last executing test programs: 10.988143802s ago: executing program 0 (id=4806): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x511083, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x0) io_setup(0x800, &(0x7f0000000500)) eventfd(0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init() readv(r2, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.736395924s ago: executing program 1 (id=4834): r0 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xa, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a757365726164645f657865635f743a73302073797374656d5f753a6f626a6563745f723a756465765f7661725f72756e5f743a7330203138343436373434303733373039353531363038202f7573722f6c69622f74ffff6570617468792f6d697373696f6e2d636f6e74726f6c2d3500"], 0x82) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095", @ANYRES8=r6, @ANYRES64=r5, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x80000) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe01\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&\x05J\x0ea\xa4\xd5\x8fn\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x004PH-\x1c/X_\xb0\x11H\xecAP\x99\xbd\t~\xfc4\x0eb\xdf\xa0,c\xb6\xfa\xaa\xc2\xb6\xe37\x1f\xbe\xa9[\x0f^\x8b`\xff\xc8e+f\\\xbd\v\xdc2\x93\xf7\x9d\xba\x0f\xb3\xf26\x97\xd6 \xaf\th\x96\xf3\x99\xfe\x16\xc7\x9a\xa8\xb4\xdc\xc2H\x8a\xa2q\x02@\xf0\xa7\x8eD/\x1f\x99=\v\xf8\xb8-\x97\xe1f\xe6\xffL\xdf\x0f!\x89\xbf0B \x81*\xcdT\x95\xedJ\xc7_\x00\xb3\xab@\x87\xe6LW\xaf\xee\xcd\xea\x0f6\xcc$u\xec\x19\x06\xf3;l6av\xef=\xce\xa4a\xbc\xdd\x17CX\x85\x92-N\xd1\x17\xca{\x91\xe5\xfd\xc2CxL\x8e\xeb\xb9s9\xc8\xf1\x16\x94A\xa6D\x1e6,B#\x80\x12c\xb9\x15\x95F\x9bg\xae*\xbe\x1e\x00\x80\xb7\xe1\x1f\x99\xd3|\x9e\xaa\xfd\xf34\x80\xb0\xf0\xed\x0f\xa5/(e\xa7H g*6\xfcL\xf4\x7f\xdc\xc2\x88G\xe09\xe6\xb3\xca\xa6\xbc\x9a\x8b\xc7\xb4JB\x94$\xba\x9c\xce\xa7\x8a\x90\xdcX\xde{\xa8\\\x88\xd1@\xb6\"(\x18oP:\xed\x9eW\xde\xb2$\x95V\xd7\xae\xf7\x83$\xc9o\x90z)\xc9\xac\xc7\xfa\xaaG\xb7\xce\x01\xe4\xba\xf4=%\xb4\xeb/9J\xd2f\xeb\x1a\x9e\xf1\x8d\x86\xafh\xb16\x15?\xee\xf6\x9d\x91,G\xf1\x86\x05\xeb\xcd%\xb4q\xbc\xebrUK\xc6\xc0\xbc\x10\xa0\xc1\xba\xb4?3\xaa\x898\x0e\x8d\x93\xa0\x8e\xd6\xab\xbf\x89&R[\xa9|\xf7\xa2^&X\x03\xfe\f\x05\xdan;\xbe\x12\xdf)<\x9fs\x81_\xa1\vT/`\xce\xc8\xa3v\xef\x84/<\t\x95\x90\x99yW\xb7 \xa2\xd2ZN\x80\xdf\x94F\xbcKS\xae\xf8{\xda\xd9\x00'/1257) 7.679831139s ago: executing program 0 (id=4835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) (fail_nth: 1) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xdd218) 7.268144087s ago: executing program 0 (id=4836): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5}, 0x38) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x54a12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/131) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) rt_sigqueueinfo(r7, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.492497099s ago: executing program 3 (id=4839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) 4.909943755s ago: executing program 3 (id=4840): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 3.769963501s ago: executing program 0 (id=4843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x44}}, 0x0) 3.766904071s ago: executing program 2 (id=4844): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f00000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.699414277s ago: executing program 0 (id=4846): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x131, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000600000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendto$inet(r3, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) recvfrom$unix(r3, 0x0, 0x22, 0x12020, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30}, {0x16}]}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 3.644878103s ago: executing program 2 (id=4847): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 3.531543613s ago: executing program 4 (id=4848): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x0) 3.515235545s ago: executing program 0 (id=4849): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000000001010902"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f00000004c0)="cf", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0xfe96, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0xfff, 0x3, 0x142, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1000000, 0x1, 0x10000000, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'veth1_to_bond\x00', {0x2}, 0x80}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x2, 0x0, &(0x7f0000000200)) 3.447386991s ago: executing program 4 (id=4850): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000240)={[{@errors_remount}, {@jqfmt_vfsold}, {@noquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@data_err_ignore}, {@init_itable}, {@errors_continue}]}, 0x1, 0x4e2, &(0x7f0000000d80)="$eJzs3d9rW28ZAPDnnDbf/erXZurFHLgNnXRDl7Sr24oXc4K4q4Fz3s/apqU0bUqTbmsZ0uG9gogKXnnljeAfIMj+BBEGei9TFNFNL7xQI0lO5lqTtrA0Z7afD5yd97xvkud5N3J+vOddTgDH1qWIuBMRIxFxNSLGs/o0W+622u93Xvf61dO51pJEs/ngL0kkWV3EyR2feSYitqNT+7W7Ed9M/jdufXNrebZaraxn2+XGylq5vrl1bWlldrGyWFmdnp66OXNr5sbM5ED6WYyI21/+ww+++9Ov3P7l5x7/7uGfrnyrldZY1t7px+B1ul7Y8Tc0GhHrhxEsByPZutCn/TsjQ0wGAIB9tc7xPxoRn2qf/4/HSPvsFAAAADhKml8ci38mEU0AAADgyErbc2CTtJTNBRiLNC2VOnN4Px6n02qt3vjsQm1jdb4zV7YYhXRhqVqZzOYKF6OQtLansjm23e3ru7anI+JsRHx//FR7uzRXq87nPfgBAAAAx8SZXdf/fx9vX/+fyDsvAAAAYMCKeScAAAAAHLq9rv8/MsQ8AAAAgMPj/j8AAAAcaV+9d6+1NLvPv55/tLmxXHt0bb5SXy6tbMyV5mrra6XFWm2x/Zt9K/t9XrVWW/t8rG48KTcq9Ua5vrn1cKW2sdp4uLTrIeEAAADA0Jy9+Py3SURsf+FUe2n54OBv//DwMgMOW7JPe/shIS+zjd8PISFgaEbyTgDIzWjeCQC5KeSdAJC7/cYB+k7e+dXgcwEAAA7HxCf63/83NgBHW9q3pTnUPACA4XH/H46vws4ZgDfyywTIy36P+XiX+/+dkYSmAQUAAMjZWHtJ0lJ2L3As0rRU6vzH/mIUkoWlamUyuz74zXjhRGt7qv3OZN85wwAAAAAAAAAAAAAAAAAAAAAAAABAR7OZRBMAAAA40iLSPybtX/OPmBi/PLZ7fOCD5B/j7XVEPP7xgx8+mW001qda9X99U9/4UVZ/PY8RDAAAAGC37nV69zoeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbp9aunc91lmHH//KWIKPaMf/Fke3UyChFx+m9JjL71viQiRgYQf/tZRJzrFT9ppRXF6GTRK/6pHOOnEXFmAPHhOHve2v/c6fX9S+NSe937+zeaLe+q//4vje7+b6TP/ufDA8Y4/+Ln5b7xn0WcH+29/+nGT/rE//QB43/j61tb/dqaP4mY6Hn8SXbEKjdW1sr1za1rSyuzi5XFyur09NTNmVszN2YmywtL1Ur2Z88Y3/vkL/69V/9P94lf3Kf/lw/Y/3+9ePLqY51iYXdbt6LX8fdcn/hpduz7TFZutU90y9ud8tsu/OzXF/bq/3yf/r/59+9xoG3FvHLA/l+9/+2XB3wpADAE9c2t5dlqtbL+/1hI471IQ2EghRPvRxp7FArxXqQxnELeeyYAAGDQ/nvSn3cmAAAAAAAAAAAAAAAAAAAAcHwN4+fEdsfczqerAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7+k8AAAD//y5x2R8=") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfd14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 3.035515829s ago: executing program 2 (id=4851): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f00000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.995010213s ago: executing program 1 (id=4852): syz_emit_ethernet(0x13c6, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "a16021", 0x1390, 0x89, 0xff, @empty, @local, {[@hopopts={0x32, 0x20, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @pad1, @ra={0x5, 0x2, 0x7}, @generic={0x62, 0xa1, "5b55f16e4383e03468e52d515df39f2d834cea04ba51fef2a9712c3f5ae1a9c99646bbdb0f922e8c12a840e72165ded18e899a5e243ac93aa3e5fe1de96306ecfa73645f25f9043a52f4e655f5fa22459386e5f46d518e74c41202e585fa2159bf68e5026e99fe22142d43ae779fbd96b6ff5ba94c9c11e08b670cf1b213a2bdf8bfffe66120d40bba71134a2b8bfd966988059587d3641ecf559b8c93749a453a"}, @ra={0x5, 0x2, 0x4}, @generic={0xf0, 0x39, "cacf6607394f321630acfbfff981e2ccf3b20228948ac54d79cb2cad0b2774b8d31f3b8c154cd5fd83581e55fe431b121f82d842599b4700a9"}, @enc_lim={0x4, 0x1, 0x78}, @ra={0x5, 0x2, 0x8}]}, @fragment={0x33, 0x0, 0x4, 0x1, 0x0, 0xd, 0x65}, @routing={0x2b, 0xc, 0x0, 0xf2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x87, 0xe, 0x4, 0x7, 0x2, 0x0, 0x3, [@rand_addr=' \x01\x00', @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @dstopts={0x16, 0x207, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6e}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0xff}, @enc_lim, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x5}, @generic={0x5, 0x1000, "8ab88f1aa3c887b5ca94ea762cfa2ab3c2c8506f546c42ed36378e0fbece0c3ad7eed3c85278188bced43195bf9556c0f9cb545d4a31e7aea41aaba7f759ba524db6492331bffd3a81904da661257527b01813525aca95ffef761a897ec994762b9e9140527b76f9697df8cb956f61ba9e16eb9ebff947975706d87dd785dbe86ede179f6907baa983de75f1ccdd23051e7a45f56b140a52b60a97df4dfa266244b82f135381b237f662a9ad052214b1bdc6b54b5ff4f64208fce01883462cc12e50a8949ec7f905e94995a7df6ee2f1ca1755ef47a7498ef09c33fbc183a20542ee0c1758c0da32c8e6996b18b18bb0160d35aea44901c493e24f9578054396ee0dffe267fdbbd7d15810cdcb7589f3af053894b21185618c167afba33dcad7cddbac29619e44b36659e4de9ed2bbaa5eb0f3245a2daf34f096c5f51c1e8c1e696a0ba0c5eae6b3d90cd72dca409112f40d73f3a62d3d3ffcd362cf492379297f8fe5d47af65316067616ffd37cb1a030018971ae5fd6e400eb3140e781b3daa85e876d728ed99ba76041ec36653783ccf9ec34e9eac184a1f4f4579ee294c7a9c83ebae05a5b05a107e6632fb1dba95dfed3bf6550a6ecfe8079cbaefa36b0305dd9cc8a584c28b789cbe3b31ef15e77f54ca5a0db5a7211a9d40cf000d26456c659e550a107816181e451c43e33874d49f8aba2af649ec96b75ba0cf1edc2f850954c4f94457c9c893b2ced0e8b34acf2cac04c3f08e52e19a420285dca3167609cdd30ed178d3f04dfb2e55598c90df939ac0aaab552cba02b716b7d50922a0eec631472ff9d533b4b29c2fa77a0d1bf87c9e194a6896f4fcc2508ba271bcb842717bb2de208d4e74a8fca74d63cf1d0ff3a40bde3894d9585d5cee0b7898e03cadce9c6eba5b93180f0d53e42aca6fdbcd19e5a3c7db652073845f1b7853a151c1ef3e6244315ee9a557d130945dfbc1a998575594b7bbb90642cc3280648ee3f253adb490f69f64c0e3a10b4d4c71bfc99c5d2efa32f8f07a2688e07603c8e94b5ac5a85de51879aa1e91305f0de9cbcc5fa5af4be8bf961314ceaa0773f7d5d4c2c54e75b0173187bdd21a3ab88ad9cf44145d64d787da1be7219d0ba84548668874645f12fc3c1848f0a4f9449bd50e485797c082a72ffa136875adbb71a11926de4dc7e38640c4422f62e679f5fbd91ad16369280a2d0c32f069165add1a2eec69c6c77e17f1d979b91aed7200318da29408f6f1e4ee3eecd944ba4179ef960d984704ae3317424a78a8a15398127240998fbdc3b7f279d0f625cab16b29d82bc840d158a8e80d278d604ac93ad09c24b3026211778bee478f63d89d5c491948fd88c60c192bb64e1dd645908d160ed8510c04afa9b37348fedeb5d334f886e279e6d9703707c3e07a012d45a29c37e9f6dde27d245de38837edaafb81d569c1f566095c5725c91e32794fd76133cc29cd240e6db7a3ec77513d2d3086279264d8d6e8dd7436155dd647847b0d0f92744e2b9569a04cfb184616ea55ba2a3a0868cfade8a0ec3c3df690fa825b0c6b442d183a6e9ae1f183510b926b734ab0c25f292d31bbbcfbdd1ba3a3e587891ef2ece819a91869f45f565c31637bde048c841cece73fd01c843665e599e514a040a8ed73ceb0ea2dfa1f81cb52426e53c9608364e1786a8e99886022e6b9d7b7e17620e7d6556b3898d9ff2cf31bac5c4f02e38fa08610789584f322f59d4ffd1517362daf6476789459867f35cd3ad49b370b57a7c7b8b0d72d19a915aef2127c9641c23e90ba8c12fbe254ce97748b664c4b1f4166d9b5c4c8dc4ba6cd2b6db1279a1db5056d688550b2edcecb638769de6e1aadd288979d82ae89aee05fc3ff83c309d1ddfe5cae4e5c5b4d64586a681c9c00bde35a5b9c58a514d4117689efb7a4a86d7eb400fae80e14e2582fcf208292c841a022afd3ad8bb42d45329ed52fb400b51bd7a41d7a275bf93dfe1193673c0b05e530a2f5045fa0dd488a266c2454af940739e37509e411574b0e3b8e9e70d10a1f752c5d6cf5fbc15e1b79353cd9ab7f1e749d7f029ecaf000e8c421a83daf0fc83ee4f1b3c7713d24995ef057f9d5649ec4fd51ea4f34acd5334d856c2bd450b6a6b0f14d0aea17584f7b7e2af4cf1f9a3189a6fcf7db044f872ddacd67aa6b16ade2198346bb8faf23993e78ae5c86cd45113528916997ffd6746b49eda626e0bbab766b96536ae4ca3be875d30dc45145c1967c4881be9777424de65d3340d9a1dec6af6b91fde99c3261360f19251bd6d2937a0390a6a98b487f45b0f10f8347c2336427e5762614499c5481008fe59ca9f110cabc4a44d7a767ac089184fb21358a64fe9258f8c0625fbefc95bb42d058f90bfea55b0772928f2bc24d40804367da0604666c53a6426896c8df6bfc01088d68ff617f0c1eedc85e6a1b672c0a51b922a68452891fdba119b1e6c779cc8e3b4df52afd0b3925e30d34e11544ab4933b7cfd919b18583e672dfea854ae490d073185d2c75bc18ec019fd6377a18db02171fde94ebf768940ba54e0fd65f46cc18a039c73bfb72ac21f84ee2a745eaa6385b8706d7eceb9b91678d0aad695ff50cdadc1095c96572e3dd7ad57d122cfeb0155e30b0a9e3d88fa89bd40b65b4dab9043a397265027eac5540700ec19bab7fb5aa5dd2173c60195376066cfbdd12f641f6a0d9ad8e280a6f3ed3088d3a3caf9a699c9a18d72b3ab5ea7f7347cf73d6b04bf6a163287efbcfba8905ae7ca19e20c2c6c181624a33d43fcc04813e5fe82ae6be8c22c6c50b5f0a8f9e9bd4a6092d1ca6b1aae40d8c6f1f274ed027cbd07e9fb2409ab332dd14c7cc081cb1828aeec2737721954a47bcd8e84f28105317c9172417fd04126743e9f9fa7741fdd66ed9ab47eee145c5bd0ef4ac1797dda0e21fdf7da01910d1aaa5163ebb40fa8389dd6e609afbcaa5f76ceda7a497c4f56cf86c3a256257b765c843b16e5aacffe6e2246011378067a2ed150706b919e69b299db7de74a1403a13b281fd7f48117483d96d0ba37b1d08ec0dc52006b43cd95d9a245682765dbf8a66b2087238b949bcdb7b1595f40b18338028ca13b67521490113dc56bd887e06c411421e7eef78be3592d3c46e7e04f4c65fe831f6b52ec77c4209f0a80b24d3c303d6c4a277cda10cd2d5cf1b560bdef01c489cf570c567618e591280162de40a48745a8cca72d79882a2ea723f72c00a9c5115cd713039c9f609b0c11c84fd592bb70226577e357aca6a559aeb46bfd60b0304bafd37ede5ba25a74fbfd1142afefdd0ca84253498ff594122d2b8721ee2bce69effbe76e8a7867e090f870ca198f0d84f84de86b9f1be1be53791fb1338423eddb55d1367d0890d39204dea672de208d039c5200595207270468e39ea01c8b997f85b3bcfd4dfb7d5636beb8343afd63f1fc3e035771fe213edeaca37c0120d7f13856a4294e09879d185edb09245b8c3cbd35209aaf7b4e66614420229d62cd77319a2209a955260c3ce84f387eb83a1ac5f8ca9938e7a1a0b813b30bed0f9cae46e7e7aba60fdc98a84eee77d46753c8fea62018a55745d36009d575217f8314d067978fbbb21d641e9fbc5b91902a3ee43f70b4b5853e4954c4101ea6a06ea414e3cb19d912f50f9e5c65e61efb90dd809de9f909e3333aecf08630b16c9b14913d78523b29c1e479a748a3ba44f717db221fe1a3cc0c5b5d87f5bc9a953e0189bf2aeb6f5d07339118bf58a8a40054c8f086b46c1dec2f62f32867ec5bfb9c259a4ada5be31542afb94689552c34d11d5b99c5ac09a5ddcc0599327db74cb9c18302a5ae967a989a63e7b962abf0d6605b9da63dc61002cbe9af4b75b6faf5ef57119d82f98f52079c6c40fa91e3e4c06f30f3c4e007f79afcc4a139eafc08b09f9a10015f4c7c995e7fd492119a314a149f9905064f8d1ce1507a180fcfa6dd8eb75edd102fccb3cc4bea97086d7aa0b4c0c5cb019afeb36a04badeb0fc7d2b5b049054bf05f19791f54d8af0c8ea7e25b1f975cac856cd8e5d2970ed529c33f7b5ce8a32e495182d950d755a3842410bc5a381e34db9107a510db4161c0b1b77c17f7cb0ded4ab321ab02dbdfab6e5e06cd091c90bbb9e8f786f88f354d4d2a74b280fe018ea40a5a31845f8043def6e2a406f6e1040cad0a77258be1b30b98be5122d8c9a9e4d971e294002af99a22c221e876de9f3b74b966bdd4f8646a896d9a536115914e0725c8d6c02b99748efb063a5aafef735a63d89cc941068987c6c7eef41373db55230ff9e9cdbf946b3f70c0e229d2b283cdb80f56a02d388ee3eeda28ca367ecf7ea75d6a54c8cdbfd2966d92c779110d4efe84c64809f14c3bd6a1af20ed6e603a3837219cbc175f6f43c78f560bd044a9ce25c269f0fd166d15708526370a4bb063291c3b55042530f5b26cf05459feea3b68cf86f09a9d89a80559e476b58cdd5e29edf54004b8c2c7705bafa3398bb51c0509b620f9ab0fa45e287d9aa170476966a19d0d571bba0550c421a05dac6d55584e00d957b68c1656931528ae8127461b750d6f652d86c89df39e8f7254254b9be7f043959cc17927b8ea07b0c77a43e10dea34f362e4b45c22240bb0808da48e9679edf3193ca0c46baedaeb17c3092b500662dc432421988951e04434f85aeb6eb569c7c4959a5a388bb388e0ff53d2ce640632f25947bb4b38e6f509b43602bd19b3ce3ec9bac60687e7e2d7d14ea7a3048400e45b7824a21e9a8d3aba4dc6d6f217b611006f69cc572f91c831f2ff3f757e9237000d65e58e07f52f5361f42606993dffab2ed6b559bb911ead83abffa720fbd6a9d6682f09dfad65d88b4939a5c7f5c4f1d81360aab91c48d08dbb01985e1354ba97010aadda738752de684bdb604cc278a2a87f1d7333270d44ab0bd224ea1410b4249b7ea63053a202977d35bf26e1458e839bd0e932a40f38177b936e91ac59ca95b874a3e0a85e72d3264b275f682575a25db0d8160ac211f41eda48e4e5cd3397a57fbb87f59ee8851d1311fb9a94470a622336c9b6178c6b16585f8c99f67e0138c7c7383257bd28cb32ce8f908cbca8c0dc86fe1ac28af63e568e32c945040565f60b4256a07e17e8a99e0bd7bc3a6c4825f9ffb04aa43794868682f581c141939f09a35f7031499f6cbdfd7615da36301bfcc773d6b0dc48fed459008608b1ae2e7ac8d00d3249e3f9a87d37bd4b75891c783fd7ae0facd5e5cd176518c957697c8afdc617065024f28574806a3b2c2731b82633ea8bfaa390df957dc82b0fa8d367621d62661431fc7cc263bc260e190224230db1dbe08ccd4a67e9a8b5da333f0a74e7b00431cd9c8d09a140a7f3035316242811c51470239243197d8639c3fe0e8483502a6ff4e8320f60fc13d6bcce2e4caf3baa5d927c884f8253223aa8e1a59afef1a3645b59edec4e131e36eb30889ea28648cb130026217454d8eedcdc8d078bcf5111602c59a76f6a097fb440d113055fdbce1e4b85d12ff954c3be386a2ee81b3602ecfe5e4b188febf9dd4727eaa2b342ffada59fa056cdd1256f2711067ba9d97de5fcbd0322cb4c1f39961142aa2eb4d54e77fa9cd8afe1fd942399a2fa2574d6aefdabde17c47285ae990e433fc90645d5a384bc849dd010aa3f36e78995deb1f13ccedf309c9ee0696464761f910e55bb52f8537c4a245517f8bf99fb88fb059644c30f69b1cc2684ec5b4355757b15da2bbfe1b44841a290ddc6ad77067a00ffd06064bbcc1"}, @enc_lim={0x4, 0x1, 0x6}]}, @dstopts={0x84, 0x6, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @mcast2}]}, @dstopts={0x1d, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}], "63a6f9e46e9f7369fa4e297d99db37ffbb9113f64a301beef6fc8c6a1fde4e8e1303710756703b6e6e4f2103674764c6b3c8ae831968114c1a48f5a426fec1e327c35302d1376a1f1e6153bd8f69007d4743f765826c0b21544d867f318369d8edc73d249130c2a138e1349fd9e6d096d2570916fe9160624a84c6dc36102a5a283a10ad26ec4003ca6f6aabe3a6227b0c595df55495e3d1ed43d448341eae25f53d02010c7cfad61803897380b35d0eb536c2818231935930fea116a5bc590185f90305bff6478e45903fa9802f11da1df75ee2ce6cbced8aeb94e87e7dc3d22befc3602362349b179760c33baa25fe"}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1d3200000000000000001000000014007700fe80000000000000000000004d7c00bb080001"], 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r3, 0x2, 0x70bd25, 0x5, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x63}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 2.920410509s ago: executing program 1 (id=4853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x3, 0x2001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810410, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e94d802fcf7fb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f248e89447aa3b0ffba27c76545e41126f8c5b59b3e9a839669f2a212105589ad1abd707ddc", @ANYRES32, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x2, 0x1dc, &(0x7f0000000740)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file2\x00', 0xd7fe) 1.863070987s ago: executing program 3 (id=4854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 1.855938688s ago: executing program 4 (id=4855): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x0) 1.825880391s ago: executing program 2 (id=4856): r0 = fsopen(&(0x7f0000000400)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 1.496400451s ago: executing program 2 (id=4857): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f00000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.39996363s ago: executing program 4 (id=4858): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000402, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x4) (fail_nth: 1) 1.303833759s ago: executing program 3 (id=4859): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.211819508s ago: executing program 1 (id=4860): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") (async) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000840)='kmem_cache_free\x00', r2}, 0x10) listen(r1, 0x2) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) (async) close_range(r1, r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x4140) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00020c000000000002"], 0x0, 0x0, 0x0}, 0x0) (async) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4800, &(0x7f0000000c80)={[{@gid}, {@gid}, {@utf8}, {@allow_utime={'allow_utime', 0x3d, 0x10001}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@allow_utime={'allow_utime', 0x3d, 0x101}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@errors_remount}, {@errors_continue}, {@errors_continue}], [{@uid_gt}, {@uid_eq}, {@fowner_gt}, {@permit_directio}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x33, 0x37, 0x30, 0x55, 0x38, 0x63, 0x3f], 0x2d, [0x36, 0x62, 0x61, 0x36], 0x2d, [0x61, 0x63, 0x65, 0x62], 0x2d, [0x38, 0x38, 0x35, 0x66], 0x2d, [0x38, 0x63, 0x38, 0x31, 0x34, 0x39, 0x35, 0x32]}}}, {@smackfsroot}]}, 0x1, 0x1508, &(0x7f00000037c0)="$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") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kfree\x00'}, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="01000000ff"], 0x38}}, 0x0) 1.182582541s ago: executing program 2 (id=4861): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 1.166712752s ago: executing program 1 (id=4862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000009819244e9b73498e66864d4d8dcfaad5912a0f1d53eeb8fa8830964173337c117dc5d62df93b89c9c36670f4b8c69535a9f0f50f985466e46055131800acfc6359b262aa8cc05cf6d0b4776ea3ed65dd4f693c07dfaf0bba9abe23b4dad062219a8040bbe1964d77fb7246d9d6b3572d6de043e8bd17cea2537acc8e89b78d4ed760f381b5df5d91d7a2f6e0aa", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x59}, @ldst={0x2, 0x2, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0xff, &(0x7f0000000840)=""/255, 0x41000, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x10, 0xd4a, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000009c0)=[r5], &(0x7f0000000b00)=[{0x5, 0x2, 0x9, 0xb}, {0x3, 0x2, 0x8, 0x3}, {0x3, 0x1, 0xe, 0xc}, {0x2, 0x4, 0x0, 0x3}, {0x5, 0x3, 0xb, 0xf}, {0x4, 0x4, 0xe, 0xa}, {0x4, 0x4, 0x2, 0x5}, {0x2, 0x2, 0x0, 0x6}, {0x0, 0x1, 0x3, 0x5}, {0x1, 0x4, 0xa, 0x6}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0x9, 0x5, 0x9dd3, 0x3, 0x2}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x4e) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_POWER(r11, 0x112, 0x9, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.131805105s ago: executing program 3 (id=4863): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x200000000000000c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800100000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x0) 964.138081ms ago: executing program 3 (id=4864): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000240)={[{@errors_remount}, {@jqfmt_vfsold}, {@noquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@data_err_ignore}, {@init_itable}, {@errors_continue}]}, 0x1, 0x4e2, &(0x7f0000000d80)="$eJzs3d9rW28ZAPDnnDbf/erXZurFHLgNnXRDl7Sr24oXc4K4q4Fz3s/apqU0bUqTbmsZ0uG9gogKXnnljeAfIMj+BBEGei9TFNFNL7xQI0lO5lqTtrA0Z7afD5yd97xvkud5N3J+vOddTgDH1qWIuBMRIxFxNSLGs/o0W+622u93Xvf61dO51pJEs/ngL0kkWV3EyR2feSYitqNT+7W7Ed9M/jdufXNrebZaraxn2+XGylq5vrl1bWlldrGyWFmdnp66OXNr5sbM5ED6WYyI21/+ww+++9Ov3P7l5x7/7uGfrnyrldZY1t7px+B1ul7Y8Tc0GhHrhxEsByPZutCn/TsjQ0wGAIB9tc7xPxoRn2qf/4/HSPvsFAAAADhKml8ci38mEU0AAADgyErbc2CTtJTNBRiLNC2VOnN4Px6n02qt3vjsQm1jdb4zV7YYhXRhqVqZzOYKF6OQtLansjm23e3ru7anI+JsRHx//FR7uzRXq87nPfgBAAAAx8SZXdf/fx9vX/+fyDsvAAAAYMCKeScAAAAAHLq9rv8/MsQ8AAAAgMPj/j8AAAAcaV+9d6+1NLvPv55/tLmxXHt0bb5SXy6tbMyV5mrra6XFWm2x/Zt9K/t9XrVWW/t8rG48KTcq9Ua5vrn1cKW2sdp4uLTrIeEAAADA0Jy9+Py3SURsf+FUe2n54OBv//DwMgMOW7JPe/shIS+zjd8PISFgaEbyTgDIzWjeCQC5KeSdAJC7/cYB+k7e+dXgcwEAAA7HxCf63/83NgBHW9q3pTnUPACA4XH/H46vws4ZgDfyywTIy36P+XiX+/+dkYSmAQUAAMjZWHtJ0lJ2L3As0rRU6vzH/mIUkoWlamUyuz74zXjhRGt7qv3OZN85wwAAAAAAAAAAAAAAAAAAAAAAAABAR7OZRBMAAAA40iLSPybtX/OPmBi/PLZ7fOCD5B/j7XVEPP7xgx8+mW001qda9X99U9/4UVZ/PY8RDAAAAGC37nV69zoeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbp9aunc91lmHH//KWIKPaMf/Fke3UyChFx+m9JjL71viQiRgYQf/tZRJzrFT9ppRXF6GTRK/6pHOOnEXFmAPHhOHve2v/c6fX9S+NSe937+zeaLe+q//4vje7+b6TP/ufDA8Y4/+Ln5b7xn0WcH+29/+nGT/rE//QB43/j61tb/dqaP4mY6Hn8SXbEKjdW1sr1za1rSyuzi5XFyur09NTNmVszN2YmywtL1Ur2Z88Y3/vkL/69V/9P94lf3Kf/lw/Y/3+9ePLqY51iYXdbt6LX8fdcn/hpduz7TFZutU90y9ud8tsu/OzXF/bq/3yf/r/59+9xoG3FvHLA/l+9/+2XB3wpADAE9c2t5dlqtbL+/1hI471IQ2EghRPvRxp7FArxXqQxnELeeyYAAGDQ/nvSn3cmAAAAAAAAAAAAAAAAAAAAcHwN4+fEdsfczqerAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7+k8AAAD//y5x2R8=") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfd14) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 176.405394ms ago: executing program 4 (id=4865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 225.55µs ago: executing program 1 (id=4866): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000240)={[{@errors_remount}, {@jqfmt_vfsold}, {@noquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@data_err_ignore}, {@init_itable}, {@errors_continue}]}, 0x1, 0x4e2, &(0x7f0000000d80)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfd14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=4867): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x511083, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x0) io_setup(0x800, &(0x7f0000000500)) eventfd(0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init() readv(r2, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_ringparam}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 1): Mounted with checkpoint version = 48b305e5 [ 2512.536428][T19103] loop2: detected capacity change from 0 to 40427 [ 2512.642498][T19103] F2FS-fs (loop2): invalid crc value [ 2512.789559][T19103] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2513.007611][T19126] hub 6-0:1.0: USB hub found [ 2513.013611][T19126] hub 6-0:1.0: 1 port detected [ 2513.690588][T19129] loop0: detected capacity change from 0 to 16 [ 2513.709669][T19103] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 2513.820771][T19129] erofs: (device loop0): mounted with root inode @ nid 36. [ 2513.899323][T19132] loop3: detected capacity change from 0 to 512 [ 2513.978311][T19132] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2514.013393][T19132] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2514.103807][T19132] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2514.808025][T19141] hub 6-0:1.0: USB hub found [ 2514.816522][T19141] hub 6-0:1.0: 1 port detected [ 2516.625917][T19132] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.4466: iget: bogus i_mode (5) [ 2516.694934][ T49] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2516.736640][T19132] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4466: couldn't read orphan inode 16 (err -117) [ 2516.748869][T19132] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2517.921906][T19153] hub 6-0:1.0: USB hub found [ 2517.928065][T19153] hub 6-0:1.0: 1 port detected [ 2518.795314][T19158] loop1: detected capacity change from 0 to 16 [ 2518.842655][T19158] erofs: (device loop1): mounted with root inode @ nid 36. [ 2519.667473][T19166] hub 6-0:1.0: USB hub found [ 2519.673475][T19166] hub 6-0:1.0: 1 port detected [ 2520.791707][ T49] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2522.925540][T19180] loop4: detected capacity change from 0 to 16 [ 2523.009924][T19180] erofs: (device loop4): mounted with root inode @ nid 36. [ 2523.076825][T19185] loop1: detected capacity change from 0 to 16 [ 2523.345428][T19185] erofs: (device loop1): mounted with root inode @ nid 36. [ 2523.389472][T19187] hub 6-0:1.0: USB hub found [ 2523.394135][T19187] hub 6-0:1.0: 1 port detected [ 2523.412712][ T48] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2523.453072][T19188] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 2525.265559][ T48] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2526.020538][T19200] hub 6-0:1.0: USB hub found [ 2526.026389][T19200] hub 6-0:1.0: 1 port detected [ 2526.942155][T19204] loop0: detected capacity change from 0 to 1024 [ 2527.074866][T19204] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2527.286828][T19208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4483'. [ 2527.303135][T19208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4483'. [ 2527.992025][T19222] loop1: detected capacity change from 0 to 1024 [ 2528.059119][T19222] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 2528.091084][T19222] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2528.095795][T19226] loop0: detected capacity change from 0 to 512 [ 2528.132133][T19222] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2528.512519][T19213] hub 6-0:1.0: USB hub found [ 2528.521633][T19226] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 2528.680994][T19222] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2528.702868][T19213] hub 6-0:1.0: 1 port detected [ 2528.727415][T19226] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 2528.857454][T19226] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 2528.892766][T19232] loop2: detected capacity change from 0 to 1024 [ 2528.929121][T19226] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #16: comm syz.0.4486: iget: bogus i_mode (5) [ 2528.978800][T19226] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4486: couldn't read orphan inode 16 (err -117) [ 2529.025158][T19232] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2529.033312][T19226] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2529.847297][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4485'. [ 2530.382382][T19240] loop4: detected capacity change from 0 to 512 [ 2531.298188][T19240] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 2531.347693][T19240] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2531.407788][T19240] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 2531.436405][T19240] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.4490: iget: bogus i_mode (5) [ 2531.449046][T19240] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4490: couldn't read orphan inode 16 (err -117) [ 2531.461654][T19240] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2531.602200][T19252] loop2: detected capacity change from 0 to 512 [ 2531.721119][T19252] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 2531.752962][T19252] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2531.826464][T19252] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 2531.856338][T19252] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #16: comm syz.2.4493: iget: bogus i_mode (5) [ 2531.887625][T19252] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4493: couldn't read orphan inode 16 (err -117) [ 2531.917765][T19252] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2531.943983][T19236] loop3: detected capacity change from 0 to 40427 [ 2532.231470][T19264] loop3: detected capacity change from 0 to 1024 [ 2532.281253][T19264] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2533.943398][T19276] hub 6-0:1.0: USB hub found [ 2533.949411][T19276] hub 6-0:1.0: 1 port detected [ 2534.001365][T19276] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4497'. [ 2534.873560][T19261] loop0: detected capacity change from 0 to 40427 [ 2534.927672][T19261] F2FS-fs (loop0): invalid crc value [ 2534.955493][T19261] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2535.179433][T19261] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 2535.556061][T19281] loop1: detected capacity change from 0 to 40427 [ 2535.579386][T19278] loop3: detected capacity change from 0 to 40427 [ 2535.703798][T19278] F2FS-fs (loop3): invalid crc value [ 2535.710727][T19281] F2FS-fs (loop1): invalid crc value [ 2535.768977][T19278] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2535.859301][T19281] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2535.986511][T19301] hub 6-0:1.0: USB hub found [ 2535.992461][T19301] hub 6-0:1.0: 1 port detected [ 2536.043195][T19301] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4500'. [ 2536.569806][T19278] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 2536.579050][T19281] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 2536.627321][T19278] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2536.697259][T19281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2536.963318][T19309] hub 6-0:1.0: USB hub found [ 2536.971254][T19309] hub 6-0:1.0: 1 port detected [ 2536.978853][T19309] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4502'. [ 2537.505447][T17304] attempt to access beyond end of device [ 2537.505447][T17304] loop3: rw=524288, want=45072, limit=40427 [ 2537.542698][T17304] attempt to access beyond end of device [ 2537.542698][T17304] loop3: rw=0, want=45072, limit=40427 [ 2537.907380][ T10] attempt to access beyond end of device [ 2537.907380][ T10] loop3: rw=2049, want=45120, limit=40427 [ 2538.121293][T18135] attempt to access beyond end of device [ 2538.121293][T18135] loop1: rw=524288, want=45072, limit=40427 [ 2538.138706][T18135] attempt to access beyond end of device [ 2538.138706][T18135] loop1: rw=0, want=45072, limit=40427 [ 2538.263205][T19322] hub 6-0:1.0: USB hub found [ 2538.268994][T19322] hub 6-0:1.0: 1 port detected [ 2539.714994][ T44] attempt to access beyond end of device [ 2539.714994][ T44] loop1: rw=2049, want=45120, limit=40427 [ 2540.471628][T19336] hub 6-0:1.0: USB hub found [ 2540.478512][T19336] hub 6-0:1.0: 1 port detected [ 2540.488959][T19336] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4511'. [ 2541.258018][T19338] loop2: detected capacity change from 0 to 1024 [ 2541.368442][T19338] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 2541.397672][T19338] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 2541.404927][T19338] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2541.555287][T19338] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2541.800246][ T10] device bridge_slave_1 left promiscuous mode [ 2541.827303][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2541.848124][ T10] device bridge_slave_0 left promiscuous mode [ 2541.854209][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2541.901741][ T10] device veth1_macvtap left promiscuous mode [ 2541.922247][T19346] hub 6-0:1.0: USB hub found [ 2541.926914][T19346] hub 6-0:1.0: 1 port detected [ 2541.933519][ T10] device veth0_vlan left promiscuous mode [ 2541.939704][T19346] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4515'. [ 2542.316159][T19359] hub 6-0:1.0: USB hub found [ 2542.322613][T19359] hub 6-0:1.0: 1 port detected [ 2542.477552][T19359] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4519'. [ 2543.344425][T19363] loop4: detected capacity change from 0 to 16 [ 2543.481596][T19363] erofs: (device loop4): mounted with root inode @ nid 36. [ 2543.555297][T19366] hub 6-0:1.0: USB hub found [ 2543.561189][T19366] hub 6-0:1.0: 1 port detected [ 2544.490169][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4512'. [ 2544.929278][ T49] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2545.297834][T19357] bridge0: port 1(bridge_slave_0) entered blocking state [ 2545.304921][T19357] bridge0: port 1(bridge_slave_0) entered disabled state [ 2545.329594][T19377] loop4: detected capacity change from 0 to 16 [ 2545.337733][T19357] device bridge_slave_0 entered promiscuous mode [ 2545.394143][T19357] bridge0: port 2(bridge_slave_1) entered blocking state [ 2545.407428][T19377] erofs: (device loop4): mounted with root inode @ nid 36. [ 2545.426777][T19357] bridge0: port 2(bridge_slave_1) entered disabled state [ 2545.460099][T19357] device bridge_slave_1 entered promiscuous mode [ 2545.603696][T19365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2545.611871][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2545.629362][T19365] device bridge_slave_0 entered promiscuous mode [ 2545.709168][T19365] bridge0: port 2(bridge_slave_1) entered blocking state [ 2545.718364][T19365] bridge0: port 2(bridge_slave_1) entered disabled state [ 2545.746818][T19365] device bridge_slave_1 entered promiscuous mode [ 2545.966600][T19369] loop0: detected capacity change from 0 to 40427 [ 2546.062915][ T48] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2546.119063][T19385] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 2546.239340][T19369] F2FS-fs (loop0): invalid crc value [ 2546.597385][T19369] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2547.302887][T19369] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 2547.401301][T19369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2548.270202][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2548.393802][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2548.428265][ T10] device bridge_slave_1 left promiscuous mode [ 2548.434340][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2548.458579][ T10] device bridge_slave_0 left promiscuous mode [ 2548.469407][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2548.481316][ T10] device veth1_macvtap left promiscuous mode [ 2548.487480][ T10] device veth0_vlan left promiscuous mode [ 2548.871906][T19405] hub 6-0:1.0: USB hub found [ 2548.878013][T19405] hub 6-0:1.0: 1 port detected [ 2549.627918][T15836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2549.637440][T15836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2549.645771][T15836] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.652706][T15836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2549.660516][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2549.733776][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2549.769699][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2549.790325][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.797320][T12536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2549.890730][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2549.907956][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2549.918268][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2549.947850][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2550.066961][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2550.075836][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2550.088374][T19400] loop2: detected capacity change from 0 to 40427 [ 2550.203117][T19414] hub 6-0:1.0: USB hub found [ 2550.209204][T19414] hub 6-0:1.0: 1 port detected [ 2550.266209][T19414] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4530'. [ 2550.444722][T19400] F2FS-fs (loop2): invalid crc value [ 2550.961642][T19417] loop0: detected capacity change from 0 to 512 [ 2550.976420][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2550.999945][T19400] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2551.008111][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2551.026760][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 2551.033727][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2551.054768][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2551.056334][T19417] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 2551.076134][T19417] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 2551.109654][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2551.118466][T19417] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 2551.137992][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.144922][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.150136][T19425] loop4: detected capacity change from 0 to 1024 [ 2551.154265][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2551.167349][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2551.170548][T19400] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 2551.185528][T19417] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #16: comm syz.0.4531: iget: bogus i_mode (5) [ 2551.186832][T19400] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2551.209849][T19357] device veth0_vlan entered promiscuous mode [ 2551.229462][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2551.238244][T19417] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4531: couldn't read orphan inode 16 (err -117) [ 2551.248357][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2551.263619][T19425] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2551.267048][T19417] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2551.298704][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2551.351255][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2551.359119][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2551.578329][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2551.586766][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2551.598192][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2552.510002][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2552.510296][T18404] attempt to access beyond end of device [ 2552.510296][T18404] loop2: rw=524288, want=45072, limit=40427 [ 2552.518918][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2552.540346][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2552.545196][T18404] attempt to access beyond end of device [ 2552.545196][T18404] loop2: rw=0, want=45072, limit=40427 [ 2552.570291][T19357] device veth1_macvtap entered promiscuous mode [ 2552.621326][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2552.637904][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2552.646708][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2552.655680][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2552.684243][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2552.852875][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2552.871522][T19365] device veth0_vlan entered promiscuous mode [ 2552.895886][T19365] device veth1_macvtap entered promiscuous mode [ 2552.904631][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2552.905964][ T44] attempt to access beyond end of device [ 2552.905964][ T44] loop2: rw=2049, want=45120, limit=40427 [ 2552.913490][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2552.952650][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2552.985025][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2553.049024][T19441] hub 6-0:1.0: USB hub found [ 2553.054866][T19441] hub 6-0:1.0: 1 port detected [ 2553.106294][T19441] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4517'. [ 2553.203958][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2553.273828][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2553.340159][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2553.743076][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2553.865020][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2553.882365][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2553.891262][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2554.281265][T19449] hub 6-0:1.0: USB hub found [ 2554.287396][T19449] hub 6-0:1.0: 1 port detected [ 2554.522782][T19446] loop1: detected capacity change from 0 to 1024 [ 2555.108675][T19446] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2555.659140][ T10] device bridge_slave_1 left promiscuous mode [ 2555.696868][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2555.738950][ T10] device bridge_slave_0 left promiscuous mode [ 2555.745148][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2555.793393][ T10] device veth1_macvtap left promiscuous mode [ 2555.823742][ T10] device veth0_vlan left promiscuous mode [ 2557.207667][T19470] loop1: detected capacity change from 0 to 1024 [ 2557.277665][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4536'. [ 2557.296730][T19454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4536'. [ 2557.331124][T19470] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2557.467699][T19463] loop0: detected capacity change from 0 to 40427 [ 2557.611796][T19463] F2FS-fs (loop0): invalid crc value [ 2557.917417][T19482] loop3: detected capacity change from 0 to 1024 [ 2557.980811][T19463] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2557.993045][T19482] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2558.047207][T19482] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2558.078414][T19482] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2558.132646][T19468] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.156231][T19482] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2558.197171][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 2558.208664][T19468] device bridge_slave_0 entered promiscuous mode [ 2558.246298][T19468] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.266078][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 2558.274591][T19468] device bridge_slave_1 entered promiscuous mode [ 2558.465992][T19488] loop1: detected capacity change from 0 to 1024 [ 2558.505062][T19463] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 2558.516900][T19463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2558.736730][T19492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4543'. [ 2559.373562][T19488] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2559.733397][T19472] loop4: detected capacity change from 0 to 40427 [ 2559.773126][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2559.795337][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2560.048756][T19472] F2FS-fs (loop4): invalid crc value [ 2560.066067][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2560.564729][T19472] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 2560.682438][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2560.693238][T16235] bridge0: port 1(bridge_slave_0) entered blocking state [ 2560.700181][T16235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2560.713160][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2560.721228][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2560.729819][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2560.741857][ T1747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2560.749286][ T1747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2560.820309][T19503] loop0: detected capacity change from 0 to 512 [ 2560.830561][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2560.849307][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2560.855305][T19503] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2560.876232][T19501] loop1: detected capacity change from 0 to 2048 [ 2560.894025][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2560.910424][T19503] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4545: invalid indirect mapped block 4294967295 (level 1) [ 2560.925676][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2560.947218][T19503] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4545: invalid indirect mapped block 4294967295 (level 1) [ 2560.969333][T19501] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2560.980373][T19503] EXT4-fs (loop0): 2 truncates cleaned up [ 2560.986020][T19503] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2560.990067][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2561.025454][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2561.028063][ T30] audit: type=1400 audit(1727120720.088:456): avc: denied { watch watch_reads } for pid=19500 comm="syz.1.4547" path="/4/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2561.048315][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2561.068147][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2561.078635][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2561.086572][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2561.101156][T19468] device veth0_vlan entered promiscuous mode [ 2561.118697][T19501] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 2561.160261][T19503] EXT4-fs (loop0): shut down requested (2) [ 2561.180864][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2561.190992][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2561.210749][T19468] device veth1_macvtap entered promiscuous mode [ 2561.239575][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2561.266588][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2561.292974][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2561.333971][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2561.339674][T19509] loop1: detected capacity change from 0 to 512 [ 2561.349643][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2561.373309][T19513] loop4: detected capacity change from 0 to 16 [ 2561.400131][T19511] loop0: detected capacity change from 0 to 1024 [ 2561.456447][T19495] loop3: detected capacity change from 0 to 40427 [ 2561.470347][T19513] erofs: (device loop4): mounted with root inode @ nid 36. [ 2561.491763][T19509] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 2561.509888][T19495] F2FS-fs (loop3): invalid crc value [ 2561.525514][T19509] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 2561.582420][T19511] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2561.662337][T19495] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2561.671399][T19509] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 2561.999335][T19525] hub 6-0:1.0: USB hub found [ 2562.051261][T19525] hub 6-0:1.0: 1 port detected [ 2562.081377][T19525] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4539'. [ 2564.828635][T19509] EXT4-fs: error -4 creating inode table initialization thread [ 2564.886084][T19509] EXT4-fs (loop1): mount failed [ 2565.022828][T19495] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 2565.346478][T19547] hub 6-0:1.0: USB hub found [ 2565.352327][T19547] hub 6-0:1.0: 1 port detected [ 2566.008669][T19543] loop1: detected capacity change from 0 to 1024 [ 2566.079137][T19543] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2567.811042][T19569] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4557'. [ 2567.820151][T19569] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4557'. [ 2568.675533][T19573] loop3: detected capacity change from 0 to 1024 [ 2568.757333][T19573] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2568.780209][T19573] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2568.797158][T19573] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2568.832901][T19573] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2568.892629][T19559] loop2: detected capacity change from 0 to 40427 [ 2569.057976][T19559] F2FS-fs (loop2): invalid crc value [ 2569.385625][T19582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4563'. [ 2570.148282][T19559] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2570.405365][T19559] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 2570.463268][T19592] loop3: detected capacity change from 0 to 1024 [ 2570.627603][T19592] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2570.636889][T19592] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2570.678035][T19592] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2570.746713][T19592] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2570.867170][T19598] hub 6-0:1.0: USB hub found [ 2570.873086][T19598] hub 6-0:1.0: 1 port detected [ 2571.653756][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4566'. [ 2572.747834][T19615] hub 6-0:1.0: USB hub found [ 2572.754037][T19615] hub 6-0:1.0: 1 port detected [ 2573.472408][T19620] loop3: detected capacity change from 0 to 1024 [ 2574.187149][T19620] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2574.823944][T19620] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2574.880406][T19620] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2574.969169][T19620] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2575.179656][T19637] loop1: detected capacity change from 0 to 16 [ 2575.522248][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4572'. [ 2579.298160][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4579'. [ 2579.763979][T19650] loop3: detected capacity change from 0 to 16 [ 2579.871780][T19650] erofs: (device loop3): mounted with root inode @ nid 36. [ 2580.316470][T19663] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4583'. [ 2581.486841][T19672] hub 6-0:1.0: USB hub found [ 2581.493989][T19672] hub 6-0:1.0: 1 port detected [ 2582.336461][T19676] loop2: detected capacity change from 0 to 1024 [ 2582.353890][ T48] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2582.397369][T19658] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 2582.436273][T19676] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 2582.467198][T19676] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 2582.474395][T19676] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2582.545236][T19676] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2582.765536][T19683] loop1: detected capacity change from 0 to 16 [ 2582.908378][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4587'. [ 2583.308494][T19683] erofs: (device loop1): mounted with root inode @ nid 36. [ 2584.149567][ T49] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2584.701318][T19695] loop1: detected capacity change from 0 to 16 [ 2584.769712][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4589'. [ 2585.112388][T19695] erofs: (device loop1): mounted with root inode @ nid 36. [ 2585.668195][T19699] loop0: detected capacity change from 0 to 1024 [ 2586.403889][T19699] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 2586.443868][T19699] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 2586.457729][T19699] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2586.528617][T19699] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2587.567278][T19716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'. [ 2590.213264][T19724] hub 6-0:1.0: USB hub found [ 2590.218318][T19724] hub 6-0:1.0: 1 port detected [ 2590.402426][T19736] hub 6-0:1.0: USB hub found [ 2590.408655][T19736] hub 6-0:1.0: 1 port detected [ 2591.699449][T19752] loop4: detected capacity change from 0 to 16 [ 2591.779253][T19752] erofs: (device loop4): mounted with root inode @ nid 36. [ 2591.882485][T19734] bridge0: port 1(bridge_slave_0) entered blocking state [ 2592.231137][T19731] hub 6-0:1.0: USB hub found [ 2592.251534][T19734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2592.256167][T19731] hub 6-0:1.0: 1 port detected [ 2592.679628][T19734] device bridge_slave_0 entered promiscuous mode [ 2592.690370][T19734] bridge0: port 2(bridge_slave_1) entered blocking state [ 2592.700069][ T48] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2592.740609][T19734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2592.749656][T19734] device bridge_slave_1 entered promiscuous mode [ 2593.033401][T19761] hub 6-0:1.0: USB hub found [ 2593.038190][T19761] hub 6-0:1.0: 1 port detected [ 2593.122684][T19743] hub 6-0:1.0: USB hub found [ 2593.206957][T19743] hub 6-0:1.0: 1 port detected [ 2593.949465][T19774] hub 6-0:1.0: USB hub found [ 2593.982233][T19774] hub 6-0:1.0: 1 port detected [ 2594.020317][T19774] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4608'. [ 2594.330261][T19776] hub 6-0:1.0: USB hub found [ 2594.427226][T19776] hub 6-0:1.0: 1 port detected [ 2594.833056][T19734] device veth0_vlan entered promiscuous mode [ 2594.861049][T19734] device veth1_macvtap entered promiscuous mode [ 2594.900014][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2594.909599][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2594.918685][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2594.927286][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2594.935733][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2594.944700][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2594.953794][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2594.964710][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2594.977965][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2594.986621][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2595.009298][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2595.017569][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2595.026250][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2595.039979][T16934] bridge0: port 1(bridge_slave_0) entered blocking state [ 2595.046982][T16934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2595.055044][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2595.064292][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2595.073315][T16934] bridge0: port 2(bridge_slave_1) entered blocking state [ 2595.080275][T16934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2595.088516][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2595.339642][T19787] hub 6-0:1.0: USB hub found [ 2595.345422][T19787] hub 6-0:1.0: 1 port detected [ 2595.459997][ T9534] device bridge_slave_1 left promiscuous mode [ 2595.542098][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 2595.784999][ T9534] device bridge_slave_0 left promiscuous mode [ 2595.986304][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.155461][ T9534] device veth1_macvtap left promiscuous mode [ 2596.183472][ T9534] device veth0_vlan left promiscuous mode [ 2597.582586][T19602] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2597.613532][T19785] hub 6-0:1.0: USB hub found [ 2597.618365][T19785] hub 6-0:1.0: 1 port detected [ 2597.847197][T19602] usb 1-1: Using ep0 maxpacket: 32 [ 2598.230741][T19811] loop3: detected capacity change from 0 to 1024 [ 2598.247326][T19602] usb 1-1: config 0 has no interfaces? [ 2598.347747][T19602] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2598.356700][T19602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2598.368163][T19811] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2598.387756][T19811] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2598.395007][T19811] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2598.425811][T19602] usb 1-1: SerialNumber: syz [ 2598.434659][T19799] hub 6-0:1.0: USB hub found [ 2598.440454][T19799] hub 6-0:1.0: 1 port detected [ 2598.514490][T19809] hub 6-0:1.0: USB hub found [ 2598.519330][T19809] hub 6-0:1.0: 1 port detected [ 2598.527207][T19809] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4617'. [ 2598.537150][T19602] usb 1-1: config 0 descriptor?? [ 2598.555318][T19811] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2599.547263][T19602] usb 1-1: can't set config #0, error -71 [ 2599.558059][T19602] usb 1-1: USB disconnect, device number 73 [ 2599.670862][T19822] loop2: detected capacity change from 0 to 1024 [ 2600.063323][T19828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4618'. [ 2601.714446][T19830] loop0: detected capacity change from 0 to 512 [ 2601.855059][T19832] hub 6-0:1.0: USB hub found [ 2601.860932][T19832] hub 6-0:1.0: 1 port detected [ 2601.910232][T19832] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4621'. [ 2602.566577][T19822] EXT4-fs: failed to create workqueue [ 2602.575050][T19822] EXT4-fs (loop2): mount failed [ 2602.607768][T19830] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.4622: bad orphan inode 17 [ 2602.632150][T19830] ext4_test_bit(bit=16, block=4) = 1 [ 2602.655495][T19830] is_bad_inode(inode)=0 [ 2602.682475][T19830] NEXT_ORPHAN(inode)=0 [ 2602.686428][T19830] max_ino=32 [ 2602.695432][T19836] loop3: detected capacity change from 0 to 512 [ 2602.701892][T19830] i_nlink=1 [ 2602.704982][T19830] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2602.759765][T19836] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.4623: bad orphan inode 17 [ 2602.814166][T19836] ext4_test_bit(bit=16, block=4) = 1 [ 2602.827312][T19836] is_bad_inode(inode)=0 [ 2602.831617][T19836] NEXT_ORPHAN(inode)=0 [ 2602.835539][T19836] max_ino=32 [ 2602.842703][T19836] i_nlink=1 [ 2602.845735][T19836] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2602.913142][T19836] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.4623: bg 0: block 7: invalid block bitmap [ 2603.157254][T15859] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2603.194222][T19847] loop1: detected capacity change from 0 to 512 [ 2603.196935][T19849] loop2: detected capacity change from 0 to 512 [ 2603.266896][T19847] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4629: bad orphan inode 17 [ 2603.309693][T19849] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4628: bad orphan inode 17 [ 2603.319998][T19849] ext4_test_bit(bit=16, block=4) = 1 [ 2603.325152][T19849] is_bad_inode(inode)=0 [ 2603.330069][T19849] NEXT_ORPHAN(inode)=0 [ 2603.334005][T19849] max_ino=32 [ 2603.337043][T19849] i_nlink=1 [ 2603.357228][T19849] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2603.363407][T19847] ext4_test_bit(bit=16, block=4) = 1 [ 2603.372935][T19847] is_bad_inode(inode)=0 [ 2603.377064][T19847] NEXT_ORPHAN(inode)=0 [ 2603.381087][T19847] max_ino=32 [ 2603.384121][T19847] i_nlink=1 [ 2603.387485][T19847] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2603.429220][T19849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.4628: bg 0: block 7: invalid block bitmap [ 2603.436720][T19855] loop0: detected capacity change from 0 to 256 [ 2603.497366][T15859] usb 5-1: Using ep0 maxpacket: 32 [ 2603.551544][T19856] hub 6-0:1.0: USB hub found [ 2603.557183][T19856] hub 6-0:1.0: 1 port detected [ 2603.604242][T19856] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4627'. [ 2603.660408][T19855] exfat: Deprecated parameter 'namecase' [ 2603.705230][T19847] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.4629: bg 0: block 7: invalid block bitmap [ 2603.737855][T15859] usb 5-1: config 0 has no interfaces? [ 2603.838111][T15859] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2603.903563][T15859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2603.962077][T19855] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2603.990281][T15859] usb 5-1: SerialNumber: syz [ 2604.178125][T15859] usb 5-1: config 0 descriptor?? [ 2604.206674][T19855] exFAT-fs (loop0): invalid boot region [ 2604.280646][T19855] exFAT-fs (loop0): failed to recognize exfat type [ 2604.544689][T19855] loop0: detected capacity change from 0 to 512 [ 2605.054730][T19869] hub 6-0:1.0: USB hub found [ 2605.062191][T19869] hub 6-0:1.0: 1 port detected [ 2605.319460][T19869] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4631'. [ 2606.141114][ T60] usb 5-1: USB disconnect, device number 61 [ 2606.225343][T19602] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2606.467209][T19602] usb 4-1: Using ep0 maxpacket: 8 [ 2606.521205][T16235] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2606.587466][T19602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2608.537279][T16235] usb 3-1: Using ep0 maxpacket: 32 [ 2608.679120][T19602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2608.688924][T19602] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2608.697928][T19602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2608.820095][T19602] usb 4-1: config 0 descriptor?? [ 2608.857357][T19602] usb 4-1: can't set config #0, error -71 [ 2608.923543][T19602] usb 4-1: USB disconnect, device number 64 [ 2608.981172][T16235] usb 3-1: device descriptor read/all, error -71 [ 2609.036177][T19896] loop4: detected capacity change from 0 to 512 [ 2609.319934][T19896] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.4639: bad orphan inode 17 [ 2609.409550][T19896] ext4_test_bit(bit=16, block=4) = 1 [ 2609.448173][T19896] is_bad_inode(inode)=0 [ 2609.473155][T19896] NEXT_ORPHAN(inode)=0 [ 2609.496857][T19896] max_ino=32 [ 2609.517326][T19896] i_nlink=1 [ 2609.537398][T19896] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2609.927941][T19896] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.4639: bg 0: block 7: invalid block bitmap [ 2609.977194][ T6071] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2611.001983][T19911] loop2: detected capacity change from 0 to 256 [ 2611.317950][T19911] exfat: Deprecated parameter 'namecase' [ 2611.326376][T19911] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2611.336688][T19911] exFAT-fs (loop2): invalid boot region [ 2611.342175][T19911] exFAT-fs (loop2): failed to recognize exfat type [ 2611.349452][ T6071] usb 1-1: Using ep0 maxpacket: 8 [ 2611.357425][T16934] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2611.518874][T19894] loop2: detected capacity change from 0 to 512 [ 2611.536950][T19917] 9pnet: Insufficient options for proto=fd [ 2611.550532][T19894] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2611.561882][T19916] loop4: detected capacity change from 0 to 256 [ 2611.597454][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2611.612283][T19916] exfat: Deprecated parameter 'namecase' [ 2611.618018][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2611.634020][ T6071] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2611.650486][ T6071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.674199][ T6071] usb 1-1: config 0 descriptor?? [ 2611.679229][T19916] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2611.707250][T16934] usb 2-1: Using ep0 maxpacket: 8 [ 2611.728685][T19916] exFAT-fs (loop4): invalid boot region [ 2611.734306][T19916] exFAT-fs (loop4): failed to recognize exfat type [ 2611.827354][T16934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2611.877633][T16934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2611.897908][T16934] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2611.907156][T16934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.917834][T16934] usb 2-1: config 0 descriptor?? [ 2611.926466][T19916] loop4: detected capacity change from 0 to 512 [ 2611.988437][T19922] loop3: detected capacity change from 0 to 512 [ 2612.008741][T19916] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2612.117255][ T6071] usbhid 1-1:0.0: can't add hid device: -71 [ 2612.124922][ T6071] usbhid: probe of 1-1:0.0 failed with error -71 [ 2612.133494][ T6071] usb 1-1: USB disconnect, device number 74 [ 2612.263261][T19922] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.4648: bad orphan inode 17 [ 2612.287621][T19922] ext4_test_bit(bit=16, block=4) = 1 [ 2612.292796][T19922] is_bad_inode(inode)=0 [ 2612.296778][T19922] NEXT_ORPHAN(inode)=0 [ 2612.307316][T19922] max_ino=32 [ 2612.315349][T19922] i_nlink=1 [ 2612.320134][T19922] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2612.460293][T19931] loop0: detected capacity change from 0 to 256 [ 2612.530544][T19922] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.4648: bg 0: block 7: invalid block bitmap [ 2612.582019][T19931] exfat: Deprecated parameter 'namecase' [ 2612.599696][T19931] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2612.610091][T19931] exFAT-fs (loop0): invalid boot region [ 2612.615574][T19931] exFAT-fs (loop0): failed to recognize exfat type [ 2613.287262][T16934] usbhid 2-1:0.0: can't add hid device: -71 [ 2613.293149][T16934] usbhid: probe of 2-1:0.0 failed with error -71 [ 2613.308741][T16934] usb 2-1: USB disconnect, device number 58 [ 2613.317446][T19602] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2614.437187][T19602] usb 3-1: Using ep0 maxpacket: 32 [ 2614.554741][T19949] loop4: detected capacity change from 0 to 1024 [ 2614.641956][T19940] loop1: detected capacity change from 0 to 256 [ 2614.663602][T19949] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 2614.665393][T19602] usb 3-1: config 0 has no interfaces? [ 2614.676183][T19949] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2614.685660][T19949] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2614.687035][T19940] exfat: Deprecated parameter 'namecase' [ 2614.703985][T19949] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2614.727700][T19940] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2614.737900][T19940] exFAT-fs (loop1): invalid boot region [ 2614.743222][T19940] exFAT-fs (loop1): failed to recognize exfat type [ 2615.139328][T19940] loop1: detected capacity change from 0 to 512 [ 2615.147006][T16235] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2615.178587][T19940] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 2615.507280][T19602] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2615.518375][T19602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2615.528754][T19602] usb 3-1: config 0 descriptor?? [ 2615.547239][T19602] usb 3-1: can't set config #0, error -71 [ 2615.560486][T19602] usb 3-1: USB disconnect, device number 76 [ 2615.747253][T19958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4656'. [ 2615.778107][T16235] usb 4-1: Using ep0 maxpacket: 8 [ 2616.571504][T16235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2616.598784][T16235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2616.624575][T16235] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2616.634054][T16235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2616.665192][T16235] usb 4-1: config 0 descriptor?? [ 2617.113722][T19982] loop4: detected capacity change from 0 to 256 [ 2617.121433][T15859] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2617.171238][T19982] exfat: Deprecated parameter 'namecase' [ 2617.193658][T19982] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2617.203993][T19982] exFAT-fs (loop4): invalid boot region [ 2617.209546][T19982] exFAT-fs (loop4): failed to recognize exfat type [ 2617.287394][ T7735] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2617.457357][T19982] loop4: detected capacity change from 0 to 512 [ 2617.471770][T19982] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2617.597359][T15859] usb 3-1: Using ep0 maxpacket: 8 [ 2617.688588][T16235] usbhid 4-1:0.0: can't add hid device: -71 [ 2617.717589][ T7735] usb 2-1: Using ep0 maxpacket: 8 [ 2617.741033][T15859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2617.752608][T16235] usbhid: probe of 4-1:0.0 failed with error -71 [ 2617.759507][T15859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2617.771697][T16235] usb 4-1: USB disconnect, device number 65 [ 2617.778951][T15859] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2617.783425][T19960] 9pnet: Insufficient options for proto=fd [ 2617.790691][T15859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.805956][T15859] usb 3-1: config 0 descriptor?? [ 2617.897377][ T7735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2617.908534][ T7735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2617.919061][ T7735] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2617.928627][ T7735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.995367][ T7735] usb 2-1: config 0 descriptor?? [ 2618.357165][T19993] loop4: detected capacity change from 0 to 256 [ 2618.441046][T19993] exfat: Deprecated parameter 'namecase' [ 2618.458831][T19993] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2618.469297][T19993] exFAT-fs (loop4): invalid boot region [ 2618.474790][T19993] exFAT-fs (loop4): failed to recognize exfat type [ 2618.696836][T19993] loop4: detected capacity change from 0 to 512 [ 2618.709526][T19993] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2619.211333][T15859] usbhid 3-1:0.0: can't add hid device: -71 [ 2619.484179][T20001] loop3: detected capacity change from 0 to 256 [ 2619.494994][T19999] loop0: detected capacity change from 0 to 256 [ 2619.502752][ T7735] usbhid 2-1:0.0: can't add hid device: -71 [ 2619.508683][ T7735] usbhid: probe of 2-1:0.0 failed with error -71 [ 2619.648251][T20001] exfat: Deprecated parameter 'namecase' [ 2619.654475][T19999] exfat: Deprecated parameter 'namecase' [ 2619.660761][T15859] usbhid: probe of 3-1:0.0 failed with error -71 [ 2619.668693][T19999] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2619.678966][T19999] exFAT-fs (loop0): invalid boot region [ 2619.684469][T19999] exFAT-fs (loop0): failed to recognize exfat type [ 2619.834761][T15859] usb 3-1: USB disconnect, device number 77 [ 2619.842730][ T7735] usb 2-1: USB disconnect, device number 59 [ 2619.880849][T19999] loop0: detected capacity change from 0 to 512 [ 2619.888589][T20001] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2619.898884][T20001] exFAT-fs (loop3): invalid boot region [ 2619.904195][T20001] exFAT-fs (loop3): failed to recognize exfat type [ 2620.027901][T20016] loop1: detected capacity change from 0 to 256 [ 2620.074113][T20016] exfat: Deprecated parameter 'namecase' [ 2620.129026][T20001] loop3: detected capacity change from 0 to 512 [ 2620.137954][T19999] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 2620.162533][T20016] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2620.173789][T20016] exFAT-fs (loop1): invalid boot region [ 2620.179490][T20016] exFAT-fs (loop1): failed to recognize exfat type [ 2620.190383][T20001] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2620.539938][T20016] loop1: detected capacity change from 0 to 512 [ 2620.783401][T20016] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 2620.827741][ T30] audit: type=1400 audit(1727120779.888:457): avc: denied { write } for pid=20019 comm="syz.3.4677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2621.659012][T20032] loop1: detected capacity change from 0 to 256 [ 2621.669623][T20032] exfat: Deprecated parameter 'namecase' [ 2621.894710][T15859] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2621.923119][T20032] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2621.933421][T20032] exFAT-fs (loop1): invalid boot region [ 2621.939453][T20032] exFAT-fs (loop1): failed to recognize exfat type [ 2622.385969][T20037] loop4: detected capacity change from 0 to 512 [ 2622.637492][T20037] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 2622.666621][T20037] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2622.670725][T15859] usb 1-1: Using ep0 maxpacket: 8 [ 2622.991687][T20044] loop3: detected capacity change from 0 to 256 [ 2623.786792][T20044] exfat: Deprecated parameter 'namecase' [ 2624.975745][T20044] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2624.986208][T20044] exFAT-fs (loop3): invalid boot region [ 2624.991778][T20044] exFAT-fs (loop3): failed to recognize exfat type [ 2625.020424][T20037] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 2625.042485][T20037] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.4681: iget: bogus i_mode (5) [ 2625.066943][T20037] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4681: couldn't read orphan inode 16 (err -117) [ 2625.143971][T20043] loop3: detected capacity change from 0 to 512 [ 2625.160753][T20043] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2625.182582][T20037] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2625.687259][T15859] usb 1-1: device descriptor read/all, error -71 [ 2625.763218][T20060] loop2: detected capacity change from 0 to 256 [ 2625.811979][T20060] exfat: Deprecated parameter 'namecase' [ 2625.835887][T20060] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2625.846226][T20060] exFAT-fs (loop2): invalid boot region [ 2625.851736][T20060] exFAT-fs (loop2): failed to recognize exfat type [ 2626.551351][T20063] loop3: detected capacity change from 0 to 1024 [ 2626.585822][T20059] loop2: detected capacity change from 0 to 512 [ 2626.618323][T20059] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2626.629235][T20063] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2626.651175][T20063] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2626.679996][T20063] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2626.708650][T20063] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 2627.174245][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4687'. [ 2631.202605][T20091] loop0: detected capacity change from 0 to 512 [ 2631.425187][T20091] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.4696: bad orphan inode 17 [ 2631.444040][T20091] ext4_test_bit(bit=16, block=4) = 1 [ 2631.453808][T20091] is_bad_inode(inode)=0 [ 2631.459559][T20091] NEXT_ORPHAN(inode)=0 [ 2631.463475][T20091] max_ino=32 [ 2631.473800][T20091] i_nlink=1 [ 2631.476946][T20091] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2631.584010][T20102] hub 6-0:1.0: USB hub found [ 2631.589778][T20102] hub 6-0:1.0: 1 port detected [ 2631.596087][ T7735] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2631.897500][ T7735] usb 4-1: Using ep0 maxpacket: 8 [ 2632.038351][ T7735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2632.276551][ T7735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2632.280163][T20091] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.4696: bg 0: block 7: invalid block bitmap [ 2632.288820][ T7735] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2632.307537][ T7735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2632.347825][ T7735] usb 4-1: config 0 descriptor?? [ 2632.802063][T20108] loop4: detected capacity change from 0 to 256 [ 2632.841464][T20108] exfat: Deprecated parameter 'namecase' [ 2632.859290][T20108] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2632.870494][T20108] exFAT-fs (loop4): invalid boot region [ 2632.877236][T20108] exFAT-fs (loop4): failed to recognize exfat type [ 2633.109502][T20108] loop4: detected capacity change from 0 to 512 [ 2633.124222][T20108] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2633.627389][ T7735] usbhid 4-1:0.0: can't add hid device: -71 [ 2633.642324][ T7735] usbhid: probe of 4-1:0.0 failed with error -71 [ 2633.839504][ T7735] usb 4-1: USB disconnect, device number 66 [ 2634.014519][T20120] loop2: detected capacity change from 0 to 256 [ 2634.121211][T20120] exfat: Deprecated parameter 'namecase' [ 2634.143502][T20120] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2634.153825][T20120] exFAT-fs (loop2): invalid boot region [ 2634.159363][T20120] exFAT-fs (loop2): failed to recognize exfat type [ 2634.168890][ T60] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2634.446797][T20120] loop2: detected capacity change from 0 to 512 [ 2634.492874][T20120] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2634.502706][ T60] usb 1-1: Using ep0 maxpacket: 8 [ 2634.630535][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2634.663797][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2634.680969][ T60] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2634.691382][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.957355][T20112] loop1: detected capacity change from 0 to 40427 [ 2634.980552][ T60] usb 1-1: config 0 descriptor?? [ 2635.037011][T20123] loop4: detected capacity change from 0 to 256 [ 2635.044365][T20112] F2FS-fs (loop1): invalid crc value [ 2635.078441][T20112] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2635.087870][T20123] exfat: Deprecated parameter 'namecase' [ 2635.106702][T20123] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2635.117338][T20123] exFAT-fs (loop4): invalid boot region [ 2635.122934][T20123] exFAT-fs (loop4): failed to recognize exfat type [ 2635.220599][T20123] loop4: detected capacity change from 0 to 512 [ 2635.228023][T20123] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2635.244108][T20112] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 2635.252763][T20112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2635.397167][ T3499] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2636.469415][T20139] loop2: detected capacity change from 0 to 256 [ 2636.568202][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 2636.574277][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 2636.603125][ T60] usb 1-1: USB disconnect, device number 77 [ 2636.611369][T20139] exfat: Deprecated parameter 'namecase' [ 2636.629933][T20139] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2636.640836][T20139] exFAT-fs (loop2): invalid boot region [ 2636.646435][T20139] exFAT-fs (loop2): failed to recognize exfat type [ 2636.775796][T20137] loop2: detected capacity change from 0 to 512 [ 2636.784932][T20137] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2636.976878][T19365] attempt to access beyond end of device [ 2636.976878][T19365] loop1: rw=524288, want=45072, limit=40427 [ 2636.988806][T19365] attempt to access beyond end of device [ 2636.988806][T19365] loop1: rw=0, want=45072, limit=40427 [ 2637.027245][ T3499] usb 4-1: Using ep0 maxpacket: 8 [ 2637.794778][T20151] loop4: detected capacity change from 0 to 256 [ 2637.903732][ T44] attempt to access beyond end of device [ 2637.903732][ T44] loop1: rw=2049, want=45120, limit=40427 [ 2637.921901][T20151] exfat: Deprecated parameter 'namecase' [ 2637.946946][T20151] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2637.958746][T20151] exFAT-fs (loop4): invalid boot region [ 2637.964222][T20151] exFAT-fs (loop4): failed to recognize exfat type [ 2638.244677][T20151] loop4: detected capacity change from 0 to 512 [ 2638.282361][T20151] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2638.491004][T20156] loop3: detected capacity change from 0 to 512 [ 2638.506879][ T3499] usb 4-1: unable to read config index 0 descriptor/all [ 2638.514561][ T3499] usb 4-1: can't read configurations, error -71 [ 2638.739602][T20156] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2638.773880][T20156] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2638.840571][T20165] loop4: detected capacity change from 0 to 16 [ 2638.857202][T20158] loop2: detected capacity change from 0 to 256 [ 2638.887858][T20158] exfat: Deprecated parameter 'namecase' [ 2638.896194][T20158] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2638.907528][T20158] exFAT-fs (loop2): invalid boot region [ 2638.912944][T20158] exFAT-fs (loop2): failed to recognize exfat type [ 2638.925470][T20165] erofs: (device loop4): mounted with root inode @ nid 36. [ 2639.069777][T20156] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2639.081479][T20156] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.4713: iget: bogus i_mode (5) [ 2639.093244][T20156] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4713: couldn't read orphan inode 16 (err -117) [ 2639.105647][T20156] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2640.958726][ T49] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 2641.067315][T20173] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 2641.759589][T20185] loop2: detected capacity change from 0 to 256 [ 2641.771018][T20185] exfat: Deprecated parameter 'namecase' [ 2641.789182][T20185] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2641.799735][T20185] exFAT-fs (loop2): invalid boot region [ 2641.805211][T20185] exFAT-fs (loop2): failed to recognize exfat type [ 2642.621939][T17728] device bridge_slave_1 left promiscuous mode [ 2642.640912][T17728] bridge0: port 2(bridge_slave_1) entered disabled state [ 2642.669041][T17728] device bridge_slave_0 left promiscuous mode [ 2642.685133][T17728] bridge0: port 1(bridge_slave_0) entered disabled state [ 2642.745611][T17728] device veth1_macvtap left promiscuous mode [ 2642.775277][T17728] device veth0_vlan left promiscuous mode [ 2643.137198][ T7735] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2643.397346][ T7735] usb 3-1: Using ep0 maxpacket: 32 [ 2643.537613][ T7735] usb 3-1: config 0 has no interfaces? [ 2643.618232][ T7735] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2643.665300][ T7735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2643.987196][ T7735] usb 3-1: SerialNumber: syz [ 2643.993315][ T7735] usb 3-1: config 0 descriptor?? [ 2644.090050][T20047] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2644.251746][T20200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2644.258879][T20200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2644.266894][T20200] device bridge_slave_0 entered promiscuous mode [ 2644.308796][T20200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2644.337449][T20047] usb 5-1: Using ep0 maxpacket: 8 [ 2644.343178][T20200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2644.356417][T20200] device bridge_slave_1 entered promiscuous mode [ 2644.443276][T20212] loop3: detected capacity change from 0 to 512 [ 2644.457509][T20047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2644.558081][T20212] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2644.574677][T20212] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2644.814681][T20047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2644.830340][T20047] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2644.839420][T20047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2644.840327][T20212] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2644.856845][T20047] usb 5-1: config 0 descriptor?? [ 2644.872203][T20212] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.4729: iget: bogus i_mode (5) [ 2644.964250][T20212] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4729: couldn't read orphan inode 16 (err -117) [ 2645.099856][T20212] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2645.212177][T20200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.219816][T20200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2645.227261][T20200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.234224][T20200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2645.368602][ T1747] bridge0: port 1(bridge_slave_0) entered disabled state [ 2645.387980][ T1747] bridge0: port 2(bridge_slave_1) entered disabled state [ 2645.400951][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2645.416117][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2645.443370][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2645.459428][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2645.628429][ T1747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.635613][ T1747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2645.667313][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2645.675922][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2645.697574][ T1747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.704721][ T1747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2645.820201][T20227] hub 6-0:1.0: USB hub found [ 2645.826593][T20227] hub 6-0:1.0: 1 port detected [ 2646.269775][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2646.307902][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2646.467638][T16934] usb 3-1: USB disconnect, device number 78 [ 2646.497256][T20047] usbhid 5-1:0.0: can't add hid device: -71 [ 2646.527766][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2646.536353][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2646.569195][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2646.578396][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2646.592811][T20200] device veth0_vlan entered promiscuous mode [ 2646.621365][T20047] usbhid: probe of 5-1:0.0 failed with error -71 [ 2646.633932][T20047] usb 5-1: USB disconnect, device number 62 [ 2646.640516][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2646.660893][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2646.691857][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2646.702741][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2646.730990][T20200] device veth1_macvtap entered promiscuous mode [ 2646.746623][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2646.756283][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2646.767057][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2646.789214][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2646.798458][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2646.807491][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2646.816036][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2647.197190][ T1747] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2647.300613][T20255] 9pnet: Insufficient options for proto=fd [ 2647.587199][ T1747] usb 1-1: Using ep0 maxpacket: 8 [ 2647.739530][ T1747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2647.786832][ T1747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2647.885527][ T1747] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2647.940199][ T1747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.046381][ T1747] usb 1-1: config 0 descriptor?? [ 2648.360888][T20047] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2648.567405][T16231] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2648.697289][ T1747] usbhid 1-1:0.0: can't add hid device: -71 [ 2648.704133][ T1747] usbhid: probe of 1-1:0.0 failed with error -71 [ 2648.713628][ T1747] usb 1-1: USB disconnect, device number 78 [ 2648.727186][T20047] usb 2-1: Using ep0 maxpacket: 8 [ 2648.807251][T16231] usb 3-1: Using ep0 maxpacket: 8 [ 2648.817428][T16235] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2648.867308][T20047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2648.878257][T20047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2648.888417][T20047] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2648.907432][T20047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.925391][T20047] usb 2-1: config 0 descriptor?? [ 2649.041145][T16231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2649.052843][T16231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2649.063151][T16231] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2649.072417][T16231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2649.082173][T16231] usb 3-1: config 0 descriptor?? [ 2649.221676][T20276] loop4: detected capacity change from 0 to 256 [ 2649.229034][T16235] usb 4-1: Using ep0 maxpacket: 32 [ 2649.281254][T20276] exfat: Deprecated parameter 'namecase' [ 2649.306340][T20276] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2649.317157][T20276] exFAT-fs (loop4): invalid boot region [ 2649.322735][T20276] exFAT-fs (loop4): failed to recognize exfat type [ 2649.367486][T16235] usb 4-1: config 0 has no interfaces? [ 2649.565906][T20276] loop4: detected capacity change from 0 to 512 [ 2649.579406][T20276] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2649.700149][T16235] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2649.745038][T16235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2649.800646][T16235] usb 4-1: SerialNumber: syz [ 2649.826522][T16235] usb 4-1: config 0 descriptor?? [ 2649.897386][T16231] usbhid 3-1:0.0: can't add hid device: -71 [ 2649.903560][T16231] usbhid: probe of 3-1:0.0 failed with error -71 [ 2649.912802][T16231] usb 3-1: USB disconnect, device number 79 [ 2649.937581][T20047] usbhid 2-1:0.0: can't add hid device: -71 [ 2649.943689][T20047] usbhid: probe of 2-1:0.0 failed with error -71 [ 2649.951853][T20047] usb 2-1: USB disconnect, device number 60 [ 2650.177151][T16934] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2651.197289][T16934] usb 1-1: Using ep0 maxpacket: 8 [ 2651.221597][T20282] loop4: detected capacity change from 0 to 40427 [ 2651.285058][T20282] F2FS-fs (loop4): invalid crc value [ 2651.353414][T20282] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2651.356647][T16934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2651.371113][T16934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2651.388223][T16934] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2651.397596][T16934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2651.408040][T16934] usb 1-1: config 0 descriptor?? [ 2651.429651][T20291] loop2: detected capacity change from 0 to 256 [ 2651.459390][T20282] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 2651.466742][T20282] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2651.475451][T20291] exfat: Deprecated parameter 'namecase' [ 2651.527630][T20291] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2651.537940][T20291] exFAT-fs (loop2): invalid boot region [ 2651.543977][T20291] exFAT-fs (loop2): failed to recognize exfat type [ 2651.707499][T16235] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2653.680314][T16231] usb 4-1: USB disconnect, device number 69 [ 2653.699904][T18429] attempt to access beyond end of device [ 2653.699904][T18429] loop4: rw=524288, want=45072, limit=40427 [ 2653.726958][T18429] attempt to access beyond end of device [ 2653.726958][T18429] loop4: rw=0, want=45072, limit=40427 [ 2653.797212][ T30] audit: type=1400 audit(1727120812.848:458): avc: denied { name_bind } for pid=20305 comm="syz.0.4757" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2653.820384][T16934] usbhid 1-1:0.0: can't add hid device: -71 [ 2653.833226][T16934] usbhid: probe of 1-1:0.0 failed with error -71 [ 2653.871496][T16934] usb 1-1: USB disconnect, device number 79 [ 2653.884160][ T30] audit: type=1400 audit(1727120812.908:459): avc: denied { unmount } for pid=20305 comm="syz.0.4757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2653.924345][ T9534] attempt to access beyond end of device [ 2653.924345][ T9534] loop4: rw=2049, want=45120, limit=40427 [ 2653.947336][T16235] usb 2-1: Using ep0 maxpacket: 32 [ 2653.982395][T20308] loop3: detected capacity change from 0 to 256 [ 2654.011487][T20308] exfat: Deprecated parameter 'namecase' [ 2654.022137][T20308] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2654.032726][T20308] exFAT-fs (loop3): invalid boot region [ 2654.038220][T20308] exFAT-fs (loop3): failed to recognize exfat type [ 2654.077393][T16235] usb 2-1: config 0 has no interfaces? [ 2654.102703][T20308] loop3: detected capacity change from 0 to 512 [ 2654.111118][T20308] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2654.157681][T16235] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2654.171036][T16235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2654.187169][T16235] usb 2-1: SerialNumber: syz [ 2654.197770][T12536] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2654.202558][T16235] usb 2-1: config 0 descriptor?? [ 2654.287180][T16934] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2654.358652][T20047] usb 2-1: USB disconnect, device number 61 [ 2654.457187][T12536] usb 3-1: Using ep0 maxpacket: 8 [ 2654.483285][T20314] loop1: detected capacity change from 0 to 512 [ 2654.505670][T20314] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4761: bad orphan inode 17 [ 2654.516020][T20314] ext4_test_bit(bit=16, block=4) = 1 [ 2654.516534][ T9534] device bridge_slave_1 left promiscuous mode [ 2654.522189][T20314] is_bad_inode(inode)=0 [ 2654.527998][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 2654.531799][T20314] NEXT_ORPHAN(inode)=0 [ 2654.543972][T16934] usb 1-1: Using ep0 maxpacket: 32 [ 2654.544065][ T9534] device bridge_slave_0 left promiscuous mode [ 2654.549158][T20314] max_ino=32 [ 2654.556104][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.558796][T20314] i_nlink=1 [ 2654.571014][T20314] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2654.582391][ T9534] device veth1_macvtap left promiscuous mode [ 2654.588842][ T9534] device veth0_vlan left promiscuous mode [ 2654.680781][T12536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2654.697314][T12536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2654.706975][T12536] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2654.717151][T12536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2654.728627][T12536] usb 3-1: config 0 descriptor?? [ 2654.767515][T16934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2654.769450][T20314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.4761: bg 0: block 7: invalid block bitmap [ 2654.783525][T16934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2654.811050][T16934] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2654.837228][T16934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2654.869466][T16934] usb 1-1: config 0 descriptor?? [ 2654.908943][T16934] hub 1-1:0.0: USB hub found [ 2655.082023][T20328] loop1: detected capacity change from 0 to 512 [ 2655.112703][T20310] bridge0: port 1(bridge_slave_0) entered blocking state [ 2655.120337][T20310] bridge0: port 1(bridge_slave_0) entered disabled state [ 2655.129457][T20310] device bridge_slave_0 entered promiscuous mode [ 2655.138657][T20310] bridge0: port 2(bridge_slave_1) entered blocking state [ 2655.145762][T20310] bridge0: port 2(bridge_slave_1) entered disabled state [ 2655.154514][T20310] device bridge_slave_1 entered promiscuous mode [ 2655.167348][T20328] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 2655.275895][T20330] loop3: detected capacity change from 0 to 256 [ 2655.304490][T20328] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 2655.350883][T20330] exfat: Deprecated parameter 'namecase' [ 2655.369578][T20330] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2655.379845][T20330] exFAT-fs (loop3): invalid boot region [ 2655.385328][T20330] exFAT-fs (loop3): failed to recognize exfat type [ 2655.643838][T20330] loop3: detected capacity change from 0 to 512 [ 2655.682745][T20330] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2655.881793][T20328] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 2655.932026][T20328] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz.1.4765: iget: bogus i_mode (5) [ 2655.944257][T20328] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4765: couldn't read orphan inode 16 (err -117) [ 2655.957509][T16934] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2655.968050][T20328] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2656.017735][T12536] usbhid 3-1:0.0: can't add hid device: -71 [ 2656.023769][T12536] usbhid: probe of 3-1:0.0 failed with error -71 [ 2656.075791][T12536] usb 3-1: USB disconnect, device number 80 [ 2656.107632][T16934] usbhid 1-1:0.0: can't add hid device: -71 [ 2656.113933][T16934] usbhid: probe of 1-1:0.0 failed with error -71 [ 2656.178399][T16934] usb 1-1: USB disconnect, device number 80 [ 2656.385087][T20338] loop3: detected capacity change from 0 to 512 [ 2656.434294][T15836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2656.442063][T15836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2656.454419][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2656.463295][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2656.489912][T20338] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.4767: Invalid inode bitmap blk 4 in block_group 0 [ 2656.503502][T20338] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 2656.550622][ T30] audit: type=1400 audit(1727120815.608:460): avc: denied { read } for pid=20337 comm="syz.3.4767" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2656.576893][T20338] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 2656.596414][T12536] bridge0: port 1(bridge_slave_0) entered blocking state [ 2656.603463][T12536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2656.614790][ T30] audit: type=1400 audit(1727120815.638:461): avc: denied { append } for pid=20337 comm="syz.3.4767" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2656.647644][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2656.673870][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2656.682919][T12536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2656.691866][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 2656.698815][T12536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2656.761129][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2656.921720][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2656.956394][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2656.964703][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2656.974502][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2656.983578][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2657.009886][T20310] device veth0_vlan entered promiscuous mode [ 2657.115838][T20352] loop0: detected capacity change from 0 to 256 [ 2657.151017][T20352] exfat: Deprecated parameter 'namecase' [ 2657.179740][T20352] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2657.191923][T20352] exFAT-fs (loop0): invalid boot region [ 2657.198115][T20352] exFAT-fs (loop0): failed to recognize exfat type [ 2657.277234][T16235] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2657.471582][T20352] loop0: detected capacity change from 0 to 512 [ 2657.512958][T20352] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 2657.687212][T16235] usb 3-1: Using ep0 maxpacket: 8 [ 2657.722599][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2657.731973][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2657.740392][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2657.748874][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2657.761995][T20310] device veth1_macvtap entered promiscuous mode [ 2657.777987][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2657.807290][T16235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2657.817865][T12536] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2657.827163][T16235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2657.827545][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2657.854565][T16235] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2657.865604][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2657.874640][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2657.882143][T16235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2657.915075][T16235] usb 3-1: config 0 descriptor?? [ 2657.930651][T20357] loop3: detected capacity change from 0 to 512 [ 2657.992871][T20357] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2658.029405][T20357] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2658.069756][T12536] usb 2-1: Using ep0 maxpacket: 8 [ 2658.121659][T20364] loop4: detected capacity change from 0 to 512 [ 2658.158502][T20357] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2658.184044][T20364] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.4775: bad orphan inode 17 [ 2658.197607][T20357] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.4773: iget: bogus i_mode (5) [ 2658.209653][T12536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2658.221516][T12536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2658.232687][T12536] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2658.242718][T12536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2658.260718][T20364] ext4_test_bit(bit=16, block=4) = 1 [ 2658.266069][T20364] is_bad_inode(inode)=0 [ 2658.270587][T20357] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4773: couldn't read orphan inode 16 (err -117) [ 2658.279977][T20364] NEXT_ORPHAN(inode)=0 [ 2658.283749][T20357] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2658.286370][T20364] max_ino=32 [ 2658.312938][T12536] usb 2-1: config 0 descriptor?? [ 2658.319109][T20364] i_nlink=1 [ 2658.322151][T20364] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2658.347617][T16235] usbhid 3-1:0.0: can't add hid device: -71 [ 2658.365983][T16235] usbhid: probe of 3-1:0.0 failed with error -71 [ 2658.477631][T20368] loop0: detected capacity change from 0 to 256 [ 2658.531111][T20368] exfat: Deprecated parameter 'namecase' [ 2658.552051][T20368] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2658.562997][T20368] exFAT-fs (loop0): invalid boot region [ 2658.568512][T20368] exFAT-fs (loop0): failed to recognize exfat type [ 2658.641476][T16235] usb 3-1: USB disconnect, device number 81 [ 2658.809143][T20368] loop0: detected capacity change from 0 to 512 [ 2658.903785][T20368] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 2659.086225][T20364] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.4775: bg 0: block 7: invalid block bitmap [ 2660.452495][T20382] loop4: detected capacity change from 0 to 512 [ 2660.493997][T20382] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 2660.505215][T20382] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2660.531676][T20382] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 2660.543435][T20382] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.4779: iget: bogus i_mode (5) [ 2660.555358][T20382] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4779: couldn't read orphan inode 16 (err -117) [ 2660.567858][T12536] usbhid 2-1:0.0: can't add hid device: -71 [ 2660.568255][T20382] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2660.573813][T12536] usbhid: probe of 2-1:0.0 failed with error -71 [ 2660.627174][T16235] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2660.655200][T12536] usb 2-1: USB disconnect, device number 62 [ 2660.747258][T16231] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2660.947156][T16235] usb 3-1: Using ep0 maxpacket: 8 [ 2661.087192][T16235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2661.106929][T16235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2661.117135][T16231] usb 1-1: Using ep0 maxpacket: 32 [ 2661.123328][T16235] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2661.133563][T16235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2661.220205][T16235] usb 3-1: config 0 descriptor?? [ 2661.238160][T16231] usb 1-1: config 0 has no interfaces? [ 2661.328059][T16231] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2661.404796][T16231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2661.471168][T16231] usb 1-1: SerialNumber: syz [ 2661.561666][T16231] usb 1-1: config 0 descriptor?? [ 2661.837280][T16235] usbhid 3-1:0.0: can't add hid device: -71 [ 2661.843169][T16235] usbhid: probe of 3-1:0.0 failed with error -71 [ 2661.866061][T16235] usb 3-1: USB disconnect, device number 82 [ 2661.947164][T12536] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2662.217172][T12536] usb 2-1: Using ep0 maxpacket: 8 [ 2662.287538][T16231] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2662.727227][T16231] usb 4-1: Using ep0 maxpacket: 32 [ 2662.847630][T16231] usb 4-1: config 0 has no interfaces? [ 2662.927944][T16231] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2662.962278][T16231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2662.980663][T16231] usb 4-1: SerialNumber: syz [ 2663.019876][T16231] usb 4-1: config 0 descriptor?? [ 2663.037300][T12536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2663.053348][T12536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2663.068851][T12536] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2663.078715][T12536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2663.089131][T12536] usb 2-1: config 0 descriptor?? [ 2663.151347][ T30] audit: type=1400 audit(1727120822.208:462): avc: denied { audit_write } for pid=20407 comm="syz.2.4787" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2663.172904][ T30] audit: type=1107 audit(1727120822.208:463): pid=20407 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2663.187782][ T30] audit: type=1400 audit(1727120822.208:464): avc: denied { setopt } for pid=20407 comm="syz.2.4787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2663.208404][ T30] audit: type=1400 audit(1727120822.208:465): avc: denied { write } for pid=20407 comm="syz.2.4787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2665.900215][ T1747] usb 1-1: USB disconnect, device number 81 [ 2666.065368][T20419] 9pnet: Insufficient options for proto=fd [ 2666.311513][T12536] usbhid 2-1:0.0: can't add hid device: -71 [ 2666.322496][T12536] usbhid: probe of 2-1:0.0 failed with error -71 [ 2666.333853][T20424] loop4: detected capacity change from 0 to 512 [ 2666.336156][T12536] usb 2-1: USB disconnect, device number 63 [ 2666.536074][T20424] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 2666.642981][T20424] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2667.272253][T20047] usb 4-1: USB disconnect, device number 70 [ 2667.297740][T20424] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 2667.373240][T20424] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.4790: iget: bogus i_mode (5) [ 2667.387928][T20424] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4790: couldn't read orphan inode 16 (err -117) [ 2667.400997][T20424] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2667.471681][T20441] loop0: detected capacity change from 0 to 512 [ 2667.587947][T20441] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 2667.614964][T20441] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 2667.674641][T20446] loop3: detected capacity change from 0 to 128 [ 2667.699043][T20441] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 2667.710653][T20441] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #16: comm syz.0.4794: iget: bogus i_mode (5) [ 2667.722889][T20441] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4794: couldn't read orphan inode 16 (err -117) [ 2667.731784][T20450] loop2: detected capacity change from 0 to 512 [ 2667.736163][T20441] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2668.035214][T20450] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 2668.569630][T20450] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2668.571816][T16235] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2668.801794][T20450] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 2668.813122][T20450] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #16: comm syz.2.4797: iget: bogus i_mode (5) [ 2668.825718][T20450] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4797: couldn't read orphan inode 16 (err -117) [ 2668.845418][T20450] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2669.483872][T20456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4796'. [ 2669.757190][T16235] usb 2-1: Using ep0 maxpacket: 32 [ 2670.133720][T16235] usb 2-1: config 0 has no interfaces? [ 2671.722705][T20467] loop3: detected capacity change from 0 to 512 [ 2671.760620][T20467] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2671.797267][T16235] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2671.806216][T16235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2671.828632][T16235] usb 2-1: config 0 descriptor?? [ 2671.840234][T20467] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2671.849651][T16235] usb 2-1: can't set config #0, error -71 [ 2671.856699][T16235] usb 2-1: USB disconnect, device number 64 [ 2671.930424][T20467] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2671.953861][T20467] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.4801: iget: bogus i_mode (5) [ 2672.057536][T20467] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4801: couldn't read orphan inode 16 (err -117) [ 2672.098719][T20467] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2673.891045][T20480] loop1: detected capacity change from 0 to 256 [ 2674.697789][T20481] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4802'. [ 2674.706761][T20481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4802'. [ 2677.560946][T20490] loop4: detected capacity change from 0 to 512 [ 2677.660775][T20490] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 2677.692476][T20490] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2677.801874][T20493] loop2: detected capacity change from 0 to 256 [ 2677.841050][T20493] exfat: Deprecated parameter 'namecase' [ 2677.863667][T20493] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 2677.874270][T20493] exFAT-fs (loop2): invalid boot region [ 2677.879996][T20493] exFAT-fs (loop2): failed to recognize exfat type [ 2678.143917][T20493] loop2: detected capacity change from 0 to 512 [ 2678.182641][T20493] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2678.598635][T20501] loop1: detected capacity change from 0 to 512 [ 2678.613129][T20490] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 2678.635640][T20490] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.4809: iget: bogus i_mode (5) [ 2678.651056][T20490] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4809: couldn't read orphan inode 16 (err -117) [ 2678.679265][T20490] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2678.724930][T20501] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4810: bad orphan inode 17 [ 2678.756829][T20501] ext4_test_bit(bit=16, block=4) = 1 [ 2678.764250][T20501] is_bad_inode(inode)=0 [ 2678.809627][T20492] bridge0: port 1(bridge_slave_0) entered blocking state [ 2678.815813][T20501] NEXT_ORPHAN(inode)=0 [ 2678.821559][T20501] max_ino=32 [ 2678.824615][T20501] i_nlink=1 [ 2678.847297][T20501] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2678.849221][T20492] bridge0: port 1(bridge_slave_0) entered disabled state [ 2678.866158][T20492] device bridge_slave_0 entered promiscuous mode [ 2678.891128][T20492] bridge0: port 2(bridge_slave_1) entered blocking state [ 2678.898316][T20492] bridge0: port 2(bridge_slave_1) entered disabled state [ 2678.906327][T20492] device bridge_slave_1 entered promiscuous mode [ 2679.109362][T20501] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.4810: bg 0: block 7: invalid block bitmap [ 2680.215269][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2680.252543][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2680.528078][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2680.749843][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2680.787942][ T1747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2680.794925][ T1747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2680.860401][ T30] audit: type=1400 audit(1727120839.918:466): avc: denied { name_bind } for pid=20521 comm="syz.3.4816" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2680.905556][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2680.942954][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2680.953895][ T1747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2680.960877][ T1747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2681.005029][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2681.005021][T20532] loop1: detected capacity change from 0 to 512 [ 2681.019929][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2681.086547][T20532] EXT4-fs (loop1): 1 orphan inode deleted [ 2681.121815][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2681.146581][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2681.159826][T20532] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2681.257480][T16231] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2681.277516][T20532] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 2681.293161][ T44] device bridge_slave_1 left promiscuous mode [ 2681.349876][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 2681.378943][ T44] device bridge_slave_0 left promiscuous mode [ 2681.388043][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 2681.415901][ T44] device veth1_macvtap left promiscuous mode [ 2681.426008][ T44] device veth0_vlan left promiscuous mode [ 2681.508919][T16231] usb 3-1: Using ep0 maxpacket: 8 [ 2681.617220][ T1747] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 2681.627353][T16231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2681.647519][T16231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2681.667190][T16231] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2681.676529][T16231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.694023][T16231] usb 3-1: config 0 descriptor?? [ 2681.723006][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2681.733017][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2681.757827][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2681.766026][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2681.786310][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2681.791569][T20546] loop3: detected capacity change from 0 to 512 [ 2681.794755][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2681.809399][T20492] device veth0_vlan entered promiscuous mode [ 2681.828403][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2681.836775][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2681.849185][T20492] device veth1_macvtap entered promiscuous mode [ 2681.863190][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2681.871279][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2681.879958][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2681.890974][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2681.899849][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2681.907445][ T1747] usb 2-1: device descriptor read/64, error -71 [ 2681.915248][T20546] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2681.925308][T12536] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2681.926568][T20546] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2681.972986][T20546] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2681.996549][T20546] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.4822: iget: bogus i_mode (5) [ 2682.016298][T20546] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4822: couldn't read orphan inode 16 (err -117) [ 2682.029454][T20546] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2682.167267][T12536] usb 5-1: Using ep0 maxpacket: 32 [ 2682.257368][T16231] usbhid 3-1:0.0: can't add hid device: -71 [ 2682.263295][T16231] usbhid: probe of 3-1:0.0 failed with error -71 [ 2682.276780][T16231] usb 3-1: USB disconnect, device number 83 [ 2682.390186][ T1747] usb 2-1: device descriptor read/64, error -71 [ 2683.039424][T12536] usb 5-1: config 0 has no interfaces? [ 2683.047896][ T1747] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 2683.107184][ T5475] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2683.117699][T12536] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2683.126885][T12536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2683.135809][T12536] usb 5-1: SerialNumber: syz [ 2683.143005][T12536] usb 5-1: config 0 descriptor?? [ 2683.357214][ T5475] usb 1-1: Using ep0 maxpacket: 8 [ 2683.390762][ T1747] usb 2-1: device descriptor read/64, error -71 [ 2683.497375][ T5475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2683.526069][ T5475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2683.553314][ T5475] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2683.563905][T20565] loop3: detected capacity change from 0 to 512 [ 2683.571065][ T5475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2683.581870][ T5475] usb 1-1: config 0 descriptor?? [ 2683.628047][T20565] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2683.644333][T20565] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2683.702901][T20565] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2683.719254][T20565] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.4826: iget: bogus i_mode (5) [ 2683.738669][T20565] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4826: couldn't read orphan inode 16 (err -117) [ 2683.756631][T20565] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2683.966371][ T1747] usb 2-1: device descriptor read/64, error -71 [ 2684.087352][ T1747] usb usb2-port1: attempt power cycle [ 2684.907403][ T5475] usbhid 1-1:0.0: can't add hid device: -71 [ 2684.914045][ T5475] usbhid: probe of 1-1:0.0 failed with error -71 [ 2684.996816][T20047] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2685.010146][ T5475] usb 1-1: USB disconnect, device number 82 [ 2685.106041][T20582] loop3: detected capacity change from 0 to 512 [ 2685.148186][T20582] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2685.167400][T20582] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2685.207034][T20582] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2685.221175][T20582] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.4832: iget: bogus i_mode (5) [ 2685.243237][T20582] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4832: couldn't read orphan inode 16 (err -117) [ 2685.257172][T20047] usb 3-1: Using ep0 maxpacket: 32 [ 2685.265845][T20582] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2685.354401][T20590] FAULT_INJECTION: forcing a failure. [ 2685.354401][T20590] name failslab, interval 1, probability 0, space 0, times 1 [ 2685.384071][ T30] audit: type=1400 audit(1727120844.438:467): avc: denied { create } for pid=20591 comm="syz.1.4834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2685.395472][T20590] CPU: 1 PID: 20590 Comm: syz.0.4835 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 2685.413664][T20590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2685.423567][T20590] Call Trace: [ 2685.426682][T20590] [ 2685.429455][T20590] dump_stack_lvl+0x151/0x1c0 [ 2685.433970][T20590] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2685.439450][T20590] dump_stack+0x15/0x20 [ 2685.443434][T20590] should_fail+0x3c6/0x510 [ 2685.447690][T20590] __should_failslab+0xa4/0xe0 [ 2685.452289][T20590] ? getname_flags+0xba/0x520 [ 2685.456799][T20590] should_failslab+0x9/0x20 [ 2685.461140][T20590] slab_pre_alloc_hook+0x37/0xd0 [ 2685.465917][T20590] ? getname_flags+0xba/0x520 [ 2685.470426][T20590] kmem_cache_alloc+0x44/0x200 [ 2685.475035][T20590] getname_flags+0xba/0x520 [ 2685.479370][T20590] getname+0x19/0x20 [ 2685.483108][T20590] do_sys_openat2+0xd7/0x830 [ 2685.487523][T20590] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2685.493956][T20590] ? do_sys_open+0x220/0x220 [ 2685.498386][T20590] ? debug_smp_processor_id+0x17/0x20 [ 2685.503585][T20590] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2685.509486][T20590] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2685.514956][T20590] ? irqentry_exit+0x12/0x40 [ 2685.519377][T20590] ? exc_page_fault+0x47a/0x7f0 [ 2685.524095][T20590] __x64_sys_openat+0x243/0x290 [ 2685.528859][T20590] ? __ia32_sys_open+0x270/0x270 [ 2685.533650][T20590] x64_sys_call+0x6bf/0x9a0 [ 2685.537974][T20590] do_syscall_64+0x3b/0xb0 [ 2685.542221][T20590] ? clear_bhb_loop+0x35/0x90 [ 2685.546733][T20590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2685.552465][T20590] RIP: 0033:0x7fec1c96c890 [ 2685.556721][T20590] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 2685.576165][T20590] RSP: 002b:00007fec1b5e6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2685.584404][T20590] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fec1c96c890 [ 2685.592221][T20590] RDX: 0000000000000000 RSI: 00007fec1b5e6c10 RDI: 00000000ffffff9c [ 2685.600033][T20590] RBP: 00007fec1b5e6c10 R08: 0000000000000000 R09: 00236e6f6d627375 [ 2685.607839][T20590] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2685.615657][T20590] R13: 0000000000000000 R14: 00007fec1cb25f80 R15: 00007ffc3e9f9f88 [ 2685.623567][T20590] [ 2685.647291][T20047] usb 3-1: config 0 has no interfaces? [ 2685.727403][T20047] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2685.746650][T20047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2685.761371][T20047] usb 3-1: SerialNumber: syz [ 2685.777704][T20047] usb 3-1: config 0 descriptor?? [ 2685.802070][T12536] usb 5-1: USB disconnect, device number 63 [ 2685.822787][ T30] audit: type=1400 audit(1727120844.718:468): avc: denied { validate_trans } for pid=20591 comm="syz.1.4834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2686.406356][ T30] audit: type=1107 audit(1727120845.458:469): pid=20602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2686.503851][T20606] loop4: detected capacity change from 0 to 512 [ 2687.778827][T20606] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2687.802716][T20606] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 2687.824941][ T30] audit: type=1400 audit(1727120846.878:470): avc: denied { map } for pid=20591 comm="syz.1.4834" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2688.348291][ T30] audit: type=1400 audit(1727120847.338:471): avc: denied { read write } for pid=20600 comm="syz.4.4838" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2689.068415][T16235] usb 3-1: USB disconnect, device number 84 [ 2689.118852][ T30] audit: type=1400 audit(1727120847.338:472): avc: denied { open } for pid=20600 comm="syz.4.4838" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2689.339840][ T30] audit: type=1400 audit(1727120848.398:473): avc: denied { read } for pid=20630 comm="syz.0.4846" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2689.626432][T20640] loop4: detected capacity change from 0 to 512 [ 2689.705702][T20640] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 2689.732420][T20640] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2689.777160][T16235] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2689.785535][T20640] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 2689.807606][T20640] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.4850: iget: bogus i_mode (5) [ 2689.847557][T20640] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4850: couldn't read orphan inode 16 (err -117) [ 2689.877525][T20640] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2690.025522][ T30] audit: type=1400 audit(1727120849.078:474): avc: denied { bind } for pid=20647 comm="syz.1.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2690.167205][T16235] usb 1-1: Using ep0 maxpacket: 32 [ 2690.392320][T16235] usb 1-1: config 0 has no interfaces? [ 2690.478041][T16235] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2691.002286][T16235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2691.012381][T16235] usb 1-1: SerialNumber: syz [ 2691.049617][T16235] usb 1-1: config 0 descriptor?? [ 2691.137711][T20655] loop1: detected capacity change from 0 to 16 [ 2691.160704][T20657] FAULT_INJECTION: forcing a failure. [ 2691.160704][T20657] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2691.173812][T20657] CPU: 0 PID: 20657 Comm: syz.2.4856 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 2691.183691][T20657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2691.193595][T20657] Call Trace: [ 2691.196795][T20657] [ 2691.199569][T20657] dump_stack_lvl+0x151/0x1c0 [ 2691.204093][T20657] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2691.209561][T20657] ? kstrtouint_from_user+0x20a/0x2a0 [ 2691.214767][T20657] dump_stack+0x15/0x20 [ 2691.218759][T20657] should_fail+0x3c6/0x510 [ 2691.223014][T20657] should_fail_usercopy+0x1a/0x20 [ 2691.227867][T20657] _copy_to_user+0x20/0x90 [ 2691.232210][T20657] simple_read_from_buffer+0xc7/0x150 [ 2691.237422][T20657] proc_fail_nth_read+0x1a3/0x210 [ 2691.242293][T20657] ? proc_fault_inject_write+0x390/0x390 [ 2691.247936][T20657] ? fsnotify_perm+0x470/0x5d0 [ 2691.252539][T20657] ? security_file_permission+0x86/0xb0 [ 2691.257932][T20657] ? proc_fault_inject_write+0x390/0x390 [ 2691.263388][T20657] vfs_read+0x27d/0xd40 [ 2691.267381][T20657] ? kernel_read+0x1f0/0x1f0 [ 2691.271813][T20657] ? __kasan_check_write+0x14/0x20 [ 2691.276760][T20657] ? mutex_lock+0xb6/0x1e0 [ 2691.281013][T20657] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2691.287434][T20657] ? __fdget_pos+0x2e7/0x3a0 [ 2691.291855][T20657] ? ksys_read+0x77/0x2c0 [ 2691.296023][T20657] ksys_read+0x199/0x2c0 [ 2691.300110][T20657] ? __x64_sys_fsconfig+0xd0/0xd0 [ 2691.304975][T20657] ? vfs_write+0x1110/0x1110 [ 2691.309391][T20657] ? debug_smp_processor_id+0x17/0x20 [ 2691.314601][T20657] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2691.320503][T20657] __x64_sys_read+0x7b/0x90 [ 2691.324851][T20657] x64_sys_call+0x28/0x9a0 [ 2691.329099][T20657] do_syscall_64+0x3b/0xb0 [ 2691.333435][T20657] ? clear_bhb_loop+0x35/0x90 [ 2691.337945][T20657] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2691.343685][T20657] RIP: 0033:0x7f596d0cb93c [ 2691.347933][T20657] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2691.367476][T20657] RSP: 002b:00007f596bd46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2691.375720][T20657] RAX: ffffffffffffffda RBX: 00007f596d284f80 RCX: 00007f596d0cb93c [ 2691.383530][T20657] RDX: 000000000000000f RSI: 00007f596bd460a0 RDI: 0000000000000004 [ 2691.391343][T20657] RBP: 00007f596bd46090 R08: 0000000000000000 R09: 0000000000000000 [ 2691.399160][T20657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2691.407062][T20657] R13: 0000000000000000 R14: 00007f596d284f80 R15: 00007ffee8fb9558 [ 2691.414886][T20657] [ 2691.418568][T20655] erofs: Unknown parameter 't5;} 7_cN"Lam)p'6~' [ 2691.688802][T20666] loop4: detected capacity change from 0 to 512 [ 2691.951154][T20666] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2691.994362][T20666] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 2692.391471][T20689] FAULT_INJECTION: forcing a failure. [ 2692.391471][T20689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2692.404617][T20689] CPU: 1 PID: 20689 Comm: syz.4.4858 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 2692.414497][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2692.424388][T20689] Call Trace: [ 2692.427524][T20689] [ 2692.430287][T20689] dump_stack_lvl+0x151/0x1c0 [ 2692.434806][T20689] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2692.440281][T20689] dump_stack+0x15/0x20 [ 2692.444266][T20689] should_fail+0x3c6/0x510 [ 2692.448524][T20689] should_fail_usercopy+0x1a/0x20 [ 2692.453387][T20689] _copy_to_user+0x20/0x90 [ 2692.457637][T20689] simple_read_from_buffer+0xc7/0x150 [ 2692.462843][T20689] proc_fail_nth_read+0x1a3/0x210 [ 2692.467879][T20689] ? proc_fault_inject_write+0x390/0x390 [ 2692.473339][T20689] ? fsnotify_perm+0x470/0x5d0 [ 2692.477951][T20689] ? security_file_permission+0x86/0xb0 [ 2692.483324][T20689] ? proc_fault_inject_write+0x390/0x390 [ 2692.488796][T20689] vfs_read+0x27d/0xd40 [ 2692.492790][T20689] ? mutex_lock+0xa9/0x1e0 [ 2692.497045][T20689] ? kernel_read+0x1f0/0x1f0 [ 2692.501466][T20689] ? __kasan_check_write+0x14/0x20 [ 2692.506502][T20689] ? mutex_lock+0xb6/0x1e0 [ 2692.510840][T20689] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2692.517271][T20689] ? __fdget_pos+0x2e7/0x3a0 [ 2692.521692][T20689] ? ksys_read+0x77/0x2c0 [ 2692.525862][T20689] ksys_read+0x199/0x2c0 [ 2692.529939][T20689] ? __kasan_check_write+0x14/0x20 [ 2692.534884][T20689] ? vfs_write+0x1110/0x1110 [ 2692.539309][T20689] ? __kasan_check_read+0x11/0x20 [ 2692.544179][T20689] __x64_sys_read+0x7b/0x90 [ 2692.548514][T20689] x64_sys_call+0x28/0x9a0 [ 2692.552765][T20689] do_syscall_64+0x3b/0xb0 [ 2692.557014][T20689] ? clear_bhb_loop+0x35/0x90 [ 2692.561530][T20689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2692.567342][T20689] RIP: 0033:0x7f818bc8c93c [ 2692.571599][T20689] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2692.591247][T20689] RSP: 002b:00007f818a8e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2692.599461][T20689] RAX: ffffffffffffffda RBX: 00007f818be46058 RCX: 00007f818bc8c93c [ 2692.607373][T20689] RDX: 000000000000000f RSI: 00007f818a8e60a0 RDI: 0000000000000007 [ 2692.615278][T20689] RBP: 00007f818a8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 2692.623104][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2692.630901][T20689] R13: 0000000000000000 R14: 00007f818be46058 R15: 00007ffd4c4caa08 [ 2692.638720][T20689] [ 2692.712526][ T30] audit: type=1400 audit(1727120851.768:475): avc: denied { create } for pid=20677 comm="syz.1.4862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2692.745203][ T30] audit: type=1400 audit(1727120851.768:476): avc: denied { getopt } for pid=20677 comm="syz.1.4862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2692.919787][T20693] loop3: detected capacity change from 0 to 512 [ 2692.988245][T20693] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 2693.025120][T20693] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2693.048463][T20697] loop1: detected capacity change from 0 to 512 [ 2693.083297][T20693] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2693.105629][T20693] ================================================================== [ 2693.113672][T20693] BUG: KASAN: use-after-free in __ext4_iget+0x2ee/0x3f00 [ 2693.120621][T20693] Read of size 8 at addr ffff88811abc47b8 by task syz.3.4864/20693 [ 2693.128329][T20693] [ 2693.130502][T20693] CPU: 1 PID: 20693 Comm: syz.3.4864 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 2693.140915][T20693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2693.150824][T20693] Call Trace: [ 2693.153956][T20693] [ 2693.156722][T20693] dump_stack_lvl+0x151/0x1c0 [ 2693.161430][T20693] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2693.166982][T20693] ? panic+0x760/0x760 [ 2693.170923][T20693] ? __kasan_check_write+0x14/0x20 [ 2693.175940][T20693] print_address_description+0x87/0x3b0 [ 2693.181317][T20693] ? __se_sys_mount+0x2c4/0x3b0 [ 2693.186008][T20693] ? __x64_sys_mount+0xbf/0xd0 [ 2693.190624][T20693] kasan_report+0x179/0x1c0 [ 2693.194956][T20693] ? __ext4_iget+0x2ee/0x3f00 [ 2693.199457][T20693] ? __ext4_iget+0x2ee/0x3f00 [ 2693.203987][T20693] __asan_report_load8_noabort+0x14/0x20 [ 2693.209450][T20693] __ext4_iget+0x2ee/0x3f00 [ 2693.213782][T20693] ? xas_nomem+0x19a/0x1d0 [ 2693.218121][T20693] ? ida_alloc_range+0x9fd/0xa80 [ 2693.222906][T20693] ? __kasan_kmalloc+0x9/0x10 [ 2693.227413][T20693] ? ext4_get_projid+0x140/0x140 [ 2693.232189][T20693] ? __kasan_check_write+0x14/0x20 [ 2693.237301][T20693] ? _raw_write_lock+0xa4/0x170 [ 2693.242084][T20693] ? __proc_create+0x65a/0xa00 [ 2693.246772][T20693] ? ext4_init_orphan_info+0x161/0x1080 [ 2693.252165][T20693] ext4_enable_quotas+0x556/0x980 [ 2693.257014][T20693] ? ext4_force_commit+0xc0/0xc0 [ 2693.261789][T20693] ? proc_create+0x2b0/0x2b0 [ 2693.266218][T20693] ? ext4_register_sysfs+0x281/0x2c0 [ 2693.271340][T20693] ext4_fill_super+0x8b95/0x96e0 [ 2693.276307][T20693] ? ext4_mount+0x40/0x40 [ 2693.280455][T20693] ? vscnprintf+0x80/0x80 [ 2693.284610][T20693] ? set_blocksize+0x1f0/0x380 [ 2693.289217][T20693] ? sb_set_blocksize+0xa8/0xf0 [ 2693.293910][T20693] mount_bdev+0x282/0x3b0 [ 2693.298062][T20693] ? ext4_mount+0x40/0x40 [ 2693.302243][T20693] ext4_mount+0x34/0x40 [ 2693.306226][T20693] legacy_get_tree+0xf1/0x190 [ 2693.310738][T20693] ? ext4_errno_to_code+0x140/0x140 [ 2693.315776][T20693] vfs_get_tree+0x88/0x290 [ 2693.320030][T20693] do_new_mount+0x2ba/0xb30 [ 2693.324646][T20693] ? do_move_mount_old+0x160/0x160 [ 2693.329585][T20693] ? security_capable+0x87/0xb0 [ 2693.334276][T20693] ? ns_capable+0x89/0xe0 [ 2693.338530][T20693] path_mount+0x671/0x1070 [ 2693.342796][T20693] __se_sys_mount+0x2c4/0x3b0 [ 2693.347294][T20693] ? __x64_sys_mount+0xd0/0xd0 [ 2693.351894][T20693] ? __kasan_check_read+0x11/0x20 [ 2693.356755][T20693] __x64_sys_mount+0xbf/0xd0 [ 2693.361189][T20693] x64_sys_call+0x49d/0x9a0 [ 2693.365521][T20693] do_syscall_64+0x3b/0xb0 [ 2693.369774][T20693] ? clear_bhb_loop+0x35/0x90 [ 2693.374292][T20693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2693.380046][T20693] RIP: 0033:0x7f9eb9c0669a [ 2693.384462][T20693] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2693.403900][T20693] RSP: 002b:00007f9eb887de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2693.412232][T20693] RAX: ffffffffffffffda RBX: 00007f9eb887def0 RCX: 00007f9eb9c0669a [ 2693.420037][T20693] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 00007f9eb887deb0 [ 2693.428053][T20693] RBP: 0000000020000080 R08: 00007f9eb887def0 R09: 0000000000000000 [ 2693.435840][T20693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000140 [ 2693.443656][T20693] R13: 00007f9eb887deb0 R14: 00000000000004e2 R15: 000000000000002c [ 2693.451475][T20693] [ 2693.454326][T20693] [ 2693.456494][T20693] Allocated by task 18121: [ 2693.460748][T20693] __kasan_slab_alloc+0xb1/0xe0 [ 2693.465614][T20693] slab_post_alloc_hook+0x53/0x2c0 [ 2693.470559][T20693] kmem_cache_alloc+0xf5/0x200 [ 2693.475156][T20693] f2fs_alloc_inode+0x26/0x340 [ 2693.479759][T20693] new_inode_pseudo+0x64/0x220 [ 2693.484366][T20693] new_inode+0x28/0x1c0 [ 2693.488353][T20693] f2fs_new_inode+0x10e/0x1410 [ 2693.492953][T20693] __f2fs_tmpfile+0xab/0x380 [ 2693.497381][T20693] f2fs_rename2+0xa6c/0x28f0 [ 2693.501804][T20693] vfs_rename+0xd25/0x10e0 [ 2693.506071][T20693] ovl_rename+0xfbb/0x14a0 [ 2693.510312][T20693] vfs_rename+0xd25/0x10e0 [ 2693.514826][T20693] do_renameat2+0xb28/0x1480 [ 2693.519254][T20693] __x64_sys_renameat2+0xdd/0xf0 [ 2693.524038][T20693] x64_sys_call+0x85c/0x9a0 [ 2693.528363][T20693] do_syscall_64+0x3b/0xb0 [ 2693.532616][T20693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2693.538352][T20693] [ 2693.540609][T20693] Last potentially related work creation: [ 2693.546169][T20693] kasan_save_stack+0x3b/0x60 [ 2693.550671][T20693] __kasan_record_aux_stack+0xd3/0xf0 [ 2693.555882][T20693] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2693.561615][T20693] call_rcu+0x135/0x1310 [ 2693.565704][T20693] evict+0x5df/0x630 [ 2693.569708][T20693] evict_inodes+0x5db/0x660 [ 2693.574039][T20693] generic_shutdown_super+0x9c/0x2e0 [ 2693.579258][T20693] kill_block_super+0x7e/0xe0 [ 2693.583765][T20693] kill_f2fs_super+0x2f9/0x3c0 [ 2693.588373][T20693] deactivate_locked_super+0xad/0x110 [ 2693.593574][T20693] deactivate_super+0xbe/0xf0 [ 2693.598101][T20693] cleanup_mnt+0x45c/0x510 [ 2693.602339][T20693] __cleanup_mnt+0x19/0x20 [ 2693.606592][T20693] task_work_run+0x129/0x190 [ 2693.611018][T20693] do_exit+0xc48/0x2ca0 [ 2693.615011][T20693] do_group_exit+0x141/0x310 [ 2693.619443][T20693] __x64_sys_exit_group+0x3f/0x40 [ 2693.624331][T20693] x64_sys_call+0x610/0x9a0 [ 2693.628721][T20693] do_syscall_64+0x3b/0xb0 [ 2693.632989][T20693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2693.638702][T20693] [ 2693.640882][T20693] Second to last potentially related work creation: [ 2693.647304][T20693] kasan_save_stack+0x3b/0x60 [ 2693.651814][T20693] __kasan_record_aux_stack+0xd3/0xf0 [ 2693.657019][T20693] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2693.662777][T20693] call_rcu+0x135/0x1310 [ 2693.666829][T20693] evict+0x5df/0x630 [ 2693.670558][T20693] iput+0x63b/0x7e0 [ 2693.674211][T20693] f2fs_put_super+0x683/0xc10 [ 2693.678807][T20693] generic_shutdown_super+0x157/0x2e0 [ 2693.684019][T20693] kill_block_super+0x7e/0xe0 [ 2693.688613][T20693] kill_f2fs_super+0x2f9/0x3c0 [ 2693.693223][T20693] deactivate_locked_super+0xad/0x110 [ 2693.698428][T20693] deactivate_super+0xbe/0xf0 [ 2693.703022][T20693] cleanup_mnt+0x45c/0x510 [ 2693.707277][T20693] __cleanup_mnt+0x19/0x20 [ 2693.711537][T20693] task_work_run+0x129/0x190 [ 2693.716112][T20693] exit_to_user_mode_loop+0xc4/0xe0 [ 2693.721201][T20693] exit_to_user_mode_prepare+0x5a/0xa0 [ 2693.726504][T20693] syscall_exit_to_user_mode+0x26/0x160 [ 2693.731960][T20693] do_syscall_64+0x47/0xb0 [ 2693.736218][T20693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2693.741947][T20693] [ 2693.744114][T20693] The buggy address belongs to the object at ffff88811abc42b0 [ 2693.744114][T20693] which belongs to the cache f2fs_inode_cache of size 1424 [ 2693.758527][T20693] The buggy address is located 1288 bytes inside of [ 2693.758527][T20693] 1424-byte region [ffff88811abc42b0, ffff88811abc4840) [ 2693.771808][T20693] The buggy address belongs to the page: [ 2693.777288][T20693] page:ffffea00046af000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811abc1e50 pfn:0x11abc0 [ 2693.788732][T20693] head:ffffea00046af000 order:3 compound_mapcount:0 compound_pincount:0 [ 2693.796902][T20693] flags: 0x4000000000010200(slab|head|zone=1) [ 2693.802828][T20693] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888107fc2480 [ 2693.811326][T20693] raw: ffff88811abc1e50 0000000080150013 00000001ffffffff 0000000000000000 [ 2693.819717][T20693] page dumped because: kasan: bad access detected [ 2693.826001][T20693] page_owner tracks the page as allocated [ 2693.831528][T20693] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 423, ts 47178521360, free_ts 0 [ 2693.851973][T20693] post_alloc_hook+0x1a3/0x1b0 [ 2693.856562][T20693] prep_new_page+0x1b/0x110 [ 2693.860915][T20693] get_page_from_freelist+0x3550/0x35d0 [ 2693.866282][T20693] __alloc_pages+0x27e/0x8f0 [ 2693.870716][T20693] new_slab+0x9a/0x4e0 [ 2693.874618][T20693] ___slab_alloc+0x39e/0x830 [ 2693.879043][T20693] __slab_alloc+0x4a/0x90 [ 2693.883216][T20693] kmem_cache_alloc+0x134/0x200 [ 2693.887900][T20693] f2fs_alloc_inode+0x26/0x340 [ 2693.892498][T20693] iget_locked+0x174/0x860 [ 2693.896754][T20693] f2fs_iget+0x55/0x5140 [ 2693.900830][T20693] f2fs_fill_super+0x6688/0x8170 [ 2693.905603][T20693] mount_bdev+0x282/0x3b0 [ 2693.909774][T20693] f2fs_mount+0x34/0x40 [ 2693.913772][T20693] legacy_get_tree+0xf1/0x190 [ 2693.918283][T20693] vfs_get_tree+0x88/0x290 [ 2693.922540][T20693] page_owner free stack trace missing [ 2693.927746][T20693] [ 2693.929915][T20693] Memory state around the buggy address: [ 2693.935394][T20693] ffff88811abc4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2693.943292][T20693] ffff88811abc4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2693.951198][T20693] >ffff88811abc4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2693.959079][T20693] ^ [ 2693.964815][T20693] ffff88811abc4800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2693.972721][T20693] ffff88811abc4880: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 2693.980605][T20693] ================================================================== [ 2693.988593][T20693] Disabling lock debugging due to kernel taint [ 2694.008130][T20697] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 2694.019975][T20693] EXT4-fs error (device loop3): ext4_quota_enable:6378: inode #3: comm syz.3.4864: unexpected EA_INODE flag [ 2694.046255][T20697] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 2694.055820][T20693] EXT4-fs error (device loop3): ext4_quota_enable:6381: comm syz.3.4864: Bad quota inode: 3, type: 0 [ 2694.078774][T20693] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2694.101992][T20697] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 2694.118521][T20697] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz.1.4866: iget: bogus i_mode (5) [ 2694.136518][T20693] EXT4-fs (loop3): mount failed [ 2694.141717][T20697] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4866: couldn't read orphan inode 16 (err -117) [ 2694.154468][T16235] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2694.174311][T20697] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 2694.537391][T16235] usb 5-1: Using ep0 maxpacket: 8 [ 2694.758098][T16235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2695.265519][T16235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2695.276239][T16235] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2695.309695][T16235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2695.336380][T16235] usb 5-1: config 0 descriptor?? [ 2695.394259][T12536] usb 1-1: USB disconnect, device number 83 [ 2695.887221][T16235] usbhid 5-1:0.0: can't add hid device: -71 [ 2695.893251][T16235] usbhid: probe of 5-1:0.0 failed with error -71 [ 2695.907198][T16235] usb 5-1: USB disconnect, device number 64