[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.24' (ECDSA) to the list of known hosts. 2021/03/10 10:57:36 fuzzer started 2021/03/10 10:57:37 dialing manager at 10.128.0.169:38775 2021/03/10 10:57:37 syscalls: 3540 2021/03/10 10:57:37 code coverage: enabled 2021/03/10 10:57:37 comparison tracing: enabled 2021/03/10 10:57:37 extra coverage: enabled 2021/03/10 10:57:37 setuid sandbox: enabled 2021/03/10 10:57:37 namespace sandbox: enabled 2021/03/10 10:57:37 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/10 10:57:37 fault injection: enabled 2021/03/10 10:57:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/10 10:57:37 net packet injection: enabled 2021/03/10 10:57:37 net device setup: enabled 2021/03/10 10:57:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/10 10:57:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/10 10:57:37 USB emulation: enabled 2021/03/10 10:57:37 hci packet injection: enabled 2021/03/10 10:57:37 wifi device emulation: enabled 2021/03/10 10:57:37 802.15.4 emulation: enabled 2021/03/10 10:57:37 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/10 10:57:37 fetching corpus: 50, signal 45004/48811 (executing program) 2021/03/10 10:57:37 fetching corpus: 100, signal 80539/86013 (executing program) 2021/03/10 10:57:37 fetching corpus: 150, signal 91087/98292 (executing program) 2021/03/10 10:57:37 fetching corpus: 200, signal 103620/112435 (executing program) 2021/03/10 10:57:38 fetching corpus: 250, signal 117151/127562 (executing program) 2021/03/10 10:57:38 fetching corpus: 300, signal 141443/153181 (executing program) 2021/03/10 10:57:38 fetching corpus: 350, signal 151053/164311 (executing program) 2021/03/10 10:57:38 fetching corpus: 400, signal 160013/174704 (executing program) 2021/03/10 10:57:38 fetching corpus: 450, signal 174780/190765 (executing program) 2021/03/10 10:57:38 fetching corpus: 500, signal 189668/206825 (executing program) 2021/03/10 10:57:38 fetching corpus: 550, signal 200388/218820 (executing program) 2021/03/10 10:57:38 fetching corpus: 600, signal 207813/227567 (executing program) 2021/03/10 10:57:39 fetching corpus: 650, signal 216078/236995 (executing program) 2021/03/10 10:57:39 fetching corpus: 700, signal 220558/242827 (executing program) 2021/03/10 10:57:39 fetching corpus: 750, signal 234364/257666 (executing program) 2021/03/10 10:57:39 fetching corpus: 800, signal 239814/264406 (executing program) 2021/03/10 10:57:39 fetching corpus: 850, signal 250861/276504 (executing program) 2021/03/10 10:57:39 fetching corpus: 900, signal 257395/284193 (executing program) 2021/03/10 10:57:39 fetching corpus: 950, signal 263345/291217 (executing program) 2021/03/10 10:57:39 fetching corpus: 1000, signal 269891/298827 (executing program) 2021/03/10 10:57:40 fetching corpus: 1050, signal 275451/305536 (executing program) 2021/03/10 10:57:40 fetching corpus: 1100, signal 279627/310829 (executing program) 2021/03/10 10:57:40 fetching corpus: 1150, signal 285330/317574 (executing program) 2021/03/10 10:57:40 fetching corpus: 1200, signal 288043/321425 (executing program) 2021/03/10 10:57:40 fetching corpus: 1250, signal 291465/325978 (executing program) 2021/03/10 10:57:40 fetching corpus: 1300, signal 294939/330580 (executing program) 2021/03/10 10:57:40 fetching corpus: 1350, signal 300851/337433 (executing program) 2021/03/10 10:57:40 fetching corpus: 1400, signal 305627/343222 (executing program) 2021/03/10 10:57:41 fetching corpus: 1450, signal 309273/347870 (executing program) 2021/03/10 10:57:41 fetching corpus: 1500, signal 312943/352602 (executing program) 2021/03/10 10:57:41 fetching corpus: 1550, signal 317925/358482 (executing program) 2021/03/10 10:57:41 fetching corpus: 1600, signal 322510/363974 (executing program) 2021/03/10 10:57:41 fetching corpus: 1650, signal 327702/370015 (executing program) 2021/03/10 10:57:41 fetching corpus: 1700, signal 330112/373485 (executing program) 2021/03/10 10:57:41 fetching corpus: 1750, signal 335500/379632 (executing program) 2021/03/10 10:57:41 fetching corpus: 1799, signal 338690/383782 (executing program) 2021/03/10 10:57:41 fetching corpus: 1849, signal 341263/387309 (executing program) 2021/03/10 10:57:42 fetching corpus: 1899, signal 346662/393425 (executing program) 2021/03/10 10:57:42 fetching corpus: 1949, signal 349944/397640 (executing program) 2021/03/10 10:57:42 fetching corpus: 1999, signal 354363/402811 (executing program) 2021/03/10 10:57:42 fetching corpus: 2049, signal 356518/405907 (executing program) 2021/03/10 10:57:42 fetching corpus: 2099, signal 358168/408573 (executing program) 2021/03/10 10:57:42 fetching corpus: 2149, signal 361666/412897 (executing program) 2021/03/10 10:57:42 fetching corpus: 2199, signal 363450/415657 (executing program) 2021/03/10 10:57:42 fetching corpus: 2249, signal 368393/421244 (executing program) 2021/03/10 10:57:43 fetching corpus: 2299, signal 371107/424857 (executing program) 2021/03/10 10:57:43 fetching corpus: 2349, signal 374198/428794 (executing program) 2021/03/10 10:57:43 fetching corpus: 2397, signal 376639/432079 (executing program) 2021/03/10 10:57:43 fetching corpus: 2447, signal 378023/434418 (executing program) 2021/03/10 10:57:43 fetching corpus: 2497, signal 382620/439599 (executing program) 2021/03/10 10:57:43 fetching corpus: 2546, signal 385591/443330 (executing program) 2021/03/10 10:57:43 fetching corpus: 2596, signal 388194/446725 (executing program) 2021/03/10 10:57:43 fetching corpus: 2646, signal 393692/452618 (executing program) 2021/03/10 10:57:44 fetching corpus: 2696, signal 397647/457167 (executing program) 2021/03/10 10:57:44 fetching corpus: 2746, signal 399560/459896 (executing program) 2021/03/10 10:57:44 fetching corpus: 2796, signal 402834/463837 (executing program) 2021/03/10 10:57:44 fetching corpus: 2846, signal 404225/466111 (executing program) 2021/03/10 10:57:44 fetching corpus: 2896, signal 407794/470257 (executing program) 2021/03/10 10:57:44 fetching corpus: 2946, signal 410143/473358 (executing program) 2021/03/10 10:57:44 fetching corpus: 2996, signal 412485/476412 (executing program) 2021/03/10 10:57:44 fetching corpus: 3046, signal 414801/479461 (executing program) 2021/03/10 10:57:45 fetching corpus: 3096, signal 417043/482371 (executing program) 2021/03/10 10:57:45 fetching corpus: 3146, signal 421639/487325 (executing program) 2021/03/10 10:57:45 fetching corpus: 3196, signal 424490/490799 (executing program) 2021/03/10 10:57:45 fetching corpus: 3246, signal 428373/495099 (executing program) 2021/03/10 10:57:45 fetching corpus: 3296, signal 430977/498347 (executing program) 2021/03/10 10:57:45 fetching corpus: 3346, signal 433621/501579 (executing program) 2021/03/10 10:57:46 fetching corpus: 3396, signal 436652/505096 (executing program) 2021/03/10 10:57:46 fetching corpus: 3446, signal 438039/507203 (executing program) 2021/03/10 10:57:46 fetching corpus: 3496, signal 440621/510392 (executing program) 2021/03/10 10:57:46 fetching corpus: 3546, signal 442596/513028 (executing program) 2021/03/10 10:57:46 fetching corpus: 3596, signal 444555/515582 (executing program) 2021/03/10 10:57:46 fetching corpus: 3646, signal 446682/518257 (executing program) 2021/03/10 10:57:46 fetching corpus: 3696, signal 449618/521656 (executing program) 2021/03/10 10:57:46 fetching corpus: 3746, signal 452190/524717 (executing program) 2021/03/10 10:57:47 fetching corpus: 3796, signal 454887/527914 (executing program) 2021/03/10 10:57:47 fetching corpus: 3846, signal 456850/530463 (executing program) 2021/03/10 10:57:47 fetching corpus: 3896, signal 458398/532716 (executing program) 2021/03/10 10:57:47 fetching corpus: 3946, signal 461128/535925 (executing program) 2021/03/10 10:57:47 fetching corpus: 3996, signal 462622/538087 (executing program) 2021/03/10 10:57:48 fetching corpus: 4046, signal 466654/542313 (executing program) 2021/03/10 10:57:48 fetching corpus: 4096, signal 469678/545682 (executing program) 2021/03/10 10:57:48 fetching corpus: 4146, signal 472138/548584 (executing program) 2021/03/10 10:57:48 fetching corpus: 4196, signal 473481/550549 (executing program) 2021/03/10 10:57:48 fetching corpus: 4246, signal 476109/553574 (executing program) 2021/03/10 10:57:49 fetching corpus: 4296, signal 478057/556075 (executing program) 2021/03/10 10:57:49 fetching corpus: 4346, signal 479529/558121 (executing program) 2021/03/10 10:57:49 fetching corpus: 4396, signal 481035/560245 (executing program) 2021/03/10 10:57:49 fetching corpus: 4446, signal 483824/563328 (executing program) 2021/03/10 10:57:49 fetching corpus: 4496, signal 487409/566991 (executing program) 2021/03/10 10:57:49 fetching corpus: 4546, signal 489610/569578 (executing program) 2021/03/10 10:57:49 fetching corpus: 4596, signal 491021/571511 (executing program) 2021/03/10 10:57:49 fetching corpus: 4646, signal 494115/574781 (executing program) 2021/03/10 10:57:50 fetching corpus: 4696, signal 495557/576775 (executing program) 2021/03/10 10:57:50 fetching corpus: 4746, signal 497624/579276 (executing program) 2021/03/10 10:57:50 fetching corpus: 4796, signal 499883/581829 (executing program) 2021/03/10 10:57:50 fetching corpus: 4846, signal 501438/583888 (executing program) 2021/03/10 10:57:50 fetching corpus: 4896, signal 503386/586248 (executing program) 2021/03/10 10:57:50 fetching corpus: 4946, signal 505737/588856 (executing program) 2021/03/10 10:57:50 fetching corpus: 4996, signal 507026/590657 (executing program) 2021/03/10 10:57:50 fetching corpus: 5046, signal 508920/592933 (executing program) 2021/03/10 10:57:50 fetching corpus: 5096, signal 509979/594595 (executing program) 2021/03/10 10:57:51 fetching corpus: 5146, signal 511138/596308 (executing program) 2021/03/10 10:57:51 fetching corpus: 5196, signal 514120/599391 (executing program) 2021/03/10 10:57:51 fetching corpus: 5246, signal 516020/601633 (executing program) 2021/03/10 10:57:51 fetching corpus: 5296, signal 518062/603981 (executing program) 2021/03/10 10:57:51 fetching corpus: 5346, signal 520843/606859 (executing program) 2021/03/10 10:57:51 fetching corpus: 5396, signal 522087/608559 (executing program) 2021/03/10 10:57:51 fetching corpus: 5446, signal 523835/610661 (executing program) 2021/03/10 10:57:51 fetching corpus: 5496, signal 525329/612605 (executing program) 2021/03/10 10:57:51 fetching corpus: 5546, signal 526619/614338 (executing program) 2021/03/10 10:57:52 fetching corpus: 5596, signal 528219/616317 (executing program) 2021/03/10 10:57:52 fetching corpus: 5646, signal 529430/617957 (executing program) 2021/03/10 10:57:52 fetching corpus: 5696, signal 531057/619913 (executing program) 2021/03/10 10:57:52 fetching corpus: 5746, signal 532571/621761 (executing program) 2021/03/10 10:57:52 fetching corpus: 5796, signal 534596/623999 (executing program) 2021/03/10 10:57:52 fetching corpus: 5846, signal 535927/625768 (executing program) 2021/03/10 10:57:52 fetching corpus: 5896, signal 537030/627344 (executing program) 2021/03/10 10:57:52 fetching corpus: 5946, signal 538114/628881 (executing program) 2021/03/10 10:57:53 fetching corpus: 5996, signal 540626/631407 (executing program) 2021/03/10 10:57:53 fetching corpus: 6046, signal 541846/633073 (executing program) 2021/03/10 10:57:53 fetching corpus: 6096, signal 543741/635159 (executing program) 2021/03/10 10:57:53 fetching corpus: 6146, signal 549569/640007 (executing program) 2021/03/10 10:57:53 fetching corpus: 6196, signal 550586/641461 (executing program) 2021/03/10 10:57:53 fetching corpus: 6246, signal 551986/643186 (executing program) 2021/03/10 10:57:53 fetching corpus: 6296, signal 553778/645189 (executing program) 2021/03/10 10:57:54 fetching corpus: 6346, signal 554734/646594 (executing program) 2021/03/10 10:57:54 fetching corpus: 6396, signal 556198/648353 (executing program) 2021/03/10 10:57:54 fetching corpus: 6446, signal 557961/650296 (executing program) 2021/03/10 10:57:54 fetching corpus: 6496, signal 559610/652172 (executing program) 2021/03/10 10:57:54 fetching corpus: 6546, signal 560821/653725 (executing program) 2021/03/10 10:57:54 fetching corpus: 6596, signal 562598/655657 (executing program) 2021/03/10 10:57:54 fetching corpus: 6646, signal 563486/656986 (executing program) 2021/03/10 10:57:54 fetching corpus: 6696, signal 564932/658705 (executing program) 2021/03/10 10:57:54 fetching corpus: 6746, signal 565718/659966 (executing program) 2021/03/10 10:57:55 fetching corpus: 6796, signal 566610/661267 (executing program) 2021/03/10 10:57:55 fetching corpus: 6846, signal 567759/662744 (executing program) 2021/03/10 10:57:55 fetching corpus: 6896, signal 569141/664343 (executing program) 2021/03/10 10:57:55 fetching corpus: 6946, signal 570977/666246 (executing program) 2021/03/10 10:57:56 fetching corpus: 6996, signal 572054/667616 (executing program) 2021/03/10 10:57:56 fetching corpus: 7046, signal 574282/669792 (executing program) 2021/03/10 10:57:56 fetching corpus: 7096, signal 575629/671364 (executing program) 2021/03/10 10:57:56 fetching corpus: 7146, signal 577560/673331 (executing program) 2021/03/10 10:57:56 fetching corpus: 7196, signal 578522/674642 (executing program) 2021/03/10 10:57:56 fetching corpus: 7246, signal 579339/675846 (executing program) 2021/03/10 10:57:56 fetching corpus: 7296, signal 580862/677477 (executing program) 2021/03/10 10:57:56 fetching corpus: 7346, signal 582376/679100 (executing program) 2021/03/10 10:57:56 fetching corpus: 7396, signal 584331/681015 (executing program) 2021/03/10 10:57:57 fetching corpus: 7446, signal 585382/682364 (executing program) 2021/03/10 10:57:57 fetching corpus: 7496, signal 586025/683452 (executing program) 2021/03/10 10:57:57 fetching corpus: 7546, signal 586687/684526 (executing program) 2021/03/10 10:57:57 fetching corpus: 7596, signal 587379/685633 (executing program) 2021/03/10 10:57:57 fetching corpus: 7646, signal 588557/687047 (executing program) 2021/03/10 10:57:57 fetching corpus: 7696, signal 589699/688471 (executing program) 2021/03/10 10:57:57 fetching corpus: 7746, signal 590680/689720 (executing program) 2021/03/10 10:57:58 fetching corpus: 7796, signal 591444/690862 (executing program) 2021/03/10 10:57:58 fetching corpus: 7846, signal 593024/692516 (executing program) 2021/03/10 10:57:58 fetching corpus: 7896, signal 594635/694186 (executing program) 2021/03/10 10:57:58 fetching corpus: 7946, signal 596023/695692 (executing program) 2021/03/10 10:57:58 fetching corpus: 7996, signal 597394/697189 (executing program) 2021/03/10 10:57:58 fetching corpus: 8046, signal 599203/698987 (executing program) 2021/03/10 10:57:58 fetching corpus: 8096, signal 600896/700656 (executing program) 2021/03/10 10:57:58 fetching corpus: 8146, signal 602429/702202 (executing program) 2021/03/10 10:57:59 fetching corpus: 8196, signal 603866/703789 (executing program) 2021/03/10 10:57:59 fetching corpus: 8246, signal 604874/705048 (executing program) 2021/03/10 10:57:59 fetching corpus: 8296, signal 605984/706389 (executing program) 2021/03/10 10:57:59 fetching corpus: 8346, signal 606932/707553 (executing program) 2021/03/10 10:57:59 fetching corpus: 8396, signal 608097/708846 (executing program) 2021/03/10 10:57:59 fetching corpus: 8446, signal 609203/710087 (executing program) 2021/03/10 10:57:59 fetching corpus: 8496, signal 610260/711277 (executing program) 2021/03/10 10:57:59 fetching corpus: 8546, signal 611991/712973 (executing program) 2021/03/10 10:57:59 fetching corpus: 8596, signal 612722/713994 (executing program) 2021/03/10 10:58:00 fetching corpus: 8646, signal 613581/715067 (executing program) 2021/03/10 10:58:00 fetching corpus: 8696, signal 615085/716521 (executing program) 2021/03/10 10:58:00 fetching corpus: 8746, signal 616102/717682 (executing program) 2021/03/10 10:58:00 fetching corpus: 8796, signal 617353/718993 (executing program) 2021/03/10 10:58:00 fetching corpus: 8846, signal 618236/720057 (executing program) 2021/03/10 10:58:00 fetching corpus: 8896, signal 619053/721093 (executing program) 2021/03/10 10:58:00 fetching corpus: 8946, signal 619640/722033 (executing program) 2021/03/10 10:58:00 fetching corpus: 8996, signal 621131/723508 (executing program) 2021/03/10 10:58:00 fetching corpus: 9046, signal 622163/724646 (executing program) 2021/03/10 10:58:00 fetching corpus: 9096, signal 623024/725706 (executing program) 2021/03/10 10:58:01 fetching corpus: 9146, signal 624241/726970 (executing program) 2021/03/10 10:58:01 fetching corpus: 9196, signal 625217/728098 (executing program) 2021/03/10 10:58:01 fetching corpus: 9246, signal 626219/729207 (executing program) 2021/03/10 10:58:01 fetching corpus: 9296, signal 627076/730191 (executing program) 2021/03/10 10:58:01 fetching corpus: 9346, signal 628453/731520 (executing program) 2021/03/10 10:58:01 fetching corpus: 9396, signal 629059/732407 (executing program) 2021/03/10 10:58:01 fetching corpus: 9446, signal 630279/733596 (executing program) 2021/03/10 10:58:02 fetching corpus: 9496, signal 630874/734461 (executing program) 2021/03/10 10:58:02 fetching corpus: 9546, signal 632122/735707 (executing program) 2021/03/10 10:58:02 fetching corpus: 9596, signal 632871/736644 (executing program) 2021/03/10 10:58:02 fetching corpus: 9646, signal 633665/737629 (executing program) 2021/03/10 10:58:02 fetching corpus: 9696, signal 634852/738799 (executing program) 2021/03/10 10:58:02 fetching corpus: 9746, signal 635780/739857 (executing program) 2021/03/10 10:58:02 fetching corpus: 9796, signal 636662/740882 (executing program) 2021/03/10 10:58:02 fetching corpus: 9846, signal 637373/741819 (executing program) 2021/03/10 10:58:02 fetching corpus: 9896, signal 638046/742662 (executing program) 2021/03/10 10:58:03 fetching corpus: 9946, signal 639563/743984 (executing program) 2021/03/10 10:58:03 fetching corpus: 9996, signal 640322/744922 (executing program) 2021/03/10 10:58:03 fetching corpus: 10046, signal 641543/746048 (executing program) 2021/03/10 10:58:03 fetching corpus: 10096, signal 642651/747122 (executing program) 2021/03/10 10:58:03 fetching corpus: 10146, signal 643368/748001 (executing program) 2021/03/10 10:58:03 fetching corpus: 10196, signal 644465/749077 (executing program) 2021/03/10 10:58:03 fetching corpus: 10246, signal 645813/750316 (executing program) 2021/03/10 10:58:03 fetching corpus: 10296, signal 646489/751185 (executing program) 2021/03/10 10:58:03 fetching corpus: 10346, signal 648693/752814 (executing program) 2021/03/10 10:58:04 fetching corpus: 10396, signal 649540/753792 (executing program) 2021/03/10 10:58:04 fetching corpus: 10446, signal 650784/754944 (executing program) 2021/03/10 10:58:04 fetching corpus: 10496, signal 651654/755898 (executing program) 2021/03/10 10:58:04 fetching corpus: 10546, signal 652780/756968 (executing program) 2021/03/10 10:58:04 fetching corpus: 10596, signal 654859/758537 (executing program) 2021/03/10 10:58:04 fetching corpus: 10646, signal 655970/759585 (executing program) 2021/03/10 10:58:04 fetching corpus: 10696, signal 657240/760661 (executing program) 2021/03/10 10:58:05 fetching corpus: 10746, signal 658206/761617 (executing program) 2021/03/10 10:58:05 fetching corpus: 10796, signal 659025/762495 (executing program) 2021/03/10 10:58:05 fetching corpus: 10846, signal 659553/763211 (executing program) 2021/03/10 10:58:05 fetching corpus: 10896, signal 660131/763977 (executing program) 2021/03/10 10:58:05 fetching corpus: 10946, signal 660970/764867 (executing program) 2021/03/10 10:58:05 fetching corpus: 10996, signal 661777/765741 (executing program) 2021/03/10 10:58:05 fetching corpus: 11046, signal 662693/766658 (executing program) 2021/03/10 10:58:06 fetching corpus: 11096, signal 663387/767471 (executing program) 2021/03/10 10:58:06 fetching corpus: 11146, signal 665093/768776 (executing program) 2021/03/10 10:58:06 fetching corpus: 11196, signal 666445/769913 (executing program) 2021/03/10 10:58:06 fetching corpus: 11246, signal 667086/770719 (executing program) 2021/03/10 10:58:06 fetching corpus: 11296, signal 667996/771653 (executing program) 2021/03/10 10:58:06 fetching corpus: 11346, signal 668618/772453 (executing program) 2021/03/10 10:58:06 fetching corpus: 11396, signal 669550/773346 (executing program) 2021/03/10 10:58:06 fetching corpus: 11446, signal 670683/774315 (executing program) 2021/03/10 10:58:06 fetching corpus: 11496, signal 671143/774998 (executing program) 2021/03/10 10:58:07 fetching corpus: 11546, signal 672309/776014 (executing program) 2021/03/10 10:58:07 fetching corpus: 11596, signal 673198/776869 (executing program) 2021/03/10 10:58:07 fetching corpus: 11646, signal 673857/777647 (executing program) 2021/03/10 10:58:07 fetching corpus: 11695, signal 674646/778451 (executing program) 2021/03/10 10:58:07 fetching corpus: 11745, signal 675427/779203 (executing program) 2021/03/10 10:58:07 fetching corpus: 11795, signal 676192/779983 (executing program) 2021/03/10 10:58:07 fetching corpus: 11845, signal 676937/780725 (executing program) 2021/03/10 10:58:08 fetching corpus: 11895, signal 677550/781466 (executing program) 2021/03/10 10:58:08 fetching corpus: 11945, signal 678500/782298 (executing program) 2021/03/10 10:58:08 fetching corpus: 11995, signal 680172/783499 (executing program) 2021/03/10 10:58:08 fetching corpus: 12045, signal 680928/784268 (executing program) 2021/03/10 10:58:08 fetching corpus: 12095, signal 681894/785084 (executing program) 2021/03/10 10:58:08 fetching corpus: 12145, signal 683041/785971 (executing program) 2021/03/10 10:58:08 fetching corpus: 12195, signal 683785/786749 (executing program) 2021/03/10 10:58:08 fetching corpus: 12245, signal 684497/787548 (executing program) 2021/03/10 10:58:08 fetching corpus: 12295, signal 685304/788327 (executing program) 2021/03/10 10:58:09 fetching corpus: 12345, signal 686714/789362 (executing program) 2021/03/10 10:58:09 fetching corpus: 12395, signal 687131/789966 (executing program) 2021/03/10 10:58:09 fetching corpus: 12445, signal 688292/790866 (executing program) 2021/03/10 10:58:09 fetching corpus: 12495, signal 688794/791505 (executing program) 2021/03/10 10:58:09 fetching corpus: 12545, signal 689398/792139 (executing program) 2021/03/10 10:58:09 fetching corpus: 12595, signal 690084/792840 (executing program) 2021/03/10 10:58:09 fetching corpus: 12645, signal 690743/793530 (executing program) 2021/03/10 10:58:09 fetching corpus: 12695, signal 691684/794324 (executing program) 2021/03/10 10:58:09 fetching corpus: 12745, signal 692252/794933 (executing program) 2021/03/10 10:58:10 fetching corpus: 12795, signal 693061/795661 (executing program) 2021/03/10 10:58:10 fetching corpus: 12845, signal 694540/796611 (executing program) 2021/03/10 10:58:10 fetching corpus: 12895, signal 695250/797293 (executing program) 2021/03/10 10:58:10 fetching corpus: 12945, signal 695822/797921 (executing program) 2021/03/10 10:58:10 fetching corpus: 12995, signal 696760/798686 (executing program) 2021/03/10 10:58:10 fetching corpus: 13045, signal 697786/799453 (executing program) 2021/03/10 10:58:10 fetching corpus: 13095, signal 698287/800020 (executing program) 2021/03/10 10:58:10 fetching corpus: 13144, signal 699013/800664 (executing program) 2021/03/10 10:58:10 fetching corpus: 13194, signal 699533/801248 (executing program) 2021/03/10 10:58:11 fetching corpus: 13244, signal 699995/801819 (executing program) 2021/03/10 10:58:11 fetching corpus: 13294, signal 700789/802492 (executing program) 2021/03/10 10:58:11 fetching corpus: 13344, signal 701626/803192 (executing program) 2021/03/10 10:58:11 fetching corpus: 13394, signal 702475/803912 (executing program) 2021/03/10 10:58:11 fetching corpus: 13444, signal 703262/804601 (executing program) 2021/03/10 10:58:11 fetching corpus: 13494, signal 703956/805231 (executing program) 2021/03/10 10:58:11 fetching corpus: 13544, signal 704495/805817 (executing program) 2021/03/10 10:58:11 fetching corpus: 13594, signal 705464/806525 (executing program) 2021/03/10 10:58:12 fetching corpus: 13644, signal 706473/807269 (executing program) 2021/03/10 10:58:12 fetching corpus: 13694, signal 707267/807951 (executing program) 2021/03/10 10:58:12 fetching corpus: 13744, signal 707870/808530 (executing program) 2021/03/10 10:58:12 fetching corpus: 13794, signal 708658/809154 (executing program) 2021/03/10 10:58:12 fetching corpus: 13844, signal 709040/809651 (executing program) 2021/03/10 10:58:12 fetching corpus: 13894, signal 709818/810289 (executing program) 2021/03/10 10:58:12 fetching corpus: 13944, signal 710408/810875 (executing program) 2021/03/10 10:58:12 fetching corpus: 13994, signal 711093/811500 (executing program) 2021/03/10 10:58:13 fetching corpus: 14044, signal 711653/812027 (executing program) 2021/03/10 10:58:13 fetching corpus: 14094, signal 712363/812631 (executing program) 2021/03/10 10:58:13 fetching corpus: 14144, signal 713244/813307 (executing program) 2021/03/10 10:58:13 fetching corpus: 14194, signal 713890/813877 (executing program) 2021/03/10 10:58:13 fetching corpus: 14244, signal 714832/814579 (executing program) 2021/03/10 10:58:13 fetching corpus: 14294, signal 715317/815087 (executing program) 2021/03/10 10:58:13 fetching corpus: 14344, signal 716160/815675 (executing program) 2021/03/10 10:58:13 fetching corpus: 14394, signal 716748/816227 (executing program) 2021/03/10 10:58:13 fetching corpus: 14444, signal 717235/816737 (executing program) 2021/03/10 10:58:13 fetching corpus: 14494, signal 717746/817238 (executing program) 2021/03/10 10:58:14 fetching corpus: 14544, signal 718848/817932 (executing program) 2021/03/10 10:58:14 fetching corpus: 14594, signal 719396/818438 (executing program) 2021/03/10 10:58:14 fetching corpus: 14644, signal 720390/819115 (executing program) 2021/03/10 10:58:14 fetching corpus: 14694, signal 721386/819737 (executing program) 2021/03/10 10:58:14 fetching corpus: 14744, signal 721994/820248 (executing program) 2021/03/10 10:58:14 fetching corpus: 14794, signal 722472/820757 (executing program) 2021/03/10 10:58:14 fetching corpus: 14844, signal 723828/821503 (executing program) 2021/03/10 10:58:14 fetching corpus: 14894, signal 724218/821966 (executing program) 2021/03/10 10:58:15 fetching corpus: 14944, signal 725077/822568 (executing program) 2021/03/10 10:58:15 fetching corpus: 14994, signal 725814/823123 (executing program) 2021/03/10 10:58:15 fetching corpus: 15044, signal 726398/823620 (executing program) 2021/03/10 10:58:15 fetching corpus: 15094, signal 726922/824118 (executing program) 2021/03/10 10:58:15 fetching corpus: 15144, signal 727638/824661 (executing program) 2021/03/10 10:58:15 fetching corpus: 15194, signal 728341/825206 (executing program) 2021/03/10 10:58:15 fetching corpus: 15244, signal 729056/825699 (executing program) 2021/03/10 10:58:16 fetching corpus: 15294, signal 729714/826265 (executing program) 2021/03/10 10:58:16 fetching corpus: 15344, signal 730419/826765 (executing program) 2021/03/10 10:58:16 fetching corpus: 15394, signal 731199/827325 (executing program) 2021/03/10 10:58:16 fetching corpus: 15444, signal 731586/827763 (executing program) 2021/03/10 10:58:16 fetching corpus: 15494, signal 733831/828676 (executing program) 2021/03/10 10:58:16 fetching corpus: 15544, signal 734464/829189 (executing program) 2021/03/10 10:58:16 fetching corpus: 15594, signal 735290/829732 (executing program) 2021/03/10 10:58:16 fetching corpus: 15644, signal 735890/830213 (executing program) 2021/03/10 10:58:16 fetching corpus: 15694, signal 736321/830611 (executing program) 2021/03/10 10:58:17 fetching corpus: 15744, signal 737482/831207 (executing program) 2021/03/10 10:58:17 fetching corpus: 15794, signal 737990/831666 (executing program) 2021/03/10 10:58:17 fetching corpus: 15844, signal 738874/832181 (executing program) 2021/03/10 10:58:17 fetching corpus: 15894, signal 739376/832605 (executing program) 2021/03/10 10:58:17 fetching corpus: 15944, signal 740400/833156 (executing program) 2021/03/10 10:58:17 fetching corpus: 15994, signal 741151/833660 (executing program) 2021/03/10 10:58:17 fetching corpus: 16044, signal 741775/834137 (executing program) 2021/03/10 10:58:18 fetching corpus: 16094, signal 742512/834612 (executing program) 2021/03/10 10:58:18 fetching corpus: 16144, signal 743417/835115 (executing program) 2021/03/10 10:58:18 fetching corpus: 16194, signal 744131/835553 (executing program) 2021/03/10 10:58:18 fetching corpus: 16244, signal 745120/836123 (executing program) 2021/03/10 10:58:18 fetching corpus: 16294, signal 745673/836531 (executing program) 2021/03/10 10:58:18 fetching corpus: 16344, signal 746010/836883 (executing program) 2021/03/10 10:58:18 fetching corpus: 16394, signal 746974/837354 (executing program) 2021/03/10 10:58:18 fetching corpus: 16444, signal 747960/837865 (executing program) 2021/03/10 10:58:18 fetching corpus: 16494, signal 748338/838227 (executing program) 2021/03/10 10:58:19 fetching corpus: 16544, signal 749032/838657 (executing program) 2021/03/10 10:58:19 fetching corpus: 16594, signal 749755/839127 (executing program) 2021/03/10 10:58:19 fetching corpus: 16644, signal 750149/839503 (executing program) 2021/03/10 10:58:19 fetching corpus: 16694, signal 750900/839910 (executing program) 2021/03/10 10:58:19 fetching corpus: 16744, signal 751409/840320 (executing program) 2021/03/10 10:58:19 fetching corpus: 16794, signal 752989/840906 (executing program) 2021/03/10 10:58:19 fetching corpus: 16844, signal 753328/841243 (executing program) 2021/03/10 10:58:20 fetching corpus: 16894, signal 754058/841654 (executing program) 2021/03/10 10:58:20 fetching corpus: 16944, signal 754766/842037 (executing program) 2021/03/10 10:58:20 fetching corpus: 16994, signal 755250/842381 (executing program) 2021/03/10 10:58:20 fetching corpus: 17044, signal 755742/842730 (executing program) 2021/03/10 10:58:20 fetching corpus: 17094, signal 756624/843183 (executing program) 2021/03/10 10:58:20 fetching corpus: 17144, signal 757107/843519 (executing program) 2021/03/10 10:58:20 fetching corpus: 17194, signal 757867/843916 (executing program) 2021/03/10 10:58:20 fetching corpus: 17244, signal 758396/844269 (executing program) 2021/03/10 10:58:21 fetching corpus: 17294, signal 758902/844639 (executing program) 2021/03/10 10:58:21 fetching corpus: 17344, signal 759551/845009 (executing program) 2021/03/10 10:58:21 fetching corpus: 17394, signal 760194/845440 (executing program) 2021/03/10 10:58:21 fetching corpus: 17444, signal 760702/845840 (executing program) 2021/03/10 10:58:21 fetching corpus: 17494, signal 761150/846169 (executing program) 2021/03/10 10:58:21 fetching corpus: 17544, signal 762309/846630 (executing program) 2021/03/10 10:58:21 fetching corpus: 17594, signal 762698/846974 (executing program) 2021/03/10 10:58:22 fetching corpus: 17644, signal 763065/847322 (executing program) 2021/03/10 10:58:22 fetching corpus: 17694, signal 764405/847786 (executing program) 2021/03/10 10:58:22 fetching corpus: 17744, signal 764905/848087 (executing program) 2021/03/10 10:58:22 fetching corpus: 17794, signal 765924/848584 (executing program) 2021/03/10 10:58:22 fetching corpus: 17844, signal 767437/849101 (executing program) 2021/03/10 10:58:22 fetching corpus: 17894, signal 768183/849512 (executing program) 2021/03/10 10:58:22 fetching corpus: 17944, signal 768952/849883 (executing program) 2021/03/10 10:58:23 fetching corpus: 17994, signal 769441/850183 (executing program) 2021/03/10 10:58:23 fetching corpus: 18044, signal 770005/850501 (executing program) 2021/03/10 10:58:23 fetching corpus: 18094, signal 770581/850816 (executing program) 2021/03/10 10:58:23 fetching corpus: 18144, signal 771428/851177 (executing program) 2021/03/10 10:58:23 fetching corpus: 18194, signal 771735/851440 (executing program) 2021/03/10 10:58:23 fetching corpus: 18244, signal 772567/851792 (executing program) 2021/03/10 10:58:23 fetching corpus: 18294, signal 773292/852092 (executing program) 2021/03/10 10:58:23 fetching corpus: 18344, signal 774120/852424 (executing program) 2021/03/10 10:58:24 fetching corpus: 18394, signal 774864/852757 (executing program) 2021/03/10 10:58:24 fetching corpus: 18444, signal 775427/853046 (executing program) 2021/03/10 10:58:24 fetching corpus: 18494, signal 775890/853326 (executing program) 2021/03/10 10:58:24 fetching corpus: 18544, signal 776493/853605 (executing program) 2021/03/10 10:58:24 fetching corpus: 18594, signal 776988/853868 (executing program) 2021/03/10 10:58:24 fetching corpus: 18644, signal 777562/854174 (executing program) 2021/03/10 10:58:24 fetching corpus: 18694, signal 778459/854540 (executing program) 2021/03/10 10:58:24 fetching corpus: 18744, signal 779154/854840 (executing program) 2021/03/10 10:58:25 fetching corpus: 18794, signal 779694/855108 (executing program) 2021/03/10 10:58:25 fetching corpus: 18844, signal 780481/855417 (executing program) 2021/03/10 10:58:25 fetching corpus: 18894, signal 781135/855695 (executing program) 2021/03/10 10:58:25 fetching corpus: 18944, signal 781949/855998 (executing program) 2021/03/10 10:58:25 fetching corpus: 18994, signal 782248/856207 (executing program) 2021/03/10 10:58:25 fetching corpus: 19044, signal 782754/856451 (executing program) 2021/03/10 10:58:25 fetching corpus: 19094, signal 783751/856772 (executing program) 2021/03/10 10:58:25 fetching corpus: 19144, signal 784516/857049 (executing program) 2021/03/10 10:58:25 fetching corpus: 19194, signal 784864/857299 (executing program) 2021/03/10 10:58:26 fetching corpus: 19244, signal 785234/857504 (executing program) 2021/03/10 10:58:26 fetching corpus: 19294, signal 786424/857816 (executing program) 2021/03/10 10:58:26 fetching corpus: 19344, signal 786923/858019 (executing program) 2021/03/10 10:58:26 fetching corpus: 19394, signal 787676/858251 (executing program) 2021/03/10 10:58:26 fetching corpus: 19444, signal 788409/858508 (executing program) 2021/03/10 10:58:26 fetching corpus: 19494, signal 788897/858714 (executing program) 2021/03/10 10:58:26 fetching corpus: 19544, signal 789434/858929 (executing program) 2021/03/10 10:58:26 fetching corpus: 19594, signal 790077/859169 (executing program) 2021/03/10 10:58:27 fetching corpus: 19644, signal 790642/859376 (executing program) 2021/03/10 10:58:27 fetching corpus: 19694, signal 791258/859614 (executing program) 2021/03/10 10:58:27 fetching corpus: 19744, signal 791898/859872 (executing program) 2021/03/10 10:58:27 fetching corpus: 19794, signal 792947/860149 (executing program) 2021/03/10 10:58:27 fetching corpus: 19844, signal 793474/860361 (executing program) 2021/03/10 10:58:27 fetching corpus: 19894, signal 794255/860589 (executing program) 2021/03/10 10:58:27 fetching corpus: 19944, signal 794632/860796 (executing program) 2021/03/10 10:58:28 fetching corpus: 19994, signal 795354/861017 (executing program) 2021/03/10 10:58:28 fetching corpus: 20044, signal 795916/861221 (executing program) 2021/03/10 10:58:28 fetching corpus: 20094, signal 797033/861455 (executing program) 2021/03/10 10:58:28 fetching corpus: 20144, signal 797270/861638 (executing program) 2021/03/10 10:58:28 fetching corpus: 20194, signal 797997/861850 (executing program) 2021/03/10 10:58:28 fetching corpus: 20244, signal 798381/862035 (executing program) 2021/03/10 10:58:28 fetching corpus: 20294, signal 798669/862201 (executing program) 2021/03/10 10:58:28 fetching corpus: 20344, signal 799180/862380 (executing program) 2021/03/10 10:58:29 fetching corpus: 20394, signal 799885/862563 (executing program) 2021/03/10 10:58:29 fetching corpus: 20444, signal 800350/862797 (executing program) 2021/03/10 10:58:29 fetching corpus: 20494, signal 801170/863037 (executing program) 2021/03/10 10:58:29 fetching corpus: 20544, signal 801802/863224 (executing program) 2021/03/10 10:58:29 fetching corpus: 20594, signal 802521/863393 (executing program) 2021/03/10 10:58:29 fetching corpus: 20644, signal 803039/863554 (executing program) 2021/03/10 10:58:29 fetching corpus: 20694, signal 803414/863710 (executing program) 2021/03/10 10:58:29 fetching corpus: 20744, signal 803856/863860 (executing program) 2021/03/10 10:58:30 fetching corpus: 20794, signal 804285/864024 (executing program) 2021/03/10 10:58:30 fetching corpus: 20844, signal 804501/864183 (executing program) 2021/03/10 10:58:30 fetching corpus: 20894, signal 805094/864331 (executing program) 2021/03/10 10:58:30 fetching corpus: 20944, signal 805621/864481 (executing program) 2021/03/10 10:58:30 fetching corpus: 20994, signal 806046/864633 (executing program) 2021/03/10 10:58:30 fetching corpus: 21044, signal 806697/864791 (executing program) 2021/03/10 10:58:30 fetching corpus: 21094, signal 807019/864943 (executing program) 2021/03/10 10:58:30 fetching corpus: 21144, signal 807413/865068 (executing program) 2021/03/10 10:58:30 fetching corpus: 21194, signal 807671/865216 (executing program) 2021/03/10 10:58:31 fetching corpus: 21244, signal 808276/865345 (executing program) 2021/03/10 10:58:31 fetching corpus: 21294, signal 808797/865514 (executing program) 2021/03/10 10:58:31 fetching corpus: 21344, signal 809339/865631 (executing program) 2021/03/10 10:58:31 fetching corpus: 21394, signal 810371/865779 (executing program) 2021/03/10 10:58:31 fetching corpus: 21444, signal 811126/865833 (executing program) 2021/03/10 10:58:31 fetching corpus: 21494, signal 811534/865833 (executing program) 2021/03/10 10:58:31 fetching corpus: 21544, signal 811967/865833 (executing program) 2021/03/10 10:58:32 fetching corpus: 21594, signal 812573/865845 (executing program) 2021/03/10 10:58:32 fetching corpus: 21644, signal 813065/865845 (executing program) 2021/03/10 10:58:32 fetching corpus: 21694, signal 813638/865845 (executing program) 2021/03/10 10:58:32 fetching corpus: 21744, signal 813916/865850 (executing program) 2021/03/10 10:58:32 fetching corpus: 21794, signal 814759/865850 (executing program) 2021/03/10 10:58:32 fetching corpus: 21844, signal 815779/865853 (executing program) 2021/03/10 10:58:32 fetching corpus: 21894, signal 816337/865853 (executing program) 2021/03/10 10:58:32 fetching corpus: 21944, signal 816999/865853 (executing program) 2021/03/10 10:58:33 fetching corpus: 21994, signal 817450/865859 (executing program) 2021/03/10 10:58:33 fetching corpus: 22044, signal 817916/865861 (executing program) 2021/03/10 10:58:33 fetching corpus: 22094, signal 818502/865868 (executing program) 2021/03/10 10:58:33 fetching corpus: 22144, signal 818847/865868 (executing program) 2021/03/10 10:58:33 fetching corpus: 22194, signal 819483/865870 (executing program) 2021/03/10 10:58:33 fetching corpus: 22244, signal 820165/865870 (executing program) 2021/03/10 10:58:33 fetching corpus: 22294, signal 820476/865870 (executing program) 2021/03/10 10:58:33 fetching corpus: 22344, signal 820822/865870 (executing program) 2021/03/10 10:58:33 fetching corpus: 22394, signal 821337/865870 (executing program) 2021/03/10 10:58:34 fetching corpus: 22444, signal 821779/865875 (executing program) 2021/03/10 10:58:34 fetching corpus: 22494, signal 822236/865876 (executing program) 2021/03/10 10:58:34 fetching corpus: 22544, signal 823100/865876 (executing program) 2021/03/10 10:58:34 fetching corpus: 22594, signal 823869/865877 (executing program) 2021/03/10 10:58:34 fetching corpus: 22644, signal 824394/865877 (executing program) 2021/03/10 10:58:34 fetching corpus: 22694, signal 824862/866032 (executing program) 2021/03/10 10:58:35 fetching corpus: 22744, signal 825380/866032 (executing program) 2021/03/10 10:58:35 fetching corpus: 22794, signal 825689/866033 (executing program) 2021/03/10 10:58:35 fetching corpus: 22844, signal 826060/866033 (executing program) 2021/03/10 10:58:35 fetching corpus: 22894, signal 827247/866233 (executing program) 2021/03/10 10:58:35 fetching corpus: 22944, signal 827977/866296 (executing program) 2021/03/10 10:58:35 fetching corpus: 22994, signal 828380/866296 (executing program) 2021/03/10 10:58:35 fetching corpus: 23044, signal 829574/866300 (executing program) 2021/03/10 10:58:35 fetching corpus: 23094, signal 830052/866302 (executing program) 2021/03/10 10:58:35 fetching corpus: 23144, signal 830688/866302 (executing program) 2021/03/10 10:58:36 fetching corpus: 23194, signal 831213/866304 (executing program) 2021/03/10 10:58:36 fetching corpus: 23244, signal 831536/866310 (executing program) 2021/03/10 10:58:36 fetching corpus: 23294, signal 832068/866310 (executing program) 2021/03/10 10:58:36 fetching corpus: 23344, signal 832953/866310 (executing program) 2021/03/10 10:58:36 fetching corpus: 23394, signal 833389/866329 (executing program) 2021/03/10 10:58:36 fetching corpus: 23444, signal 833872/866330 (executing program) 2021/03/10 10:58:36 fetching corpus: 23494, signal 834084/866331 (executing program) 2021/03/10 10:58:36 fetching corpus: 23544, signal 834566/866335 (executing program) 2021/03/10 10:58:37 fetching corpus: 23594, signal 835524/866335 (executing program) 2021/03/10 10:58:37 fetching corpus: 23644, signal 835993/866335 (executing program) 2021/03/10 10:58:37 fetching corpus: 23694, signal 836400/866342 (executing program) 2021/03/10 10:58:37 fetching corpus: 23744, signal 837258/866342 (executing program) 2021/03/10 10:58:37 fetching corpus: 23794, signal 837835/866350 (executing program) 2021/03/10 10:58:37 fetching corpus: 23844, signal 838340/866360 (executing program) syzkaller login: [ 132.705339][ T3276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.712033][ T3276] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/10 10:58:38 fetching corpus: 23894, signal 838808/866364 (executing program) 2021/03/10 10:58:38 fetching corpus: 23944, signal 839237/866365 (executing program) 2021/03/10 10:58:38 fetching corpus: 23994, signal 839952/866366 (executing program) 2021/03/10 10:58:38 fetching corpus: 24044, signal 840413/866400 (executing program) 2021/03/10 10:58:38 fetching corpus: 24094, signal 840811/866410 (executing program) 2021/03/10 10:58:38 fetching corpus: 24144, signal 841300/866410 (executing program) 2021/03/10 10:58:38 fetching corpus: 24194, signal 842038/866410 (executing program) 2021/03/10 10:58:38 fetching corpus: 24244, signal 842502/866419 (executing program) 2021/03/10 10:58:39 fetching corpus: 24294, signal 842812/866422 (executing program) 2021/03/10 10:58:39 fetching corpus: 24343, signal 843549/866425 (executing program) 2021/03/10 10:58:39 fetching corpus: 24393, signal 844254/866425 (executing program) 2021/03/10 10:58:39 fetching corpus: 24443, signal 844554/866449 (executing program) 2021/03/10 10:58:39 fetching corpus: 24493, signal 845145/866449 (executing program) 2021/03/10 10:58:39 fetching corpus: 24543, signal 845600/866449 (executing program) 2021/03/10 10:58:40 fetching corpus: 24593, signal 846042/866449 (executing program) 2021/03/10 10:58:40 fetching corpus: 24643, signal 846376/866496 (executing program) 2021/03/10 10:58:40 fetching corpus: 24693, signal 846797/866506 (executing program) 2021/03/10 10:58:40 fetching corpus: 24743, signal 847137/866507 (executing program) 2021/03/10 10:58:40 fetching corpus: 24775, signal 847388/866527 (executing program) 2021/03/10 10:58:40 fetching corpus: 24775, signal 847388/866527 (executing program) 2021/03/10 10:58:42 starting 6 fuzzer processes 10:58:42 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:58:42 executing program 1: r0 = epoll_create(0x8a8) r1 = memfd_create(&(0x7f0000000080)='+(:3:/{\x00', 0x0) dup3(r0, r1, 0x0) 10:58:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 10:58:43 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8cf5}, 0x0, 0x0, 0x0) 10:58:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000680)={0x1, 0x10, 0xfa00, {&(0x7f0000000580), r1}}, 0x18) 10:58:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x6010, &(0x7f0000000300)) [ 138.696749][ T8423] IPVS: ftp: loaded support on port[0] = 21 [ 138.867960][ T8425] IPVS: ftp: loaded support on port[0] = 21 [ 139.131721][ T8427] IPVS: ftp: loaded support on port[0] = 21 [ 139.145382][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 139.318278][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.331673][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.340644][ T8423] device bridge_slave_0 entered promiscuous mode [ 139.402931][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.411897][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.424149][ T8423] device bridge_slave_1 entered promiscuous mode [ 139.499273][ T8429] IPVS: ftp: loaded support on port[0] = 21 [ 139.501086][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 139.560408][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.571987][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.641881][ T8425] chnl_net:caif_netlink_parms(): no params data found [ 139.736552][ T8423] team0: Port device team_slave_0 added [ 139.782009][ T8423] team0: Port device team_slave_1 added [ 139.802549][ T8431] IPVS: ftp: loaded support on port[0] = 21 [ 139.807508][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.817901][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.846307][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.863331][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.870605][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.879560][ T8427] device bridge_slave_0 entered promiscuous mode [ 139.897189][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.904736][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.931462][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.961017][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.970198][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.978667][ T8427] device bridge_slave_1 entered promiscuous mode [ 140.020059][ T8423] device hsr_slave_0 entered promiscuous mode [ 140.029112][ T8423] device hsr_slave_1 entered promiscuous mode [ 140.104477][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.117404][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.127115][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.135379][ T8425] device bridge_slave_0 entered promiscuous mode [ 140.165269][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.209393][ T8425] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.217502][ T8425] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.226247][ T8425] device bridge_slave_1 entered promiscuous mode [ 140.271181][ T8425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.348246][ T8560] IPVS: ftp: loaded support on port[0] = 21 [ 140.390722][ T8427] team0: Port device team_slave_0 added [ 140.402411][ T8425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.427976][ T8427] team0: Port device team_slave_1 added [ 140.532935][ T8425] team0: Port device team_slave_0 added [ 140.554941][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.561937][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.588602][ T8427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.620662][ T8425] team0: Port device team_slave_1 added [ 140.624172][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 140.642590][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.652034][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.678177][ T8425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.719810][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.727055][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.754588][ T8427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.769721][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 140.781212][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.788736][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.816009][ T8425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.863222][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 140.921958][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 140.942746][ T8427] device hsr_slave_0 entered promiscuous mode [ 140.951891][ T8427] device hsr_slave_1 entered promiscuous mode [ 140.959086][ T8427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.967232][ T8427] Cannot create hsr debugfs directory [ 140.979642][ T8425] device hsr_slave_0 entered promiscuous mode [ 140.987896][ T8425] device hsr_slave_1 entered promiscuous mode [ 140.996288][ T8425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.004231][ T8425] Cannot create hsr debugfs directory [ 141.104987][ T20] Bluetooth: hci2: command 0x0409 tx timeout [ 141.157181][ T8423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.187151][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.194873][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.202664][ T8429] device bridge_slave_0 entered promiscuous mode [ 141.216907][ T8423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.293809][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.300914][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.313794][ T8429] device bridge_slave_1 entered promiscuous mode [ 141.328499][ T8423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.346676][ T36] Bluetooth: hci3: command 0x0409 tx timeout [ 141.369544][ T8423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.421283][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.438461][ T8560] chnl_net:caif_netlink_parms(): no params data found [ 141.454846][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.461956][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.477273][ T8431] device bridge_slave_0 entered promiscuous mode [ 141.486865][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.519997][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.531235][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.539901][ T8431] device bridge_slave_1 entered promiscuous mode [ 141.604337][ T8429] team0: Port device team_slave_0 added [ 141.666791][ T8427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.676986][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 141.682217][ T8429] team0: Port device team_slave_1 added [ 141.697077][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.715845][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.731295][ T8427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 141.780559][ T8427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 141.822699][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.830519][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.857160][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.871526][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.880113][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.912134][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.925175][ T8427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 141.954367][ T8431] team0: Port device team_slave_0 added [ 141.992649][ T8425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.003689][ T8431] team0: Port device team_slave_1 added [ 142.019251][ T8429] device hsr_slave_0 entered promiscuous mode [ 142.028472][ T8429] device hsr_slave_1 entered promiscuous mode [ 142.040360][ T8429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.048233][ T8429] Cannot create hsr debugfs directory [ 142.068358][ T8425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.084583][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.091731][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.101402][ T8560] device bridge_slave_0 entered promiscuous mode [ 142.110723][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.119112][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.128809][ T8560] device bridge_slave_1 entered promiscuous mode [ 142.146971][ T8425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.169151][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.179193][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.206262][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.229551][ T20] Bluetooth: hci5: command 0x0409 tx timeout [ 142.267260][ T8425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.279768][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.289287][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.316579][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.388832][ T8560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.406893][ T8431] device hsr_slave_0 entered promiscuous mode [ 142.415325][ T8431] device hsr_slave_1 entered promiscuous mode [ 142.422059][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.430816][ T8431] Cannot create hsr debugfs directory [ 142.471142][ T8560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.500997][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.536248][ T8560] team0: Port device team_slave_0 added [ 142.546870][ T8560] team0: Port device team_slave_1 added [ 142.572456][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.600219][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.611912][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.622774][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.666342][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.674168][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.700984][ T8560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.714365][ T9614] Bluetooth: hci0: command 0x041b tx timeout [ 142.725489][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.732463][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.758895][ T8560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.777742][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.786717][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.798495][ T9405] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.806439][ T9405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.815727][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.832215][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.848503][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.857693][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.864863][ T4857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.881118][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.917541][ T8560] device hsr_slave_0 entered promiscuous mode [ 142.924455][ T8560] device hsr_slave_1 entered promiscuous mode [ 142.931095][ T8560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.940632][ T8560] Cannot create hsr debugfs directory [ 142.946354][ T9398] Bluetooth: hci1: command 0x041b tx timeout [ 142.959815][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.974562][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.993143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.009263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.019231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.033462][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.040570][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.090160][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.101556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.113978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.125272][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.170110][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.178942][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.188865][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.193571][ T9398] Bluetooth: hci2: command 0x041b tx timeout [ 143.198967][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.209979][ T9551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.218325][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.228894][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.238108][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.264464][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.272846][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.286620][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.331881][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.349922][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.360698][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.373725][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.410261][ T8423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.426485][ T9614] Bluetooth: hci3: command 0x041b tx timeout [ 143.447583][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.472510][ T8427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.484480][ T8427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.504558][ T8425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.515231][ T8429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.529487][ T8429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.549979][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.559241][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.568132][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.577573][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.587367][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.596623][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.624269][ T8429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.635397][ T8429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.650079][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.701963][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.711390][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.724264][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.731985][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.742273][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.762120][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.784062][ T9405] Bluetooth: hci4: command 0x041b tx timeout [ 143.804488][ T8425] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.839809][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.849163][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.857690][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.867246][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.876534][ T9405] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.883690][ T9405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.891812][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.900857][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.910717][ T9405] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.917990][ T9405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.926752][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.964454][ T8431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.979204][ T8431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.000283][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.010767][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.037212][ T8431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.063099][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.071804][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.082014][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.091342][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.101101][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.111218][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.153350][ T8560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.163979][ T8431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.185729][ T8423] device veth0_vlan entered promiscuous mode [ 144.200087][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.208281][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.229738][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.248362][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.261860][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.281046][ T8427] device veth0_vlan entered promiscuous mode [ 144.294766][ T8560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.303435][ T20] Bluetooth: hci5: command 0x041b tx timeout [ 144.311223][ T8560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.327032][ T8560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.342010][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.356292][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.367373][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.377253][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.388279][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.398532][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.415430][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.424152][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.436889][ T8423] device veth1_vlan entered promiscuous mode [ 144.457243][ T8427] device veth1_vlan entered promiscuous mode [ 144.495744][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.504571][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.524231][ T8425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.558983][ T8427] device veth0_macvtap entered promiscuous mode [ 144.567203][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.577562][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.594232][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.625921][ T8427] device veth1_macvtap entered promiscuous mode [ 144.684828][ T8425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.702212][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.711197][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.721155][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.730527][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.745854][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.762465][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.773931][ T8423] device veth0_macvtap entered promiscuous mode [ 144.799600][ T9405] Bluetooth: hci0: command 0x040f tx timeout [ 144.808559][ T8423] device veth1_macvtap entered promiscuous mode [ 144.835162][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.848062][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.857651][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.872178][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.903661][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.927293][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.949682][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.960254][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.970008][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.979597][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.992727][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.011417][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.020977][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.030975][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.041257][ T2978] Bluetooth: hci1: command 0x040f tx timeout [ 145.061674][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.074047][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.086394][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.113853][ T8427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.123740][ T8427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.132477][ T8427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.142037][ T8427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.168888][ T8425] device veth0_vlan entered promiscuous mode [ 145.178138][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.187324][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.197043][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.207531][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.216712][ T4857] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.223860][ T4857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.231720][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.240813][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.249608][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.256899][ T4857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.265920][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.273784][ T9398] Bluetooth: hci2: command 0x040f tx timeout [ 145.275035][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.288948][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.298818][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.307522][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.316184][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.335685][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.382056][ T8425] device veth1_vlan entered promiscuous mode [ 145.398523][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.410825][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.426043][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.467702][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.487788][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.502331][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.525776][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.535387][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.546217][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.556803][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.566780][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.577009][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.586263][ T9398] Bluetooth: hci3: command 0x040f tx timeout [ 145.596361][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.645084][ T8423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.657757][ T8423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.670161][ T8423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.679458][ T8423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.690118][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.700467][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.709664][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.718491][ T9398] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.725655][ T9398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.734418][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.743476][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.752108][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.761736][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.814023][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.823079][ T9405] Bluetooth: hci4: command 0x040f tx timeout [ 145.851727][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.860389][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.869802][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.879354][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.889600][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.898790][ T9398] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.906094][ T9398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.930147][ T8425] device veth0_macvtap entered promiscuous mode [ 145.948089][ T8425] device veth1_macvtap entered promiscuous mode [ 146.025730][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.044623][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.052716][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.066817][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.076848][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.088703][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.131339][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.152468][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.174963][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.200740][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.217564][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.235711][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.252276][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.262590][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.274452][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.287521][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.298414][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.309388][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.342892][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.350943][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.373809][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.382652][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.393704][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.402454][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.412691][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.421836][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.431250][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.438417][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.446209][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.455442][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.464846][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.471915][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.482205][ T2978] Bluetooth: hci5: command 0x040f tx timeout [ 146.490125][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.504349][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.514376][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.525540][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.537344][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.549626][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.574048][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.582228][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.591149][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.604913][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.624464][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.639640][ T8431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.656870][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.680230][ T8425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.713411][ T8425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.722173][ T8425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.731849][ T8425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.743996][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.752526][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.762259][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.775863][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.806997][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.862920][ T2978] Bluetooth: hci0: command 0x0419 tx timeout [ 146.870040][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.888648][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.902676][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.911325][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.922125][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.931397][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.940084][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.950471][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.961810][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.995172][ T3127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.005158][ T3127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.029736][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.038268][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.046645][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.056261][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.064530][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.080650][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.103825][ T9405] Bluetooth: hci1: command 0x0419 tx timeout [ 147.118730][ T3127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.145219][ T8560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.151066][ T3127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.181986][ T8560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.199409][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.211377][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.230309][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.274849][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.299630][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.312229][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 10:58:52 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/meminfo\x00', 0x0, 0x0) [ 147.320881][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.330149][ T8429] device veth0_vlan entered promiscuous mode [ 147.353697][ T9712] Bluetooth: hci2: command 0x0419 tx timeout [ 147.437504][ T8429] device veth1_vlan entered promiscuous mode [ 147.457236][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.470597][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.478981][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.479163][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.551771][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 10:58:52 executing program 0: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000540)={0x8}, 0x0) [ 147.605283][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 10:58:52 executing program 2: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x18, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) exit(0xa0010000000000) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) exit(0x0) clone3(0x0, 0x0) [ 147.671989][ T8429] device veth0_macvtap entered promiscuous mode [ 147.679914][ T9712] Bluetooth: hci3: command 0x0419 tx timeout 10:58:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x2}]}) [ 147.747063][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.781488][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.788433][ C0] hrtimer: interrupt took 29230 ns [ 147.815908][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.819320][ T8429] device veth1_macvtap entered promiscuous mode [ 147.840600][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.854765][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 10:58:53 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='svcrdma_dma_map_rw_err\x00'}, 0x10) [ 147.885610][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.916713][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.928936][ T9398] Bluetooth: hci4: command 0x0419 tx timeout [ 147.960438][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.979905][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.016143][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.038661][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:58:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f0000001200)=@framed={{}, [@generic]}, &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 148.060036][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.084514][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.106847][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.119284][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.137601][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.162204][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.176449][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.209703][ T8431] device veth0_vlan entered promiscuous mode [ 148.248227][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 10:58:53 executing program 1: pselect6(0x40, &(0x7f0000000080)={0x8}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000200)={[0x7]}, 0x8}) [ 148.265827][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.290813][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.313428][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.334277][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.351779][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.375379][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.399328][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.420870][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.453051][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.461014][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 10:58:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x16}]}) [ 148.501993][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.534840][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.553906][ T20] Bluetooth: hci5: command 0x0419 tx timeout [ 148.556213][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.590952][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.649392][ T8431] device veth1_vlan entered promiscuous mode 10:58:54 executing program 2: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x18, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) exit(0xa0010000000000) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) exit(0x0) clone3(0x0, 0x0) [ 148.702068][ T37] audit: type=1326 audit(1615373933.956:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465f69 code=0x0 [ 148.752512][ T8429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.770084][ T8429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.803963][ T8429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.832100][ T8429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.891821][ T8560] device veth0_vlan entered promiscuous mode [ 148.920033][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.929542][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.974745][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.995433][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.017203][ T8560] device veth1_vlan entered promiscuous mode [ 149.106464][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.124789][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.142382][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.161736][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.186090][ T8431] device veth0_macvtap entered promiscuous mode [ 149.264472][ T8431] device veth1_macvtap entered promiscuous mode [ 149.313260][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.321703][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.400893][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.416090][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.446734][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.488135][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.508761][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.531245][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.554302][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.575709][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.601925][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.660352][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.710584][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.746191][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.780039][ T8560] device veth0_macvtap entered promiscuous mode [ 149.819702][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.848285][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.873290][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.903570][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.920575][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.950708][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.962042][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.981224][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.024835][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.042806][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.053470][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.066370][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.077041][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.089340][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.102049][ T8560] device veth1_macvtap entered promiscuous mode [ 150.109549][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.128259][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.132601][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.147376][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.190720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.203136][ T8431] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.211913][ T8431] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.221331][ T8431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.234110][ T8431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.300631][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.311408][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.324623][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.335658][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.346711][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.357883][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.367846][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.378993][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.389791][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.401597][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.421539][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.483543][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.504352][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 10:58:55 executing program 3: bpf$OBJ_GET_PROG(0x10, 0x0, 0x0) [ 150.590146][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.612701][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.640184][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.669282][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.682775][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.735949][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.752455][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.772265][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.783349][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.794123][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.806497][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.819009][ T3127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.821987][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.843440][ T3127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.853857][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.874186][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.906626][ T8560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.952665][ T8560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.969456][ T8560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.991585][ T8560] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.071107][ T3127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.096764][ T3127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.116743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.213792][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.221884][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.248948][ T9735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 10:58:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x2, &(0x7f0000000080)=@raw=[@map_val], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 151.309901][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.319878][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.335976][ T9735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:58:56 executing program 2: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x18, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) exit(0xa0010000000000) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) exit(0x0) clone3(0x0, 0x0) 10:58:56 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0/file0\x00'}, 0x10) 10:58:56 executing program 0: clock_getres(0x1814a0e2a1974247, 0x0) 10:58:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 10:58:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000000)={'\x00', @ifru_map}) 10:58:56 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x6) 10:58:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 10:58:57 executing program 4: fsopen(&(0x7f0000000180)='securityfs\x00', 0x0) 10:58:57 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 10:58:57 executing program 3: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="b3", 0x1, 0xfffffffffffffffd) 10:58:57 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) 10:58:57 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) fdatasync(r0) 10:58:57 executing program 2: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x18, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) exit(0xa0010000000000) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) exit(0x0) clone3(0x0, 0x0) 10:58:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a40000003200010029bd7000fddbdf25000000002c0001000100736b626d6f6400000c00120008000300ee493c70c5010000000c00190008000300000000800c0002"], 0xa4}}, 0x0) 10:58:57 executing program 3: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)='Y', 0x1, 0xfffffffffffffffe) 10:58:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000900)='/dev/null\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) 10:58:57 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, 0x0) 10:58:57 executing program 5: fsopen(&(0x7f00000000c0)='configfs\x00', 0x0) [ 152.583479][ T9973] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. 10:58:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 152.630098][ T9973] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 10:58:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x2a7c}}, 0x0) 10:58:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:58:57 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 10:58:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delchain={0x23, 0x65, 0x1}, 0x24}}, 0x0) 10:58:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x3}}, 0x24}}, 0x0) 10:58:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x81}, 0x40) 10:58:58 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:58:58 executing program 1: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000300)='G', 0x1, 0xfffffffffffffffc) 10:58:58 executing program 5: r0 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10:58:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 10:58:58 executing program 2: socket$inet(0x2, 0x3, 0x9) 10:58:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a40000003200010029bd7000fddbdf25000000002c0001"], 0xa4}}, 0x0) 10:58:58 executing program 0: r0 = fsopen(&(0x7f00000000c0)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='*$!\x00', &(0x7f0000000140)=']*@_\\S*^\\O:)[.-\x00', 0x0) 10:58:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a4000000320001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) 10:58:58 executing program 1: r0 = eventfd(0xf4) read$eventfd(r0, &(0x7f0000000780), 0x8) 10:58:58 executing program 5: bpf$OBJ_GET_PROG(0x13, 0x0, 0x0) 10:58:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 153.704523][T10015] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.758833][T10015] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 10:58:59 executing program 1: r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) [ 153.817356][T10026] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000800), 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) 10:58:59 executing program 0: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10:58:59 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1812"], &(0x7f0000000240)='GPL\x00', 0x6, 0x1000, &(0x7f0000000840)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:58:59 executing program 2: timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 10:58:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{}, {}]}) 10:58:59 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x482402, 0x0) 10:58:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 10:58:59 executing program 4: r0 = gettid() tkill(r0, 0x17) 10:58:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae03, 0x3) 10:58:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x1000, &(0x7f0000000840)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:58:59 executing program 3: socketpair(0x10, 0x3, 0x6, &(0x7f0000000040)) 10:58:59 executing program 1: timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f00000003c0)) 10:58:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) 10:58:59 executing program 4: timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) 10:58:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'tunl0\x00', @ifru_map}) 10:58:59 executing program 2: timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) 10:58:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_cgroup={{0x3, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) 10:58:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) fdatasync(r0) 10:58:59 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4006171, 0xffffffffffffffff, 0x0) 10:58:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 10:58:59 executing program 4: ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000000)=""/193) munlockall() r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000140)=""/192) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6c}, [@exit, @jmp={0x5, 0x1, 0x6, 0xa, 0x3, 0x100, 0x8}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4e}, @call={0x85, 0x0, 0x0, 0x8d}, @call={0x85, 0x0, 0x0, 0x68}, @ldst={0x1, 0x1, 0x1, 0x0, 0x7, 0x18, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x79, &(0x7f0000000380)=""/121, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x10, 0x8, 0xd6d0}, 0x10}, 0x78) 10:59:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x6, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 154.737525][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 10:59:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8912, &(0x7f0000000000)={'veth1_virt_wifi\x00', @ifru_map}) 10:59:00 executing program 4: pselect6(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 10:59:00 executing program 1: syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:59:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB='q'], &(0x7f00000000c0)='GPL\x00', 0x4, 0xd0, &(0x7f0000000100)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:59:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) 10:59:00 executing program 5: accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:59:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 10:59:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, 0x0, 0x0) 10:59:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 10:59:00 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000740)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, r0, 0x0, 0xffffffffffffffff, 0x0) 10:59:00 executing program 0: bpf$OBJ_GET_PROG(0x16, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0x10) 10:59:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:59:00 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000012c0)='/dev/vcsa#\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 10:59:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae03, 0x0) 10:59:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 10:59:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0}, 0x78) 10:59:01 executing program 5: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 10:59:01 executing program 1: socket$inet(0x2, 0xa, 0xffffffc0) 10:59:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x300}}}, 0x24}}, 0x0) 10:59:01 executing program 0: r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) [ 155.963972][T10126] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 10:59:01 executing program 3: add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 10:59:01 executing program 2: fsopen(&(0x7f0000000100)='bdev\x00', 0x0) 10:59:01 executing program 5: timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x2, 0x0, &(0x7f00000012c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, 0x0) 10:59:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x0) 10:59:01 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x400, 0x82141) write$P9_RSYMLINK(r0, 0x0, 0x0) 10:59:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x179c, 0x1}, 0x40) 10:59:01 executing program 2: syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0xda, 0x0) 10:59:01 executing program 0: r0 = socket(0x2c, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) 10:59:01 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x10000000000000) 10:59:01 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0xe, &(0x7f0000000080)={0x0, 0x0, 0x86}) 10:59:01 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 10:59:01 executing program 4: add_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 10:59:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x18}]}, 0x24}}, 0x0) 10:59:01 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0), 0x14) 10:59:01 executing program 5: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8}, 0x8) 10:59:01 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040001) 10:59:01 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 10:59:01 executing program 4: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 10:59:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) 10:59:02 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_gettime(0x0, &(0x7f00000000c0)) 10:59:02 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffffffff0000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="14004a1a17a3dc451f2074000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)) 10:59:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x7, &(0x7f0000000340)=@framed={{}, [@map, @map]}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0xc0, &(0x7f0000000600)=""/192, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:59:02 executing program 4: clock_settime(0x68c5fef6b5aec33a, &(0x7f0000000080)) 10:59:02 executing program 3: rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x80}) 10:59:02 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 10:59:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x6, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 157.053280][T10186] loop5: detected capacity change from 0 to 264192 10:59:02 executing program 4: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x2}, &(0x7f0000000100)={0x5}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000200)={[0x7]}, 0x8}) 10:59:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x7}) 10:59:02 executing program 3: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81030, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:59:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_team\x00'}]}, 0x38}}, 0x0) 10:59:02 executing program 0: socketpair(0xa, 0x80802, 0x3a, &(0x7f0000000000)) 10:59:02 executing program 1: timer_create(0x7, &(0x7f0000000040)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 10:59:02 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000140)={0x1}, 0x8, 0x0) 10:59:02 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x10) 10:59:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x6, 0x1000, &(0x7f0000000840)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:59:02 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="90", 0x1, 0xffffffffffffffff) 10:59:02 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 10:59:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x7}) 10:59:02 executing program 4: syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x20301) 10:59:02 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) read$eventfd(r0, &(0x7f00000003c0), 0x7) 10:59:03 executing program 3: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5}) 10:59:03 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 10:59:03 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x44040, 0x0) 10:59:03 executing program 4: bpf$OBJ_GET_PROG(0x12, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0x10) 10:59:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x7}) 10:59:03 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 10:59:03 executing program 5: add_key(&(0x7f0000000200)='.request_key_auth\x00', 0x0, 0x0, 0xffff0f00, 0x0) 10:59:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000ff0000000000000000000a00000000000000000000001400110076"], 0x30}}, 0x0) 10:59:03 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) 10:59:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) 10:59:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:59:04 executing program 0: syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x100, 0x0) 10:59:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x7}) 10:59:04 executing program 5: socketpair(0xa, 0x80802, 0x88, &(0x7f0000000000)) 10:59:04 executing program 4: bpf$OBJ_GET_PROG(0x3, 0x0, 0x10) 10:59:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 10:59:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x4135, [0x0, 0x0, 0x0, 0x0]}) 10:59:04 executing program 4: timer_create(0x3, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, r0+60000000}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 10:59:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001bc0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0) 10:59:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'ipvlan0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 10:59:04 executing program 5: syz_emit_ethernet(0x22, &(0x7f00000013c0)={@link_local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}}}}}, 0x0) 10:59:04 executing program 2: r0 = openat$vicodec1(0xffffff9c, &(0x7f00000003c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000480)={0x2}) 10:59:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 159.107524][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:59:04 executing program 5: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 10:59:04 executing program 2: socket(0x2, 0x80a, 0x5) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000ffffffffffff08"], 0x0) 10:59:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 159.162984][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.196932][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:59:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:59:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) [ 159.784644][T10298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.809922][T10298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.820545][T10298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:59:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'ipvlan0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 10:59:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:59:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 160.150426][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:59:05 executing program 5: getitimer(0x0, &(0x7f0000000140)) 10:59:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) [ 160.205745][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 10:59:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 160.259140][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:59:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:05 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5435, 0x0) 10:59:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:59:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) [ 160.754818][T10352] loop5: detected capacity change from 0 to 1024 10:59:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) [ 160.834074][T10352] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 160.945668][T10352] EXT4-fs (loop5): orphan cleanup on readonly fs [ 160.975044][T10352] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 33554432 [ 161.027647][T10352] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback. 10:59:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:06 executing program 4: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 10:59:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:06 executing program 4: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 10:59:06 executing program 3: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r0, 0x0, 0x0) 10:59:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:06 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000008dc0)=[{&(0x7f0000006b80)="64a8e5ff", 0x4, 0xfffffffd}, {&(0x7f0000006cc0)="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", 0x341}, {0x0}], 0x0, 0x0) 10:59:06 executing program 4: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 10:59:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) [ 161.579707][T10388] loop5: detected capacity change from 0 to 1024 [ 161.671869][T10388] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 161.729078][T10388] EXT4-fs (loop5): orphan cleanup on readonly fs [ 161.753889][T10402] loop3: detected capacity change from 0 to 264192 [ 161.777621][T10388] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 33554432 10:59:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:07 executing program 4: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 161.830250][T10388] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback. [ 161.900482][T10402] loop3: detected capacity change from 0 to 264192 10:59:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:07 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000008dc0)=[{&(0x7f0000006b80)="64a8e5ff", 0x4, 0xfffffffd}, {&(0x7f0000006cc0)="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", 0x341}, {0x0}], 0x0, 0x0) 10:59:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 10:59:07 executing program 1: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:07 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 162.274661][T10427] loop3: detected capacity change from 0 to 264192 10:59:07 executing program 1: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:07 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000008dc0)=[{&(0x7f0000006b80)="64a8e5ff", 0x4, 0xfffffffd}, {&(0x7f0000006cc0)="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", 0x341}, {0x0}], 0x0, 0x0) [ 162.452307][T10435] loop5: detected capacity change from 0 to 1024 [ 162.495008][T10435] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 162.507448][T10435] EXT4-fs (loop5): orphan cleanup on readonly fs [ 162.515260][T10435] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 33554432 [ 162.531285][T10435] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback. 10:59:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:07 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 10:59:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:08 executing program 1: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:08 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000008dc0)=[{&(0x7f0000006b80)="64a8e5ff", 0x4, 0xfffffffd}, {&(0x7f0000006cc0)="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", 0x341}, {0x0}], 0x0, 0x0) 10:59:08 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 10:59:08 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) [ 162.947556][T10462] loop5: detected capacity change from 0 to 1024 [ 162.960033][T10461] loop3: detected capacity change from 0 to 264192 10:59:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 162.992396][T10462] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 163.004903][T10462] EXT4-fs (loop5): orphan cleanup on readonly fs [ 163.011298][T10462] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 33554432 [ 163.024912][T10462] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback. 10:59:08 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:08 executing program 4: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 10:59:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffd}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) 10:59:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:08 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:08 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:08 executing program 4: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 163.485290][ T37] audit: type=1326 audit(1615373948.746:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10478 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465f69 code=0xffff0000 [ 163.514705][T10491] loop5: detected capacity change from 0 to 1024 10:59:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x3fd, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:59:08 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:09 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:09 executing program 4: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 10:59:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x3fd, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:59:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) [ 163.930498][T10510] loop5: detected capacity change from 0 to 1024 10:59:09 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x3fd, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:59:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x3fd, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:59:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x3fd, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 164.410784][T10533] loop5: detected capacity change from 0 to 1024 10:59:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:10 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x3fd, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:59:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f00000004c0)='{', 0x1}], 0x0, &(0x7f0000000440)) 10:59:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) [ 164.860184][T10548] loop5: detected capacity change from 0 to 1024 10:59:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x3fd, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:59:10 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:10 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/40, 0x28}], 0x1, &(0x7f00000004c0)=""/146, 0x92}, 0x2) sendto(r0, &(0x7f0000001800)="7d7ba872534e0ed2d3380c10940308d3f7a6289776cc756d2fb73cbc2512abe525315d3c4f8a3e9a52", 0x29, 0x0, 0x0, 0x0) 10:59:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) [ 165.442273][T10572] loop5: detected capacity change from 0 to 1024 10:59:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) 10:59:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:11 executing program 1: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10:59:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:11 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x100201) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000000c0)=0x6) [ 165.956853][T10599] loop5: detected capacity change from 0 to 1024 10:59:11 executing program 1: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:11 executing program 2: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:11 executing program 1: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) [ 166.357365][T10623] loop5: detected capacity change from 0 to 21 [ 166.376508][T10623] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (10 blocks) 10:59:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:11 executing program 2: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 10:59:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:11 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x100201) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000000c0)=0x6) 10:59:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) 10:59:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) [ 166.694982][T10650] loop5: detected capacity change from 0 to 21 10:59:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) 10:59:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:12 executing program 2: syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000019c0)=[@acquire, @release], 0x0, 0x0, 0x0}) [ 166.807210][T10650] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (10 blocks) 10:59:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:12 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x100201) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000000c0)=0x6) 10:59:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004e40)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000004f00)) 10:59:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:59:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x5000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x6, 0x8, 0x0, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0) 10:59:12 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x100201) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000000c0)=0x6) [ 167.196987][T10683] loop5: detected capacity change from 0 to 21 [ 167.237069][T10683] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (10 blocks) [ 167.269019][T10686] binder: 10680:10686 ioctl c0306201 0 returned -14 10:59:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:59:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8941, 0x0) [ 167.562938][T10708] binder: 10702:10708 ioctl c0306201 0 returned -14 10:59:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x10) 10:59:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10:59:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:59:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0xfffffffe, &(0x7f0000000000)={0x2, 0xfffd, @local}, 0x10) 10:59:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 10:59:13 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) bind$netlink(r0, &(0x7f0000000000), 0xc) 10:59:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) [ 167.877719][T10723] binder: 10719:10723 ioctl c0306201 0 returned -14 10:59:13 executing program 3: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) getpriority(0x0, 0x0) r4 = dup3(r1, r0, 0x0) readv(r4, 0x0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x20600, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:59:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:59:13 executing program 4: mlockall(0x3) io_setup(0x2, &(0x7f00000000c0)=0x0) io_setup(0x7ff, &(0x7f00000009c0)) mlockall(0x4) io_destroy(r0) [ 167.990183][T10730] binder: 10725:10730 ioctl c0306201 0 returned -14 10:59:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 168.085577][ T37] audit: type=1804 audit(1615373953.346:4): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir527177253/syzkaller.qVRO6s/49/bus" dev="sda1" ino=14211 res=1 errno=0 10:59:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) [ 168.207610][ T37] audit: type=1800 audit(1615373953.376:5): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14211 res=0 errno=0 10:59:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:59:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 168.303784][T10746] binder: 10744:10746 ioctl c0306201 0 returned -14 [ 168.314598][T10745] loop5: detected capacity change from 0 to 1024 [ 168.334694][ T37] audit: type=1804 audit(1615373953.386:6): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir527177253/syzkaller.qVRO6s/49/bus" dev="sda1" ino=14211 res=1 errno=0 10:59:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 168.393004][T10745] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 10:59:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000019c0)=[@acquire], 0x0, 0x0, 0x0}) [ 168.499921][T10745] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated 10:59:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 168.563414][T10745] EXT4-fs (loop5): get root inode failed [ 168.604794][T10757] binder: 10756:10757 ioctl c0306201 0 returned -14 [ 168.622154][T10745] EXT4-fs (loop5): mount failed [ 169.012288][ T37] audit: type=1804 audit(1615373954.266:7): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir527177253/syzkaller.qVRO6s/49/bus" dev="sda1" ino=14211 res=1 errno=0 [ 169.193103][ T37] audit: type=1804 audit(1615373954.456:8): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir527177253/syzkaller.qVRO6s/49/bus" dev="sda1" ino=14211 res=1 errno=0 [ 169.233468][ T37] audit: type=1800 audit(1615373954.456:9): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14211 res=0 errno=0 [ 169.283489][ T37] audit: type=1804 audit(1615373954.476:10): pid=10767 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir527177253/syzkaller.qVRO6s/49/bus" dev="sda1" ino=14211 res=1 errno=0 10:59:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 169.408178][T10777] loop5: detected capacity change from 0 to 1024 [ 169.425742][T10777] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 169.456654][T10777] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 169.469600][T10777] EXT4-fs (loop5): get root inode failed [ 169.476884][T10777] EXT4-fs (loop5): mount failed 10:59:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000140)) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 10:59:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000019c0)=[@acquire], 0x0, 0x0, 0x0}) 10:59:14 executing program 0: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:14 executing program 3: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) getpriority(0x0, 0x0) r4 = dup3(r1, r0, 0x0) readv(r4, 0x0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x20600, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:59:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:59:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) [ 169.772740][T10794] loop5: detected capacity change from 0 to 1024 [ 169.777630][ T37] audit: type=1804 audit(1615373955.036:11): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir527177253/syzkaller.qVRO6s/50/bus" dev="sda1" ino=14213 res=1 errno=0 10:59:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 169.846985][T10794] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:15 executing program 0: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000019c0)=[@acquire], 0x0, 0x0, 0x0}) [ 169.907929][T10803] loop4: detected capacity change from 0 to 6 [ 169.967753][T10794] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 170.009678][T10803] FAT-fs (loop4): bogus number of FAT sectors [ 170.019690][ T37] audit: type=1800 audit(1615373955.066:12): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14213 res=0 errno=0 10:59:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) [ 170.072194][T10794] EXT4-fs (loop5): get root inode failed [ 170.078063][T10794] EXT4-fs (loop5): mount failed [ 170.093668][T10811] overlayfs: failed to resolve './file1': -2 [ 170.095586][T10803] FAT-fs (loop4): Can't find a valid FAT filesystem 10:59:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) [ 170.167292][ T37] audit: type=1804 audit(1615373955.076:13): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir527177253/syzkaller.qVRO6s/50/bus" dev="sda1" ino=14213 res=1 errno=0 10:59:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000019c0)=[@release], 0x0, 0x0, 0x0}) [ 170.235222][T10811] loop4: detected capacity change from 0 to 16400 10:59:15 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20040010, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 10:59:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000019c0)=[@release], 0x0, 0x0, 0x0}) 10:59:15 executing program 0: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 170.442175][T10831] loop5: detected capacity change from 0 to 1024 [ 170.496126][T10831] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 170.551615][T10831] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 170.578325][T10831] EXT4-fs (loop5): get root inode failed [ 170.607732][T10831] EXT4-fs (loop5): mount failed 10:59:16 executing program 3: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) getpriority(0x0, 0x0) r4 = dup3(r1, r0, 0x0) readv(r4, 0x0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x20600, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:59:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000019c0)=[@release], 0x0, 0x0, 0x0}) 10:59:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 10:59:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8901, 0x0) 10:59:16 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:16 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8901, &(0x7f0000000080)) 10:59:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000002440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) [ 170.939829][T10861] loop5: detected capacity change from 0 to 1024 10:59:16 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40084503, &(0x7f0000000040)={0x0, 0x0, 0xb05a, 0x0, "697b96dff3dd8012b7101acdab5afcd5c6a7c03e76e3b58543b7c29c1d91191d"}) [ 171.028619][T10861] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0)='NLBL_UNLBL\x00', r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 10:59:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x0) [ 171.134859][T10861] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 171.197475][T10861] EXT4-fs (loop5): get root inode failed [ 171.257245][T10861] EXT4-fs (loop5): mount failed [ 171.257616][ T37] audit: type=1804 audit(1615373956.517:14): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir527177253/syzkaller.qVRO6s/51/bus" dev="sda1" ino=14217 res=1 errno=0 [ 171.324503][ T37] audit: type=1800 audit(1615373956.517:15): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14217 res=0 errno=0 [ 171.419440][ T37] audit: type=1804 audit(1615373956.537:16): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir527177253/syzkaller.qVRO6s/51/bus" dev="sda1" ino=14217 res=1 errno=0 10:59:17 executing program 3: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) getpriority(0x0, 0x0) r4 = dup3(r1, r0, 0x0) readv(r4, 0x0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x20600, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:59:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) r1 = memfd_create(&(0x7f0000000140)='.,,!\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{r1}]}) 10:59:17 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x6, 0x3, &(0x7f0000000440)={0x20020, {{0x2, 0x0, @dev}}}, 0x88) 10:59:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000280)) 10:59:17 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:17 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) recvfrom$inet(r0, 0x0, 0x8, 0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) [ 172.261933][T10907] loop5: detected capacity change from 0 to 1024 10:59:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 172.311239][T10907] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:17 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x6, 0x1e, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 10:59:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 172.351911][T10907] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 172.459073][T10907] EXT4-fs (loop5): get root inode failed [ 172.520637][T10907] EXT4-fs (loop5): mount failed 10:59:17 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x453, 0x214, 0x0, 0x0, '^'}, 0x14}}, 0x0) 10:59:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_INDEX={0x8, 0x8, 0x0}]}, 0x1c}}, 0x0) [ 172.858226][T10944] netlink: 'syz-executor.4': attribute type 8 has an invalid length. 10:59:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8980, 0x0) 10:59:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 10:59:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 10:59:19 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x6, 0x16, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) [ 173.856841][T10957] loop5: detected capacity change from 0 to 1024 [ 173.975703][T10957] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 174.057429][T10957] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated 10:59:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x8, 0x0, 0x0) [ 174.142935][T10957] EXT4-fs (loop5): get root inode failed [ 174.148689][T10957] EXT4-fs (loop5): mount failed 10:59:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 10:59:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 10:59:19 executing program 3: timer_create(0x2, 0x0, &(0x7f0000001700)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000240)) 10:59:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0)="c151", 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) [ 174.671878][T10995] loop5: detected capacity change from 0 to 1024 [ 174.733166][T10995] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x7, 0xfffffffe, &(0x7f0000000000)={0x2, 0xfffd, @local}, 0x10) [ 174.820429][T10995] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 174.835329][T10995] EXT4-fs (loop5): get root inode failed [ 174.841047][T10995] EXT4-fs (loop5): mount failed 10:59:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:20 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x6, 0x11, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 10:59:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0)="c151", 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) [ 175.442081][T11019] loop5: detected capacity change from 0 to 1024 10:59:20 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0)="c151", 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) [ 175.532255][T11019] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 10:59:20 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 175.685647][T11019] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated 10:59:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 175.732432][T11019] EXT4-fs (loop5): get root inode failed [ 175.744067][T11019] EXT4-fs (loop5): mount failed 10:59:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf465", 0xf, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0)="c151", 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) 10:59:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0)="c151", 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) [ 176.317623][T11063] loop5: detected capacity change from 0 to 1024 10:59:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:21 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x6, 0x9, 0x0, 0x5f) [ 176.443714][T11063] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 176.464120][T11063] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 176.477794][T11063] EXT4-fs (loop5): get root inode failed [ 176.484796][T11063] EXT4-fs (loop5): mount failed 10:59:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0)="c151", 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) 10:59:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf465", 0xf, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 10:59:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f00000008c0)="c151", 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) [ 176.887402][T11084] loop5: detected capacity change from 0 to 1024 10:59:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8982, 0x0) 10:59:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 176.993774][T11084] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 177.080126][T11084] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 177.112910][T11084] EXT4-fs (loop5): get root inode failed [ 177.123589][T11084] EXT4-fs (loop5): mount failed 10:59:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf465", 0xf, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) recvfrom$inet(r0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 10:59:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:'}, &(0x7f0000000100)={0x0, "06c7ff35ee87af2526894cea6ea9b62f41332a72ec3251c43455bb5bbd22c96f8fc3313bdc5e706945d9836bcda1bdb6dd046f0653d33a021b9fdd2e5c2b4fa9"}, 0x48, r0) keyctl$unlink(0x8, r1, r0) 10:59:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 177.659629][T11111] loop5: detected capacity change from 0 to 1024 [ 177.719380][T11111] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x20000010}}, 0x0) [ 177.860665][T11111] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 177.928354][T11111] EXT4-fs (loop5): get root inode failed [ 177.935762][T11111] EXT4-fs (loop5): mount failed 10:59:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f0000", 0x16, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0xfffffffe, &(0x7f0000000000)={0x2, 0xfffd, @empty}, 0x10) 10:59:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 10:59:23 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @random="a6076466e3ac"}, 0x0, {0x2, 0x0, @loopback}, 'wg2\x00'}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 10:59:23 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) sendto$inet(r0, 0x0, 0x0, 0xa00, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) [ 178.165654][T11139] loop5: detected capacity change from 0 to 1024 10:59:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:23 executing program 4: timer_create(0x2, 0x0, &(0x7f0000001700)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000340)) 10:59:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) sendto$inet(r0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 10:59:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fork() r2 = fork() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}], 0x40}, 0x0) [ 178.230766][T11139] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @empty}, {0x0, @remote}, 0xa, {0x2, 0x0, @multicast1}, 'lo\x00'}) [ 178.344435][T11139] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 178.443494][T11139] EXT4-fs (loop5): get root inode failed [ 178.496999][T11139] EXT4-fs (loop5): mount failed 10:59:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x2801}]}, 0x20}}, 0x0) 10:59:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f0000", 0x16, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x7, 0x0, &(0x7f0000000000)={0x2, 0xfffd, @local}, 0x10) 10:59:23 executing program 1: syz_mount_image$btrfs(&(0x7f0000000200)='btrfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='user_subvol_rm_allowed,subvolid=0']) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 10:59:24 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x7ffffffff000) 10:59:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x8, 0x0, r0) 10:59:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0xffff3ffe, &(0x7f0000000000)={0x2, 0xfffd, @loopback}, 0x10) 10:59:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000013c0)=[{0x0, 0x0, 0x0}], 0x1, 0x11) [ 178.864109][T11178] loop5: detected capacity change from 0 to 1024 [ 178.911245][T11178] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:24 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) [ 179.011355][T11178] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated 10:59:24 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x6, 0x12, &(0x7f0000000440)={0xdffffff9, {{0x2, 0x0, @empty}}}, 0x88) 10:59:24 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x6, 0x2, 0x0, &(0x7f00000000c0)) [ 179.125513][T11178] EXT4-fs (loop5): get root inode failed [ 179.170632][T11178] EXT4-fs (loop5): mount failed 10:59:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f0000", 0x16, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:24 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8903, &(0x7f0000000080)) 10:59:24 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x6, 0x1b, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 10:59:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x4) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000280)) 10:59:24 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x6, 0xc, 0x0, &(0x7f00000000c0)) 10:59:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10:59:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @private}}) 10:59:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @empty=0xfdfdffff}, {0x0, @remote}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) 10:59:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 179.496171][T11214] loop5: detected capacity change from 0 to 1024 10:59:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x3, 0x0, @loopback}, 0x10) [ 179.587417][T11214] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 179.679594][T11229] block nbd3: not configured, cannot reconfigure [ 179.723611][T11214] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 179.805525][T11214] EXT4-fs (loop5): get root inode failed [ 179.813111][T11214] EXT4-fs (loop5): mount failed [ 179.831060][T11233] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 10:59:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 10:59:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0xc0189436, 0x0) 10:59:25 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x6, 0x12, 0x0, &(0x7f00000000c0)) 10:59:25 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)) [ 180.035841][T11244] block nbd3: not configured, cannot reconfigure 10:59:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10:59:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x304, @multicast}, 0x2, {0x2, 0x0, @multicast1}, 'lo\x00'}) 10:59:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:25 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xd0000, 0x180) 10:59:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 180.094710][T11248] loop5: detected capacity change from 0 to 1024 [ 180.175068][T11248] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 180.203665][T11248] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 180.238894][T11248] EXT4-fs (loop5): get root inode failed [ 180.261038][T11248] EXT4-fs (loop5): mount failed 10:59:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 180.359195][T11261] block nbd3: not configured, cannot reconfigure 10:59:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x304, @multicast}, 0x2, {0x2, 0x0, @multicast1}, 'lo\x00'}) 10:59:25 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) 10:59:25 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c2) 10:59:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 180.681826][T11276] loop5: detected capacity change from 0 to 1024 [ 180.688475][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 180.688492][ T37] audit: type=1800 audit(1615373965.947:21): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14214 res=0 errno=0 10:59:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x304, @multicast}, 0x2, {0x2, 0x0, @multicast1}, 'lo\x00'}) 10:59:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 180.725081][T11276] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 10:59:26 executing program 4: rt_sigqueueinfo(0x0, 0x0, 0x0) fork() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fork() [ 180.772527][T11279] block nbd3: not configured, cannot reconfigure [ 180.786950][T11276] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 180.805201][T11276] EXT4-fs (loop5): get root inode failed [ 180.810967][T11276] EXT4-fs (loop5): mount failed 10:59:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:26 executing program 3: clock_getres(0x0, &(0x7f00000022c0)) 10:59:26 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, &(0x7f0000000080)='~', 0x1, 0x0, 0x0, 0x0) 10:59:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x304, @multicast}, 0x2, {0x2, 0x0, @multicast1}, 'lo\x00'}) 10:59:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 181.092198][T11296] loop5: detected capacity change from 0 to 1024 [ 181.123658][T11296] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:26 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) [ 181.166086][T11296] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 181.179522][T11296] EXT4-fs (loop5): get root inode failed [ 181.201681][T11296] EXT4-fs (loop5): mount failed 10:59:26 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0x0) 10:59:26 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x298b43, 0x18) 10:59:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 10:59:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f0000000000000400", 0x1c, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 181.390579][ T37] audit: type=1800 audit(1615373966.647:22): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=14201 res=0 errno=0 10:59:26 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x940, 0x0) [ 181.462980][ T37] audit: type=1800 audit(1615373966.677:23): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=14201 res=0 errno=0 [ 181.490740][T11323] loop5: detected capacity change from 0 to 1024 10:59:26 executing program 1: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1542, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) dup(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 181.520710][T11323] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:26 executing program 2: symlinkat(&(0x7f0000000180)='\x00', 0xffffffffffffffff, 0x0) 10:59:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 181.563791][T11323] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 181.617391][T11323] EXT4-fs (loop5): mount failed 10:59:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:27 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) [ 182.051679][ T4857] usb 2-1: new high-speed USB device number 2 using dummy_hcd 10:59:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 10:59:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f0000000000000400", 0x1c, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:27 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) fcntl$getown(r0, 0x5) openat(r0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xa}}]}}}]}}]}}, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000007c0), 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000001800), &(0x7f0000001880)=0x4d) readv(0xffffffffffffffff, &(0x7f0000001a80)=[{&(0x7f00000018c0)=""/189, 0xbd}], 0x1) getpeername$unix(0xffffffffffffffff, &(0x7f0000001b40)=@abs, &(0x7f0000001b80)=0x8) 10:59:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:27 executing program 4: socket(0x2, 0x0, 0x7f) [ 182.251504][ T4857] usb 2-1: device descriptor read/64, error 18 [ 182.269151][T11359] loop5: detected capacity change from 0 to 1024 [ 182.280400][T11359] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 182.312579][T11359] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 182.319289][T11359] EXT4-fs (loop5): mount failed 10:59:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000440)=""/97) [ 182.522696][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 182.542625][ T4857] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 182.711399][ T20] usb 3-1: device descriptor read/64, error 18 [ 182.761534][ T4857] usb 2-1: device descriptor read/64, error 18 [ 182.888333][ T4857] usb usb2-port1: attempt power cycle [ 182.981435][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 183.201422][ T20] usb 3-1: device descriptor read/64, error 18 [ 183.321765][ T20] usb usb3-port1: attempt power cycle [ 183.631343][ T4857] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.742501][ T4857] usb 2-1: Invalid ep0 maxpacket: 0 [ 183.902585][ T4857] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.992311][ T4857] usb 2-1: Invalid ep0 maxpacket: 0 [ 183.997829][ T4857] usb usb2-port1: unable to enumerate USB device [ 184.031468][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 184.122358][ T20] usb 3-1: Invalid ep0 maxpacket: 0 [ 184.271379][ T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.362319][ T20] usb 3-1: Invalid ep0 maxpacket: 0 [ 184.367833][ T20] usb usb3-port1: unable to enumerate USB device 10:59:29 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000952bb6201e738c1206ed0000000109022200010800000009040000010103"], 0x0) 10:59:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f0000000000000400", 0x1c, 0x1500}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) 10:59:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x20000, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, "89387280eccb65006980940ca4c0eae86a1e6f98fe7f866aadeea54ec4b6ceeb"}) 10:59:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:29 executing program 4: syz_open_dev$evdev(&(0x7f00000008c0)='/dev/input/event#\x00', 0x6, 0x410201) 10:59:30 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x67, 0x9b, 0x5c, 0x8, 0x174f, 0x6a31, 0x6fca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xe4, 0x31}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 184.770199][T11390] loop5: detected capacity change from 0 to 1024 10:59:30 executing program 3: syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x200, 0x41) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000), 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x641) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x9849, 0x48040) read$hidraw(r2, &(0x7f0000000240)=""/63, 0x3f) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0xff) [ 184.855718][T11390] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 184.893512][T11390] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 184.900199][T11390] EXT4-fs (loop5): mount failed [ 185.151296][ T4857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.211320][ T9733] usb 5-1: new high-speed USB device number 2 using dummy_hcd 10:59:30 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0x0) 10:59:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:59:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000f5f4655fddf4655fddf4655f000000000000040020", 0x1d}], 0x81, &(0x7f0000000000)={[{@abort='abort'}]}) [ 185.375535][T11412] loop5: detected capacity change from 0 to 1024 [ 185.401418][ T4857] usb 2-1: Using ep0 maxpacket: 32 [ 185.407028][T11412] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:59:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 185.455187][T11412] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 185.472476][ T9733] usb 5-1: Using ep0 maxpacket: 8 [ 185.502789][T11412] EXT4-fs (loop5): get root inode failed [ 185.508495][T11412] EXT4-fs (loop5): mount failed 10:59:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 185.563474][ T4857] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 185.579647][ T4857] usb 2-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.607349][ T4857] usb 2-1: New USB device found, idVendor=731e, idProduct=128c, bcdDevice=ed.06 [ 185.630393][ T4857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.640277][ T9733] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6f.ca [ 185.651597][ T9733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.685826][ T9733] usb 5-1: config 0 descriptor?? [ 185.760096][ T9733] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 185.773743][ T4857] usb 2-1: MIDIStreaming interface descriptor not found [ 185.988245][ T20] usb 2-1: USB disconnect, device number 6 [ 186.056992][ T20] ================================================================== [ 186.065550][ T20] BUG: KASAN: use-after-free in usb_audio_disconnect+0x750/0x800 [ 186.073340][ T20] Read of size 2 at addr ffff888062430f24 by task kworker/1:0/20 [ 186.081095][ T20] [ 186.083447][ T20] CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.12.0-rc2-next-20210309-syzkaller #0 [ 186.092949][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.103049][ T20] Workqueue: usb_hub_wq hub_event [ 186.108122][ T20] Call Trace: [ 186.111429][ T20] dump_stack+0x141/0x1d7 [ 186.115809][ T20] ? usb_audio_disconnect+0x750/0x800 [ 186.121258][ T20] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 186.128325][ T20] ? usb_audio_disconnect+0x750/0x800 [ 186.133735][ T20] ? usb_audio_disconnect+0x750/0x800 [ 186.139140][ T20] kasan_report.cold+0x7c/0xd8 [ 186.143942][ T20] ? usb_audio_disconnect+0x750/0x800 [ 186.149357][ T20] usb_audio_disconnect+0x750/0x800 [ 186.154605][ T20] ? usb_audio_suspend+0x4f0/0x4f0 [ 186.159750][ T20] ? mark_held_locks+0x9f/0xe0 [ 186.164547][ T20] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 186.170829][ T20] ? usb_disable_interface+0x82/0x3c0 [ 186.176237][ T20] ? lockdep_hardirqs_on+0x79/0x100 [ 186.181470][ T20] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 186.187314][ T20] usb_unbind_interface+0x1d8/0x8d0 [ 186.192546][ T20] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 186.198301][ T20] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 186.203873][ T20] ? usb_unbind_device+0x1a0/0x1a0 [ 186.209030][ T20] __device_release_driver+0x3bd/0x6f0 [ 186.214534][ T20] device_release_driver+0x26/0x40 [ 186.219677][ T20] bus_remove_device+0x2eb/0x5a0 [ 186.224650][ T20] device_del+0x502/0xd40 [ 186.229018][ T20] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 186.235377][ T20] ? pm_runtime_barrier+0xdc/0x1a0 [ 186.240524][ T20] usb_disable_device+0x35b/0x7b0 [ 186.245596][ T20] usb_disconnect.cold+0x27d/0x791 [ 186.250747][ T20] hub_event+0x1c9c/0x4320 [ 186.255247][ T20] ? hub_port_debounce+0x3c0/0x3c0 [ 186.260399][ T20] ? lock_release+0x720/0x720 [ 186.265105][ T20] ? lock_downgrade+0x6e0/0x6e0 [ 186.270026][ T20] process_one_work+0x98d/0x1600 [ 186.275007][ T20] ? pwq_dec_nr_in_flight+0x320/0x320 [ 186.280414][ T20] ? rwlock_bug.part.0+0x90/0x90 [ 186.285384][ T20] ? _raw_spin_lock_irq+0x41/0x50 [ 186.290453][ T20] worker_thread+0x64c/0x1120 [ 186.295180][ T20] ? process_one_work+0x1600/0x1600 [ 186.300418][ T20] kthread+0x3b1/0x4a0 [ 186.304521][ T20] ? __kthread_bind_mask+0xc0/0xc0 [ 186.309685][ T20] ret_from_fork+0x1f/0x30 [ 186.314161][ T20] [ 186.316497][ T20] Allocated by task 4857: [ 186.320835][ T20] kasan_save_stack+0x1b/0x40 [ 186.325539][ T20] __kasan_kmalloc+0x99/0xc0 [ 186.330153][ T20] snd_card_new+0xc2/0xcb0 [ 186.334594][ T20] usb_audio_probe+0x1547/0x2c70 [ 186.339647][ T20] usb_probe_interface+0x315/0x7f0 [ 186.344787][ T20] really_probe+0x291/0xe60 [ 186.349315][ T20] driver_probe_device+0x26b/0x3d0 [ 186.354455][ T20] __device_attach_driver+0x1d1/0x290 [ 186.359854][ T20] bus_for_each_drv+0x15f/0x1e0 [ 186.364738][ T20] __device_attach+0x228/0x4a0 [ 186.369531][ T20] bus_probe_device+0x1e4/0x290 [ 186.374413][ T20] device_add+0xbdb/0x1db0 [ 186.378865][ T20] usb_set_configuration+0x113f/0x1910 [ 186.384357][ T20] usb_generic_driver_probe+0xba/0x100 [ 186.389848][ T20] usb_probe_device+0xd9/0x2c0 [ 186.394640][ T20] really_probe+0x291/0xe60 [ 186.399167][ T20] driver_probe_device+0x26b/0x3d0 [ 186.404301][ T20] __device_attach_driver+0x1d1/0x290 [ 186.409705][ T20] bus_for_each_drv+0x15f/0x1e0 [ 186.414580][ T20] __device_attach+0x228/0x4a0 [ 186.419628][ T20] bus_probe_device+0x1e4/0x290 [ 186.424510][ T20] device_add+0xbdb/0x1db0 [ 186.428952][ T20] usb_new_device.cold+0x721/0x1058 [ 186.434175][ T20] hub_event+0x2357/0x4320 [ 186.438625][ T20] process_one_work+0x98d/0x1600 [ 186.443588][ T20] worker_thread+0x64c/0x1120 [ 186.448288][ T20] kthread+0x3b1/0x4a0 [ 186.452383][ T20] ret_from_fork+0x1f/0x30 [ 186.456825][ T20] [ 186.459160][ T20] Freed by task 20: [ 186.462974][ T20] kasan_save_stack+0x1b/0x40 [ 186.467679][ T20] kasan_set_track+0x1c/0x30 [ 186.472291][ T20] kasan_set_free_info+0x20/0x30 [ 186.477253][ T20] __kasan_slab_free+0xf5/0x130 [ 186.482128][ T20] slab_free_freelist_hook+0x92/0x210 [ 186.487530][ T20] kfree+0xe5/0x7f0 [ 186.491367][ T20] device_release+0x9f/0x240 [ 186.495990][ T20] kobject_put+0x1c8/0x540 [ 186.500427][ T20] put_device+0x1b/0x30 [ 186.504607][ T20] snd_card_free_when_closed+0x35/0x50 [ 186.510088][ T20] usb_audio_disconnect+0x2ba/0x800 [ 186.515316][ T20] usb_unbind_interface+0x1d8/0x8d0 [ 186.520543][ T20] __device_release_driver+0x3bd/0x6f0 [ 186.526033][ T20] device_release_driver+0x26/0x40 [ 186.531192][ T20] bus_remove_device+0x2eb/0x5a0 [ 186.536151][ T20] device_del+0x502/0xd40 [ 186.540513][ T20] usb_disable_device+0x35b/0x7b0 [ 186.545561][ T20] usb_disconnect.cold+0x27d/0x791 [ 186.550735][ T20] hub_event+0x1c9c/0x4320 [ 186.555181][ T20] process_one_work+0x98d/0x1600 [ 186.560142][ T20] worker_thread+0x64c/0x1120 [ 186.564846][ T20] kthread+0x3b1/0x4a0 [ 186.568950][ T20] ret_from_fork+0x1f/0x30 [ 186.573395][ T20] [ 186.575731][ T20] The buggy address belongs to the object at ffff888062430000 [ 186.575731][ T20] which belongs to the cache kmalloc-8k of size 8192 [ 186.589802][ T20] The buggy address is located 3876 bytes inside of [ 186.589802][ T20] 8192-byte region [ffff888062430000, ffff888062432000) [ 186.603376][ T20] The buggy address belongs to the page: [ 186.609020][ T20] page:000000001141b880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62430 [ 186.619197][ T20] head:000000001141b880 order:3 compound_mapcount:0 compound_pincount:0 [ 186.627543][ T20] flags: 0xfff00000010200(slab|head) [ 186.636095][ T20] raw: 00fff00000010200 ffffea00009f0e00 0000000200000002 ffff888010842280 [ 186.644837][ T20] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 186.653443][ T20] page dumped because: kasan: bad access detected [ 186.659889][ T20] [ 186.662235][ T20] Memory state around the buggy address: [ 186.667877][ T20] ffff888062430e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.675962][ T20] ffff888062430e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.684042][ T20] >ffff888062430f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.692113][ T20] ^ [ 186.697238][ T20] ffff888062430f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.705322][ T20] ffff888062431000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.713398][ T20] ================================================================== [ 186.721472][ T20] Disabling lock debugging due to kernel taint [ 186.733756][ T20] Kernel panic - not syncing: panic_on_warn set ... [ 186.740380][ T20] CPU: 1 PID: 20 Comm: kworker/1:0 Tainted: G B 5.12.0-rc2-next-20210309-syzkaller #0 [ 186.751244][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.761315][ T20] Workqueue: usb_hub_wq hub_event [ 186.766382][ T20] Call Trace: [ 186.769669][ T20] dump_stack+0x141/0x1d7 [ 186.774031][ T20] panic+0x306/0x73d [ 186.777952][ T20] ? __warn_printk+0xf3/0xf3 [ 186.782556][ T20] ? preempt_schedule_common+0x59/0xc0 [ 186.788037][ T20] ? usb_audio_disconnect+0x750/0x800 [ 186.793435][ T20] ? preempt_schedule_thunk+0x16/0x18 [ 186.798828][ T20] ? trace_hardirqs_on+0x38/0x1c0 [ 186.803875][ T20] ? trace_hardirqs_on+0x51/0x1c0 [ 186.808924][ T20] ? usb_audio_disconnect+0x750/0x800 [ 186.814326][ T20] ? usb_audio_disconnect+0x750/0x800 [ 186.819728][ T20] end_report.cold+0x5a/0x5a [ 186.824335][ T20] kasan_report.cold+0x6a/0xd8 [ 186.829215][ T20] ? usb_audio_disconnect+0x750/0x800 [ 186.834611][ T20] usb_audio_disconnect+0x750/0x800 [ 186.839933][ T20] ? usb_audio_suspend+0x4f0/0x4f0 [ 186.845067][ T20] ? mark_held_locks+0x9f/0xe0 [ 186.849852][ T20] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 186.856115][ T20] ? usb_disable_interface+0x82/0x3c0 [ 186.861506][ T20] ? lockdep_hardirqs_on+0x79/0x100 [ 186.866726][ T20] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 186.872568][ T20] usb_unbind_interface+0x1d8/0x8d0 [ 186.877798][ T20] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 186.883554][ T20] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 186.889118][ T20] ? usb_unbind_device+0x1a0/0x1a0 [ 186.894251][ T20] __device_release_driver+0x3bd/0x6f0 [ 186.899735][ T20] device_release_driver+0x26/0x40 [ 186.904862][ T20] bus_remove_device+0x2eb/0x5a0 [ 186.909823][ T20] device_del+0x502/0xd40 [ 186.914206][ T20] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 186.920559][ T20] ? pm_runtime_barrier+0xdc/0x1a0 [ 186.925699][ T20] usb_disable_device+0x35b/0x7b0 [ 186.930743][ T20] usb_disconnect.cold+0x27d/0x791 [ 186.935911][ T20] hub_event+0x1c9c/0x4320 [ 186.940353][ T20] ? hub_port_debounce+0x3c0/0x3c0 [ 186.945474][ T20] ? lock_release+0x720/0x720 [ 186.950163][ T20] ? lock_downgrade+0x6e0/0x6e0 [ 186.955033][ T20] process_one_work+0x98d/0x1600 [ 186.959991][ T20] ? pwq_dec_nr_in_flight+0x320/0x320 [ 186.965406][ T20] ? rwlock_bug.part.0+0x90/0x90 [ 186.970364][ T20] ? _raw_spin_lock_irq+0x41/0x50 [ 186.975410][ T20] worker_thread+0x64c/0x1120 [ 186.980106][ T20] ? process_one_work+0x1600/0x1600 [ 186.985322][ T20] kthread+0x3b1/0x4a0 [ 186.989410][ T20] ? __kthread_bind_mask+0xc0/0xc0 [ 186.994551][ T20] ret_from_fork+0x1f/0x30 [ 186.999667][ T20] Kernel Offset: disabled [ 187.004113][ T20] Rebooting in 86400 seconds..