last executing test programs: 6.152071288s ago: executing program 4 (id=4492): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r3, &(0x7f00000038c0)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) readv(r4, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x5e) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="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", 0x5c1}], 0x1}}], 0x2, 0x0) 6.00414672s ago: executing program 2 (id=4495): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x5e) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="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", 0x5c1}], 0x1}}], 0x2, 0x0) 5.247605064s ago: executing program 4 (id=4497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="00000000000000000000000000000000000000000000003c7971245ac41bfae2d736239ebc714d4ad9ac62add4e9369a00c4baf2e7068c7ed95d95143b205365ab8241d3c468a4c3547a91b6d82ee5a87bd29434d719dbc14707de20b39b39234830648557604607107e5702c90d0596241699ca22a5d22adc24ad52ead181c984cf84885a43b114e70c02bc2d0f3667590a3c1360527ea48d5ded943f57ccf62973f7ae9f186f7a60fb39b1c5cd8f63f2e28f4116136339c3378755a9caacae6f6a218a1c6cea907580c1552b50987351cf5dc1210aee3a9f9013c346e821ff00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0xd, 0x44005) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 4.908336693s ago: executing program 2 (id=4499): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@noauto_da_alloc}, {@journal_ioprio}, {@dioread_nolock}]}, 0x0, 0x4cf, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pause() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) getresgid(&(0x7f0000004080)=0x0, &(0x7f00000040c0), &(0x7f0000004100)) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c06050a020b0243000400ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) nanosleep(0x0, &(0x7f0000000080)) setregid(0x0, r3) setfsgid(0x0) setfsgid(r3) ioctl$TCFLSH(r2, 0x400455c8, 0x40000000004) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x240, 0x0) 4.3637347s ago: executing program 4 (id=4502): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000020000000000000090000000000f7a3239beced6600"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 4.222834142s ago: executing program 0 (id=4503): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) setregid(0xee00, 0x0) getresgid(&(0x7f0000004080)=0x0, &(0x7f00000040c0), &(0x7f0000004100)) setregid(0x0, r1) setfsgid(0x0) setfsgid(r1) 3.954766034s ago: executing program 2 (id=4504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f785"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) getsockname$packet(r5, 0x0, 0x0) 3.919787527s ago: executing program 0 (id=4505): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x558b, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffa, 0x0, "9a0ff8835e66e12aaf3cd3881e5f0619fe7e0b"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) write$cgroup_type(r1, &(0x7f0000000000), 0x6e000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, 0x0, 0x20044040) syz_open_procfs(0x0, &(0x7f0000000880)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r6, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000010000000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 3.918983837s ago: executing program 3 (id=4506): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0109c200e328a7aaaaaaaabb08003e000028000000000006"], 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843540140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_emit_ethernet(0x8a, &(0x7f00000016c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6fe7f17f0054110100000000000000000000000000000000fc010000000000000000000000000001870001416700000033000b81680000004e224d2300449078f43cba0633335e9594cdd3cc0be883fdeb729a7c69966e2f64d7fe06dbbda1590b774ac7dac17de6774809199af6c8b1f211ee497c6d8d8a051189aa7c2d4e482ea95e16ee8db74d9d6d43a8ee4c1b1c2febfeb7b2e3098f7303c40630b49ce68436a3165f8a0e6a9efc2173f27a62a96573fa78db394acfb48f11ff780f97fa1c4f486df6b6ab73f10033f29ff5d90a3d5aa759f04a0005719636538828ea07fdb6766b23c986"], 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/4472], 0x1178) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@grpjquota}, {@nogrpid}, {@errors_continue}, {@noinit_itable}, {@resgid}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @empty, 0xbe}, 0x1c) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = dup(r5) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x54}, {0x6}]}) dup(0xffffffffffffffff) 3.52505364s ago: executing program 4 (id=4507): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {0x0, 0x100000000000, 0x7, 0x0, 0x1ec6}, {}, 0x0, 0x1, 0x1}, {{@in=@dev, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x4}}, 0xe8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="00e10000000000000000009d7999c58f1e73bae6", @ANYBLOB="ba2353e26e8d4d1d1f8ecc2dc28172612d86ce1a7a6e8e2f71ec6f44d55638404488a2b16e8c362417252995fc22ebe5f6970c680b6d2db6d841f8aeeb3bf168499b24feba03f3c91b428a93c3afe86cea237403d28c68eb1724a01594305f708f561aa4d8dbc21333e49b3b18739b5bfc77139ba3b4f07129b44bb2cc5688b5f7d7eb93d3c467c8fd41b5aa89eca5c0caeee7fdfd09979204f7af0970254d205fe5afc4bd45b58c133c3dd8c4996db2362e2ed033fb5974741ab8f2cb1b0948c7c3", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@norecovery}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0x6000}}]}, 0xfb, 0x49f, &(0x7f0000001440)="$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") syz_emit_ethernet(0x25, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaa337488d48a2dd58ee44dade31e652"], 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x8004587d, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fchdir(r7) 3.204198478s ago: executing program 0 (id=4508): mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x80}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x88}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.203305338s ago: executing program 1 (id=4509): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x5e) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="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", 0x5c1}], 0x1}}], 0x2, 0x0) 3.027832043s ago: executing program 3 (id=4510): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r4, &(0x7f00000038c0)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x5e) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid\x00') setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r8, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="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", 0x5c1}], 0x1}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.016271454s ago: executing program 0 (id=4511): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@noauto_da_alloc}, {@journal_ioprio}, {@dioread_nolock}]}, 0x0, 0x4cf, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pause() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) getresgid(&(0x7f0000004080)=0x0, &(0x7f00000040c0), &(0x7f0000004100)) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c06050a020b0243000400ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) nanosleep(0x0, &(0x7f0000000080)) setregid(0x0, r3) setfsgid(0x0) setfsgid(r3) ioctl$TCFLSH(r2, 0x400455c8, 0x40000000004) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x240, 0x0) 2.985670696s ago: executing program 2 (id=4512): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000005780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0) 2.82217306s ago: executing program 4 (id=4513): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r3, &(0x7f00000038c0)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) readv(r6, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x5e) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/pid\x00') setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r7, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="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", 0x5c1}], 0x1}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.323174413s ago: executing program 1 (id=4514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095000000000000007e148f6dfccd351613736ae0780d575f4ba52cc09a090bd1ac926fa516d80bbaa7b420ca0fe465687984022f57090bd0921fb73b09ced3243a1f00334bd59ec31cee50207f14127afe052815426fca1ef174fd76df8064679d4523aa13654ad0fe43c14d452855f167fc8d0168a571754682c4804b6792ca30d216ffea41a9b1f371f86f73b161a4eb3faefd93ae3e0c29be21b760e6fdbdf06953493e3505440e5ee240cdce1ddf34fff227680c08dca0f3ba81289a67ced8f2ba29b940fd814fabcffea3e20a6d353d39d434f6a4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) open(&(0x7f0000000080)='./file0\x00', 0x412080, 0x140) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000380), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@broadcast, @broadcast}, &(0x7f0000000500)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x8, [@ptr={0xd, 0x0, 0x0, 0x2, 0x2}, @union={0xc, 0x2, 0x0, 0x5, 0x1, 0x9, [{0xe, 0x0, 0xfffffff9}, {0x2, 0x5}]}, @union={0x6, 0x2, 0x0, 0x5, 0x0, 0x1de, [{0x6, 0x3, 0x200}, {0xd, 0x0, 0x400}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x6f, 0x0, 0x0]}}, &(0x7f00000005c0), 0x74, 0x0, 0x0, 0xbd50, 0x0, @void, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0xa, 0x4, 0x6, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0xe22, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="b001"], 0x1b0) write$FUSE_BMAP(r9, &(0x7f00000000c0)={0x18}, 0x18) 2.187799424s ago: executing program 1 (id=4515): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@noauto_da_alloc}, {@journal_ioprio}, {@dioread_nolock}]}, 0x0, 0x4cf, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pause() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) getresgid(&(0x7f0000004080)=0x0, &(0x7f00000040c0), &(0x7f0000004100)) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c06050a020b0243000400ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) nanosleep(0x0, &(0x7f0000000080)) setregid(0x0, r3) setfsgid(0x0) setfsgid(r3) ioctl$TCFLSH(r2, 0x400455c8, 0x40000000004) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x240, 0x0) 2.160818537s ago: executing program 0 (id=4516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) getsockname$packet(r4, 0x0, 0x0) 2.107209982s ago: executing program 3 (id=4517): mount$incfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x80}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x88}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.083857263s ago: executing program 2 (id=4518): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000020000000000000090000000000f7a3239beced6600"], 0x48) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 2.073032544s ago: executing program 3 (id=4519): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x8001000000000000, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x88, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.011818239s ago: executing program 3 (id=4520): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0109c200e328a7aaaaaaaabb08003e000028000000000006"], 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843540140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_emit_ethernet(0x8a, &(0x7f00000016c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6fe7f17f0054110100000000000000000000000000000000fc010000000000000000000000000001870001416700000033000b81680000004e224d2300449078f43cba0633335e9594cdd3cc0be883fdeb729a7c69966e2f64d7fe06dbbda1590b774ac7dac17de6774809199af6c8b1f211ee497c6d8d8a051189aa7c2d4e482ea95e16ee8db74d9d6d43a8ee4c1b1c2febfeb7b2e3098f7303c40630b49ce68436a3165f8a0e6a9efc2173f27a62a96573fa78db394acfb48f11ff780f97fa1c4f486df6b6ab73f10033f29ff5d90a3d5aa759f04a0005719636538828ea07fdb6766b23c986"], 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/4472], 0x1178) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@grpjquota}, {@nogrpid}, {@errors_continue}, {@noinit_itable}, {@resgid}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @empty, 0xbe}, 0x1c) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = dup(r5) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x54}, {0x6}]}) dup(0xffffffffffffffff) 1.350853646s ago: executing program 4 (id=4521): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000092f1fdbf07938865416036c0dc5d1053391676ba88c93b610bd7ff340d7c12e82299974a5ac7cc7bb255adbd00a7f5c6ae50ef65fc367d92c8b818824bbae9e97163c85cd588a20ba031f00cbd983d6206a752f7d60000006d8232c982ca2e2c5e362b5f87fe750800"/133], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000006c008027", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES64=r0, @ANYRESOCT=r1], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00100700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket(0x2c, 0x3, 0x0) bind$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) epoll_create1(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f030e03f007120006001e1f89e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='nodiscard,nogc_merge,nolazytime,alloc_mode=reuse,fastboot,active_logs=6,background_gc=on,nobarrier,noflush_merge,resuid=', @ANYRESHEX=0x0, @ANYBLOB=',whint_mode=off,mode=adaptive,io_bits=00000000000000004026,discard_unit=segment,dont_appraise,smackfsroot=,\x00'], 0x0, 0x5505, &(0x7f0000002480)="$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") syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.320532288s ago: executing program 1 (id=4522): mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x80}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x88}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 336.610891ms ago: executing program 0 (id=4523): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {0x0, 0x100000000000, 0x7, 0x0, 0x1ec6}, {}, 0x0, 0x1, 0x1}, {{@in=@dev, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x4}}, 0xe8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="00e10000000000000000009d7999c58f1e73bae6", @ANYBLOB="ba2353e26e8d4d1d1f8ecc2dc28172612d86ce1a7a6e8e2f71ec6f44d55638404488a2b16e8c362417252995fc22ebe5f6970c680b6d2db6d841f8aeeb3bf168499b24feba03f3c91b428a93c3afe86cea237403d28c68eb1724a01594305f708f561aa4d8dbc21333e49b3b18739b5bfc77139ba3b4f07129b44bb2cc5688b5f7d7eb93d3c467c8fd41b5aa89eca5c0caeee7fdfd09979204f7af0970254d205fe5afc4bd45b58c133c3dd8c4996db2362e2ed033fb5974741ab8f2cb1b0948c7c3", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@norecovery}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0x6000}}]}, 0xfb, 0x49f, &(0x7f0000001440)="$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") syz_emit_ethernet(0x25, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaa337488d48a2dd58ee44dade31e652"], 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x8004587d, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fchdir(r7) 325.833552ms ago: executing program 2 (id=4524): r0 = syz_btf_id_by_name$bpf_lsm(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x100055, 0x0, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, 0x0, 0xb) splice(r6, 0x0, r5, 0x0, 0x1000, 0x0) write$binfmt_misc(r7, 0x0, 0xfdef) splice(r3, 0x0, r7, 0x0, 0x80, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r10, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) 307.027384ms ago: executing program 3 (id=4525): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x5e) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="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", 0x5c1}], 0x1}}], 0x2, 0x0) 306.299724ms ago: executing program 1 (id=4526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) (fail_nth: 2) 0s ago: executing program 1 (id=4527): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fstatfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000140)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) connect$unix(r8, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f0000000040)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) kernel console output (not intermixed with test programs): EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4230: couldn't read orphan inode 11 (err -117) [ 952.409663][T17644] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 952.557954][T17650] x_tables: duplicate underflow at hook 1 [ 952.607546][ T7351] Bluetooth: hci0: command 0x1003 tx timeout [ 952.614079][T16975] Bluetooth: hci0: sending frame failed (-49) [ 952.640586][T17651] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.4230: Directory hole found for htree leaf block 0 [ 952.813081][T17654] binder: Bad value for 'stats' [ 953.486874][T16030] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 953.757402][T16030] usb 2-1: Using ep0 maxpacket: 16 [ 953.762993][T17663] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.770025][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.777258][T17663] device bridge_slave_0 entered promiscuous mode [ 953.785726][T17663] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.792772][T17663] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.799990][T17663] device bridge_slave_1 entered promiscuous mode [ 953.847049][T17663] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.853926][T17663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.861031][T17663] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.867793][T17663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.889782][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 953.897177][T14300] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.904272][T16030] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 953.913308][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.913627][T16030] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 953.929871][T16030] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 953.939333][T16030] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 953.949067][T16030] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 953.958663][T16030] usb 2-1: config 1 interface 0 has no altsetting 0 [ 953.965057][T16030] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 953.974019][T16030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.982378][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 953.990604][T14300] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.997620][T14300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.004826][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 954.013283][T14300] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.020166][T14300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.027869][T16030] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 954.035215][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 954.043185][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 954.057830][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 954.070036][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 954.078177][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 954.086109][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 954.095252][T17663] device veth0_vlan entered promiscuous mode [ 954.109163][T17663] device veth1_macvtap entered promiscuous mode [ 954.125614][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 954.137921][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 954.154323][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 954.249449][T16030] scsi host1: usb-storage 2-1:1.0 [ 954.609737][T17680] device bridge_slave_0 left promiscuous mode [ 954.615812][T17680] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.687792][ T7348] Bluetooth: hci0: command 0x1001 tx timeout [ 954.695552][T16975] Bluetooth: hci0: sending frame failed (-49) [ 954.840723][T16030] usb 2-1: USB disconnect, device number 58 [ 954.846762][T14300] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 954.857612][T17680] device bridge_slave_1 left promiscuous mode [ 954.863646][T17680] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.881535][T14300] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 954.937241][T17684] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.944150][T17684] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.951846][T17684] device bridge_slave_0 entered promiscuous mode [ 954.959313][ T7156] device bridge_slave_1 left promiscuous mode [ 954.965343][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.972740][ T7156] device bridge_slave_0 left promiscuous mode [ 954.978777][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.986496][ T7156] device veth1_macvtap left promiscuous mode [ 954.992407][ T7156] device veth0_vlan left promiscuous mode [ 955.139254][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.146191][T17684] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.153576][T17684] device bridge_slave_1 entered promiscuous mode [ 955.213442][T17692] loop1: detected capacity change from 0 to 512 [ 955.354740][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.361618][T17684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.368762][T17684] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.375806][T17684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.550966][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 955.560629][T14300] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.577507][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.611712][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.619845][T14300] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.626681][T14300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.634133][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.642400][T14300] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.649418][T14300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.662237][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 955.671676][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 955.686081][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 955.698624][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 955.706581][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 955.714233][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 955.723242][T17684] device veth0_vlan entered promiscuous mode [ 955.734378][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 955.743875][T17684] device veth1_macvtap entered promiscuous mode [ 955.754435][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 955.768522][T14300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 956.097844][T17705] loop1: detected capacity change from 0 to 512 [ 956.118270][ T7156] device bridge_slave_1 left promiscuous mode [ 956.124321][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.132118][ T7156] device bridge_slave_0 left promiscuous mode [ 956.138308][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.145548][T17705] EXT4-fs (loop1): Test dummy encryption mode enabled [ 956.153109][ T7156] device veth1_macvtap left promiscuous mode [ 956.154064][T17705] EXT4-fs error (device loop1): __ext4_iget:4903: inode #11: block 1: comm syz.1.4243: invalid block [ 956.159423][ T7156] device veth0_vlan left promiscuous mode [ 956.169776][T17705] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4243: couldn't read orphan inode 11 (err -117) [ 956.187192][T17705] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 956.749416][T17712] loop0: detected capacity change from 0 to 40427 [ 956.767714][ T7351] Bluetooth: hci0: command 0x1009 tx timeout [ 956.802485][T17714] loop3: detected capacity change from 0 to 512 [ 956.809749][T17712] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 956.817376][T17712] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 956.828147][T17712] F2FS-fs (loop0): Found nat_bits in checkpoint [ 956.851735][T17712] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 956.858679][T17712] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 956.893496][T17714] EXT4-fs (loop3): Test dummy encryption mode enabled [ 956.905450][T17714] EXT4-fs error (device loop3): __ext4_iget:4903: inode #11: block 1: comm syz.3.4245: invalid block [ 956.916533][T17714] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4245: couldn't read orphan inode 11 (err -117) [ 956.929747][T17714] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 957.011291][T17722] loop0: detected capacity change from 0 to 512 [ 957.070918][T17722] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 957.260740][T17728] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.4245: Directory hole found for htree leaf block 0 [ 957.278682][T17722] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 957.922039][T17733] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.4247: Directory hole found for htree leaf block 0 [ 958.151485][T17741] loop3: detected capacity change from 0 to 512 [ 958.228021][T17741] EXT4-fs (loop3): Test dummy encryption mode enabled [ 958.236102][T17741] EXT4-fs error (device loop3): __ext4_iget:4903: inode #11: block 1: comm syz.3.4250: invalid block [ 958.247497][T17741] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4250: couldn't read orphan inode 11 (err -117) [ 958.259804][T17741] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 958.452124][T17750] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.4250: Directory hole found for htree leaf block 0 [ 959.313955][T17767] loop4: detected capacity change from 0 to 512 [ 959.337859][T17755] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.394230][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.401587][T17755] device bridge_slave_0 entered promiscuous mode [ 959.411800][T17755] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.418674][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.426029][T17755] device bridge_slave_1 entered promiscuous mode [ 959.438408][T17767] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4259: casefold flag without casefold feature [ 959.459446][T17767] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4259: couldn't read orphan inode 15 (err -117) [ 959.487596][T17767] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 959.547489][T17761] loop1: detected capacity change from 0 to 40427 [ 959.578283][T17755] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.585161][T17755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.592418][T17755] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.599265][T17755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.621888][T17761] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 959.641520][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 959.648834][T17761] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 959.656940][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.664544][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.809187][T17761] F2FS-fs (loop1): Found nat_bits in checkpoint [ 959.931102][T17755] device veth0_vlan entered promiscuous mode [ 959.938691][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 959.947989][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 959.958051][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 959.965414][T17761] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 959.965700][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 959.972269][T17761] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 960.000055][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 960.022757][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.029632][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.049324][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 960.064500][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.071377][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.080077][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 960.088153][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 960.119692][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 960.182293][T17755] device veth1_macvtap entered promiscuous mode [ 960.201424][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 960.219895][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 960.244531][T17783] loop1: detected capacity change from 0 to 512 [ 960.271741][T17783] EXT4-fs (loop1): Test dummy encryption mode enabled [ 960.278864][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 960.280594][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 960.280607][ T30] audit: type=1400 audit(1728791838.968:2622): avc: denied { create } for pid=17784 comm="syz.4.4262" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 960.298318][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 960.380614][T17783] EXT4-fs error (device loop1): __ext4_iget:4903: inode #11: block 1: comm syz.1.4260: invalid block [ 960.392885][T17783] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4260: couldn't read orphan inode 11 (err -117) [ 960.408133][T17783] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 960.544580][T17792] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 960.555695][T17792] FAT-fs (loop9): unable to read boot sector [ 960.593673][ T30] audit: type=1400 audit(1728791839.228:2623): avc: denied { mounton } for pid=17784 comm="syz.4.4262" path="/41/file0" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 960.597563][T17791] loop3: detected capacity change from 0 to 256 [ 960.791364][T17795] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.4260: Directory hole found for htree leaf block 0 [ 961.253183][ T30] audit: type=1400 audit(1728791839.918:2624): avc: denied { unlink } for pid=16960 comm="syz-executor" name="file0" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 962.792608][T17827] x_tables: duplicate underflow at hook 1 [ 962.846567][T17827] loop2: detected capacity change from 0 to 512 [ 963.657113][T14300] device bridge_slave_1 left promiscuous mode [ 963.684345][T17831] loop2: detected capacity change from 0 to 512 [ 963.691127][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.712018][T14300] device bridge_slave_0 left promiscuous mode [ 963.721958][T14300] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.729587][T17831] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 963.743842][T14300] device veth1_macvtap left promiscuous mode [ 963.757743][T14300] device veth0_vlan left promiscuous mode [ 963.759338][T17831] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4275: invalid indirect mapped block 4294967295 (level 1) [ 963.777819][T17818] loop1: detected capacity change from 0 to 40427 [ 963.784074][T17831] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4275: invalid indirect mapped block 4294967295 (level 1) [ 963.798383][T17831] EXT4-fs (loop2): 2 truncates cleaned up [ 963.804014][T17831] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 963.836962][T17836] loop3: detected capacity change from 0 to 512 [ 963.858320][T17818] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 963.869078][T17818] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 963.888206][T17818] F2FS-fs (loop1): invalid crc value [ 963.901678][T17818] F2FS-fs (loop1): Found nat_bits in checkpoint [ 963.921265][T17839] netlink: 'syz.2.4275': attribute type 4 has an invalid length. [ 963.933111][T17839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4275'. [ 963.942542][T17836] EXT4-fs (loop3): Test dummy encryption mode enabled [ 963.972423][T17836] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.4274: iget: bogus i_mode (0) [ 963.984086][T17836] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4274: couldn't read orphan inode 17 (err -117) [ 963.996468][T17836] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 964.027127][T17818] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 964.034069][T17818] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 964.051626][T17836] EXT4-fs (loop3): shut down requested (1) [ 964.124453][T17847] loop4: detected capacity change from 0 to 512 [ 964.203486][T17847] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4276: casefold flag without casefold feature [ 964.217959][T17847] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4276: couldn't read orphan inode 15 (err -117) [ 964.230128][T17847] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 964.300997][ T7156] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 964.310308][ T7156] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 966.283009][T17882] loop4: detected capacity change from 0 to 512 [ 966.298129][T17883] x_tables: duplicate underflow at hook 1 [ 966.369192][T17883] loop2: detected capacity change from 0 to 512 [ 966.697394][T17882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 966.923285][T17882] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 393240: comm syz.4.4281: invalid block [ 966.936017][T17882] EXT4-fs (loop4): Remounting filesystem read-only [ 966.942393][T17882] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4281: couldn't read orphan inode 11 (err -117) [ 966.954704][T17882] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,sb=0x0000000000000008,lazytime. Quota mode: none. [ 966.987472][ T30] audit: type=1400 audit(1728791845.658:2625): avc: denied { setopt } for pid=17877 comm="syz.4.4281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 967.027570][T17892] loop1: detected capacity change from 0 to 256 [ 967.099503][T17892] exfat: Deprecated parameter 'utf8' [ 967.144224][T17892] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 967.426869][T17892] overlayfs: filesystem on './file2' not supported [ 967.502911][T17903] loop1: detected capacity change from 0 to 512 [ 967.516720][T17896] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.525043][T17896] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.538550][T17903] EXT4-fs (loop1): Ignoring removed orlov option [ 967.544737][T17903] EXT4-fs (loop1): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 967.555862][T17896] device bridge_slave_0 entered promiscuous mode [ 967.562940][T17896] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.570311][T17896] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.587776][T17896] device bridge_slave_1 entered promiscuous mode [ 967.658157][T17896] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.665026][T17896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.672178][T17896] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.679053][T17896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.718632][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.725950][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.734785][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 967.765511][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 968.013807][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 968.022319][T17915] loop2: detected capacity change from 0 to 512 [ 968.022928][T17911] loop4: detected capacity change from 0 to 512 [ 968.028917][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.041349][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.052576][T17911] EXT4-fs (loop4): Test dummy encryption mode enabled [ 968.055162][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 968.070109][T17911] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.4289: iget: bogus i_mode (0) [ 968.081631][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.088507][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.126258][T17911] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4289: couldn't read orphan inode 17 (err -117) [ 968.127199][T17915] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4293: casefold flag without casefold feature [ 968.138544][T17911] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 968.151096][T17915] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4293: couldn't read orphan inode 15 (err -117) [ 968.228408][T17911] EXT4-fs (loop4): shut down requested (1) [ 968.265786][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 968.364140][T17915] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 968.381126][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 968.469465][T17896] device veth0_vlan entered promiscuous mode [ 968.526589][T17928] loop3: detected capacity change from 0 to 512 [ 968.534998][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 968.544529][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 968.553804][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 968.561497][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 968.917224][T17896] device veth1_macvtap entered promiscuous mode [ 968.924077][T17928] EXT4-fs (loop3): Ignoring removed orlov option [ 968.995160][T17928] EXT4-fs (loop3): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 969.036422][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 969.044661][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 969.104572][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 969.149803][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 969.158924][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 969.172722][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 969.365061][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 969.451410][ T7347] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 969.463471][T17943] device bridge_slave_0 left promiscuous mode [ 969.469680][T17943] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.480691][T17943] device bridge_slave_1 left promiscuous mode [ 969.486908][T17943] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.837531][ T7347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.857713][ T7347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.886764][ T7347] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 969.906519][ T7347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.960638][T17956] loop2: detected capacity change from 0 to 512 [ 969.965987][ T7347] usb 5-1: config 0 descriptor?? [ 969.990933][T17956] EXT4-fs (loop2): Ignoring removed orlov option [ 970.004911][T17953] loop1: detected capacity change from 0 to 40427 [ 970.011265][T17956] EXT4-fs (loop2): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 970.062929][T17953] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 970.074043][T14300] device bridge_slave_1 left promiscuous mode [ 970.075854][T17953] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 970.088393][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.089877][T17953] F2FS-fs (loop1): invalid crc value [ 970.100830][T17958] loop0: detected capacity change from 0 to 512 [ 970.112622][T14300] device bridge_slave_0 left promiscuous mode [ 970.121574][T17958] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4304: casefold flag without casefold feature [ 970.134926][T14300] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.142186][T17953] F2FS-fs (loop1): Found nat_bits in checkpoint [ 970.143288][T17958] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4304: couldn't read orphan inode 15 (err -117) [ 970.161289][T14300] device veth1_macvtap left promiscuous mode [ 970.167112][T14300] device veth0_vlan left promiscuous mode [ 970.172942][T17958] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 970.252313][T17953] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 970.259254][T17953] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 970.657863][ T30] audit: type=1400 audit(1728791849.338:2626): avc: denied { execute } for pid=17941 comm="syz.4.4299" path="/47/cgroup.controllers" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 970.684647][ T30] audit: type=1400 audit(1728791849.368:2627): avc: denied { getopt } for pid=17941 comm="syz.4.4299" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 970.717731][T17973] FAULT_INJECTION: forcing a failure. [ 970.717731][T17973] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 970.731232][T17973] CPU: 0 PID: 17973 Comm: syz.3.4306 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 970.741026][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 970.750920][T17973] Call Trace: [ 970.754046][T17973] [ 970.756824][T17973] dump_stack_lvl+0x151/0x1c0 [ 970.761336][T17973] ? io_uring_drop_tctx_refs+0x190/0x190 [ 970.766803][T17973] ? avc_has_perm+0x16f/0x260 [ 970.771319][T17973] dump_stack+0x15/0x20 [ 970.775483][T17973] should_fail+0x3c6/0x510 [ 970.779737][T17973] should_fail_alloc_page+0x5a/0x80 [ 970.784770][T17973] prepare_alloc_pages+0x15c/0x700 [ 970.789722][T17973] ? __alloc_pages_bulk+0xe40/0xe40 [ 970.794751][T17973] ? stack_trace_save+0x1c0/0x1c0 [ 970.799614][T17973] __alloc_pages+0x18c/0x8f0 [ 970.804048][T17973] ? prep_new_page+0x110/0x110 [ 970.808638][T17973] ? stack_trace_save+0x113/0x1c0 [ 970.813501][T17973] ? stack_trace_snprint+0xf0/0xf0 [ 970.818448][T17973] skb_page_frag_refill+0x209/0x3b0 [ 970.823482][T17973] tun_get_user+0x6f0/0x3aa0 [ 970.827908][T17973] ? __x64_sys_openat+0x200/0x290 [ 970.832765][T17973] ? x64_sys_call+0x6bf/0x9a0 [ 970.837283][T17973] ? tun_do_read+0x2010/0x2010 [ 970.841878][T17973] ? kstrtouint_from_user+0x20a/0x2a0 [ 970.847088][T17973] ? kstrtol_from_user+0x310/0x310 [ 970.852037][T17973] ? __htab_map_lookup_elem+0x1c6/0x240 [ 970.857419][T17973] ? avc_policy_seqno+0x1b/0x70 [ 970.862102][T17973] ? selinux_file_permission+0x2c4/0x570 [ 970.867572][T17973] tun_chr_write_iter+0x1e1/0x2e0 [ 970.872433][T17973] vfs_write+0xd5d/0x1110 [ 970.876599][T17973] ? file_end_write+0x1c0/0x1c0 [ 970.881287][T17973] ? __fdget_pos+0x209/0x3a0 [ 970.885710][T17973] ? ksys_write+0x77/0x2c0 [ 970.889973][T17973] ksys_write+0x199/0x2c0 [ 970.894130][T17973] ? __ia32_sys_read+0x90/0x90 [ 970.898730][T17973] ? debug_smp_processor_id+0x17/0x20 [ 970.903937][T17973] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 970.909840][T17973] __x64_sys_write+0x7b/0x90 [ 970.914265][T17973] x64_sys_call+0x2f/0x9a0 [ 970.918518][T17973] do_syscall_64+0x3b/0xb0 [ 970.922771][T17973] ? clear_bhb_loop+0x35/0x90 [ 970.927282][T17973] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 970.933014][T17973] RIP: 0033:0x7f3116889adf [ 970.937275][T17973] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 970.956707][T17973] RSP: 002b:00007f3115504000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 970.964954][T17973] RAX: ffffffffffffffda RBX: 00007f3116a42f80 RCX: 00007f3116889adf [ 970.972765][T17973] RDX: 0000000000000083 RSI: 0000000020000240 RDI: 00000000000000c8 [ 970.980575][T17973] RBP: 00007f3115504090 R08: 0000000000000000 R09: 0000000000000000 [ 970.988388][T17973] R10: 0000000000000083 R11: 0000000000000293 R12: 0000000000000001 [ 970.996198][T17973] R13: 0000000000000000 R14: 00007f3116a42f80 R15: 00007ffc01d957d8 [ 971.004016][T17973] [ 971.197407][ T7347] usbhid 5-1:0.0: can't add hid device: -71 [ 971.203279][ T7347] usbhid: probe of 5-1:0.0 failed with error -71 [ 971.216340][ T7347] usb 5-1: USB disconnect, device number 74 [ 971.246214][ T30] audit: type=1400 audit(1728791849.928:2628): avc: denied { name_bind } for pid=17982 comm="syz.3.4310" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 971.295151][T17985] loop3: detected capacity change from 0 to 256 [ 971.313499][T17987] loop0: detected capacity change from 0 to 512 [ 971.327675][T17985] exfat: Deprecated parameter 'utf8' [ 971.357974][T17987] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 971.371945][T17987] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4307: invalid block [ 971.387944][T17987] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4307: invalid indirect mapped block 4294967295 (level 1) [ 971.389973][T17985] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 971.401989][T17987] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4307: invalid indirect mapped block 4294967295 (level 1) [ 971.427859][T17987] EXT4-fs (loop0): 2 truncates cleaned up [ 971.433399][T17987] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 971.496126][T17985] overlayfs: filesystem on './file2' not supported [ 971.527877][T17991] netlink: 'syz.0.4307': attribute type 4 has an invalid length. [ 971.535421][T17991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4307'. [ 971.626538][T17993] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 971.719705][T17994] device veth0_vlan left promiscuous mode [ 971.726807][T17994] device veth0_vlan entered promiscuous mode [ 971.738732][T17994] device veth1_macvtap left promiscuous mode [ 971.746316][T17994] device veth1_macvtap entered promiscuous mode [ 971.755296][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 971.763589][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 971.772160][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 971.781547][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 971.791002][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 971.802256][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 971.810748][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 971.819127][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 971.827805][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 971.836023][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 971.844529][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 971.852804][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 971.861205][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 971.867466][T17997] loop4: detected capacity change from 0 to 40427 [ 971.869468][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 971.883131][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 971.891056][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 971.899160][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 971.907094][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 971.915230][T17993] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 971.938063][T17997] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 971.952225][T17997] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 971.962661][T17993] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 971.971544][T17993] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 971.971958][T17997] F2FS-fs (loop4): Found nat_bits in checkpoint [ 971.979390][T17993] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 971.993347][T17993] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 972.001159][T17993] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 972.008953][T17993] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 972.012594][T17997] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 972.016856][T17993] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 972.023568][T17997] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 972.447188][T16960] attempt to access beyond end of device [ 972.447188][T16960] loop4: rw=2049, want=45104, limit=40427 [ 972.681550][T17994] syz.3.4312 (17994) used greatest stack depth: 18336 bytes left [ 972.764305][T18017] loop3: detected capacity change from 0 to 512 [ 973.550174][T18019] x_tables: duplicate underflow at hook 1 [ 973.558862][T18019] loop4: detected capacity change from 0 to 512 [ 973.730929][T18017] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.4318: casefold flag without casefold feature [ 973.743678][T18017] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4318: couldn't read orphan inode 15 (err -117) [ 973.755792][T18017] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 974.160850][T18037] FAULT_INJECTION: forcing a failure. [ 974.160850][T18037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.173943][T18037] CPU: 1 PID: 18037 Comm: syz.4.4322 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 974.183736][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 974.193633][T18037] Call Trace: [ 974.196756][T18037] [ 974.199532][T18037] dump_stack_lvl+0x151/0x1c0 [ 974.203521][T18041] loop2: detected capacity change from 0 to 1024 [ 974.204040][T18037] ? io_uring_drop_tctx_refs+0x190/0x190 [ 974.215675][T18037] dump_stack+0x15/0x20 [ 974.219666][T18037] should_fail+0x3c6/0x510 [ 974.223924][T18037] should_fail_usercopy+0x1a/0x20 [ 974.228774][T18037] _copy_from_user+0x20/0xd0 [ 974.233374][T18037] __sys_bpf+0x1e9/0x760 [ 974.237461][T18037] ? fput_many+0x160/0x1b0 [ 974.241716][T18037] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 974.246918][T18037] ? debug_smp_processor_id+0x17/0x20 [ 974.252123][T18037] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 974.258025][T18037] __x64_sys_bpf+0x7c/0x90 [ 974.262279][T18037] x64_sys_call+0x87f/0x9a0 [ 974.266704][T18037] do_syscall_64+0x3b/0xb0 [ 974.270958][T18037] ? clear_bhb_loop+0x35/0x90 [ 974.275471][T18037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 974.281199][T18037] RIP: 0033:0x7fbfc6c5eff9 [ 974.285454][T18037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.304895][T18037] RSP: 002b:00007fbfc58d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 974.313137][T18037] RAX: ffffffffffffffda RBX: 00007fbfc6e16f80 RCX: 00007fbfc6c5eff9 [ 974.320951][T18037] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 0000000000000000 [ 974.328761][T18037] RBP: 00007fbfc58d8090 R08: 0000000000000000 R09: 0000000000000000 [ 974.336747][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.344557][T18037] R13: 0000000000000000 R14: 00007fbfc6e16f80 R15: 00007ffd15540658 [ 974.352376][T18037] [ 974.357287][T18041] EXT4-fs (loop2): Test dummy encryption mode enabled [ 974.369823][T18041] EXT4-fs (loop2): Ignoring removed orlov option [ 974.390154][T18041] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,sysvgroups,commit=0x0000000000000005,orlov,nobarrier,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 974.420199][T18044] loop4: detected capacity change from 0 to 512 [ 974.478444][T18044] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 974.498137][T18044] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.4325: invalid block [ 974.510231][T18044] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4325: invalid indirect mapped block 4294967295 (level 1) [ 974.524443][T18044] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4325: invalid indirect mapped block 4294967295 (level 1) [ 974.538824][T18044] EXT4-fs (loop4): 2 truncates cleaned up [ 974.544382][T18044] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 974.678801][T18053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4325'. [ 974.902257][T18048] loop3: detected capacity change from 0 to 40427 [ 975.372072][T18063] 9pnet: Could not find request transport: fd0x000000000000000a [ 976.150610][ T30] audit: type=1400 audit(1728791854.068:2629): avc: denied { write } for pid=18059 comm="syz.4.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 976.175573][T18048] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 976.183290][T18048] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 976.211337][T18048] F2FS-fs (loop3): Found nat_bits in checkpoint [ 976.249987][T18048] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 976.276632][T18048] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 976.413470][T18081] FAULT_INJECTION: forcing a failure. [ 976.413470][T18081] name failslab, interval 1, probability 0, space 0, times 0 [ 976.426043][T18081] CPU: 1 PID: 18081 Comm: syz.4.4332 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 976.435791][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 976.445982][T18081] Call Trace: [ 976.449102][T18081] [ 976.451967][T18081] dump_stack_lvl+0x151/0x1c0 [ 976.456478][T18081] ? io_uring_drop_tctx_refs+0x190/0x190 [ 976.461949][T18081] dump_stack+0x15/0x20 [ 976.465946][T18081] should_fail+0x3c6/0x510 [ 976.470191][T18081] __should_failslab+0xa4/0xe0 [ 976.474790][T18081] should_failslab+0x9/0x20 [ 976.479131][T18081] slab_pre_alloc_hook+0x37/0xd0 [ 976.483903][T18081] __kmalloc+0x6d/0x270 [ 976.487895][T18081] ? kvmalloc_node+0x1f0/0x4d0 [ 976.492504][T18081] kvmalloc_node+0x1f0/0x4d0 [ 976.496925][T18081] ? vm_mmap+0xb0/0xb0 [ 976.500833][T18081] ? memset+0x35/0x40 [ 976.504742][T18081] alloc_netdev_mqs+0x832/0xc90 [ 976.509424][T18081] rtnl_create_link+0x2e1/0x9d0 [ 976.514140][T18081] rtnl_newlink+0x13dc/0x2050 [ 976.518625][T18081] ? rtnl_setlink+0x560/0x560 [ 976.523136][T18081] ? __kasan_check_write+0x14/0x20 [ 976.528081][T18081] ? _raw_spin_lock+0xa4/0x1b0 [ 976.532685][T18081] ? _raw_spin_trylock_bh+0x190/0x190 [ 976.537894][T18081] ? compat_start_thread+0x20/0x20 [ 976.542835][T18081] ? kvm_sched_clock_read+0x18/0x40 [ 976.547954][T18081] ? sched_clock+0x9/0x10 [ 976.552123][T18081] ? sched_clock_cpu+0x18/0x3b0 [ 976.556821][T18081] ? __kasan_check_write+0x14/0x20 [ 976.561756][T18081] ? mutex_lock+0xb6/0x1e0 [ 976.566011][T18081] ? wait_for_completion_killable_timeout+0x10/0x10 [ 976.572558][T18081] ? __rcu_read_unlock+0x7e/0xd0 [ 976.577428][T18081] ? rtnl_setlink+0x560/0x560 [ 976.581942][T18081] rtnetlink_rcv_msg+0x951/0xc40 [ 976.586721][T18081] ? __kasan_check_write+0x14/0x20 [ 976.591663][T18081] ? rtnetlink_bind+0x80/0x80 [ 976.596170][T18081] ? _raw_spin_lock+0xa4/0x1b0 [ 976.600771][T18081] ? compat_start_thread+0x20/0x20 [ 976.605717][T18081] ? kvm_sched_clock_read+0x18/0x40 [ 976.610751][T18081] ? sched_clock+0x9/0x10 [ 976.614916][T18081] ? sched_clock_cpu+0x18/0x3b0 [ 976.619603][T18081] ? plist_del+0x40e/0x420 [ 976.623856][T18081] ? plist_add+0x3e0/0x460 [ 976.628112][T18081] ? _raw_spin_unlock+0x4d/0x70 [ 976.632796][T18081] ? finish_task_switch+0x167/0x7b0 [ 976.637833][T18081] ? __kasan_check_write+0x14/0x20 [ 976.642778][T18081] ? _raw_spin_lock+0xa4/0x1b0 [ 976.647379][T18081] ? _raw_spin_trylock_bh+0x190/0x190 [ 976.652587][T18081] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 976.658236][T18081] ? rcu_preempt_deferred_qs_irqrestore+0x709/0x9f0 [ 976.664652][T18081] netlink_rcv_skb+0x1cf/0x410 [ 976.669250][T18081] ? rtnetlink_bind+0x80/0x80 [ 976.673766][T18081] ? netlink_ack+0xb10/0xb10 [ 976.678189][T18081] ? irqentry_exit+0x30/0x40 [ 976.682702][T18081] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 976.688172][T18081] rtnetlink_rcv+0x1c/0x20 [ 976.692434][T18081] netlink_unicast+0x8df/0xac0 [ 976.697118][T18081] ? netlink_detachskb+0x90/0x90 [ 976.701887][T18081] ? security_netlink_send+0x7b/0xa0 [ 976.707006][T18081] netlink_sendmsg+0xa0a/0xd20 [ 976.711610][T18081] ? netlink_getsockopt+0x560/0x560 [ 976.716642][T18081] ? security_socket_sendmsg+0x82/0xb0 [ 976.721936][T18081] ? netlink_getsockopt+0x560/0x560 [ 976.726969][T18081] ____sys_sendmsg+0x59e/0x8f0 [ 976.731571][T18081] ? __sys_sendmsg_sock+0x40/0x40 [ 976.736494][T18081] ? import_iovec+0xe5/0x120 [ 976.740855][T18081] ___sys_sendmsg+0x252/0x2e0 [ 976.745369][T18081] ? irqentry_exit_cond_resched+0x2a/0x30 [ 976.750922][T18081] ? __sys_sendmsg+0x260/0x260 [ 976.755524][T18081] ? __switch_to+0x62a/0x1190 [ 976.760039][T18081] ? sched_clock_cpu+0x18/0x3b0 [ 976.764739][T18081] ? plist_del+0x40e/0x420 [ 976.768982][T18081] ? __fdget+0x1bc/0x240 [ 976.773074][T18081] __se_sys_sendmsg+0x19a/0x260 [ 976.777747][T18081] ? __x64_sys_sendmsg+0x90/0x90 [ 976.782519][T18081] ? ksys_write+0x260/0x2c0 [ 976.786859][T18081] ? __kasan_check_write+0x14/0x20 [ 976.791805][T18081] ? switch_fpu_return+0x15f/0x2e0 [ 976.796862][T18081] __x64_sys_sendmsg+0x7b/0x90 [ 976.801464][T18081] x64_sys_call+0x16a/0x9a0 [ 976.805829][T18081] do_syscall_64+0x3b/0xb0 [ 976.810065][T18081] ? clear_bhb_loop+0x35/0x90 [ 976.814571][T18081] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 976.820295][T18081] RIP: 0033:0x7fbfc6c5eff9 [ 976.824553][T18081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.843994][T18081] RSP: 002b:00007fbfc5896038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.852236][T18081] RAX: ffffffffffffffda RBX: 00007fbfc6e17130 RCX: 00007fbfc6c5eff9 [ 976.860048][T18081] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 976.867857][T18081] RBP: 00007fbfc5896090 R08: 0000000000000000 R09: 0000000000000000 [ 976.875667][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.883482][T18081] R13: 0000000000000000 R14: 00007fbfc6e17130 R15: 00007ffd15540658 [ 976.891301][T18081] [ 976.966707][T18078] loop2: detected capacity change from 0 to 40427 [ 977.025853][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4333'. [ 977.035067][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4333'. [ 977.045209][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4333'. [ 977.054665][T18078] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 977.064352][T18078] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 977.081593][T18078] F2FS-fs (loop2): invalid crc value [ 977.129147][T18078] F2FS-fs (loop2): Found nat_bits in checkpoint [ 977.165374][T18078] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 977.173302][T18078] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 977.206648][T18078] xt_CT: No such helper "syz0" [ 977.211957][ T30] audit: type=1400 audit(1728791855.898:2630): avc: denied { create } for pid=18077 comm="syz.2.4329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 977.248027][ T318] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 977.262056][ T318] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 977.287925][T18094] FAULT_INJECTION: forcing a failure. [ 977.287925][T18094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.317404][T18094] CPU: 0 PID: 18094 Comm: syz.3.4336 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 977.327213][T18094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 977.337108][T18094] Call Trace: [ 977.340237][T18094] [ 977.343010][T18094] dump_stack_lvl+0x151/0x1c0 [ 977.347607][T18094] ? io_uring_drop_tctx_refs+0x190/0x190 [ 977.353075][T18094] ? shmem_get_link+0x2c3/0x400 [ 977.357763][T18094] ? shmem_initxattrs+0x200/0x200 [ 977.362623][T18094] dump_stack+0x15/0x20 [ 977.366612][T18094] should_fail+0x3c6/0x510 [ 977.370867][T18094] should_fail_usercopy+0x1a/0x20 [ 977.375727][T18094] _copy_to_user+0x20/0x90 [ 977.379981][T18094] vfs_readlink+0x1de/0x400 [ 977.384321][T18094] ? readlink_copy+0xa0/0xa0 [ 977.388834][T18094] ? shmem_get_link+0x400/0x400 [ 977.393520][T18094] ? security_inode_readlink+0xc9/0x110 [ 977.398903][T18094] do_readlinkat+0x27f/0x3a0 [ 977.403329][T18094] ? cp_old_stat+0x720/0x720 [ 977.407892][T18094] ? __ia32_sys_read+0x90/0x90 [ 977.412586][T18094] ? debug_smp_processor_id+0x17/0x20 [ 977.418217][T18094] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 977.424120][T18094] __x64_sys_readlink+0x7f/0x90 [ 977.428807][T18094] x64_sys_call+0x297/0x9a0 [ 977.433146][T18094] do_syscall_64+0x3b/0xb0 [ 977.437398][T18094] ? clear_bhb_loop+0x35/0x90 [ 977.441909][T18094] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 977.447640][T18094] RIP: 0033:0x7f311688aff9 [ 977.451898][T18094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.471335][T18094] RSP: 002b:00007f3115504038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 977.479626][T18094] RAX: ffffffffffffffda RBX: 00007f3116a42f80 RCX: 00007f311688aff9 [ 977.487391][T18094] RDX: 0000000000001000 RSI: 0000000020001200 RDI: 0000000020000240 [ 977.495201][T18094] RBP: 00007f3115504090 R08: 0000000000000000 R09: 0000000000000000 [ 977.503014][T18094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.510825][T18094] R13: 0000000000000000 R14: 00007f3116a42f80 R15: 00007ffc01d957d8 [ 977.518640][T18094] [ 977.566969][T18088] loop4: detected capacity change from 0 to 40427 [ 977.598402][T18088] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 977.611809][T18088] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 977.621215][T18088] F2FS-fs (loop4): invalid crc value [ 977.629670][T18099] loop2: detected capacity change from 0 to 512 [ 977.638339][T18088] F2FS-fs (loop4): Found nat_bits in checkpoint [ 977.640487][T18099] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4335: casefold flag without casefold feature [ 977.691842][T18099] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4335: couldn't read orphan inode 15 (err -117) [ 977.714837][T18099] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 977.872014][T18088] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 977.883220][T18109] loop3: detected capacity change from 0 to 512 [ 977.890626][T18088] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 977.961085][T18109] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 978.093000][T18118] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4334'. [ 978.392174][T18109] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4338: invalid indirect mapped block 4294967295 (level 1) [ 978.408513][T18109] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4338: invalid indirect mapped block 4294967295 (level 1) [ 978.422725][T18109] EXT4-fs (loop3): 2 truncates cleaned up [ 978.428313][T18109] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 978.575640][T18126] validate_nla: 25 callbacks suppressed [ 978.575667][T18126] netlink: 'syz.3.4338': attribute type 4 has an invalid length. [ 978.714382][T18126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4338'. [ 978.741476][T18132] loop0: detected capacity change from 0 to 512 [ 978.755462][T18134] loop4: detected capacity change from 0 to 1024 [ 978.794017][T18134] EXT4-fs (loop4): Ignoring removed bh option [ 978.811992][T18136] loop3: detected capacity change from 0 to 512 [ 978.819601][T18132] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 978.831512][T18132] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 978.844947][T18136] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 978.852195][T18130] loop2: detected capacity change from 0 to 40427 [ 978.863749][ T30] audit: type=1400 audit(1728791857.548:2631): avc: denied { ioctl } for pid=18131 comm="syz.0.4344" path="/11/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 978.891667][T18136] EXT4-fs (loop3): 1 truncate cleaned up [ 978.897125][T18134] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,errors=remount-ro,norecovery,debug_want_extra_isize=0x0000000000000080,bh,stripe=0x000000000000003a,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 978.922896][T18136] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 978.974312][T18130] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 978.982172][T18130] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 978.996913][T18130] F2FS-fs (loop2): Found nat_bits in checkpoint [ 979.051017][T18130] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 979.058054][T18130] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 979.339906][ T30] audit: type=1326 audit(1728791858.018:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2391cff9 code=0x7ffc0000 [ 979.409594][ T30] audit: type=1326 audit(1728791858.018:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2391cff9 code=0x7ffc0000 [ 979.455469][ T30] audit: type=1326 audit(1728791858.018:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f6d2391cff9 code=0x7ffc0000 [ 979.504648][ T30] audit: type=1326 audit(1728791858.018:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2391cff9 code=0x7ffc0000 [ 979.547485][ T30] audit: type=1326 audit(1728791858.018:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2391cff9 code=0x7ffc0000 [ 979.600836][ T30] audit: type=1326 audit(1728791858.018:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d2391cff9 code=0x7ffc0000 [ 979.685825][ T6605] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 979.715095][ T30] audit: type=1326 audit(1728791858.018:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2391cff9 code=0x7ffc0000 [ 979.788938][ T6605] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 980.309120][T18173] loop4: detected capacity change from 0 to 512 [ 980.334327][T18173] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4353: casefold flag without casefold feature [ 980.371976][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.394334][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.406473][T18173] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4353: couldn't read orphan inode 15 (err -117) [ 980.430115][T18167] device bridge_slave_0 entered promiscuous mode [ 980.450523][T18173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 980.467386][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.547577][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.581395][T18167] device bridge_slave_1 entered promiscuous mode [ 981.053652][T18187] loop2: detected capacity change from 0 to 512 [ 981.105850][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.112703][T18167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.119831][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.126572][T18167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.141670][T18187] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 981.159486][T18187] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4355: invalid indirect mapped block 4294967295 (level 1) [ 981.173607][T18187] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4355: invalid indirect mapped block 4294967295 (level 1) [ 981.187959][T18187] EXT4-fs (loop2): 2 truncates cleaned up [ 981.193507][T18187] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 981.210175][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.217554][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.224985][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 981.232391][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 981.243413][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 981.251711][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.258592][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.270777][T18191] netlink: 'syz.2.4355': attribute type 4 has an invalid length. [ 981.310176][T18191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4355'. [ 981.323054][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 981.331294][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 981.339363][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.346218][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.358299][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 981.423328][T18194] FAULT_INJECTION: forcing a failure. [ 981.423328][T18194] name failslab, interval 1, probability 0, space 0, times 0 [ 981.435922][T18194] CPU: 1 PID: 18194 Comm: syz.4.4356 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 981.445639][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 981.455533][T18194] Call Trace: [ 981.458655][T18194] [ 981.461434][T18194] dump_stack_lvl+0x151/0x1c0 [ 981.465948][T18194] ? io_uring_drop_tctx_refs+0x190/0x190 [ 981.471415][T18194] ? irqentry_exit+0x30/0x40 [ 981.475846][T18194] ? sysvec_reschedule_ipi+0x7d/0x150 [ 981.481048][T18194] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 981.486520][T18194] dump_stack+0x15/0x20 [ 981.489364][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 981.490508][T18194] should_fail+0x3c6/0x510 [ 981.490532][T18194] __should_failslab+0xa4/0xe0 [ 981.507103][T18194] ? security_inode_alloc+0x29/0x120 [ 981.512209][T18194] should_failslab+0x9/0x20 [ 981.516549][T18194] slab_pre_alloc_hook+0x37/0xd0 [ 981.521319][T18194] ? security_inode_alloc+0x29/0x120 [ 981.526439][T18194] kmem_cache_alloc+0x44/0x200 [ 981.531041][T18194] security_inode_alloc+0x29/0x120 [ 981.535986][T18194] inode_init_always+0x76d/0x9d0 [ 981.540760][T18194] ? ovl_lookup_inode+0x130/0x130 [ 981.545619][T18194] ? ovl_get_trap_inode+0x1a0/0x1a0 [ 981.550657][T18194] iget5_locked+0xe5/0x280 [ 981.554908][T18194] ? ovl_get_trap_inode+0x1a0/0x1a0 [ 981.559945][T18194] ovl_get_inode+0x573/0xe20 [ 981.564381][T18194] ovl_lookup+0x1c78/0x2190 [ 981.568710][T18194] ? ovl_path_next+0x290/0x290 [ 981.573323][T18194] ? d_hash_and_lookup+0x1e0/0x1e0 [ 981.578259][T18194] ? __sanitizer_cov_trace_pc+0x30/0x60 [ 981.583641][T18194] __lookup_slow+0x2b9/0x400 [ 981.588064][T18194] ? lookup_one_len+0x2c0/0x2c0 [ 981.592752][T18194] ? lookup_fast+0x306/0x7b0 [ 981.597176][T18194] ? handle_dots+0x1030/0x1030 [ 981.601776][T18194] lookup_slow+0x5a/0x80 [ 981.605856][T18194] walk_component+0x48c/0x610 [ 981.610370][T18194] ? nd_alloc_stack+0xf0/0xf0 [ 981.614884][T18194] ? handle_lookup_down+0x130/0x130 [ 981.619918][T18194] path_lookupat+0x16d/0x450 [ 981.624344][T18194] filename_lookup+0x230/0x5c0 [ 981.628952][T18194] ? hashlen_string+0x120/0x120 [ 981.633633][T18194] ? irqentry_exit_cond_resched+0x2a/0x30 [ 981.639187][T18194] do_linkat+0x177/0x9f0 [ 981.643268][T18194] ? fsnotify_link+0x240/0x240 [ 981.647865][T18194] ? getname_flags+0x1fd/0x520 [ 981.652464][T18194] __x64_sys_link+0x86/0x90 [ 981.656806][T18194] x64_sys_call+0x282/0x9a0 [ 981.661146][T18194] do_syscall_64+0x3b/0xb0 [ 981.665572][T18194] ? clear_bhb_loop+0x35/0x90 [ 981.670093][T18194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 981.675810][T18194] RIP: 0033:0x7fbfc6c5eff9 [ 981.680065][T18194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.699509][T18194] RSP: 002b:00007fbfc5896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 981.707750][T18194] RAX: ffffffffffffffda RBX: 00007fbfc6e17130 RCX: 00007fbfc6c5eff9 [ 981.715563][T18194] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000020000200 [ 981.723376][T18194] RBP: 00007fbfc5896090 R08: 0000000000000000 R09: 0000000000000000 [ 981.731199][T18194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 981.739000][T18194] R13: 0000000000000000 R14: 00007fbfc6e17130 R15: 00007ffd15540658 [ 981.746815][T18194] [ 981.750294][T18194] overlayfs: failed to get inode (-12) [ 981.759293][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 981.767246][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 981.775181][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 981.783534][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 981.795549][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 981.803570][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 981.811535][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 981.819301][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 981.830229][T18167] device veth0_vlan entered promiscuous mode [ 981.840627][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 981.848723][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 981.858925][T18167] device veth1_macvtap entered promiscuous mode [ 981.871419][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 981.879029][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 981.887212][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 981.908536][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 981.916750][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 981.938103][T18198] loop1: detected capacity change from 0 to 1024 [ 981.945492][T14300] device bridge_slave_1 left promiscuous mode [ 981.952163][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.959940][T14300] device bridge_slave_0 left promiscuous mode [ 981.966020][T14300] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.981470][T14300] device veth1_macvtap left promiscuous mode [ 981.987579][T14300] device veth0_vlan left promiscuous mode [ 981.993217][T18198] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 982.128205][T18196] loop2: detected capacity change from 0 to 40427 [ 982.172153][T18196] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 982.180136][T18196] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 982.231630][T18196] F2FS-fs (loop2): Found nat_bits in checkpoint [ 982.315248][T18208] device bridge_slave_0 left promiscuous mode [ 982.321623][T18208] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.334032][T18208] device bridge_slave_1 left promiscuous mode [ 982.340417][T18208] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.420680][T18196] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 982.427627][T18196] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 982.950699][T18217] loop3: detected capacity change from 0 to 512 [ 983.011794][T18217] EXT4-fs (loop3): Ignoring removed orlov option [ 983.018509][T18217] EXT4-fs (loop3): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 983.160445][T18226] loop4: detected capacity change from 0 to 512 [ 983.298480][T18228] 9pnet: Could not find request transport: fd0x000000000000000a [ 983.326078][ T7347] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 983.412327][T18226] EXT4-fs (loop4): Test dummy encryption mode enabled [ 983.468711][T18230] loop0: detected capacity change from 0 to 512 [ 983.483616][T18226] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.4363: iget: bogus i_mode (0) [ 983.489204][T18233] loop2: detected capacity change from 0 to 1024 [ 983.496678][T18226] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4363: couldn't read orphan inode 17 (err -117) [ 983.513379][T18226] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 983.516238][T18230] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4365: casefold flag without casefold feature [ 983.550042][T18230] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4365: couldn't read orphan inode 15 (err -117) [ 983.563584][T18233] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 983.571438][T18230] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 983.599278][T18223] EXT4-fs (loop4): shut down requested (1) [ 983.757603][ T7347] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.791218][ T7347] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 984.095228][ T7347] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 984.106162][ T7347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.287628][ T7347] usb 2-1: Product: syz [ 984.295752][ T7347] usb 2-1: Manufacturer: syz [ 984.308840][ T7347] usb 2-1: SerialNumber: syz [ 984.611726][T18259] loop0: detected capacity change from 0 to 512 [ 984.648642][T18259] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4372: casefold flag without casefold feature [ 984.667640][T18259] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4372: couldn't read orphan inode 15 (err -117) [ 984.687575][T18259] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 984.745303][T18254] loop4: detected capacity change from 0 to 512 [ 984.754434][T18256] loop2: detected capacity change from 0 to 512 [ 984.790247][T18219] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 984.799467][T18256] EXT4-fs (loop2): 1 truncate cleaned up [ 984.804997][T18256] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 985.172982][T18254] EXT4-fs (loop4): 1 truncate cleaned up [ 985.181693][T18254] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 985.300774][T18270] loop2: detected capacity change from 0 to 512 [ 985.348622][T18268] loop3: detected capacity change from 0 to 40427 [ 985.378541][T18270] EXT4-fs (loop2): Test dummy encryption mode enabled [ 985.387253][T18270] EXT4-fs error (device loop2): __ext4_iget:4903: inode #11: block 1: comm syz.2.4374: invalid block [ 985.398766][T18270] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4374: couldn't read orphan inode 11 (err -117) [ 985.410984][T18270] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 985.411222][T18268] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 985.447934][T18268] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 985.484920][T18268] F2FS-fs (loop3): Found nat_bits in checkpoint [ 985.521596][T18268] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 985.528582][T18268] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 985.612775][T18219] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 986.317439][ T7347] cdc_ncm 2-1:1.0: bind() failure [ 986.333609][ T7347] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 986.481826][T18288] loop2: detected capacity change from 0 to 512 [ 986.509978][T18291] loop4: detected capacity change from 0 to 1024 [ 986.511778][T18292] loop0: detected capacity change from 0 to 512 [ 986.516206][ T7347] cdc_ncm 2-1:1.1: bind() failure [ 986.529863][ T7347] usb 2-1: USB disconnect, device number 59 [ 986.542725][T18291] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 986.590447][T18297] loop3: detected capacity change from 0 to 2048 [ 986.601109][T18288] EXT4-fs (loop2): Ignoring removed orlov option [ 986.607279][T18288] EXT4-fs (loop2): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 986.620443][T18292] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4379: casefold flag without casefold feature [ 986.636343][T18292] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4379: couldn't read orphan inode 15 (err -117) [ 986.648564][T18292] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 986.776202][T18297] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 986.929587][T18297] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 987.438565][T18316] loop0: detected capacity change from 0 to 1024 [ 987.486412][T18318] loop4: detected capacity change from 0 to 512 [ 987.522870][T18316] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 987.564787][T18318] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4385: casefold flag without casefold feature [ 987.594993][T18318] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4385: couldn't read orphan inode 15 (err -117) [ 987.610988][T18318] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 988.143010][T18329] binder: 18327:18329 ioctl 4018620d 0 returned -22 [ 988.155910][T18329] FAULT_INJECTION: forcing a failure. [ 988.155910][T18329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.180473][T18329] CPU: 1 PID: 18329 Comm: syz.3.4386 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 988.190277][T18329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 988.200616][T18329] Call Trace: [ 988.203726][T18329] [ 988.206505][T18329] dump_stack_lvl+0x151/0x1c0 [ 988.211017][T18329] ? io_uring_drop_tctx_refs+0x190/0x190 [ 988.216485][T18329] ? vsnprintf+0x1dd/0x1c70 [ 988.220827][T18329] dump_stack+0x15/0x20 [ 988.224848][T18329] should_fail+0x3c6/0x510 [ 988.229073][T18329] should_fail_usercopy+0x1a/0x20 [ 988.233929][T18329] _copy_from_user+0x20/0xd0 [ 988.238357][T18329] kstrtouint_from_user+0xca/0x2a0 [ 988.243305][T18329] ? kstrtol_from_user+0x310/0x310 [ 988.248251][T18329] ? snprintf+0xd6/0x120 [ 988.252342][T18329] ? check_stack_object+0x114/0x130 [ 988.257367][T18329] ? __kasan_check_read+0x11/0x20 [ 988.262226][T18329] ? _copy_to_user+0x78/0x90 [ 988.266650][T18329] proc_fail_nth_write+0xa6/0x290 [ 988.271514][T18329] ? selinux_file_permission+0x2c4/0x570 [ 988.276981][T18329] ? proc_fail_nth_read+0x210/0x210 [ 988.282013][T18329] ? fsnotify_perm+0x6a/0x5b0 [ 988.286528][T18329] ? security_file_permission+0x86/0xb0 [ 988.291909][T18329] ? proc_fail_nth_read+0x210/0x210 [ 988.296942][T18329] vfs_write+0x406/0x1110 [ 988.301118][T18329] ? file_end_write+0x1c0/0x1c0 [ 988.305801][T18329] ? __kasan_check_write+0x14/0x20 [ 988.310742][T18329] ? mutex_lock+0xb6/0x1e0 [ 988.314996][T18329] ? wait_for_completion_killable_timeout+0x10/0x10 [ 988.321419][T18329] ? __fdget_pos+0x2e7/0x3a0 [ 988.325844][T18329] ? ksys_write+0x77/0x2c0 [ 988.330098][T18329] ksys_write+0x199/0x2c0 [ 988.334264][T18329] ? __ia32_sys_read+0x90/0x90 [ 988.338864][T18329] ? debug_smp_processor_id+0x17/0x20 [ 988.344073][T18329] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 988.349977][T18329] __x64_sys_write+0x7b/0x90 [ 988.354920][T18329] x64_sys_call+0x2f/0x9a0 [ 988.359173][T18329] do_syscall_64+0x3b/0xb0 [ 988.363517][T18329] ? clear_bhb_loop+0x35/0x90 [ 988.368028][T18329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 988.373757][T18329] RIP: 0033:0x7f3116889adf [ 988.378023][T18329] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 988.397450][T18329] RSP: 002b:00007f31154e3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 988.405694][T18329] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3116889adf [ 988.413513][T18329] RDX: 0000000000000001 RSI: 00007f31154e30a0 RDI: 000000000000000a [ 988.421495][T18329] RBP: 00007f31154e3090 R08: 0000000000000000 R09: 0000000000000000 [ 988.429304][T18329] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 988.437115][T18329] R13: 0000000000000000 R14: 00007f3116a43058 R15: 00007ffc01d957d8 [ 988.444933][T18329] [ 988.593873][T18334] loop2: detected capacity change from 0 to 512 [ 988.613620][T18336] loop1: detected capacity change from 0 to 512 [ 988.659999][T18336] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.4389: casefold flag without casefold feature [ 988.673812][T18334] EXT4-fs (loop2): Test dummy encryption mode enabled [ 988.680538][T18336] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4389: couldn't read orphan inode 15 (err -117) [ 988.699332][T18334] EXT4-fs error (device loop2): __ext4_iget:4903: inode #11: block 1: comm syz.2.4388: invalid block [ 988.715793][T18331] loop4: detected capacity change from 0 to 512 [ 988.720569][T18334] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4388: couldn't read orphan inode 11 (err -117) [ 988.722100][T18336] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 988.748105][T18334] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 988.866550][T18342] loop0: detected capacity change from 0 to 512 [ 988.874113][T18331] EXT4-fs (loop4): 1 truncate cleaned up [ 988.881621][T18331] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 988.882842][T18342] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4390: casefold flag without casefold feature [ 989.157898][T18342] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4390: couldn't read orphan inode 15 (err -117) [ 989.178528][T18342] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 989.627571][T18353] loop1: detected capacity change from 0 to 512 [ 989.763273][T18353] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 989.799007][T18353] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4392: invalid indirect mapped block 4294967295 (level 1) [ 989.800020][T18359] loop4: detected capacity change from 0 to 512 [ 989.822290][T18353] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4392: invalid indirect mapped block 4294967295 (level 1) [ 989.840847][T18364] loop0: detected capacity change from 0 to 512 [ 989.847611][T18353] EXT4-fs (loop1): 2 truncates cleaned up [ 989.853169][T18353] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 989.903830][T18359] EXT4-fs (loop4): Test dummy encryption mode enabled [ 989.919811][T18359] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.4393: iget: bogus i_mode (0) [ 989.936184][T18366] netlink: 'syz.1.4392': attribute type 4 has an invalid length. [ 989.936371][T18364] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4394: casefold flag without casefold feature [ 989.952682][T18359] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4393: couldn't read orphan inode 17 (err -117) [ 989.972443][T18366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4392'. [ 989.981732][T18364] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4394: couldn't read orphan inode 15 (err -117) [ 989.995446][T18359] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 990.040579][T18364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 990.244573][T18372] loop2: detected capacity change from 0 to 512 [ 990.258995][T18372] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 990.458316][T18372] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4395: invalid indirect mapped block 4294967295 (level 1) [ 990.472399][T18372] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4395: invalid indirect mapped block 4294967295 (level 1) [ 990.486783][T18372] EXT4-fs (loop2): 2 truncates cleaned up [ 990.492475][T18372] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 990.545623][T18376] loop3: detected capacity change from 0 to 512 [ 990.566060][T18381] netlink: 'syz.2.4395': attribute type 4 has an invalid length. [ 990.576827][T18381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4395'. [ 990.601642][T18376] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.4398: casefold flag without casefold feature [ 990.621586][T18376] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4398: couldn't read orphan inode 15 (err -117) [ 990.642670][T18376] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 990.735251][T18379] loop4: detected capacity change from 0 to 40427 [ 990.819256][T18379] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 990.826080][T18389] binder: 18386:18389 ioctl 4018620d 0 returned -22 [ 990.828104][T18379] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 991.061996][T18120] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 991.085317][T18379] F2FS-fs (loop4): Found nat_bits in checkpoint [ 991.140815][T18396] loop2: detected capacity change from 0 to 512 [ 991.165689][T18379] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 991.172955][T18379] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 991.208958][T18396] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4401: casefold flag without casefold feature [ 991.238496][T18396] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4401: couldn't read orphan inode 15 (err -117) [ 991.293230][T18396] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 991.731240][T18404] loop3: detected capacity change from 0 to 512 [ 991.748944][T18404] EXT4-fs (loop3): Ignoring removed orlov option [ 991.755136][T18404] EXT4-fs (loop3): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 991.801213][T18408] loop0: detected capacity change from 0 to 1024 [ 991.813202][T18410] loop4: detected capacity change from 0 to 512 [ 991.848867][T18408] EXT4-fs (loop0): Test dummy encryption mode enabled [ 991.855530][T18408] EXT4-fs (loop0): Ignoring removed orlov option [ 991.863836][T18408] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,sysvgroups,commit=0x0000000000000005,orlov,nobarrier,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 991.955841][T18410] EXT4-fs (loop4): Test dummy encryption mode enabled [ 992.170492][T18410] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.4405: invalid block [ 992.249179][T18410] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4405: couldn't read orphan inode 11 (err -117) [ 992.265208][T18420] loop3: detected capacity change from 0 to 512 [ 992.272556][T18410] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 992.277908][T18412] loop1: detected capacity change from 0 to 40427 [ 992.324445][T18426] loop2: detected capacity change from 0 to 1024 [ 992.338070][T18412] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 992.345610][T18412] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 992.361143][T18426] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 992.387212][T18420] EXT4-fs (loop3): Test dummy encryption mode enabled [ 992.399730][T18412] F2FS-fs (loop1): Found nat_bits in checkpoint [ 992.411139][T18420] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.4407: iget: bogus i_mode (0) [ 992.422564][T18420] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4407: couldn't read orphan inode 17 (err -117) [ 992.434783][T18420] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 992.459461][T18417] EXT4-fs (loop3): shut down requested (1) [ 992.484831][T18412] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 992.494280][T18412] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 992.922043][T18443] loop1: detected capacity change from 0 to 512 [ 992.948730][T18443] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.4411: casefold flag without casefold feature [ 992.972078][T18443] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4411: couldn't read orphan inode 15 (err -117) [ 992.986141][T18443] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 993.361493][T18450] loop4: detected capacity change from 0 to 512 [ 993.419285][T18450] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4414: casefold flag without casefold feature [ 993.447575][T18450] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4414: couldn't read orphan inode 15 (err -117) [ 993.467545][T18450] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 993.501050][T18441] loop3: detected capacity change from 0 to 40427 [ 993.548188][T18441] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 993.557140][T18441] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 993.571336][T18453] loop2: detected capacity change from 0 to 1024 [ 993.573895][T18441] F2FS-fs (loop3): Found nat_bits in checkpoint [ 993.693129][T18441] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 993.700595][T18441] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 993.738957][T18453] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 993.955237][T18468] loop3: detected capacity change from 0 to 512 [ 994.023160][T18463] loop0: detected capacity change from 0 to 40427 [ 994.051679][T18468] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.4416: casefold flag without casefold feature [ 994.111783][T18468] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4416: couldn't read orphan inode 15 (err -117) [ 994.128826][T18463] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 994.165342][T18463] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 994.197513][T18468] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 994.204112][T18474] loop4: detected capacity change from 0 to 512 [ 994.298106][T18463] F2FS-fs (loop0): invalid crc value [ 994.317955][T18474] EXT4-fs (loop4): Ignoring removed orlov option [ 994.324377][T18474] EXT4-fs (loop4): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 994.336351][T18463] F2FS-fs (loop0): Found nat_bits in checkpoint [ 994.681923][T18463] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 994.703602][T18463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 995.009289][T18493] x_tables: duplicate underflow at hook 1 [ 995.053844][T18494] loop2: detected capacity change from 0 to 512 [ 995.252001][T18494] EXT4-fs (loop2): Test dummy encryption mode enabled [ 995.308254][T18494] EXT4-fs error (device loop2): __ext4_iget:4903: inode #11: block 1: comm syz.2.4424: invalid block [ 995.323017][T18484] loop4: detected capacity change from 0 to 40427 [ 995.329529][T18494] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4424: couldn't read orphan inode 11 (err -117) [ 995.360707][T18494] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 995.391732][T18487] loop1: detected capacity change from 0 to 40427 [ 995.399130][T18484] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 995.406880][T18484] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 995.418411][T18484] F2FS-fs (loop4): Found nat_bits in checkpoint [ 995.453769][T18484] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 995.460709][T18484] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 995.471071][T18487] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 995.480742][T18487] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 995.492567][T18487] F2FS-fs (loop1): invalid crc value [ 995.499299][T18487] F2FS-fs (loop1): Found nat_bits in checkpoint [ 995.574610][T18487] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 995.598175][T18487] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 995.684787][T18506] loop4: detected capacity change from 0 to 512 [ 995.708494][T18506] EXT4-fs (loop4): Test dummy encryption mode enabled [ 995.717074][T18506] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.4425: invalid block [ 995.771035][T18509] loop3: detected capacity change from 0 to 1024 [ 995.778007][T18506] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4425: couldn't read orphan inode 11 (err -117) [ 995.808459][T18506] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 995.868668][T18509] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 995.917401][ T7348] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 996.042325][T18514] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.4425: Directory hole found for htree leaf block 0 [ 996.207421][ T7348] usb 2-1: Using ep0 maxpacket: 32 [ 996.377691][ T7348] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 996.390699][ T7348] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 996.477917][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 996.477951][ T30] audit: type=1400 audit(1728791875.158:2678): avc: denied { listen } for pid=18516 comm="syz.2.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 996.647739][ T7348] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 996.668679][ T7348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.704745][ T7348] usb 2-1: Product: syz [ 996.742360][ T7348] usb 2-1: Manufacturer: syz [ 996.749550][ T7348] usb 2-1: SerialNumber: syz [ 996.875562][T18524] loop3: detected capacity change from 0 to 512 [ 996.887701][T18521] loop4: detected capacity change from 0 to 40427 [ 996.937918][T18521] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 996.945471][T18521] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 996.956360][T18521] F2FS-fs (loop4): Found nat_bits in checkpoint [ 996.966136][T18524] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 996.979469][T18524] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4429: invalid indirect mapped block 4294967295 (level 1) [ 996.993511][T18524] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4429: invalid indirect mapped block 4294967295 (level 1) [ 997.008404][T18524] EXT4-fs (loop3): 2 truncates cleaned up [ 997.013945][T18524] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 997.018700][T18521] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 997.037359][T18521] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 997.037516][ T7348] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 997.084061][T18530] netlink: 'syz.3.4429': attribute type 4 has an invalid length. [ 997.091990][T18530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4429'. [ 997.174456][T18533] loop4: detected capacity change from 0 to 512 [ 997.186746][T18536] loop2: detected capacity change from 0 to 512 [ 997.226873][T16029] usb 2-1: USB disconnect, device number 60 [ 997.233330][T18536] EXT4-fs (loop2): Ignoring removed orlov option [ 997.240285][T16029] usblp0: removed [ 997.245065][T18536] EXT4-fs (loop2): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 997.245960][T18533] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4430: casefold flag without casefold feature [ 997.269407][T18533] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4430: couldn't read orphan inode 15 (err -117) [ 997.281267][T18533] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 997.361937][T18539] loop2: detected capacity change from 0 to 512 [ 997.483679][T18539] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4433: casefold flag without casefold feature [ 997.578328][T18539] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4433: couldn't read orphan inode 15 (err -117) [ 997.590257][T18539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 998.909109][T18557] loop4: detected capacity change from 0 to 512 [ 998.921743][T18557] EXT4-fs (loop4): Test dummy encryption mode enabled [ 998.949524][T18557] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.4437: invalid block [ 998.960618][T18557] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4437: couldn't read orphan inode 11 (err -117) [ 998.988630][T18557] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 999.815182][T18571] loop2: detected capacity change from 0 to 1024 [ 999.964300][T18571] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 1000.035105][T18573] loop4: detected capacity change from 0 to 40427 [ 1000.107853][T18573] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1000.120227][T18573] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1000.163134][T18573] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1000.223880][T18573] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1000.231930][T18573] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1000.489849][T18589] loop4: detected capacity change from 0 to 512 [ 1000.518564][T18589] EXT4-fs (loop4): Ignoring removed orlov option [ 1000.524775][T18589] EXT4-fs (loop4): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 1001.883896][T18612] loop4: detected capacity change from 0 to 512 [ 1002.158030][T18612] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1002.277549][T18612] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4449: invalid indirect mapped block 4294967295 (level 1) [ 1002.291589][T18612] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4449: invalid indirect mapped block 4294967295 (level 1) [ 1002.305669][T18612] EXT4-fs (loop4): 2 truncates cleaned up [ 1002.311442][T18612] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1002.388034][T18620] netlink: 'syz.4.4449': attribute type 4 has an invalid length. [ 1002.395865][T18620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4449'. [ 1002.850044][T18635] loop2: detected capacity change from 0 to 512 [ 1002.936513][T18637] x_tables: duplicate underflow at hook 1 [ 1003.186037][T18635] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1003.201028][T18635] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.4454: iget: bogus i_mode (0) [ 1003.212640][T18635] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4454: couldn't read orphan inode 17 (err -117) [ 1003.224930][T18635] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 1003.248159][T18635] EXT4-fs (loop2): shut down requested (1) [ 1003.737809][T18645] loop4: detected capacity change from 0 to 1024 [ 1003.860458][T18645] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1003.867094][T18645] EXT4-fs (loop4): Ignoring removed orlov option [ 1003.883959][T18645] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,sysvgroups,commit=0x0000000000000005,orlov,nobarrier,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 1004.078039][T18652] loop3: detected capacity change from 0 to 512 [ 1004.159240][T14300] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1004.168363][T14300] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1004.254413][T18652] EXT4-fs (loop3): 1 truncate cleaned up [ 1004.269063][T18652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1004.489515][T18660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.496387][T18660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.504241][T18660] device bridge_slave_0 entered promiscuous mode [ 1004.515120][T18660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.522387][T18660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.529779][T18660] device bridge_slave_1 entered promiscuous mode [ 1004.635188][T18665] loop2: detected capacity change from 0 to 512 [ 1004.663133][T18660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.666764][T18667] loop4: detected capacity change from 0 to 512 [ 1004.669999][T18660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.683229][T18660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.690089][T18660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.715515][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.727767][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.750851][T18667] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4462: casefold flag without casefold feature [ 1004.763371][T18665] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4461: casefold flag without casefold feature [ 1004.780821][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1004.789650][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1004.800026][T18618] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1004.807471][T18667] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4462: couldn't read orphan inode 15 (err -117) [ 1004.824429][T18665] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4461: couldn't read orphan inode 15 (err -117) [ 1004.836378][T18667] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1004.848577][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1004.867688][T18665] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1004.879310][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.886153][ T6605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.894596][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1004.902928][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.909803][ T6605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.917381][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1004.925258][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1004.960443][T18660] device veth0_vlan entered promiscuous mode [ 1004.973343][T18660] device veth1_macvtap entered promiscuous mode [ 1005.188193][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1005.220807][ T7156] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1005.287012][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1005.304819][ T7156] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1005.317032][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1005.325584][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1005.333525][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1005.341099][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1005.348776][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1005.616582][T18679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.717007][T18679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.854970][T18700] x_tables: duplicate underflow at hook 1 [ 1005.864008][T18679] device bridge_slave_0 entered promiscuous mode [ 1006.089178][T18679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.164354][T18679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.171811][T18679] device bridge_slave_1 entered promiscuous mode [ 1006.248004][T18705] loop2: detected capacity change from 0 to 1024 [ 1006.270502][T18705] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 1006.607424][T18709] loop4: detected capacity change from 0 to 512 [ 1006.698146][T18709] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1006.706461][T18709] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.4471: invalid block [ 1006.718986][T18709] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4471: couldn't read orphan inode 11 (err -117) [ 1006.719055][T14300] device bridge_slave_1 left promiscuous mode [ 1006.731200][T18709] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1006.736987][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.772150][T14300] device bridge_slave_0 left promiscuous mode [ 1006.784516][T14300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.793021][T14300] device veth1_macvtap left promiscuous mode [ 1006.798941][T14300] device veth0_vlan left promiscuous mode [ 1007.102095][T18714] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.4471: Directory hole found for htree leaf block 0 [ 1007.191891][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1007.214180][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1007.230171][T18716] loop3: detected capacity change from 0 to 512 [ 1007.231368][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1007.244724][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1007.253891][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.260760][ T6605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.268866][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1007.276850][T18716] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1007.277143][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1007.293927][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.298077][T18716] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1007.300786][ T6605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.311829][T18716] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.4472: Allocating blocks 41-42 which overlap fs metadata [ 1007.328113][T18716] Quota error (device loop3): write_blk: dquota write failed [ 1007.332452][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1007.344206][T18716] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1007.354505][T18716] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.4472: Failed to acquire dquot type 0 [ 1007.367075][T18716] EXT4-fs (loop3): 1 truncate cleaned up [ 1007.374041][T18716] EXT4-fs (loop3): pa ffff88810e03d2a0: logic 1, phys. 41, len 23 [ 1007.381805][T18716] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 1007.393408][T18716] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1007.393586][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1007.431768][T18719] loop2: detected capacity change from 0 to 512 [ 1007.485748][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1007.503227][T18679] device veth0_vlan entered promiscuous mode [ 1007.509679][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1007.518187][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1007.526855][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1007.534532][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1007.542539][ T30] audit: type=1326 audit(1728791886.218:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.3.4472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311688aff9 code=0x0 [ 1007.575884][T18719] EXT4-fs (loop2): Ignoring removed orlov option [ 1007.655796][T18724] x_tables: duplicate underflow at hook 1 [ 1007.694552][T18719] EXT4-fs (loop2): Unrecognized mount option "bsddf.appraise_type=imasig" or missing value [ 1007.722192][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1007.735938][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1007.776620][T18679] device veth1_macvtap entered promiscuous mode [ 1007.832077][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1007.844551][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1007.853299][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1007.862334][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1007.870755][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1008.379113][T14300] device bridge_slave_1 left promiscuous mode [ 1008.396815][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.405170][T14300] device bridge_slave_0 left promiscuous mode [ 1008.411918][T14300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.467768][T18738] loop3: detected capacity change from 0 to 40427 [ 1008.479292][T14300] device veth1_macvtap left promiscuous mode [ 1008.498285][T14300] device veth0_vlan left promiscuous mode [ 1008.547935][T18738] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1008.555527][T18738] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1008.565046][T18738] F2FS-fs (loop3): invalid crc value [ 1008.572085][T18738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1008.632378][T18738] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1008.641340][T18738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1009.367599][T18763] loop3: detected capacity change from 0 to 512 [ 1009.369883][T18767] loop4: detected capacity change from 0 to 512 [ 1009.425449][T18763] EXT4-fs (loop3): 1 truncate cleaned up [ 1009.431064][T18763] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1009.538569][T18767] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1009.556735][T18759] loop1: detected capacity change from 0 to 40427 [ 1009.568819][T18767] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.4485: invalid block [ 1009.584098][T18774] loop3: detected capacity change from 0 to 512 [ 1009.590906][T18767] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4485: couldn't read orphan inode 11 (err -117) [ 1009.602847][T18767] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1009.637902][T18759] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1009.645646][T18774] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1009.652953][T18759] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1009.733954][T18774] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1009.734359][T18759] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1009.746843][T18774] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.4488: Allocating blocks 41-42 which overlap fs metadata [ 1009.767609][T18774] Quota error (device loop3): write_blk: dquota write failed [ 1009.833940][T18781] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.4485: Directory hole found for htree leaf block 0 [ 1009.952658][T18774] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1009.980013][T18774] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.4488: Failed to acquire dquot type 0 [ 1009.991627][T18774] EXT4-fs (loop3): 1 truncate cleaned up [ 1009.997725][T18759] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1010.004705][T18774] EXT4-fs (loop3): pa ffff88810e386f18: logic 1, phys. 41, len 23 [ 1010.012366][T18774] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 1010.017372][T18759] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1010.022893][T18774] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1010.122127][T18784] loop2: detected capacity change from 0 to 512 [ 1010.124177][T18770] loop0: detected capacity change from 0 to 40427 [ 1010.142815][T18770] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1010.151252][ T30] audit: type=1326 audit(1728791888.838:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18773 comm="syz.3.4488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311688aff9 code=0x0 [ 1010.174756][T18770] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1010.185172][T18770] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1010.238529][T18784] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4490: casefold flag without casefold feature [ 1010.251245][T18784] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4490: couldn't read orphan inode 15 (err -117) [ 1010.272869][T18784] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1010.272930][T18770] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1010.302696][T18770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1010.855219][T18806] loop3: detected capacity change from 0 to 512 [ 1010.968305][T18806] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1011.001680][T18806] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.4494: iget: bogus i_mode (0) [ 1011.050660][T18806] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4494: couldn't read orphan inode 17 (err -117) [ 1011.108642][T18806] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 1011.135404][T18806] EXT4-fs (loop3): shut down requested (1) [ 1011.369556][T18823] loop3: detected capacity change from 0 to 512 [ 1011.448092][T18823] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1011.456520][T18823] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.4496: iget: bogus i_mode (0) [ 1011.468013][T18823] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4496: couldn't read orphan inode 17 (err -117) [ 1011.480013][T18823] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 1011.505446][T18823] EXT4-fs (loop3): shut down requested (1) [ 1011.620920][T18826] loop2: detected capacity change from 0 to 512 [ 1011.648152][T18826] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1011.678412][T18826] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4499: invalid indirect mapped block 4294967295 (level 1) [ 1011.692372][T18826] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4499: invalid indirect mapped block 4294967295 (level 1) [ 1011.706656][T18826] EXT4-fs (loop2): 2 truncates cleaned up [ 1011.712339][T18826] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1011.781652][T18833] netlink: 'syz.2.4499': attribute type 4 has an invalid length. [ 1011.789263][T18833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4499'. [ 1012.088061][T18836] loop0: detected capacity change from 0 to 40427 [ 1012.115199][T18838] loop4: detected capacity change from 0 to 512 [ 1012.138907][T18838] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1012.146949][T18838] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.4502: invalid block [ 1012.159266][T18836] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1012.161866][T18838] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4502: couldn't read orphan inode 11 (err -117) [ 1012.167342][T18836] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1012.179025][T18838] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1012.204344][T18836] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1012.269594][T18836] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1012.276500][T18836] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1012.389676][T18845] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.4502: Directory hole found for htree leaf block 0 [ 1012.618367][T18850] loop3: detected capacity change from 0 to 512 [ 1012.629156][T18850] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1012.699530][T18850] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1012.706391][T18850] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.4506: Allocating blocks 41-42 which overlap fs metadata [ 1012.726998][T18850] Quota error (device loop3): write_blk: dquota write failed [ 1012.734752][T18850] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1012.744908][T18850] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.4506: Failed to acquire dquot type 0 [ 1012.758566][T18850] EXT4-fs (loop3): 1 truncate cleaned up [ 1012.765129][T18850] EXT4-fs (loop3): pa ffff88810e03d498: logic 1, phys. 41, len 23 [ 1012.773349][T18850] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 1012.787068][T18850] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1012.941708][ T30] audit: type=1326 audit(1728791891.628:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.3.4506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311688aff9 code=0x0 [ 1012.996756][T18852] loop0: detected capacity change from 0 to 40427 [ 1013.024376][T18852] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1013.032276][T18852] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1013.041646][T18852] F2FS-fs (loop0): invalid crc value [ 1013.048847][T18852] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1013.093553][T18852] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1013.100794][T18852] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1013.102567][T18865] loop4: detected capacity change from 0 to 512 [ 1013.118551][T18852] attempt to access beyond end of device [ 1013.118551][T18852] loop0: rw=2049, want=45224, limit=40427 [ 1013.130983][T18852] attempt to access beyond end of device [ 1013.130983][T18852] loop0: rw=34817, want=45224, limit=40427 [ 1013.197921][T18865] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1013.245304][T18865] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.4507: iget: bogus i_mode (0) [ 1013.257560][T18865] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4507: couldn't read orphan inode 17 (err -117) [ 1013.270012][T18865] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 1013.292383][ T7156] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1013.301673][ T7156] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1013.324213][T18865] EXT4-fs (loop4): shut down requested (1) [ 1013.516523][T18876] loop0: detected capacity change from 0 to 512 [ 1013.558481][T18876] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1013.576791][T18876] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4511: invalid block [ 1013.589084][T18876] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4511: invalid indirect mapped block 4294967295 (level 1) [ 1013.603176][T18876] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4511: invalid indirect mapped block 4294967295 (level 1) [ 1013.618578][T18876] EXT4-fs (loop0): 2 truncates cleaned up [ 1013.624187][T18876] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1013.707497][T18883] netlink: 'syz.0.4511': attribute type 4 has an invalid length. [ 1013.715049][T18883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4511'. [ 1014.217840][T18891] device syzkaller0 entered promiscuous mode [ 1014.296740][T18893] loop1: detected capacity change from 0 to 512 [ 1014.321664][T18893] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1014.335225][T18893] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4515: invalid indirect mapped block 4294967295 (level 1) [ 1014.349658][T18893] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4515: invalid indirect mapped block 4294967295 (level 1) [ 1014.363932][T18893] EXT4-fs (loop1): 2 truncates cleaned up [ 1014.369518][T18893] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1014.439311][T18900] loop2: detected capacity change from 0 to 512 [ 1014.468577][T18905] loop3: detected capacity change from 0 to 512 [ 1014.485514][T18900] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1014.495288][T18903] netlink: 'syz.1.4515': attribute type 4 has an invalid length. [ 1014.499244][T18900] EXT4-fs error (device loop2): __ext4_iget:4903: inode #11: block 1: comm syz.2.4518: invalid block [ 1014.503343][T18903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4515'. [ 1014.513968][T18900] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4518: couldn't read orphan inode 11 (err -117) [ 1014.534140][T18900] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1014.566607][T18905] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1014.921233][T18912] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.4518: Directory hole found for htree leaf block 0 [ 1014.995194][T18905] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1015.005594][T18905] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.4520: Allocating blocks 41-42 which overlap fs metadata [ 1015.053480][T18905] Quota error (device loop3): write_blk: dquota write failed [ 1015.066907][T18905] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1015.079767][T18905] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.4520: Failed to acquire dquot type 0 [ 1015.107988][T18905] EXT4-fs (loop3): 1 truncate cleaned up [ 1015.114416][T18905] EXT4-fs (loop3): pa ffff88810e3861f8: logic 1, phys. 41, len 23 [ 1015.122111][T18905] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 1015.134966][T18905] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1015.169524][ T30] audit: type=1326 audit(1728791893.858:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18904 comm="syz.3.4520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311688aff9 code=0x0 [ 1016.227485][T18925] FAULT_INJECTION: forcing a failure. [ 1016.227485][T18925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.247565][T18925] CPU: 0 PID: 18925 Comm: syz.1.4526 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 1016.257370][T18925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1016.267265][T18925] Call Trace: [ 1016.270388][T18925] [ 1016.273167][T18925] dump_stack_lvl+0x151/0x1c0 [ 1016.273469][T18919] loop4: detected capacity change from 0 to 40427 [ 1016.277677][T18925] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1016.277698][T18925] dump_stack+0x15/0x20 [ 1016.277715][T18925] should_fail+0x3c6/0x510 [ 1016.297644][T18925] should_fail_usercopy+0x1a/0x20 [ 1016.302499][T18925] strncpy_from_user+0x24/0x2d0 [ 1016.307184][T18925] ? kmem_cache_alloc+0xf5/0x200 [ 1016.311963][T18925] getname_flags+0xf2/0x520 [ 1016.316299][T18925] user_path_at_empty+0x2d/0x1a0 [ 1016.321075][T18925] vfs_statx+0xfd/0x720 [ 1016.325066][T18925] ? vfs_fstatat+0x40/0x40 [ 1016.329317][T18925] ? mutex_unlock+0xb2/0x260 [ 1016.333752][T18925] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1016.340175][T18925] __x64_sys_statx+0x17c/0x200 [ 1016.344769][T18925] ? cp_statx+0x970/0x970 [ 1016.348939][T18925] ? __bpf_trace_sys_enter+0x62/0x70 [ 1016.354055][T18925] x64_sys_call+0x8cc/0x9a0 [ 1016.358393][T18925] do_syscall_64+0x3b/0xb0 [ 1016.362646][T18925] ? clear_bhb_loop+0x35/0x90 [ 1016.367159][T18925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1016.372890][T18925] RIP: 0033:0x7fab87844ff9 [ 1016.377143][T18925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.396582][T18925] RSP: 002b:00007fab864be038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 1016.404827][T18925] RAX: ffffffffffffffda RBX: 00007fab879fcf80 RCX: 00007fab87844ff9 [ 1016.412640][T18925] RDX: 0000000000000800 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1016.420451][T18925] RBP: 00007fab864be090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.428262][T18925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.436081][T18925] R13: 0000000000000000 R14: 00007fab879fcf80 R15: 00007fff957701e8 [ 1016.443890][T18925] [ 1016.452989][T18922] loop0: detected capacity change from 0 to 512 [ 1016.486564][T18919] ================================================================================ [ 1016.495713][T18919] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:901:5 [ 1016.502371][T18919] shift exponent 2070 is too large for 32-bit type 'int' [ 1016.509150][T18919] CPU: 0 PID: 18919 Comm: syz.4.4521 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 1016.518955][T18919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1016.528843][T18919] Call Trace: [ 1016.530501][T18922] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1016.531957][T18919] [ 1016.541337][T18919] dump_stack_lvl+0x151/0x1c0 [ 1016.545855][T18919] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1016.551319][T18919] ? slab_free_freelist_hook+0xbd/0x190 [ 1016.556706][T18919] dump_stack+0x15/0x20 [ 1016.560691][T18919] __ubsan_handle_shift_out_of_bounds+0x3bf/0x420 [ 1016.566943][T18919] parse_options+0x460f/0x4620 [ 1016.571539][T18919] ? do_syscall_64+0x3b/0xb0 [ 1016.575965][T18919] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1016.581878][T18919] ? default_options+0xa20/0xa20 [ 1016.586644][T18919] ? memcpy+0x56/0x70 [ 1016.590463][T18919] f2fs_fill_super+0x2e61/0x8170 [ 1016.594737][T18922] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.4523: iget: bogus i_mode (0) [ 1016.595240][T18919] ? kill_f2fs_super+0x3c0/0x3c0 [ 1016.611120][T18919] ? vscnprintf+0x80/0x80 [ 1016.615286][T18919] ? set_blocksize+0x1f0/0x380 [ 1016.619884][T18919] ? sb_set_blocksize+0xa8/0xf0 [ 1016.624572][T18919] mount_bdev+0x282/0x3b0 [ 1016.628748][T18919] ? kill_f2fs_super+0x3c0/0x3c0 [ 1016.630905][T18922] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4523: couldn't read orphan inode 17 (err -117) [ 1016.633512][T18919] f2fs_mount+0x34/0x40 [ 1016.633541][T18919] legacy_get_tree+0xf1/0x190 [ 1016.653824][T18919] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 1016.657427][T18922] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,norecovery,barrier,journal_dev=0x0000000000000003,test_dummy_encryption,journal_dev=0x0000000000006000,,errors=continue. Quota mode: none. [ 1016.659809][T18919] vfs_get_tree+0x88/0x290 [ 1016.684374][T18919] do_new_mount+0x2ba/0xb30 [ 1016.688714][T18919] ? do_move_mount_old+0x160/0x160 [ 1016.693663][T18919] ? security_capable+0x87/0xb0 [ 1016.698347][T18919] ? ns_capable+0x89/0xe0 [ 1016.702517][T18919] path_mount+0x671/0x1070 [ 1016.706768][T18919] __se_sys_mount+0x2c4/0x3b0 [ 1016.710217][T18922] EXT4-fs (loop0): shut down requested (1) [ 1016.711274][T18919] ? exc_page_fault+0x47a/0x7f0 [ 1016.711297][T18919] ? __x64_sys_mount+0xd0/0xd0 [ 1016.726213][T18919] __x64_sys_mount+0xbf/0xd0 [ 1016.726239][T18919] x64_sys_call+0x49d/0x9a0 [ 1016.726256][T18919] do_syscall_64+0x3b/0xb0 [ 1016.726271][T18919] ? clear_bhb_loop+0x35/0x90 [ 1016.726286][T18919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1016.726302][T18919] RIP: 0033:0x7fbfc6c6079a [ 1016.726319][T18919] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.726334][T18919] RSP: 002b:00007fbfc5895e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1016.726353][T18919] RAX: ffffffffffffffda RBX: 00007fbfc5895ef0 RCX: 00007fbfc6c6079a [ 1016.726365][T18919] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 00007fbfc5895eb0 [ 1016.726377][T18919] RBP: 0000000020000140 R08: 00007fbfc5895ef0 R09: 0000000000000000 [ 1016.726388][T18919] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 1016.726400][T18919] R13: 00007fbfc5895eb0 R14: 0000000000005505 R15: 00000000200006c0 [ 1016.726416][T18919] [ 1016.726500][T18919] ================================================================================ [ 1016.726509][T18919] F2FS-fs (loop4): Not support 4194304, larger than 256