568][T19714] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 466.422498][T19015] EXT4-fs (loop3): unmounting filesystem. [ 466.456763][T19728] device pim6reg1 entered promiscuous mode [ 466.922178][T19777] loop3: detected capacity change from 0 to 16 [ 466.939056][T19777] erofs: (device loop3): mounted with root inode @ nid 36. [ 466.957115][T19777] syz-executor.3: attempt to access beyond end of device [ 466.957115][T19777] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 467.204575][ T6] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 467.549522][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 467.562138][ T6] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 467.571005][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.579401][ T6] usb 2-1: config 0 descriptor?? [ 467.615136][ T6] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 467.763858][T19852] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'. [ 467.773213][T19852] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 467.806521][ T6] usb 2-1: USB disconnect, device number 43 [ 468.349420][T19878] syz-executor.1[19878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.349490][T19878] syz-executor.1[19878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.695732][T19888] loop1: detected capacity change from 0 to 40427 [ 468.724144][T19888] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 468.732248][T19888] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 468.759545][T19888] F2FS-fs (loop1): Found nat_bits in checkpoint [ 468.818589][T19888] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 468.832340][T19888] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 468.839406][T19888] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 468.852951][T19888] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 468.852971][T19888] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 468.860696][T19888] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 468.868596][T19888] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 468.876295][T19888] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 468.883718][T19888] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 468.891343][T19888] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 468.912395][T19910] syz-executor.3[19910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.920216][T19910] syz-executor.3[19910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.005379][T19920] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.024693][T19920] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 469.152383][T19939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.245569][T19936] loop3: detected capacity change from 0 to 40427 [ 469.336768][T19936] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 469.345726][T19936] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 469.352618][T19951] loop0: detected capacity change from 0 to 256 [ 469.354362][T19936] F2FS-fs (loop3): invalid crc value [ 469.362848][T19951] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 469.377080][T19951] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 469.391216][T19936] F2FS-fs (loop3): Found nat_bits in checkpoint [ 469.410753][T19958] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 469.437044][T19936] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 469.446637][T19936] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 469.476197][T19015] syz-executor.3: attempt to access beyond end of device [ 469.476197][T19015] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 469.650563][T19986] input: syz1 as /devices/virtual/input/input121 [ 469.907521][ T763] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 470.132334][ T763] usb 2-1: Using ep0 maxpacket: 16 [ 470.144912][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 470.144926][ T28] audit: type=1326 audit(1717453662.273:32396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7355a7cf69 code=0x0 [ 470.252429][ T763] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 470.336272][ T763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.350492][ T763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.364162][ T763] usb 2-1: SerialNumber: syz [ 470.411744][ T763] cdc_acm 2-1:1.0: skipping garbage [ 470.603170][ T763] usb 2-1: USB disconnect, device number 44 [ 470.990053][T20009] syz-executor.0[20009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.990135][T20009] syz-executor.0[20009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.794572][T20063] fuse: Bad value for 'fd' [ 472.188400][T20084] loop1: detected capacity change from 0 to 40427 [ 472.195513][T20084] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 472.203061][T20084] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 472.211885][T20084] F2FS-fs (loop1): invalid crc value [ 472.218032][T20084] F2FS-fs (loop1): Found nat_bits in checkpoint [ 472.261908][T20084] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 472.268953][T20084] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 472.420584][T20099] input: syz1 as /devices/virtual/input/input122 [ 472.483926][T20107] overlayfs: missing 'lowerdir' [ 472.763190][T20130] input: syz1 as /devices/virtual/input/input123 [ 472.814228][T20132] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 472.935657][T20127] loop1: detected capacity change from 0 to 40427 [ 472.949535][T20127] F2FS-fs (loop1): Invalid segment count (0) [ 472.962043][T20127] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 472.981790][T20127] F2FS-fs (loop1): invalid crc value [ 473.021822][T20127] F2FS-fs (loop1): Found nat_bits in checkpoint [ 473.048048][T20111] loop0: detected capacity change from 0 to 131072 [ 473.055779][T20111] F2FS-fs (loop0): invalid crc value [ 473.079634][T20111] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 473.096675][T20127] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 473.104605][T20127] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 473.115120][T20111] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 473.144795][T19074] syz-executor.1: attempt to access beyond end of device [ 473.144795][T19074] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 473.581485][T20166] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 473.646453][T20174] device syz_tun entered promiscuous mode [ 473.652206][T20174] device macsec1 entered promiscuous mode [ 473.658583][T20174] device syz_tun left promiscuous mode [ 473.728366][T20184] loop0: detected capacity change from 0 to 8192 [ 473.735871][T20184] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 473.747987][T20184] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 473.756424][T20184] FAT-fs (loop0): Filesystem has been set read-only [ 473.943282][ T39] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 474.111447][T20221] loop1: detected capacity change from 0 to 8192 [ 474.118921][T20221] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.130688][T20221] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 474.139036][T20221] FAT-fs (loop1): Filesystem has been set read-only [ 474.194899][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 474.254567][T20247] loop1: detected capacity change from 0 to 256 [ 474.325489][ T39] usb 4-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 474.334472][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.354860][ T39] usb 4-1: config 0 descriptor?? [ 474.391234][ T39] smsc75xx v1.0.0 [ 474.394682][ T39] smsc75xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 474.404701][ T39] smsc75xx: probe of 4-1:0.0 failed with error -22 [ 474.411951][T20265] loop1: detected capacity change from 0 to 8192 [ 474.420391][T20265] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.432402][T20265] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 474.441218][T20265] FAT-fs (loop1): Filesystem has been set read-only [ 474.580675][ T333] usb 4-1: USB disconnect, device number 52 [ 474.873039][T20307] loop0: detected capacity change from 0 to 8192 [ 474.890485][T20307] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.917106][T20307] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 474.936281][T20307] FAT-fs (loop0): Filesystem has been set read-only [ 475.447047][T20326] loop0: detected capacity change from 0 to 40427 [ 475.454189][T20326] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 475.461716][T20326] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 475.470739][T20326] F2FS-fs (loop0): invalid crc value [ 475.477354][T20326] F2FS-fs (loop0): Found nat_bits in checkpoint [ 475.521968][T20326] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 475.529109][T20326] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 475.899071][T20348] syz-executor.3[20348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.899137][T20348] syz-executor.3[20348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.920229][T20348] x_tables: ip_tables: TPROXY target: only valid in mangle table, not [ 475.976986][T20358] loop3: detected capacity change from 0 to 512 [ 475.991751][T20358] EXT4-fs (loop3): 1 truncate cleaned up [ 476.003113][T20358] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 476.016356][T20358] EXT4-fs error (device loop3): make_indexed_dir:2284: inode #2: block 255: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=1024, inode=1952543859, rec_len=0, size=1012 fake=0 [ 476.056783][T19015] EXT4-fs (loop3): unmounting filesystem. [ 476.077760][T20362] loop3: detected capacity change from 0 to 1024 [ 476.084409][T20362] EXT4-fs: Ignoring removed orlov option [ 476.090012][T20362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.134553][T20362] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 476.154299][T20362] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.3: corrupt xattr in inline inode [ 476.167887][T20362] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.3: corrupted in-inode xattr [ 476.188624][T19015] ================================================================== [ 476.196502][T19015] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 476.204306][T19015] Read of size 4 at addr ffff88815c5ff000 by task syz-executor.3/19015 [ 476.212377][T19015] [ 476.214549][T19015] CPU: 0 PID: 19015 Comm: syz-executor.3 Tainted: G W 6.1.78-syzkaller-00137-gc36abc6d4212 #0 [ 476.226003][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 476.235901][T19015] Call Trace: [ 476.239024][T19015] [ 476.241803][T19015] dump_stack_lvl+0x151/0x1b7 [ 476.246317][T19015] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 476.251730][T19015] ? _printk+0xd1/0x111 [ 476.255724][T19015] ? __virt_addr_valid+0x242/0x2f0 [ 476.260674][T19015] print_report+0x158/0x4e0 [ 476.265010][T19015] ? __virt_addr_valid+0x242/0x2f0 [ 476.269959][T19015] ? kasan_addr_to_slab+0xd/0x80 [ 476.274731][T19015] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 476.280203][T19015] kasan_report+0x13c/0x170 2024/06/03 22:44:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 476.284538][T19015] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 476.290010][T19015] __asan_report_load4_noabort+0x14/0x20 [ 476.295473][T19015] ext4_xattr_delete_inode+0xcd0/0xce0 [ 476.300772][T19015] ? sb_end_intwrite+0x130/0x130 [ 476.305540][T19015] ? ext4_expand_extra_isize_ea+0x1c40/0x1c40 [ 476.311463][T19015] ? __kasan_check_read+0x11/0x20 [ 476.316303][T19015] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 476.322030][T19015] ? ext4_evict_inode+0xbc2/0x1550 [ 476.326977][T19015] ext4_evict_inode+0xef9/0x1550 [ 476.331759][T19015] ? _raw_spin_unlock+0x4c/0x70 [ 476.336442][T19015] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 476.342168][T19015] ? _raw_spin_unlock+0x4c/0x70 [ 476.346854][T19015] ? inode_io_list_del+0x18b/0x1a0 [ 476.351799][T19015] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 476.357526][T19015] evict+0x2a3/0x630 [ 476.361261][T19015] iput+0x642/0x870 [ 476.364907][T19015] vfs_rmdir+0x3c2/0x500 [ 476.368987][T19015] do_rmdir+0x3ab/0x630 [ 476.372977][T19015] ? d_delete_notify+0x160/0x160 [ 476.377754][T19015] __x64_sys_unlinkat+0xdf/0xf0 [ 476.382435][T19015] do_syscall_64+0x3d/0xb0 [ 476.386687][T19015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 476.392418][T19015] RIP: 0033:0x7f775e47c747 [ 476.396670][T19015] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 476.416110][T19015] RSP: 002b:00007ffdf78cfcf8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 476.424354][T19015] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f775e47c747 [ 476.432179][T19015] RDX: 0000000000000200 RSI: 00007ffdf78d0ea0 RDI: 00000000ffffff9c