last executing test programs: 16.662174112s ago: executing program 0 (id=868): bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000180)=[{}], 0x20000000000000e3, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) 16.420321104s ago: executing program 4 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) r5 = socket$packet(0x11, 0x3, 0x300) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc5000001) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000001c00)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x4, 0x44d, &(0x7f0000000900)="$eJzs3MtvG0UYAPDPdpw0fZBQyqOhhUBBRDySJn3QA5cikDiAhASHIk4hSatQt0FNkGgVQeAQjqgSd8QRib+AC+WCgBMSV7gjpAjl0sLJaO3d1E3sJE6cuNS/n7TJjGesmW93xx7Peh1AxxpM/uQi9kfE7xHRV83eWWGw+u/W8vzEP8vzE7kol9/6O1epd3N5fiKrmj1vXzVTLq/T7uK7EeOl0tSVND8yd+mDkdmr116YvjR+YerC1OWxM2dOnjjafXrsVEviTOK6OfDxzJHDr71z/Y2Jc9ff+/nbpL/70/LaOFplsLp363q61Y212YGadK6rjR2hKYWISA5XsTL++6IQvStlffHqZ23tHLCjyuV8uadx8UIZuIclE3WgE2Vv9Mnn32zbpanHXWHpbKysY9xKt2pJV+TTOsX0M9JOGIyIcwv/fpVssUPrEAAAtW6cjYjn683/8vFQTb370mso/RFxf0QcjIgHIuJQRDwYUan7cEQ80mT7q6+QrJ3/lPu2FNgmJfO/l9JrW3fO/7LZX/QX0tyBSvzF3Pnp0tTxdJ8MRbEnyY+u08YPr/z2RaOy2vlfsiXtZ3PBtB9/da1aoJscnxvfTsy1lj6NGOiqF39uZc6bzI8PR8TAFtuYfvabI43K+jeMfx0tmJSXv454pnr8F2JV/Jlcw+uToy+eHjs1sidKU8dHsrNirV9+XXyzUfsbH/+dtXSjHHvrnv8r8ffn9kTMXr12sXK9drb5Nhb/+LzhZ5qtnv/dubcr6e70sY/G5+aujEZ0515f+/jY7edm+ax+cv4PHas//g/G7T3xaEQkJ/HRiHgsIh5P+/5ERDwZEcfWif+nl596v/n411mVb6Ek/smNjn/UHv/mE4WLP37XfPyZ5PifrKSG0kc28/q32Q5uZ98BAADA/0W+8h34XH54JZ3PDw9Xv8N/KPbmSzOzc8+dn/nw8mT1u/L9UcxnK119Neuho+laXpYfW5U/ka4bf1noreSHJ2ZKk+0OHjrcvgbjP/Fnod29A3ac+7Wgcxn/0LmMf+hcxj90LuMfOle98f9JG/oB7L4N3v97d6sfwO4z/4fOZfxD5zL+oSM1vDc+v61b/iXalPi+e3u/1bD5ROTvkpDvmUQx6hZ1bfrHLLaY6Klb1O5XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4LwAA//+KpOMG") 14.235585237s ago: executing program 0 (id=871): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x14711, &(0x7f00000003c0)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@data_err_ignore}, {@bsdgroups}, {@errors_remount}, {@test_dummy_encryption}, {@bsdgroups}]}, 0x3, 0x453, &(0x7f0000000c40)="$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") r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpgid(r0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0x21, &(0x7f0000000480)={&(0x7f0000000000)="8f28aca25f3f453e660f6c8109000000c4815de4e93e0f6ef2def640dec7c4c2d53ff38f48aca2ff65650fc7670642ded3", 0x90000000, &(0x7f0000000380)="f2456fc442fdbb7cfd25430f38f19bde95e3d5c4017e2d9b8e83adba400f3a0fa90010000000713cc402a5a6e5f0106c172764f3a5650f01d4", {[0xb5e3]}}, &(0x7f0000000580)={&(0x7f00000004c0)="3e66f366260fcf66470f63edc441ff2cd2660fc0b506000000c441a96b490066ab65f20f2ce6c4a1456316f340af66420f3a600b13", 0x0, &(0x7f0000000500)="c441d85ed36766430f383a610ec44191c46f65598f41e2c481fbf046d0f241adc4e1c9676c916567660f3805a4e10000008165480f38f6058a3e25172ed9b2f2ffffff"}, 0x8, &(0x7f00000005c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffc}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0) 11.986743572s ago: executing program 1 (id=878): bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) 10.655519711s ago: executing program 1 (id=883): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x5) accept4(r6, 0x0, 0x0, 0x80800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0}, 0x20) 10.630200391s ago: executing program 4 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x6, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x4d2, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x33}, 0x0, @in=@loopback, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x2b}, 0xa, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x1}]}]}, 0x1fc}}, 0xc810) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r1, 0x407, 0x2000000) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f]}}, &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd85000000730000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080f0000b7040000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mount$tmpfs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="6367996c"]) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x2c, {0x2c, 0xe, "00e354a3a0d2d1f8c006dd4c9ac58cdfc2354bd8477cfd61243930a5b7037ce1ffdbb565f9cf57f16d9c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10.016478446s ago: executing program 2 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x6, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x4d2, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x33}, 0x0, @in=@loopback, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x2b}, 0xa, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x1}]}]}, 0x1fc}}, 0xc810) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r1, 0x407, 0x2000000) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f]}}, &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080f0000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mount$tmpfs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="6367996c"]) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x2c, {0x2c, 0xe, "00e354a3a0d2d1f8c006dd4c9ac58cdfc2354bd8477cfd61243930a5b7037ce1ffdbb565f9cf57f16d9c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.890920556s ago: executing program 3 (id=886): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000008d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 9.30506948s ago: executing program 1 (id=887): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d00000085"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="2080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) epoll_create1(0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) 8.222015367s ago: executing program 3 (id=888): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r4 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r4], 0xfc, 0x0, 0x0) setreuid(0x0, 0xee00) syz_fuse_handle_req(r3, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f00000002c0)={0x50, 0x0, 0x800, {0x7, 0x29, 0x0, 0x400000, 0x8000, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) 8.208511917s ago: executing program 0 (id=889): bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) mkdir(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ppoll(&(0x7f0000000180)=[{r7}], 0x20000000000000e3, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) 6.989721085s ago: executing program 3 (id=890): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000008d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 6.916687165s ago: executing program 0 (id=891): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000008d", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 5.912744483s ago: executing program 2 (id=892): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000008d", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 5.883677913s ago: executing program 4 (id=893): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000008d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 5.827896543s ago: executing program 1 (id=894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xde80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.757321263s ago: executing program 0 (id=895): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d00000085"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="2080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) 5.756442523s ago: executing program 3 (id=896): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x14711, &(0x7f00000003c0)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@data_err_ignore}, {@bsdgroups}, {@errors_remount}, {@test_dummy_encryption}, {@bsdgroups}]}, 0x3, 0x453, &(0x7f0000000c40)="$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") r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000104050000000000000000000700000006000640000200000500010002"], 0x34}}, 0x2000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpgid(r0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0x21, &(0x7f0000000480)={&(0x7f0000000000)="8f28aca25f3f453e660f6c8109000000c4815de4e93e0f6ef2def640dec7c4c2d53ff38f48aca2ff65650fc7670642ded3", 0x90000000, &(0x7f0000000380)="f2456fc442fdbb7cfd25430f38f19bde95e3d5c4017e2d9b8e83adba400f3a0fa90010000000713cc402a5a6e5f0106c172764f3a5650f01d4", {[0xb5e3]}}, &(0x7f0000000580)={&(0x7f00000004c0)="3e66f366260fcf66470f63edc441ff2cd2660fc0b506000000c441a96b490066ab65f20f2ce6c4a1456316f340af66420f3a600b13", 0x0, &(0x7f0000000500)="c441d85ed36766430f383a610ec44191c46f65598f41e2c481fbf046d0f241adc4e1c9676c916567660f3805a4e10000008165480f38f6058a3e25172ed9b2f2ffffff"}, 0x8, &(0x7f00000005c0)) fstat(r3, &(0x7f0000000680)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffc}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0) 4.712127039s ago: executing program 2 (id=897): bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) 4.60576176s ago: executing program 4 (id=898): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.012334211s ago: executing program 2 (id=899): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f0000006700), 0x9, 0x622, &(0x7f0000000d40)="$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") 2.666823623s ago: executing program 0 (id=900): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d00000085"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="2080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) 2.486332834s ago: executing program 1 (id=901): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000008d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1.440905171s ago: executing program 3 (id=902): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f0000006700), 0x9, 0x622, &(0x7f0000000d40)="$eJzs3c9rXNUeAPDvnfxO3ntJw+M960IDoi1okyZtpYhgi+CqlPpjIbhxbNJSO/1BE9HUSlOoG0HcuBBcubAu/B+0ILjyH3DhxpVUikg3StGRO7kzTpO5yUzMzLSZzwemc+89N3O+t8k35+TMOXcC6FlT6T+FiN0RcTGJmKwr64+scGr1vDu/XjmZPpIol1/+JYkrV5OV+tdKsuexiEgL/hiP5NuImOxbX+/i8uWzxVJp4VK2P7N07uLM4vLlfWfOFU8vnF44P/f03OFDBw8dnt1f91WnXmj1+nbVbR+7/ubb4x8cf+3zT+8ms1/8cDyJI7Wg0+tq9bU3MxVTUc7UH0//Xw9vd2Vd0lf7OflbsvbAWs+3MSBaUv3+DUTE/2M8+uq+m+Px/otdDQ5oq3IStTYK6DXJ+vwfCb8UoAdU+wHVv+2b+zt4sM29EqATbh+NeKKW/wMRUc3//tWxwRiujA2M3knuGedJImL/NtSf1vHdN8evp49o0zgc0NjKtaFsCHxt+59UcnMihit7o3cK9+R/IRvGncjGD1/auJrxvIKpNftZ/UNbvR6geSvXIuKhRv3/zfP/9crzcOX4G1usPyf/AQAAAAAAgC24eTQinmr0/l+hNv9nsMH8n7GIOLIN9W/+/l/h1jZUAzRw+2jEsw3n/xaqp0z0ZXv/rswHGEhOnSkt7I+I/0TE3hgYSvdn61/0y7qvjoh9H05+kld//fy/9JHWX50LmMVxq3/NbKD54lJxGy4det7taxEP9+fP/0nb/6RB+5/m98Um65h8/MaJvLLN8x9ol/JnEXsatv9J7Zxk4/tzzFT6AzPVXsF6j7z70Vd59ct/6J60/R/dOP+Hkvr79Sy29vqDEXFgub+cV77V/v9g8kpf1K1EfKe4tHRpNmIwObb++FxrMcODZLj5U9+LiEo+VPMlzf+9j208/lfr/9fl4Uh2j69m/O/PsR/zyrT/0D1p/s9v3P5P3Nv+t74xd2Pi67z6TzTV/h+stOl7syPG/2BjzSZot+MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAdRISL+FUlhurZdKExPR4xFxH9jtFC6sLj05KkLb52fT8sqn/9fqH7S7/jqflL9/P+Juv25NfsHImJXRHzcN1LZnz55oTTf7YsHAAAAAAAAAAAAAAAAAACA+8TY6tO69f+pn/q6GhrQCf3Zs3yH3tPf7QCArpH/0LvkP/Su/Pz/7W65oqPhAB3UbPtfvtrmQICO20r/f6ANcQCd5+9/6FVNtuTD7Y4D6AbtPwAAAAAA7Ci7Hr35fRIRK8+MVB6pways9sbgSLeiA9qpkFcw1Nk4gM5zyw/oXab+QO+yjAdIalu/N1zsnz/7P2lPQAAAAAAAAAAAAADAOnt2N7H+H9iRctf/AzveBuv/Gy3scbsA2EGs/4fe5TZfQLWzn/dJ/9b/AwAAAAAAAAAAAMB9YPjy2WKptHBpcbnpjautnPzPN36OvKLnOhnGdm2sFO+LMB6EjYGIWFNUHl/9sT1bLL0anY2nmjGdqGuwg3XlbHTp9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDOXwEAAP//8nokRA==") 1.294381922s ago: executing program 1 (id=903): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x14711, &(0x7f00000003c0)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@data_err_ignore}, {@bsdgroups}, {@errors_remount}, {@test_dummy_encryption}, {@bsdgroups}]}, 0x3, 0x453, &(0x7f0000000c40)="$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") r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000010405000000000000000000070000000600064000020000050001000200000005000100010000"], 0x34}}, 0x2000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpgid(r0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0x21, &(0x7f0000000480)={&(0x7f0000000000)="8f28aca25f3f453e660f6c8109000000c4815de4e93e0f6ef2def640dec7c4c2d53ff38f48aca2ff65650fc7670642ded3", 0x90000000, &(0x7f0000000380)="f2456fc442fdbb7cfd25430f38f19bde95e3d5c4017e2d9b8e83adba400f3a0fa90010000000713cc402a5a6e5f0106c172764f3a5650f01d4", {[0xb5e3]}}, &(0x7f0000000580)={&(0x7f00000004c0)="3e66f366260fcf66470f63edc441ff2cd2660fc0b506000000c441a96b490066ab65f20f2ce6c4a1456316f340af66420f3a600b13", 0x0, &(0x7f0000000500)="c441d85ed36766430f383a610ec44191c46f65598f41e2c481fbf046d0f241adc4e1c9676c916567660f3805a4e10000008165480f38f6058a3e25172ed9b2f2ffffff"}, 0x8, &(0x7f00000005c0)) fstat(r3, &(0x7f0000000680)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffc}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0) 1.208178072s ago: executing program 4 (id=904): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200006600000000"], 0x0, 0x7fc, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x2a, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7f, 0x8, 0x3, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) 753.288286ms ago: executing program 2 (id=905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fcntl$dupfd(r0, 0x0, r0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000edff0095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000030000008500000086000000180100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 505.964326ms ago: executing program 2 (id=906): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7fffefff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f0000006700), 0x9, 0x622, &(0x7f0000000d40)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 204.297949ms ago: executing program 4 (id=907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000180)=0x80000004, 0x51) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt(r5, 0x3, 0x1, &(0x7f00000000c0)="c9a13e03", 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000740)={r6, 0x58, &(0x7f00000006c0)}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) r7 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r7, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {0x0}], 0x7}}], 0x1, 0x81) 0s ago: executing program 3 (id=908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x4ec, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4b4, 0x2, [@TCA_BASIC_POLICE={0x4b0, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x10000000, 0xff, 0x23f, 0x35, {0xf, 0x2, 0x9, 0x8, 0xb8, 0xd}, {0x9, 0x3, 0x7, 0x4, 0x4, 0x1353}, 0x6, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf1d}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x6, 0x2, 0x2, {0xa, 0x0, 0x7fff, 0x100, 0x4, 0x1ff}, {0x4, 0x1, 0xa, 0x6, 0x7, 0x7d}, 0xb, 0xfffffffc, 0x68c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfff, 0x146b, 0x6, 0x3d8d, 0x200, 0x6, 0xfffffffa, 0x1, 0x4, 0x0, 0x80000000, 0x7f, 0x5, 0xe7, 0xf, 0x782b, 0xa7, 0x80, 0xffffffe0, 0xe, 0x401, 0x0, 0x3cc8, 0x0, 0x1, 0xe, 0xc860, 0x7, 0x0, 0x3, 0x7fff, 0x101, 0x3, 0x80000000, 0x8, 0x8004, 0x9, 0x80000001, 0x200, 0x4, 0x6, 0xffffffff, 0x7, 0x0, 0xda, 0x1, 0x200, 0x6, 0x80, 0xfffffff9, 0x0, 0x3, 0x2, 0x6, 0xf, 0x7, 0x2, 0x7, 0xffff, 0x9, 0x6, 0x9, 0x3352ecb4, 0x5, 0xfa33, 0x72, 0x1ff, 0x6, 0x2, 0x6, 0x6, 0x6c, 0x7, 0x9, 0x92d7, 0xffffffff, 0xfffffffc, 0x101, 0x1, 0x5, 0x9, 0x495e, 0x80000000, 0xfffffff0, 0x1, 0x6362, 0x2400, 0x2, 0x8, 0x9, 0x3, 0x317, 0x80, 0x9, 0x3, 0x9, 0xaea8, 0xbf, 0xe, 0x9, 0x8, 0x5, 0xee, 0x20000005, 0x5, 0x400, 0x1ba9, 0x15400, 0x6, 0x8, 0x7f, 0xffff6e64, 0xfffffff7, 0x401, 0x40000, 0x8d7, 0x2, 0x200, 0x4, 0x5, 0xb5d, 0xfea, 0x8, 0xb2, 0x2, 0x2, 0x2, 0x200, 0x800, 0x4, 0x6, 0x4b87, 0x7fffffff, 0xd73, 0x5, 0x8, 0x3, 0x5, 0xfb27, 0x6, 0x7, 0x8, 0x2, 0x0, 0x1ff, 0x3, 0xd5, 0x477, 0xffff1be9, 0x10001, 0x0, 0x0, 0x0, 0x2008000, 0x8000, 0x7, 0xff, 0x9, 0x8, 0x938e, 0x41, 0x7ff, 0x5, 0x0, 0xe793, 0xa1d, 0xfffffff9, 0xffff, 0x8, 0x1, 0x4, 0x2, 0x400, 0x3, 0x1, 0x8000, 0x6, 0xefee, 0xffffffff, 0xaa, 0x8, 0x8, 0xe, 0x6c, 0x61e1, 0x1, 0xcf0, 0x68, 0xed, 0x4, 0x82, 0x230, 0x7, 0x4, 0xfff, 0x637c5d46, 0x9, 0x97cb, 0x1, 0x1, 0x4, 0x9, 0x9, 0x3ff, 0x8, 0x3, 0x1, 0x405, 0x6, 0x3dc9, 0xfffff503, 0x0, 0x4001, 0x9d, 0xd686, 0xc65, 0x8, 0x10000, 0x1, 0x7, 0x4, 0x10001, 0xb, 0x0, 0xf515, 0x2, 0x7d8, 0x5, 0x8000, 0x8000, 0x1, 0x5, 0xa, 0x8, 0x4, 0xd6, 0x8, 0x80000001, 0x4, 0x0, 0x8, 0xb9, 0xd9e, 0x9, 0x5, 0x9, 0x1, 0x80000002, 0x2, 0x9, 0x9, 0x7, 0x0, 0x8, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xde80}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) open(&(0x7f0000000040)='./file1\x00', 0x208001, 0x101) kernel console output (not intermixed with test programs): 35][ T2027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.804427][ T2035] device bridge0 entered promiscuous mode [ 156.810637][ T2035] device macsec1 entered promiscuous mode [ 156.816847][ T2035] bridge0: port 3(macsec1) entered blocking state [ 156.823291][ T2035] bridge0: port 3(macsec1) entered disabled state [ 156.830512][ T2035] device bridge0 left promiscuous mode [ 157.550427][ T287] EXT4-fs (loop4): unmounting filesystem. [ 157.654885][ T2045] loop3: detected capacity change from 0 to 512 [ 157.672004][ T2045] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.712761][ T2045] EXT4-fs (loop3): Test dummy encryption mode enabled [ 157.755231][ T2048] device bridge0 entered promiscuous mode [ 157.761151][ T2048] device macsec1 entered promiscuous mode [ 157.768973][ T2048] bridge0: port 3(macsec1) entered blocking state [ 157.775449][ T2048] bridge0: port 3(macsec1) entered disabled state [ 158.072298][ T2048] device bridge0 left promiscuous mode [ 158.095793][ T2050] device bridge0 entered promiscuous mode [ 158.101720][ T2050] device macsec1 entered promiscuous mode [ 158.109642][ T2050] bridge0: port 3(macsec1) entered blocking state [ 158.116131][ T2050] bridge0: port 3(macsec1) entered disabled state [ 158.260555][ T2050] device bridge0 left promiscuous mode [ 158.282682][ T2045] EXT4-fs (loop3): orphan cleanup on readonly fs [ 158.289168][ T2045] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.380: inode #13: comm syz.3.380: iget: illegal inode # [ 158.303040][ T2045] EXT4-fs (loop3): Remounting filesystem read-only [ 158.328850][ T2045] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.380: couldn't read orphan inode 13 (err -117) [ 158.341012][ T2045] EXT4-fs (loop3): Remounting filesystem read-only [ 158.347657][ T2045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.383926][ T632] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 158.513705][ T2057] loop1: detected capacity change from 0 to 512 [ 158.520321][ T2057] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.527188][ T2057] EXT4-fs (loop1): Test dummy encryption mode enabled [ 158.559015][ T2057] EXT4-fs (loop1): orphan cleanup on readonly fs [ 158.566653][ T2057] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.382: inode #13: comm syz.1.382: iget: illegal inode # [ 158.760329][ T285] EXT4-fs (loop2): unmounting filesystem. [ 158.770357][ T2057] EXT4-fs (loop1): Remounting filesystem read-only [ 158.776990][ T2057] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.382: couldn't read orphan inode 13 (err -117) [ 158.802918][ T2057] EXT4-fs (loop1): Remounting filesystem read-only [ 158.809588][ T2057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 159.203439][ T2065] device bridge0 entered promiscuous mode [ 159.209219][ T2065] device macsec1 entered promiscuous mode [ 159.215662][ T2065] bridge0: port 3(macsec1) entered blocking state [ 159.222104][ T2065] bridge0: port 3(macsec1) entered disabled state [ 159.245515][ T2065] device bridge0 left promiscuous mode [ 159.440366][ T632] usb 3-1: device not accepting address 6, error -71 [ 159.447184][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 159.638105][ T2075] loop0: detected capacity change from 0 to 512 [ 159.707423][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 159.733374][ T24] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 159.766718][ T2077] loop2: detected capacity change from 0 to 512 [ 159.828469][ T2075] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 159.836877][ T2075] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.385: bad orphan inode 15 [ 159.848164][ T2075] ext4_test_bit(bit=14, block=4) = 1 [ 159.853565][ T2075] is_bad_inode(inode)=0 [ 159.857738][ T2075] NEXT_ORPHAN(inode)=0 [ 159.861929][ T2075] max_ino=32 [ 159.865145][ T2075] i_nlink=1 [ 159.868478][ T2075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 159.936856][ T2077] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.386: casefold flag without casefold feature [ 159.949949][ T2077] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.386: couldn't read orphan inode 15 (err -117) [ 159.962715][ T2077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.029515][ T24] usb 4-1: config 0 has no interface number 0 [ 161.692414][ T24] usb 4-1: config 0 interface 196 has no altsetting 0 [ 161.764485][ T284] EXT4-fs (loop0): unmounting filesystem. [ 161.770540][ T283] EXT4-fs (loop1): unmounting filesystem. [ 161.805831][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 161.820764][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.829073][ T24] usb 4-1: Product: syz [ 161.834163][ T24] usb 4-1: Manufacturer: syz [ 161.838789][ T24] usb 4-1: SerialNumber: syz [ 161.847190][ T24] usb 4-1: config 0 descriptor?? [ 162.192120][ T2087] loop4: detected capacity change from 0 to 1024 [ 162.226076][ T2087] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 162.234015][ T2087] EXT4-fs (loop4): write access will be enabled during recovery [ 162.241697][ T2087] EXT4-fs (loop4): barriers disabled [ 162.249659][ T2087] JBD2: no valid journal superblock found [ 162.255507][ T2087] EXT4-fs (loop4): error loading journal [ 162.281608][ T285] EXT4-fs (loop2): unmounting filesystem. [ 162.401422][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 162.776154][ T24] ipheth 4-1:0.196: Unable to find endpoints [ 162.795187][ T286] EXT4-fs (loop3): unmounting filesystem. [ 162.808687][ T24] usb 4-1: USB disconnect, device number 13 [ 162.885685][ T2104] tmpfs: Unknown parameter 'cg™l' [ 163.288592][ T2109] loop0: detected capacity change from 0 to 512 [ 163.295352][ T2109] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.302866][ T2109] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.309270][ T2113] loop1: detected capacity change from 0 to 512 [ 163.322009][ T2109] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.328525][ T2109] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.395: inode #13: comm syz.0.395: iget: illegal inode # [ 163.349361][ T2109] EXT4-fs (loop0): Remounting filesystem read-only [ 163.358344][ T2109] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.395: couldn't read orphan inode 13 (err -117) [ 163.372839][ T2113] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.394: casefold flag without casefold feature [ 163.385746][ T2113] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.394: couldn't read orphan inode 15 (err -117) [ 163.397751][ T2113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.401136][ T2109] EXT4-fs (loop0): Remounting filesystem read-only [ 163.414175][ T2101] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 163.427492][ T2109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 164.101123][ T2116] device bridge0 entered promiscuous mode [ 164.106930][ T2116] device macsec1 entered promiscuous mode [ 164.113159][ T2116] bridge0: port 3(macsec1) entered blocking state [ 164.119615][ T2116] bridge0: port 3(macsec1) entered disabled state [ 164.142855][ T2116] device bridge0 left promiscuous mode [ 164.561471][ T2119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 165.707767][ T28] audit: type=1326 audit(1762234860.101:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.2.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff789f8f6c9 code=0x0 [ 165.835762][ T2129] device bridge0 entered promiscuous mode [ 165.841734][ T2129] device macsec1 entered promiscuous mode [ 165.849490][ T2129] bridge0: port 3(macsec1) entered blocking state [ 165.855978][ T2129] bridge0: port 3(macsec1) entered disabled state [ 166.048708][ T2129] device bridge0 left promiscuous mode [ 166.138332][ T283] EXT4-fs (loop1): unmounting filesystem. [ 166.168849][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.322213][ T2138] loop4: detected capacity change from 0 to 512 [ 166.361507][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 166.369241][ T24] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 166.410395][ T2138] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 166.419346][ T2138] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.398: bad orphan inode 15 [ 166.430456][ T2138] ext4_test_bit(bit=14, block=4) = 1 [ 166.435905][ T2138] is_bad_inode(inode)=0 [ 166.440098][ T2138] NEXT_ORPHAN(inode)=0 [ 166.444219][ T2138] max_ino=32 [ 166.447460][ T2138] i_nlink=1 [ 166.450918][ T2138] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.707811][ T24] usb 1-1: config 0 has no interface number 0 [ 167.146029][ T2101] usb 5-1: device not accepting address 16, error -71 [ 167.153342][ T284] EXT4-fs (loop0): unmounting filesystem. [ 167.167942][ T24] usb 1-1: config 0 interface 196 has no altsetting 0 [ 167.177945][ T24] usb 1-1: string descriptor 0 read error: -71 [ 167.188614][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 167.202314][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.211253][ T287] EXT4-fs (loop4): unmounting filesystem. [ 167.217397][ T24] usb 1-1: config 0 descriptor?? [ 167.226557][ T2146] loop0: detected capacity change from 0 to 512 [ 167.233062][ T24] usb 1-1: can't set config #0, error -71 [ 167.233629][ T24] usb 1-1: USB disconnect, device number 9 [ 167.250959][ T2148] loop4: detected capacity change from 0 to 512 [ 167.252280][ T2146] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.401: casefold flag without casefold feature [ 167.260476][ T2148] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.402: casefold flag without casefold feature [ 167.272599][ T2146] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.401: couldn't read orphan inode 15 (err -117) [ 167.294758][ T2148] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.402: couldn't read orphan inode 15 (err -117) [ 167.307521][ T2146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 167.307521][ T2148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.435472][ T2157] tmpfs: Unknown parameter 'cg™l' [ 169.693968][ T287] EXT4-fs (loop4): unmounting filesystem. [ 169.833850][ T2156] tmpfs: Unknown parameter 'cg™l' [ 170.005504][ T284] EXT4-fs (loop0): unmounting filesystem. [ 170.133413][ T1801] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.500008][ T1801] usb 3-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 170.525626][ T1801] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.581424][ T1801] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 170.590811][ T1801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.604618][ T1801] usb 3-1: config 0 descriptor?? [ 170.640682][ T1801] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 170.642450][ T2173] loop0: detected capacity change from 0 to 40427 [ 170.671019][ T2173] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 170.683009][ T2182] loop4: detected capacity change from 0 to 512 [ 170.696682][ T2173] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 170.712056][ T2173] F2FS-fs (loop0): invalid crc value [ 170.718185][ T2182] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.408: casefold flag without casefold feature [ 170.732672][ T2182] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.408: couldn't read orphan inode 15 (err -117) [ 170.745384][ T2182] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.767508][ T2173] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.866441][ T2173] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 170.873625][ T2173] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.057662][ T2192] overlayfs: failed to resolve './file0': -2 [ 172.869416][ T287] EXT4-fs (loop4): unmounting filesystem. [ 172.892435][ T2197] loop3: detected capacity change from 0 to 512 [ 172.904416][ T2197] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.410: casefold flag without casefold feature [ 172.917500][ T2197] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.410: couldn't read orphan inode 15 (err -117) [ 172.929659][ T2197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.042440][ T507] usb 3-1: USB disconnect, device number 8 [ 173.815125][ T2206] overlayfs: failed to resolve './file0': -2 [ 174.025575][ T2101] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.102723][ T2209] loop1: detected capacity change from 0 to 512 [ 175.193157][ T2214] device bridge0 entered promiscuous mode [ 175.198928][ T2214] device macsec1 entered promiscuous mode [ 175.205133][ T2214] bridge0: port 3(macsec1) entered blocking state [ 175.211587][ T2214] bridge0: port 3(macsec1) entered disabled state [ 175.978026][ T2214] device bridge0 left promiscuous mode [ 175.990358][ T2216] device bridge0 entered promiscuous mode [ 175.996211][ T2216] device macsec1 entered promiscuous mode [ 176.002413][ T2216] bridge0: port 3(macsec1) entered blocking state [ 176.008853][ T2216] bridge0: port 3(macsec1) entered disabled state [ 176.009265][ T2209] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.413: casefold flag without casefold feature [ 176.021050][ T2218] loop0: detected capacity change from 0 to 512 [ 176.034751][ T2216] device bridge0 left promiscuous mode [ 176.043007][ T2209] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.413: couldn't read orphan inode 15 (err -117) [ 176.055117][ T2209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 176.066928][ T286] EXT4-fs (loop3): unmounting filesystem. [ 176.093233][ T2218] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.203986][ T2218] EXT4-fs (loop0): Test dummy encryption mode enabled [ 176.216736][ T2221] loop3: detected capacity change from 0 to 512 [ 176.232346][ T2221] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.416: casefold flag without casefold feature [ 176.292133][ T2221] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.416: couldn't read orphan inode 15 (err -117) [ 176.311681][ T2229] overlayfs: failed to resolve './file0': -2 [ 176.616531][ T2218] EXT4-fs (loop0): orphan cleanup on readonly fs [ 176.634666][ T2218] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.412: inode #13: comm syz.0.412: iget: illegal inode # [ 176.648061][ T2218] EXT4-fs (loop0): Remounting filesystem read-only [ 176.654769][ T2218] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.412: couldn't read orphan inode 13 (err -117) [ 176.666889][ T2221] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 176.714347][ T2218] EXT4-fs (loop0): Remounting filesystem read-only [ 176.815363][ T2218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.509884][ T283] EXT4-fs (loop1): unmounting filesystem. [ 178.630832][ T286] EXT4-fs (loop3): unmounting filesystem. [ 178.791454][ T1518] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.801190][ T2240] tmpfs: Unknown parameter 'cg™l' [ 179.261426][ T1518] usb 1-1: Using ep0 maxpacket: 32 [ 179.267605][ T1518] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 179.281400][ T6] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 179.286061][ T1518] usb 1-1: config 0 has no interface number 0 [ 179.305675][ T1518] usb 1-1: config 0 interface 196 has no altsetting 0 [ 179.369368][ T1518] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 179.386764][ T1518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.396142][ T1518] usb 1-1: Product: syz [ 179.400324][ T1518] usb 1-1: Manufacturer: syz [ 179.405128][ T1518] usb 1-1: SerialNumber: syz [ 179.413368][ T1518] usb 1-1: config 0 descriptor?? [ 179.433155][ T2253] loop1: detected capacity change from 0 to 40427 [ 179.440267][ T2253] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 179.448151][ T2253] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 179.467036][ T2253] F2FS-fs (loop1): invalid crc value [ 179.516985][ T2257] device bridge0 entered promiscuous mode [ 179.522923][ T2257] device macsec1 entered promiscuous mode [ 179.530954][ T2257] bridge0: port 3(macsec1) entered blocking state [ 179.537481][ T2257] bridge0: port 3(macsec1) entered disabled state [ 179.700210][ T2257] device bridge0 left promiscuous mode [ 179.710962][ T2253] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.732549][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.737228][ T28] audit: type=1326 audit(1762234874.131:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2261 comm="syz.3.424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cecd8f6c9 code=0x0 [ 179.745826][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.778828][ T6] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 179.799125][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.802883][ T2253] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 179.810583][ T6] usb 5-1: config 0 descriptor?? [ 179.814328][ T2253] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.821327][ T6] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 179.907227][ T2267] fuse: Bad value for 'rootmode' [ 180.690020][ T2272] loop2: detected capacity change from 0 to 512 [ 181.066423][ T1518] ipheth 1-1:0.196: Unable to find endpoints [ 181.097972][ T284] EXT4-fs (loop0): unmounting filesystem. [ 181.235396][ T1518] usb 1-1: USB disconnect, device number 10 [ 181.271553][ T2272] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 181.282005][ T2272] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.425: bad orphan inode 15 [ 181.293592][ T2272] ext4_test_bit(bit=14, block=4) = 1 [ 181.298911][ T2272] is_bad_inode(inode)=0 [ 181.303144][ T2272] NEXT_ORPHAN(inode)=0 [ 181.307240][ T2272] max_ino=32 [ 181.310465][ T2272] i_nlink=1 [ 181.313887][ T2272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.741876][ T285] EXT4-fs (loop2): unmounting filesystem. [ 181.749574][ T19] usb 5-1: USB disconnect, device number 18 [ 183.777713][ T2295] loop1: detected capacity change from 0 to 512 [ 183.946512][ T2295] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 183.954606][ T2295] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.426: bad orphan inode 15 [ 183.965006][ T2295] ext4_test_bit(bit=14, block=4) = 1 [ 183.970500][ T2295] is_bad_inode(inode)=0 [ 183.974703][ T2295] NEXT_ORPHAN(inode)=0 [ 183.978801][ T2295] max_ino=32 [ 183.982112][ T2295] i_nlink=1 [ 183.985513][ T2295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.488631][ T283] EXT4-fs (loop1): unmounting filesystem. [ 184.589736][ T2308] tmpfs: Unknown parameter 'cg™l' [ 185.083438][ T28] audit: type=1326 audit(1762234879.481:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2314 comm="syz.0.436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb6898f6c9 code=0x0 [ 185.331644][ T555] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 185.536559][ T2324] loop4: detected capacity change from 0 to 40427 [ 185.543645][ T2324] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 185.551567][ T2324] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 185.562673][ T555] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.562959][ T2324] F2FS-fs (loop4): invalid crc value [ 185.572963][ T555] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.587261][ T2324] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.591780][ T555] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 185.606540][ T555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.618683][ T555] usb 3-1: config 0 descriptor?? [ 185.625453][ T2324] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 185.625667][ T555] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 185.632739][ T2324] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 186.582898][ T2336] loop1: detected capacity change from 0 to 512 [ 186.762083][ T2336] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 186.773019][ T2336] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.438: bad orphan inode 15 [ 186.784682][ T2336] ext4_test_bit(bit=14, block=4) = 1 [ 186.790005][ T2336] is_bad_inode(inode)=0 [ 186.794236][ T2336] NEXT_ORPHAN(inode)=0 [ 186.798341][ T2336] max_ino=32 [ 186.801586][ T2336] i_nlink=1 [ 186.805440][ T2336] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 187.411628][ T6] usb 3-1: USB disconnect, device number 9 [ 187.454572][ T283] EXT4-fs (loop1): unmounting filesystem. [ 187.562710][ T2347] loop2: detected capacity change from 0 to 512 [ 187.582397][ T2349] tmpfs: Unknown parameter 'cg™l' [ 187.597803][ T2347] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.443: casefold flag without casefold feature [ 187.613172][ T2347] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.443: couldn't read orphan inode 15 (err -117) [ 187.625173][ T2347] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 187.739348][ T2353] loop4: detected capacity change from 0 to 512 [ 187.758174][ T2353] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.441: casefold flag without casefold feature [ 187.770923][ T2353] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.441: couldn't read orphan inode 15 (err -117) [ 187.782984][ T2353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 187.861863][ T1518] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 188.772929][ T1518] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.814443][ T285] EXT4-fs (loop2): unmounting filesystem. [ 188.882913][ T1518] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.242689][ T1518] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 189.251827][ T1518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.263009][ T1518] usb 4-1: config 0 descriptor?? [ 189.271049][ T1518] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 189.448391][ T287] EXT4-fs (loop4): unmounting filesystem. [ 189.485878][ T2364] loop1: detected capacity change from 0 to 512 [ 189.495206][ T2364] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.511978][ T2364] EXT4-fs (loop1): Test dummy encryption mode enabled [ 189.556869][ T2364] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.570297][ T2364] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.446: inode #13: comm syz.1.446: iget: illegal inode # [ 189.584750][ T2364] EXT4-fs (loop1): Remounting filesystem read-only [ 189.591324][ T2364] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.446: couldn't read orphan inode 13 (err -117) [ 189.604168][ T2364] EXT4-fs (loop1): Remounting filesystem read-only [ 189.610776][ T2364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 190.679805][ T348] usb 4-1: USB disconnect, device number 15 [ 190.704150][ T2377] loop0: detected capacity change from 0 to 512 [ 190.790833][ T2377] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.448: casefold flag without casefold feature [ 190.803703][ T2377] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.448: couldn't read orphan inode 15 (err -117) [ 190.856994][ T555] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 190.865187][ T2377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 190.943494][ T2384] loop4: detected capacity change from 0 to 512 [ 191.061481][ T555] usb 2-1: Using ep0 maxpacket: 32 [ 191.068511][ T555] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 191.088829][ T2384] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 191.098273][ T2384] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.449: bad orphan inode 15 [ 191.109852][ T2384] ext4_test_bit(bit=14, block=4) = 1 [ 191.115199][ T2384] is_bad_inode(inode)=0 [ 191.119400][ T2384] NEXT_ORPHAN(inode)=0 [ 191.123613][ T2384] max_ino=32 [ 191.126838][ T2384] i_nlink=1 [ 191.130294][ T2384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.361628][ T555] usb 2-1: config 0 has no interface number 0 [ 191.645732][ T555] usb 2-1: config 0 interface 196 has no altsetting 0 [ 192.275123][ T2387] overlayfs: failed to resolve './file0': -2 [ 192.297624][ T555] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 192.318297][ T287] EXT4-fs (loop4): unmounting filesystem. [ 192.371317][ T555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.821068][ T283] EXT4-fs (loop1): unmounting filesystem. [ 192.832613][ T555] usb 2-1: Product: syz [ 192.836801][ T555] usb 2-1: Manufacturer: syz [ 192.841714][ T555] usb 2-1: SerialNumber: syz [ 192.849656][ T555] usb 2-1: config 0 descriptor?? [ 192.861096][ T284] EXT4-fs (loop0): unmounting filesystem. [ 192.948079][ T555] usb 2-1: can't set config #0, error -71 [ 193.454368][ T2397] device bridge0 entered promiscuous mode [ 193.460500][ T2397] device macsec1 entered promiscuous mode [ 193.472137][ T2397] bridge0: port 3(macsec1) entered blocking state [ 193.478692][ T2397] bridge0: port 3(macsec1) entered disabled state [ 193.524807][ T2397] device bridge0 left promiscuous mode [ 193.533892][ T555] usb 2-1: USB disconnect, device number 12 [ 193.671467][ T2400] loop0: detected capacity change from 0 to 512 [ 193.924260][ T2400] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 193.932806][ T2400] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.453: bad orphan inode 15 [ 193.944181][ T2400] ext4_test_bit(bit=14, block=4) = 1 [ 193.949505][ T2400] is_bad_inode(inode)=0 [ 193.953821][ T2400] NEXT_ORPHAN(inode)=0 [ 193.957937][ T2400] max_ino=32 [ 193.961159][ T2400] i_nlink=1 [ 193.964638][ T2400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 194.553727][ T284] EXT4-fs (loop0): unmounting filesystem. [ 194.597830][ T2406] loop0: detected capacity change from 0 to 512 [ 194.611718][ T2406] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.627626][ T2406] EXT4-fs (loop0): Test dummy encryption mode enabled [ 194.702057][ T2408] device bridge0 entered promiscuous mode [ 194.708047][ T2408] device macsec1 entered promiscuous mode [ 194.715670][ T2408] bridge0: port 3(macsec1) entered blocking state [ 194.722132][ T2408] bridge0: port 3(macsec1) entered disabled state [ 194.733086][ T2408] device bridge0 left promiscuous mode [ 194.892363][ T2406] EXT4-fs (loop0): orphan cleanup on readonly fs [ 194.898735][ T2406] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.455: inode #13: comm syz.0.455: iget: illegal inode # [ 194.943173][ T2406] EXT4-fs (loop0): Remounting filesystem read-only [ 194.956912][ T2406] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.455: couldn't read orphan inode 13 (err -117) [ 194.994256][ T2406] EXT4-fs (loop0): Remounting filesystem read-only [ 194.994626][ T2392] loop1: detected capacity change from 0 to 40427 [ 195.013118][ T2406] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.017755][ T2392] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 195.031427][ T2392] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 195.094972][ T2392] F2FS-fs (loop1): invalid crc value [ 195.443062][ T2392] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.490345][ T2392] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 195.497537][ T2392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.532873][ T2421] loop2: detected capacity change from 0 to 512 [ 195.583047][ T2421] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.457: casefold flag without casefold feature [ 195.596050][ T2421] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.457: couldn't read orphan inode 15 (err -117) [ 195.608349][ T2421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.629885][ T594] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 197.956896][ T284] EXT4-fs (loop0): unmounting filesystem. [ 198.197031][ T285] EXT4-fs (loop2): unmounting filesystem. [ 198.251234][ T28] audit: type=1326 audit(1762234892.641:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2441 comm="syz.2.463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff789f8f6c9 code=0x0 [ 198.363750][ T2445] device bridge0 entered promiscuous mode [ 198.369668][ T2445] device macsec1 entered promiscuous mode [ 198.377500][ T2445] bridge0: port 3(macsec1) entered blocking state [ 198.383972][ T2445] bridge0: port 3(macsec1) entered disabled state [ 198.395416][ T2445] device bridge0 left promiscuous mode [ 198.410992][ T594] usb 1-1: device not accepting address 11, error -71 [ 198.542040][ T2450] fuse: Unknown parameter 'use00000000000000000000' [ 198.887012][ T2454] device bridge0 entered promiscuous mode [ 198.893430][ T2454] device macsec1 entered promiscuous mode [ 198.899688][ T2454] bridge0: port 3(macsec1) entered blocking state [ 198.906339][ T2454] bridge0: port 3(macsec1) entered disabled state [ 198.913438][ T2454] device bridge0 left promiscuous mode [ 199.855464][ T2461] device bridge0 entered promiscuous mode [ 199.861266][ T2461] device macsec1 entered promiscuous mode [ 199.867482][ T2461] bridge0: port 3(macsec1) entered blocking state [ 199.873930][ T2461] bridge0: port 3(macsec1) entered disabled state [ 199.901141][ T2461] device bridge0 left promiscuous mode [ 200.798502][ T2473] loop0: detected capacity change from 0 to 512 [ 200.820551][ T2473] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.851465][ T2473] EXT4-fs (loop0): Test dummy encryption mode enabled [ 201.226851][ T2473] EXT4-fs (loop0): orphan cleanup on readonly fs [ 201.241512][ T2473] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.472: inode #13: comm syz.0.472: iget: illegal inode # [ 201.263217][ T2473] EXT4-fs (loop0): Remounting filesystem read-only [ 201.277998][ T2473] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.472: couldn't read orphan inode 13 (err -117) [ 201.363205][ T2473] EXT4-fs (loop0): Remounting filesystem read-only [ 201.381411][ T2473] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 201.838894][ T2470] loop2: detected capacity change from 0 to 40427 [ 201.853339][ T2482] tmpfs: Unknown parameter 'cg™l' [ 201.861969][ T2470] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 201.881561][ T2470] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 201.908960][ T2470] F2FS-fs (loop2): invalid crc value [ 201.960673][ T2470] F2FS-fs (loop2): Found nat_bits in checkpoint [ 201.994448][ T2470] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 202.001650][ T2470] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 202.173479][ T2498] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 202.182368][ T2498] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 202.194184][ T2498] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 204.679240][ T2501] loop3: detected capacity change from 0 to 512 [ 205.358036][ T284] EXT4-fs (loop0): unmounting filesystem. [ 205.416125][ T507] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 205.424180][ T6] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 205.433649][ T2501] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 205.441719][ T2501] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.476: bad orphan inode 15 [ 205.455537][ T2501] ext4_test_bit(bit=14, block=4) = 1 [ 205.460846][ T2501] is_bad_inode(inode)=0 [ 205.465017][ T2501] NEXT_ORPHAN(inode)=0 [ 205.469082][ T2501] max_ino=32 [ 205.472281][ T2501] i_nlink=1 [ 205.475058][ T2506] loop1: detected capacity change from 0 to 512 [ 205.475402][ T2501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 205.512115][ T2506] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.532199][ T2499] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 205.536286][ T28] audit: type=1400 audit(1762234899.931:196): avc: denied { create } for pid=2493 comm="syz.3.476" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 205.562570][ T2506] EXT4-fs (loop1): Test dummy encryption mode enabled [ 205.607627][ T2506] EXT4-fs (loop1): orphan cleanup on readonly fs [ 205.614150][ T2506] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.477: inode #13: comm syz.1.477: iget: illegal inode # [ 205.627184][ T2506] EXT4-fs (loop1): Remounting filesystem read-only [ 205.633784][ T2506] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.477: couldn't read orphan inode 13 (err -117) [ 205.646515][ T2506] EXT4-fs (loop1): Remounting filesystem read-only [ 205.674818][ T2506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 205.922431][ T286] EXT4-fs (loop3): unmounting filesystem. [ 206.302384][ T2523] device bridge0 entered promiscuous mode [ 206.317717][ T2523] device macsec1 entered promiscuous mode [ 206.324034][ T2523] bridge0: port 3(macsec1) entered blocking state [ 206.337639][ T2523] bridge0: port 3(macsec1) entered disabled state [ 206.351755][ T2523] device bridge0 left promiscuous mode [ 206.391487][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 206.416368][ T2518] device bridge0 entered promiscuous mode [ 206.422197][ T2518] device macsec1 entered promiscuous mode [ 206.429394][ T2518] bridge0: port 3(macsec1) entered blocking state [ 206.435880][ T2518] bridge0: port 3(macsec1) entered disabled state [ 206.443074][ T2518] device bridge0 left promiscuous mode [ 206.571455][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 206.580488][ T24] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 206.612978][ T24] usb 2-1: config 0 has no interface number 0 [ 206.624643][ T2528] loop0: detected capacity change from 0 to 512 [ 206.654014][ T2528] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.483: casefold flag without casefold feature [ 206.666692][ T24] usb 2-1: config 0 interface 196 has no altsetting 0 [ 206.673528][ T2528] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.483: couldn't read orphan inode 15 (err -117) [ 206.686786][ T2528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 206.752156][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 206.761229][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.825122][ T24] usb 2-1: Product: syz [ 206.829456][ T24] usb 2-1: Manufacturer: syz [ 206.945838][ T2536] device bridge0 entered promiscuous mode [ 206.956607][ T2536] device macsec1 entered promiscuous mode [ 206.966748][ T2536] bridge0: port 3(macsec1) entered blocking state [ 206.973264][ T2536] bridge0: port 3(macsec1) entered disabled state [ 207.462500][ T2536] device bridge0 left promiscuous mode [ 207.666545][ T24] usb 2-1: SerialNumber: syz [ 207.674979][ T24] usb 2-1: config 0 descriptor?? [ 207.737079][ T2540] overlayfs: failed to resolve './file0': -2 [ 209.246846][ T2542] loop4: detected capacity change from 0 to 512 [ 210.323597][ T284] EXT4-fs (loop0): unmounting filesystem. [ 210.342337][ T2542] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 210.350875][ T2542] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.485: bad orphan inode 15 [ 210.362200][ T2542] ext4_test_bit(bit=14, block=4) = 1 [ 210.367522][ T2542] is_bad_inode(inode)=0 [ 210.371796][ T2542] NEXT_ORPHAN(inode)=0 [ 210.375864][ T2542] max_ino=32 [ 210.379067][ T2542] i_nlink=1 [ 210.382276][ T2542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.531820][ T2547] loop3: detected capacity change from 0 to 1024 [ 210.908551][ T2547] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 210.916427][ T2547] EXT4-fs (loop3): write access will be enabled during recovery [ 210.924154][ T2547] EXT4-fs (loop3): barriers disabled [ 210.932603][ T2547] JBD2: no valid journal superblock found [ 210.938384][ T2547] EXT4-fs (loop3): error loading journal [ 210.952097][ T24] ipheth 2-1:0.196: Unable to find endpoints [ 210.966886][ T287] EXT4-fs (loop4): unmounting filesystem. [ 210.972777][ T283] EXT4-fs (loop1): unmounting filesystem. [ 211.042885][ T24] usb 2-1: USB disconnect, device number 13 [ 211.065391][ T28] audit: type=1326 audit(1762234905.461:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.4.489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcf818f6c9 code=0x0 [ 211.345511][ T2554] loop1: detected capacity change from 0 to 512 [ 211.373659][ T2554] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.488: casefold flag without casefold feature [ 211.386427][ T2554] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.488: couldn't read orphan inode 15 (err -117) [ 211.400327][ T2554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 211.498554][ T2564] loop3: detected capacity change from 0 to 512 [ 211.505476][ T2564] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.521472][ T2564] EXT4-fs (loop3): Test dummy encryption mode enabled [ 211.533814][ T2564] EXT4-fs (loop3): orphan cleanup on readonly fs [ 211.540175][ T2564] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.491: inode #13: comm syz.3.491: iget: illegal inode # [ 211.554057][ T2564] EXT4-fs (loop3): Remounting filesystem read-only [ 211.560597][ T2564] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.491: couldn't read orphan inode 13 (err -117) [ 211.573923][ T2564] EXT4-fs (loop3): Remounting filesystem read-only [ 211.580507][ T2564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 211.623439][ T2568] overlayfs: failed to resolve './file0': -2 [ 211.880565][ T2564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 213.466170][ T2552] loop2: detected capacity change from 0 to 40427 [ 213.481090][ T283] EXT4-fs (loop1): unmounting filesystem. [ 213.496626][ T2552] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 213.511553][ T2552] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 213.523898][ T2552] F2FS-fs (loop2): invalid crc value [ 213.537614][ T2552] F2FS-fs (loop2): Found nat_bits in checkpoint [ 213.671538][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.747097][ T2552] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 213.755379][ T2552] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 213.911550][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 213.980543][ T24] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 213.999518][ T24] usb 4-1: config 0 has no interface number 0 [ 214.036845][ T24] usb 4-1: config 0 interface 196 has no altsetting 0 [ 214.048868][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 214.060037][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.080832][ T24] usb 4-1: Product: syz [ 214.086337][ T24] usb 4-1: Manufacturer: syz [ 214.101875][ T24] usb 4-1: SerialNumber: syz [ 214.140894][ T24] usb 4-1: config 0 descriptor?? [ 214.361849][ T24] ipheth 4-1:0.196: Unable to find endpoints [ 214.372014][ T24] usb 4-1: USB disconnect, device number 16 [ 214.935627][ T286] EXT4-fs (loop3): unmounting filesystem. [ 214.986285][ T2604] loop3: detected capacity change from 0 to 512 [ 215.009717][ T2604] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.499: casefold flag without casefold feature [ 215.022628][ T2604] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.499: couldn't read orphan inode 15 (err -117) [ 215.034789][ T2604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 215.221205][ T2608] loop1: detected capacity change from 0 to 512 [ 215.450118][ T2608] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 215.460679][ T2608] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.500: bad orphan inode 15 [ 215.472626][ T2608] ext4_test_bit(bit=14, block=4) = 1 [ 215.477957][ T2608] is_bad_inode(inode)=0 [ 215.482230][ T2608] NEXT_ORPHAN(inode)=0 [ 215.486319][ T2608] max_ino=32 [ 215.489537][ T2608] i_nlink=1 [ 215.492964][ T2608] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 216.039065][ T283] EXT4-fs (loop1): unmounting filesystem. [ 216.642313][ T2619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.503'. [ 216.663703][ T2617] overlayfs: failed to resolve './file0': -2 [ 216.684794][ T2611] loop0: detected capacity change from 0 to 40427 [ 216.701485][ T2611] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 216.711344][ T2611] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 216.743713][ T2611] F2FS-fs (loop0): invalid crc value [ 216.768083][ T2611] F2FS-fs (loop0): Found nat_bits in checkpoint [ 217.071576][ T2611] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 217.104795][ T2611] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 217.119101][ T28] audit: type=1326 audit(1762234911.511:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7f0f8f6c9 code=0x0 [ 217.841479][ T2643] device bridge0 entered promiscuous mode [ 217.847268][ T2643] device macsec1 entered promiscuous mode [ 217.853457][ T2643] bridge0: port 3(macsec1) entered blocking state [ 217.859875][ T2643] bridge0: port 3(macsec1) entered disabled state [ 217.866919][ T2643] device bridge0 left promiscuous mode [ 218.009063][ T2650] loop2: detected capacity change from 0 to 512 [ 218.077993][ T2650] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.511: casefold flag without casefold feature [ 218.094277][ T2650] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.511: couldn't read orphan inode 15 (err -117) [ 218.106250][ T2650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 218.941390][ T2654] device bridge0 entered promiscuous mode [ 218.947177][ T2654] device macsec1 entered promiscuous mode [ 218.953354][ T2654] bridge0: port 3(macsec1) entered blocking state [ 218.959767][ T2654] bridge0: port 3(macsec1) entered disabled state [ 218.967020][ T2654] device bridge0 left promiscuous mode [ 219.798809][ T2659] loop1: detected capacity change from 0 to 1024 [ 220.009690][ T2662] overlayfs: failed to resolve './file0': -2 [ 220.111339][ T2659] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 220.695777][ T2659] EXT4-fs (loop1): write access will be enabled during recovery [ 220.753740][ T285] EXT4-fs (loop2): unmounting filesystem. [ 220.797418][ T2671] loop2: detected capacity change from 0 to 512 [ 220.808105][ T2671] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.516: casefold flag without casefold feature [ 220.820917][ T2671] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.516: couldn't read orphan inode 15 (err -117) [ 220.822359][ T2659] EXT4-fs (loop1): barriers disabled [ 220.838406][ T2671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.921928][ T2659] JBD2: no valid journal superblock found [ 220.937013][ T2659] EXT4-fs (loop1): error loading journal [ 221.073837][ T2677] overlayfs: failed to resolve './file0': -2 [ 221.172527][ T286] EXT4-fs (loop3): unmounting filesystem. [ 221.274459][ T2676] device bridge0 entered promiscuous mode [ 221.499942][ T2676] device macsec1 entered promiscuous mode [ 221.972247][ T2676] bridge0: port 3(macsec1) entered blocking state [ 221.980148][ T2676] bridge0: port 3(macsec1) entered disabled state [ 221.981635][ T285] EXT4-fs (loop2): unmounting filesystem. [ 221.992820][ T2676] device bridge0 left promiscuous mode [ 222.001996][ T2681] loop3: detected capacity change from 0 to 512 [ 222.021740][ T2681] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.028585][ T2681] EXT4-fs (loop3): Test dummy encryption mode enabled [ 222.114201][ T2681] EXT4-fs (loop3): orphan cleanup on readonly fs [ 222.120579][ T2681] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.517: inode #13: comm syz.3.517: iget: illegal inode # [ 222.137132][ T2686] loop1: detected capacity change from 0 to 512 [ 222.150610][ T2686] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.154700][ T2681] EXT4-fs (loop3): Remounting filesystem read-only [ 222.163629][ T2681] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.517: couldn't read orphan inode 13 (err -117) [ 222.175554][ T2686] EXT4-fs (loop1): Test dummy encryption mode enabled [ 222.176067][ T2681] EXT4-fs (loop3): Remounting filesystem read-only [ 222.191856][ T2681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.434929][ T2686] EXT4-fs (loop1): orphan cleanup on readonly fs [ 222.465645][ T2686] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.519: inode #13: comm syz.1.519: iget: illegal inode # [ 222.479523][ T2686] EXT4-fs (loop1): Remounting filesystem read-only [ 222.486481][ T2686] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.519: couldn't read orphan inode 13 (err -117) [ 222.498903][ T2681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 222.508367][ T2686] EXT4-fs (loop1): Remounting filesystem read-only [ 222.531460][ T2686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 222.947228][ T2695] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 222.955978][ T2695] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 222.967549][ T2695] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 223.161580][ T555] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 223.455021][ T2702] device bridge0 entered promiscuous mode [ 223.461130][ T2702] device macsec1 entered promiscuous mode [ 223.472206][ T2702] bridge0: port 3(macsec1) entered blocking state [ 223.478712][ T2702] bridge0: port 3(macsec1) entered disabled state [ 223.892885][ T2702] device bridge0 left promiscuous mode [ 223.901435][ T555] usb 4-1: Using ep0 maxpacket: 32 [ 223.906671][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 223.919291][ T555] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 223.931811][ T555] usb 4-1: config 0 has no interface number 0 [ 223.950886][ T555] usb 4-1: config 0 interface 196 has no altsetting 0 [ 223.985302][ T555] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 223.995331][ T555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.011551][ T555] usb 4-1: Product: syz [ 224.028077][ T555] usb 4-1: Manufacturer: syz [ 224.046426][ T555] usb 4-1: SerialNumber: syz [ 224.054679][ T555] usb 4-1: config 0 descriptor?? [ 224.101464][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 224.109026][ T24] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 224.127406][ T24] usb 2-1: config 0 has no interface number 0 [ 224.137502][ T24] usb 2-1: config 0 interface 196 has no altsetting 0 [ 224.146046][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 224.161932][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.162254][ T28] audit: type=1326 audit(1762234918.561:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2709 comm="syz.0.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb6898f6c9 code=0x0 [ 224.169951][ T24] usb 2-1: Product: syz [ 224.196890][ T24] usb 2-1: Manufacturer: syz [ 224.201795][ T24] usb 2-1: SerialNumber: syz [ 224.207085][ T24] usb 2-1: config 0 descriptor?? [ 224.266514][ T555] ipheth 4-1:0.196: Unable to find endpoints [ 224.278925][ T555] usb 4-1: USB disconnect, device number 17 [ 224.320221][ T2714] fuse: Unknown parameter '0x0000000000000007' [ 224.776062][ T286] EXT4-fs (loop3): unmounting filesystem. [ 225.873802][ T2727] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 225.882537][ T2727] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 225.894119][ T2727] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 225.936952][ T283] EXT4-fs (loop1): unmounting filesystem. [ 225.939839][ T24] ipheth 2-1:0.196: Unable to find endpoints [ 225.951147][ T24] usb 2-1: USB disconnect, device number 14 [ 225.982629][ T2731] loop3: detected capacity change from 0 to 512 [ 226.001737][ T2731] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.010071][ T2731] EXT4-fs (loop3): Test dummy encryption mode enabled [ 226.024019][ T2731] EXT4-fs (loop3): orphan cleanup on readonly fs [ 226.030503][ T2731] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.531: inode #13: comm syz.3.531: iget: illegal inode # [ 226.045229][ T2731] EXT4-fs (loop3): Remounting filesystem read-only [ 226.052032][ T2731] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.531: couldn't read orphan inode 13 (err -117) [ 226.064362][ T2731] EXT4-fs (loop3): Remounting filesystem read-only [ 226.071324][ T2731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.306679][ T2750] loop1: detected capacity change from 0 to 512 [ 227.337468][ T2750] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.536: casefold flag without casefold feature [ 227.350669][ T2750] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.536: couldn't read orphan inode 15 (err -117) [ 227.363211][ T2750] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.431488][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 227.486088][ T2757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 227.494874][ T2757] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 227.506599][ T2757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 227.651566][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 227.658894][ T24] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 227.667484][ T24] usb 4-1: config 0 has no interface number 0 [ 227.674056][ T24] usb 4-1: config 0 interface 196 has no altsetting 0 [ 227.687373][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 227.696736][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.710933][ T24] usb 4-1: Product: syz [ 227.716294][ T24] usb 4-1: Manufacturer: syz [ 227.721668][ T24] usb 4-1: SerialNumber: syz [ 227.731998][ T24] usb 4-1: config 0 descriptor?? [ 227.780988][ T2760] overlayfs: failed to resolve './file0': -2 [ 228.080157][ C1] hrtimer: interrupt took 14646 ns [ 228.332730][ T283] EXT4-fs (loop1): unmounting filesystem. [ 228.361336][ T2767] loop4: detected capacity change from 0 to 512 [ 228.463547][ T2770] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 228.472566][ T2770] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 228.484226][ T2770] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.522654][ T2767] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.539: casefold flag without casefold feature [ 228.551598][ T2767] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.539: couldn't read orphan inode 15 (err -117) [ 228.573702][ T2767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 228.604508][ T2767] overlayfs: failed to resolve './file0': -2 [ 228.628234][ T287] EXT4-fs (loop4): unmounting filesystem. [ 228.985052][ T24] ipheth 4-1:0.196: Unable to find endpoints [ 228.998521][ T24] usb 4-1: USB disconnect, device number 18 [ 229.014811][ T286] EXT4-fs (loop3): unmounting filesystem. [ 229.248577][ T2788] tmpfs: Unknown parameter 'cg™l' [ 230.666053][ T28] audit: type=1326 audit(1762234925.061:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.3.545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cecd8f6c9 code=0x0 [ 230.771431][ T507] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 231.364701][ T2801] fuse: Bad value for 'fd' [ 231.413610][ T2808] loop0: detected capacity change from 0 to 512 [ 231.465703][ T2808] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 231.474730][ T2808] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.547: bad orphan inode 15 [ 231.485805][ T2808] ext4_test_bit(bit=14, block=4) = 1 [ 231.491154][ T2808] is_bad_inode(inode)=0 [ 231.495369][ T2808] NEXT_ORPHAN(inode)=0 [ 231.527446][ T2808] max_ino=32 [ 231.530710][ T2808] i_nlink=1 [ 231.534037][ T2808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.627158][ T2808] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 232.531191][ T284] EXT4-fs (loop0): unmounting filesystem. [ 232.581431][ T2821] loop2: detected capacity change from 0 to 512 [ 232.597311][ T2821] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.552: casefold flag without casefold feature [ 232.610139][ T2821] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.552: couldn't read orphan inode 15 (err -117) [ 232.622199][ T2821] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 233.725413][ T507] usb 3-1: device not accepting address 10, error -71 [ 234.648965][ T2846] loop3: detected capacity change from 0 to 512 [ 234.658240][ T2837] tmpfs: Unknown parameter 'cg™l' [ 234.702961][ T2846] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.731147][ T2846] EXT4-fs (loop3): Test dummy encryption mode enabled [ 234.770843][ T2846] EXT4-fs (loop3): orphan cleanup on readonly fs [ 234.790302][ T2846] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.555: inode #13: comm syz.3.555: iget: illegal inode # [ 234.833523][ T2846] EXT4-fs (loop3): Remounting filesystem read-only [ 234.840054][ T2846] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.555: couldn't read orphan inode 13 (err -117) [ 234.899433][ T2846] EXT4-fs (loop3): Remounting filesystem read-only [ 234.914154][ T2846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.933440][ T285] EXT4-fs (loop2): unmounting filesystem. [ 234.951419][ T2844] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 235.103166][ T2851] loop2: detected capacity change from 0 to 1024 [ 235.112053][ T2851] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 235.119871][ T2851] EXT4-fs (loop2): write access will be enabled during recovery [ 235.127580][ T2851] EXT4-fs (loop2): barriers disabled [ 235.133812][ T2851] JBD2: no valid journal superblock found [ 235.139538][ T2851] EXT4-fs (loop2): error loading journal [ 235.162909][ T2844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.303167][ T2844] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.321439][ T2844] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 235.330777][ T2844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.545312][ T336] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.295493][ T2844] usb 5-1: config 0 descriptor?? [ 236.337132][ T2844] usb 5-1: can't set config #0, error -71 [ 236.406612][ T2844] usb 5-1: USB disconnect, device number 20 [ 237.213398][ T2865] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 237.222211][ T2865] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 237.233883][ T2865] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 237.496408][ T1518] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 239.028939][ T2878] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.037676][ T2878] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 239.049273][ T2878] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 239.087728][ T286] EXT4-fs (loop3): unmounting filesystem. [ 239.480694][ T1518] usb 4-1: device not accepting address 19, error -71 [ 239.763760][ T2892] device bridge0 entered promiscuous mode [ 239.769656][ T2892] device macsec1 entered promiscuous mode [ 239.777543][ T2892] bridge0: port 3(macsec1) entered blocking state [ 239.784014][ T2892] bridge0: port 3(macsec1) entered disabled state [ 239.944148][ T2892] device bridge0 left promiscuous mode [ 240.403479][ T2903] device bridge0 entered promiscuous mode [ 240.409254][ T2903] device macsec1 entered promiscuous mode [ 240.432019][ T2903] bridge0: port 3(macsec1) entered blocking state [ 240.696279][ T2903] bridge0: port 3(macsec1) entered disabled state [ 240.748044][ T2903] device bridge0 left promiscuous mode [ 240.757949][ T2907] loop2: detected capacity change from 0 to 1024 [ 240.789711][ T2907] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 240.798020][ T2905] device bridge0 entered promiscuous mode [ 240.821435][ T2907] EXT4-fs (loop2): write access will be enabled during recovery [ 240.839569][ T2905] device macsec1 entered promiscuous mode [ 240.853543][ T2907] EXT4-fs (loop2): barriers disabled [ 240.871324][ T2905] bridge0: port 3(macsec1) entered blocking state [ 240.878009][ T2907] JBD2: no valid journal superblock found [ 240.900214][ T2907] EXT4-fs (loop2): error loading journal [ 240.919122][ T2905] bridge0: port 3(macsec1) entered disabled state [ 241.005372][ T2915] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 241.014156][ T2915] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 241.025896][ T2915] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 241.160548][ T2905] device bridge0 left promiscuous mode [ 241.742557][ T2923] loop0: detected capacity change from 0 to 512 [ 241.801312][ T2923] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.574: casefold flag without casefold feature [ 241.814583][ T2923] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.574: couldn't read orphan inode 15 (err -117) [ 241.827430][ T2923] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 243.459674][ T2942] device bridge0 entered promiscuous mode [ 243.465584][ T2942] device macsec1 entered promiscuous mode [ 243.473373][ T2942] bridge0: port 3(macsec1) entered blocking state [ 243.479824][ T2942] bridge0: port 3(macsec1) entered disabled state [ 243.742614][ T2942] device bridge0 left promiscuous mode [ 243.764865][ T284] EXT4-fs (loop0): unmounting filesystem. [ 245.161543][ T2963] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.170264][ T2963] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 245.181863][ T2963] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 247.185376][ T2976] loop2: detected capacity change from 0 to 512 [ 248.058706][ T2976] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.074087][ T2976] EXT4-fs (loop2): Test dummy encryption mode enabled [ 248.177345][ T2976] EXT4-fs (loop2): orphan cleanup on readonly fs [ 248.191456][ T2976] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.587: inode #13: comm syz.2.587: iget: illegal inode # [ 248.291997][ T2988] device bridge0 entered promiscuous mode [ 248.297879][ T2988] device macsec1 entered promiscuous mode [ 248.305655][ T2988] bridge0: port 3(macsec1) entered blocking state [ 248.312129][ T2988] bridge0: port 3(macsec1) entered disabled state [ 248.323770][ T2988] device bridge0 left promiscuous mode [ 248.362941][ T2976] EXT4-fs (loop2): Remounting filesystem read-only [ 248.456967][ T2976] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.587: couldn't read orphan inode 13 (err -117) [ 248.471042][ T2976] EXT4-fs (loop2): Remounting filesystem read-only [ 248.477760][ T2976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.555820][ T2993] loop4: detected capacity change from 0 to 512 [ 248.580732][ T2993] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.592: casefold flag without casefold feature [ 248.593943][ T2993] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.592: couldn't read orphan inode 15 (err -117) [ 250.097965][ T2993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 250.142594][ T3001] loop0: detected capacity change from 0 to 512 [ 250.156349][ T3001] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.593: casefold flag without casefold feature [ 250.169717][ T3001] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.593: couldn't read orphan inode 15 (err -117) [ 250.181688][ T3001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 251.753050][ T285] EXT4-fs (loop2): unmounting filesystem. [ 251.785290][ T287] EXT4-fs (loop4): unmounting filesystem. [ 251.977722][ T284] EXT4-fs (loop0): unmounting filesystem. [ 252.530484][ T3025] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 252.539369][ T3025] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 252.551182][ T3025] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 253.965205][ T3033] device bridge0 entered promiscuous mode [ 253.971397][ T3033] device macsec1 entered promiscuous mode [ 253.983532][ T3033] bridge0: port 3(macsec1) entered blocking state [ 253.990055][ T3033] bridge0: port 3(macsec1) entered disabled state [ 254.944259][ T3028] loop3: detected capacity change from 0 to 512 [ 254.960743][ T3036] loop0: detected capacity change from 0 to 512 [ 254.969358][ T3033] device bridge0 left promiscuous mode [ 255.157606][ T3028] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 255.168800][ T3036] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 255.177899][ T3036] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.598: bad orphan inode 15 [ 255.188325][ T3028] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.597: bad orphan inode 15 [ 255.199130][ T3036] ext4_test_bit(bit=14, block=4) = 1 [ 255.204479][ T3036] is_bad_inode(inode)=0 [ 255.208648][ T3036] NEXT_ORPHAN(inode)=0 [ 255.212755][ T3036] max_ino=32 [ 255.216060][ T3036] i_nlink=1 [ 255.219532][ T3036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 255.280125][ T3028] ext4_test_bit(bit=14, block=4) = 1 [ 255.285498][ T3028] is_bad_inode(inode)=0 [ 255.289663][ T3028] NEXT_ORPHAN(inode)=0 [ 255.293774][ T3028] max_ino=32 [ 255.296987][ T3028] i_nlink=1 [ 255.300365][ T3028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.762543][ T3028] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 255.863149][ T284] EXT4-fs (loop0): unmounting filesystem. [ 256.639433][ T286] EXT4-fs (loop3): unmounting filesystem. [ 257.441987][ T3056] device bridge0 entered promiscuous mode [ 257.447763][ T3056] device macsec1 entered promiscuous mode [ 257.454933][ T3056] bridge0: port 3(macsec1) entered blocking state [ 257.461390][ T3056] bridge0: port 3(macsec1) entered disabled state [ 257.468706][ T3056] device bridge0 left promiscuous mode [ 257.754008][ T3060] device bridge0 entered promiscuous mode [ 257.759820][ T3060] device macsec1 entered promiscuous mode [ 257.766253][ T3060] bridge0: port 3(macsec1) entered blocking state [ 257.772790][ T3060] bridge0: port 3(macsec1) entered disabled state [ 257.780125][ T3060] device bridge0 left promiscuous mode [ 258.011125][ T3075] loop4: detected capacity change from 0 to 512 [ 258.782304][ T3075] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.799332][ T3076] device bridge0 entered promiscuous mode [ 258.805258][ T3076] device macsec1 entered promiscuous mode [ 258.811501][ T3076] bridge0: port 3(macsec1) entered blocking state [ 258.814982][ T3075] EXT4-fs (loop4): Test dummy encryption mode enabled [ 258.817924][ T3076] bridge0: port 3(macsec1) entered disabled state [ 258.840458][ T3076] device bridge0 left promiscuous mode [ 259.442960][ T3078] device bridge0 entered promiscuous mode [ 259.448761][ T3078] device macsec1 entered promiscuous mode [ 259.455223][ T3078] bridge0: port 3(macsec1) entered blocking state [ 259.458236][ T3075] EXT4-fs (loop4): orphan cleanup on readonly fs [ 259.461670][ T3078] bridge0: port 3(macsec1) entered disabled state [ 259.475016][ T3078] device bridge0 left promiscuous mode [ 259.479586][ T3075] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.611: inode #13: comm syz.4.611: iget: illegal inode # [ 259.517577][ T3075] EXT4-fs (loop4): Remounting filesystem read-only [ 259.583502][ T3075] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.611: couldn't read orphan inode 13 (err -117) [ 259.608728][ T3084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.612'. [ 259.651579][ T3075] EXT4-fs (loop4): Remounting filesystem read-only [ 259.658878][ T3075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 259.690994][ T3086] loop3: detected capacity change from 0 to 512 [ 259.708634][ T3086] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.718489][ T3086] EXT4-fs (loop3): Test dummy encryption mode enabled [ 259.736009][ T3086] EXT4-fs (loop3): orphan cleanup on readonly fs [ 259.742469][ T3086] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.613: inode #13: comm syz.3.613: iget: illegal inode # [ 259.782247][ T3086] EXT4-fs (loop3): Remounting filesystem read-only [ 259.788842][ T3086] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.613: couldn't read orphan inode 13 (err -117) [ 259.838579][ T3086] EXT4-fs (loop3): Remounting filesystem read-only [ 259.846392][ T3086] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 259.878727][ T3088] tmpfs: Unknown parameter 'cg™l' [ 260.291712][ T555] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 260.521400][ T555] usb 5-1: Using ep0 maxpacket: 32 [ 260.531439][ T348] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 260.539948][ T555] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 260.553379][ T555] usb 5-1: config 0 has no interface number 0 [ 260.561707][ T555] usb 5-1: config 0 interface 196 has no altsetting 0 [ 260.574065][ T555] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 260.589307][ T555] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.603442][ T555] usb 5-1: Product: syz [ 260.616800][ T555] usb 5-1: Manufacturer: syz [ 260.621473][ T19] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 260.621779][ T555] usb 5-1: SerialNumber: syz [ 260.637674][ T555] usb 5-1: config 0 descriptor?? [ 260.731432][ T348] usb 4-1: Using ep0 maxpacket: 32 [ 260.737673][ T348] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 260.746114][ T348] usb 4-1: config 0 has no interface number 0 [ 260.752392][ T348] usb 4-1: config 0 interface 196 has no altsetting 0 [ 260.760689][ T348] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 260.770251][ T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.778416][ T348] usb 4-1: Product: syz [ 260.782767][ T348] usb 4-1: Manufacturer: syz [ 260.787390][ T348] usb 4-1: SerialNumber: syz [ 260.799676][ T348] usb 4-1: config 0 descriptor?? [ 260.822578][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.833290][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.879729][ T19] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 260.889179][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.898718][ T19] usb 2-1: config 0 descriptor?? [ 260.904617][ T19] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 261.012989][ T3110] device bridge0 entered promiscuous mode [ 261.018904][ T3110] device macsec1 entered promiscuous mode [ 261.026725][ T3110] bridge0: port 3(macsec1) entered blocking state [ 261.033195][ T3110] bridge0: port 3(macsec1) entered disabled state [ 261.045155][ T3110] device bridge0 left promiscuous mode [ 261.640804][ T3114] loop0: detected capacity change from 0 to 1024 [ 261.727828][ T3114] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 261.735726][ T3114] EXT4-fs (loop0): write access will be enabled during recovery [ 261.743406][ T3114] EXT4-fs (loop0): barriers disabled [ 261.749793][ T3114] JBD2: no valid journal superblock found [ 261.755628][ T3114] EXT4-fs (loop0): error loading journal [ 261.979337][ T555] ipheth 5-1:0.196: Unable to find endpoints [ 261.986484][ T287] EXT4-fs (loop4): unmounting filesystem. [ 262.039492][ T555] usb 5-1: USB disconnect, device number 21 [ 262.900466][ T348] ipheth 4-1:0.196: Unable to find endpoints [ 262.906005][ T286] EXT4-fs (loop3): unmounting filesystem. [ 262.912520][ T348] usb 4-1: USB disconnect, device number 21 [ 263.048552][ T19] usb 2-1: USB disconnect, device number 15 [ 263.494904][ T3143] device bridge0 entered promiscuous mode [ 263.500676][ T3143] device macsec1 entered promiscuous mode [ 263.549103][ T3143] bridge0: port 3(macsec1) entered blocking state [ 263.586382][ T3143] bridge0: port 3(macsec1) entered disabled state [ 263.645655][ T3143] device bridge0 left promiscuous mode [ 263.991480][ T3151] device bridge0 entered promiscuous mode [ 263.997268][ T3151] device macsec1 entered promiscuous mode [ 264.003474][ T3151] bridge0: port 3(macsec1) entered blocking state [ 264.009897][ T3151] bridge0: port 3(macsec1) entered disabled state [ 264.017293][ T3151] device bridge0 left promiscuous mode [ 264.256089][ T3156] tmpfs: Unknown parameter 'cg™l' [ 264.865918][ T3169] loop0: detected capacity change from 0 to 512 [ 264.875994][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 264.982154][ T3171] device bridge0 entered promiscuous mode [ 264.988168][ T3171] device macsec1 entered promiscuous mode [ 264.997253][ T3171] bridge0: port 3(macsec1) entered blocking state [ 265.003742][ T3171] bridge0: port 3(macsec1) entered disabled state [ 265.153475][ T3171] device bridge0 left promiscuous mode [ 265.702408][ T3171] syz.4.634 (3171) used greatest stack depth: 21592 bytes left [ 267.040763][ T3182] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 267.049726][ T3182] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 267.061404][ T3182] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 267.110214][ T3169] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 267.118963][ T3169] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.632: bad orphan inode 15 [ 267.298111][ T3169] ext4_test_bit(bit=14, block=4) = 1 [ 267.303489][ T3169] is_bad_inode(inode)=0 [ 267.307651][ T3169] NEXT_ORPHAN(inode)=0 [ 267.311793][ T3169] max_ino=32 [ 267.315141][ T3169] i_nlink=1 [ 267.318607][ T3169] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 267.336567][ T3168] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 267.377620][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 267.410826][ T24] usb 3-1: can't read configurations, error -71 [ 267.922501][ T284] EXT4-fs (loop0): unmounting filesystem. [ 268.021196][ T3198] loop0: detected capacity change from 0 to 512 [ 268.071802][ T3198] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.080840][ T3189] device bridge0 entered promiscuous mode [ 268.086645][ T3189] device macsec1 entered promiscuous mode [ 268.092845][ T3189] bridge0: port 3(macsec1) entered blocking state [ 268.099270][ T3189] bridge0: port 3(macsec1) entered disabled state [ 268.105743][ T3198] EXT4-fs (loop0): Test dummy encryption mode enabled [ 268.113140][ T3189] device bridge0 left promiscuous mode [ 268.879811][ T3201] device bridge0 entered promiscuous mode [ 268.885636][ T3201] device macsec1 entered promiscuous mode [ 268.891798][ T3201] bridge0: port 3(macsec1) entered blocking state [ 268.898256][ T3201] bridge0: port 3(macsec1) entered disabled state [ 268.906099][ T3201] device bridge0 left promiscuous mode [ 268.918882][ T3198] EXT4-fs (loop0): orphan cleanup on readonly fs [ 268.935873][ T3198] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.642: inode #13: comm syz.0.642: iget: illegal inode # [ 268.997138][ T3198] EXT4-fs (loop0): Remounting filesystem read-only [ 269.003879][ T3198] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.642: couldn't read orphan inode 13 (err -117) [ 269.021833][ T3198] EXT4-fs (loop0): Remounting filesystem read-only [ 269.028472][ T3198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 271.570901][ T3228] device bridge0 entered promiscuous mode [ 271.576714][ T3228] device macsec1 entered promiscuous mode [ 271.582923][ T3228] bridge0: port 3(macsec1) entered blocking state [ 271.589345][ T3228] bridge0: port 3(macsec1) entered disabled state [ 272.212134][ T3228] device bridge0 left promiscuous mode [ 272.260158][ T3232] device bridge0 entered promiscuous mode [ 272.266344][ T3232] device macsec1 entered promiscuous mode [ 272.278732][ T3232] bridge0: port 3(macsec1) entered blocking state [ 272.285259][ T3232] bridge0: port 3(macsec1) entered disabled state [ 272.376609][ T3232] device bridge0 left promiscuous mode [ 272.440764][ T284] EXT4-fs (loop0): unmounting filesystem. [ 272.509476][ T28] audit: type=1326 audit(1762234966.901:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.2.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff789f8f6c9 code=0x0 [ 272.725210][ T3247] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 272.733945][ T3247] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 272.746005][ T3247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 273.099669][ T3249] device bridge0 entered promiscuous mode [ 273.105552][ T3249] device macsec1 entered promiscuous mode [ 273.112475][ T3249] bridge0: port 3(macsec1) entered blocking state [ 273.118925][ T3249] bridge0: port 3(macsec1) entered disabled state [ 273.950648][ T3249] device bridge0 left promiscuous mode [ 273.999001][ T3253] loop3: detected capacity change from 0 to 512 [ 274.011798][ T3253] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.018644][ T3253] EXT4-fs (loop3): Test dummy encryption mode enabled [ 274.026411][ T3253] EXT4-fs (loop3): orphan cleanup on readonly fs [ 274.033010][ T3253] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.656: inode #13: comm syz.3.656: iget: illegal inode # [ 274.133124][ T3258] loop0: detected capacity change from 0 to 512 [ 274.954723][ T3253] EXT4-fs (loop3): Remounting filesystem read-only [ 275.633697][ T3253] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.656: couldn't read orphan inode 13 (err -117) [ 275.650521][ T3253] EXT4-fs (loop3): Remounting filesystem read-only [ 275.657077][ T3253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 275.705957][ T3258] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 275.714632][ T3258] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.651: bad orphan inode 15 [ 275.725489][ T3258] ext4_test_bit(bit=14, block=4) = 1 [ 275.730791][ T3258] is_bad_inode(inode)=0 [ 275.735005][ T3258] NEXT_ORPHAN(inode)=0 [ 275.739166][ T3258] max_ino=32 [ 275.742411][ T3258] i_nlink=1 [ 275.745538][ T3258] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 275.990522][ T3257] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 276.010273][ T3268] device bridge0 entered promiscuous mode [ 276.016102][ T3268] device macsec1 entered promiscuous mode [ 276.022309][ T3268] bridge0: port 3(macsec1) entered blocking state [ 276.028743][ T3268] bridge0: port 3(macsec1) entered disabled state [ 276.898778][ T3268] device bridge0 left promiscuous mode [ 276.969899][ T284] EXT4-fs (loop0): unmounting filesystem. [ 277.006236][ T3278] tmpfs: Unknown parameter 'cg™l' [ 277.068929][ T3283] loop0: detected capacity change from 0 to 512 [ 277.077840][ T3283] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.661: casefold flag without casefold feature [ 277.090588][ T3283] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.661: couldn't read orphan inode 15 (err -117) [ 277.102448][ T3283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 277.274360][ T555] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 279.997199][ T286] EXT4-fs (loop3): unmounting filesystem. [ 280.003824][ T284] EXT4-fs (loop0): unmounting filesystem. [ 280.051624][ T2101] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 281.826360][ T3305] device bridge0 entered promiscuous mode [ 281.832181][ T3305] device macsec1 entered promiscuous mode [ 281.838417][ T3305] bridge0: port 3(macsec1) entered blocking state [ 281.844863][ T3305] bridge0: port 3(macsec1) entered disabled state [ 281.852133][ T3305] device bridge0 left promiscuous mode [ 281.870249][ T3304] loop1: detected capacity change from 0 to 1024 [ 281.962978][ T3304] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 281.970862][ T3304] EXT4-fs (loop1): write access will be enabled during recovery [ 281.978538][ T3304] EXT4-fs (loop1): barriers disabled [ 281.985412][ T3304] JBD2: no valid journal superblock found [ 281.991194][ T3304] EXT4-fs (loop1): error loading journal [ 282.238645][ T3315] tmpfs: Unknown parameter 'cg™l' [ 282.251439][ T336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.421768][ T3317] device bridge0 entered promiscuous mode [ 282.428006][ T3317] device macsec1 entered promiscuous mode [ 282.440411][ T3317] bridge0: port 3(macsec1) entered blocking state [ 282.446986][ T3317] bridge0: port 3(macsec1) entered disabled state [ 282.918209][ T3317] device bridge0 left promiscuous mode [ 282.947721][ T3319] loop2: detected capacity change from 0 to 1024 [ 283.113551][ T3319] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 283.121460][ T3319] EXT4-fs (loop2): write access will be enabled during recovery [ 283.129109][ T3319] EXT4-fs (loop2): barriers disabled [ 283.135313][ T3319] JBD2: no valid journal superblock found [ 283.141100][ T3319] EXT4-fs (loop2): error loading journal [ 283.246561][ T3324] loop1: detected capacity change from 0 to 512 [ 283.253295][ T336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.272972][ T3324] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.305964][ T3312] device bridge0 entered promiscuous mode [ 283.310149][ T3324] EXT4-fs (loop1): Test dummy encryption mode enabled [ 283.311773][ T3312] device macsec1 entered promiscuous mode [ 283.324679][ T3312] bridge0: port 3(macsec1) entered blocking state [ 283.331101][ T3312] bridge0: port 3(macsec1) entered disabled state [ 283.337698][ T3324] EXT4-fs (loop1): orphan cleanup on readonly fs [ 283.344366][ T3324] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.671: inode #13: comm syz.1.671: iget: illegal inode # [ 283.357105][ T3312] device bridge0 left promiscuous mode [ 283.357425][ T3324] EXT4-fs (loop1): Remounting filesystem read-only [ 283.369217][ T3324] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.671: couldn't read orphan inode 13 (err -117) [ 283.381501][ T3324] EXT4-fs (loop1): Remounting filesystem read-only [ 283.388063][ T3324] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 286.174824][ T2101] usb 5-1: device descriptor read/64, error -71 [ 286.451475][ T480] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 286.851588][ T3354] loop2: detected capacity change from 0 to 512 [ 286.937394][ T480] usb 2-1: Using ep0 maxpacket: 32 [ 286.959203][ T480] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 286.971542][ T3354] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 286.982818][ T3354] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.676: bad orphan inode 15 [ 286.994652][ T3354] ext4_test_bit(bit=14, block=4) = 1 [ 286.999986][ T3354] is_bad_inode(inode)=0 [ 287.004203][ T3354] NEXT_ORPHAN(inode)=0 [ 287.008310][ T3354] max_ino=32 [ 287.011566][ T3354] i_nlink=1 [ 287.014989][ T3354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 287.205254][ T3354] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 287.263912][ T480] usb 2-1: config 0 has no interface number 0 [ 287.280491][ T480] usb 2-1: config 0 interface 196 has no altsetting 0 [ 287.487603][ T3341] tmpfs: Unknown parameter 'cg™l' [ 287.495307][ T480] usb 2-1: string descriptor 0 read error: -71 [ 287.503997][ T480] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 287.517999][ T283] EXT4-fs (loop1): unmounting filesystem. [ 287.530952][ T480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.709933][ T3360] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 287.718728][ T3360] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 287.730403][ T3360] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.128825][ T480] usb 2-1: config 0 descriptor?? [ 288.134226][ T285] EXT4-fs (loop2): unmounting filesystem. [ 288.140155][ T480] usb 2-1: can't set config #0, error -71 [ 288.148524][ T480] usb 2-1: USB disconnect, device number 16 [ 288.743103][ T507] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 289.202653][ T507] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.251407][ T507] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.271408][ T507] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 289.280553][ T507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.293095][ T507] usb 1-1: config 0 descriptor?? [ 289.358299][ T3379] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 289.367133][ T3379] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 289.378799][ T3379] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 289.614991][ T507] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 289.641918][ T507] usb 1-1: USB disconnect, device number 14 [ 290.360407][ T3386] device bridge0 entered promiscuous mode [ 290.366324][ T3386] device macsec1 entered promiscuous mode [ 290.373188][ T3386] bridge0: port 3(macsec1) entered blocking state [ 290.379643][ T3386] bridge0: port 3(macsec1) entered disabled state [ 291.236030][ T3386] device bridge0 left promiscuous mode [ 291.432024][ T3391] device bridge0 entered promiscuous mode [ 291.437797][ T3391] device macsec1 entered promiscuous mode [ 291.444014][ T3391] bridge0: port 3(macsec1) entered blocking state [ 291.450444][ T3391] bridge0: port 3(macsec1) entered disabled state [ 291.457697][ T3391] device bridge0 left promiscuous mode [ 291.584925][ T3397] loop3: detected capacity change from 0 to 512 [ 292.258348][ T3397] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.691: casefold flag without casefold feature [ 292.272423][ T3397] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.691: couldn't read orphan inode 15 (err -117) [ 292.361692][ T3397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 293.504846][ T286] EXT4-fs (loop3): unmounting filesystem. [ 294.622509][ T3417] loop0: detected capacity change from 0 to 512 [ 294.786755][ T3420] loop1: detected capacity change from 0 to 512 [ 294.860937][ T3420] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 294.871855][ T3420] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.693: bad orphan inode 15 [ 294.886432][ T3420] ext4_test_bit(bit=14, block=4) = 1 [ 294.891849][ T3420] is_bad_inode(inode)=0 [ 294.896061][ T3420] NEXT_ORPHAN(inode)=0 [ 294.900169][ T3420] max_ino=32 [ 294.903434][ T3420] i_nlink=1 [ 294.907057][ T3420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 295.072443][ T3420] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 295.181698][ T28] audit: type=1326 audit(1762234989.521:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3416 comm="syz.2.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff789f8f6c9 code=0x0 [ 295.220559][ T3417] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 295.228894][ T3417] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.694: bad orphan inode 15 [ 295.239277][ T3417] ext4_test_bit(bit=14, block=4) = 1 [ 295.244609][ T3417] is_bad_inode(inode)=0 [ 295.248759][ T3417] NEXT_ORPHAN(inode)=0 [ 295.252858][ T3417] max_ino=32 [ 295.256050][ T3417] i_nlink=1 [ 295.259190][ T3417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 295.302841][ T283] EXT4-fs (loop1): unmounting filesystem. [ 295.329320][ T284] EXT4-fs (loop0): unmounting filesystem. [ 295.623268][ T3445] device bridge0 entered promiscuous mode [ 295.629484][ T3445] device macsec1 entered promiscuous mode [ 295.641842][ T3445] bridge0: port 3(macsec1) entered blocking state [ 295.648369][ T3445] bridge0: port 3(macsec1) entered disabled state [ 296.100498][ T3445] device bridge0 left promiscuous mode [ 296.115444][ T3446] tmpfs: Unknown parameter 'cg™l' [ 297.027796][ T3454] device bridge0 entered promiscuous mode [ 297.033693][ T3454] device macsec1 entered promiscuous mode [ 297.041315][ T3454] bridge0: port 3(macsec1) entered blocking state [ 297.047805][ T3454] bridge0: port 3(macsec1) entered disabled state [ 297.176808][ T3454] device bridge0 left promiscuous mode [ 298.162843][ T632] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 298.488158][ T3471] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 298.497012][ T3471] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 298.508868][ T3471] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 299.146544][ T3477] loop4: detected capacity change from 0 to 512 [ 299.174746][ T3477] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.708: casefold flag without casefold feature [ 299.383253][ T3477] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.708: couldn't read orphan inode 15 (err -117) [ 299.395892][ T3477] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 300.042205][ T3488] device bridge0 entered promiscuous mode [ 300.048434][ T3488] device macsec1 entered promiscuous mode [ 300.060793][ T3488] bridge0: port 3(macsec1) entered blocking state [ 300.067341][ T3488] bridge0: port 3(macsec1) entered disabled state [ 301.053876][ T3488] device bridge0 left promiscuous mode [ 301.137244][ T3465] tmpfs: Unknown parameter 'cg™l' [ 301.147932][ T287] EXT4-fs (loop4): unmounting filesystem. [ 301.157356][ T632] usb 2-1: device descriptor read/all, error -71 [ 301.298197][ T3496] device bridge0 entered promiscuous mode [ 301.304116][ T3496] device macsec1 entered promiscuous mode [ 301.311853][ T3496] bridge0: port 3(macsec1) entered blocking state [ 301.318318][ T3496] bridge0: port 3(macsec1) entered disabled state [ 301.459991][ T3498] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 301.468763][ T3498] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 301.480384][ T3498] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 301.498698][ T3496] device bridge0 left promiscuous mode [ 301.975481][ T3506] loop3: detected capacity change from 0 to 512 [ 302.361673][ T3507] device bridge0 entered promiscuous mode [ 302.367458][ T3507] device macsec1 entered promiscuous mode [ 302.373634][ T3507] bridge0: port 3(macsec1) entered blocking state [ 302.380081][ T3507] bridge0: port 3(macsec1) entered disabled state [ 302.387599][ T3507] device bridge0 left promiscuous mode [ 302.440385][ T480] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 302.608028][ T3506] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 302.616526][ T3506] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.712: bad orphan inode 15 [ 302.628089][ T3506] ext4_test_bit(bit=14, block=4) = 1 [ 302.633508][ T3506] is_bad_inode(inode)=0 [ 302.637742][ T3506] NEXT_ORPHAN(inode)=0 [ 302.641866][ T3506] max_ino=32 [ 302.645099][ T3506] i_nlink=1 [ 302.648510][ T3506] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 302.676363][ T3506] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 303.390124][ T286] EXT4-fs (loop3): unmounting filesystem. [ 304.188101][ T3523] device bridge0 entered promiscuous mode [ 304.194057][ T3523] device macsec1 entered promiscuous mode [ 304.200198][ T3523] bridge0: port 3(macsec1) entered blocking state [ 304.206646][ T3523] bridge0: port 3(macsec1) entered disabled state [ 304.213931][ T3523] device bridge0 left promiscuous mode [ 304.562287][ T3530] loop1: detected capacity change from 0 to 512 [ 304.678360][ T3530] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.720: casefold flag without casefold feature [ 304.691096][ T3530] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.720: couldn't read orphan inode 15 (err -117) [ 304.703406][ T3530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 305.109703][ T3537] device bridge0 entered promiscuous mode [ 305.115970][ T3537] device macsec1 entered promiscuous mode [ 305.130362][ T3537] bridge0: port 3(macsec1) entered blocking state [ 305.136906][ T3537] bridge0: port 3(macsec1) entered disabled state [ 305.223448][ T3537] device bridge0 left promiscuous mode [ 305.355976][ T3542] overlayfs: failed to resolve './file0': -2 [ 305.916058][ T3545] loop3: detected capacity change from 0 to 512 [ 305.954743][ T3545] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.722: casefold flag without casefold feature [ 305.968749][ T3545] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.722: couldn't read orphan inode 15 (err -117) [ 305.980911][ T3545] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 306.092435][ T283] EXT4-fs (loop1): unmounting filesystem. [ 306.211651][ T3550] overlayfs: failed to resolve './file0': -2 [ 307.100816][ T286] EXT4-fs (loop3): unmounting filesystem. [ 307.212210][ T3553] loop1: detected capacity change from 0 to 512 [ 307.304359][ T3553] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 307.314417][ T3553] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.723: bad orphan inode 15 [ 307.326861][ T3553] ext4_test_bit(bit=14, block=4) = 1 [ 307.332245][ T3553] is_bad_inode(inode)=0 [ 307.336438][ T3553] NEXT_ORPHAN(inode)=0 [ 307.340531][ T3553] max_ino=32 [ 307.343762][ T3553] i_nlink=1 [ 307.347241][ T3553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 307.622965][ T3553] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 307.998985][ T283] EXT4-fs (loop1): unmounting filesystem. [ 308.143245][ T3565] device bridge0 entered promiscuous mode [ 308.149054][ T3565] device macsec1 entered promiscuous mode [ 308.155323][ T3565] bridge0: port 3(macsec1) entered blocking state [ 308.161761][ T3565] bridge0: port 3(macsec1) entered disabled state [ 308.169229][ T3565] device bridge0 left promiscuous mode [ 309.611878][ T3575] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 309.620629][ T3575] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 309.632266][ T3575] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 309.659584][ T3576] device bridge0 entered promiscuous mode [ 309.665488][ T3576] device macsec1 entered promiscuous mode [ 309.672500][ T3576] bridge0: port 3(macsec1) entered blocking state [ 309.678964][ T3576] bridge0: port 3(macsec1) entered disabled state [ 310.323009][ T3576] device bridge0 left promiscuous mode [ 310.453519][ T3556] loop3: detected capacity change from 0 to 40427 [ 313.026367][ T3596] loop4: detected capacity change from 0 to 512 [ 313.545571][ T3556] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 313.566124][ T3556] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 313.628217][ T3596] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 313.637194][ T3596] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.732: bad orphan inode 15 [ 313.641729][ T3556] F2FS-fs (loop3): invalid crc value [ 313.653107][ T3596] ext4_test_bit(bit=14, block=4) = 1 [ 313.658426][ T3596] is_bad_inode(inode)=0 [ 313.662639][ T3596] NEXT_ORPHAN(inode)=0 [ 313.665154][ T3556] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 313.666697][ T3596] max_ino=32 [ 313.666705][ T3596] i_nlink=1 [ 313.666739][ T3596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 314.273264][ T3606] tmpfs: Unknown parameter 'cg™l' [ 314.301076][ T3584] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 314.521991][ T287] EXT4-fs (loop4): unmounting filesystem. [ 314.591510][ T632] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 314.657344][ T3621] device bridge0 entered promiscuous mode [ 314.663235][ T3621] device macsec1 entered promiscuous mode [ 314.670766][ T3621] bridge0: port 3(macsec1) entered blocking state [ 314.677241][ T3621] bridge0: port 3(macsec1) entered disabled state [ 314.688046][ T3621] device bridge0 left promiscuous mode [ 314.968528][ T3625] loop2: detected capacity change from 0 to 1024 [ 314.982515][ T3625] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 314.990399][ T3625] EXT4-fs (loop2): write access will be enabled during recovery [ 315.000885][ T632] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.015135][ T3625] EXT4-fs (loop2): barriers disabled [ 315.025596][ T632] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.048646][ T3625] JBD2: no valid journal superblock found [ 315.055477][ T632] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 315.069684][ T632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.080804][ T3625] EXT4-fs (loop2): error loading journal [ 315.088187][ T632] usb 1-1: config 0 descriptor?? [ 315.100337][ T632] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 315.967067][ T3640] loop3: detected capacity change from 0 to 512 [ 315.979293][ T3640] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.987638][ T3640] EXT4-fs (loop3): Test dummy encryption mode enabled [ 315.999978][ T3640] EXT4-fs (loop3): orphan cleanup on readonly fs [ 316.006518][ T3640] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.743: inode #13: comm syz.3.743: iget: illegal inode # [ 316.611552][ T3645] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 316.620267][ T3645] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 316.632018][ T3645] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 316.933080][ T3647] device bridge0 entered promiscuous mode [ 316.938926][ T3647] device macsec1 entered promiscuous mode [ 316.945808][ T3647] bridge0: port 3(macsec1) entered blocking state [ 316.952283][ T3647] bridge0: port 3(macsec1) entered disabled state [ 317.035081][ T3647] device bridge0 left promiscuous mode [ 317.319204][ T3640] EXT4-fs (loop3): Remounting filesystem read-only [ 317.342344][ T507] usb 1-1: USB disconnect, device number 16 [ 317.384754][ T3640] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.743: couldn't read orphan inode 13 (err -117) [ 317.432874][ T3640] EXT4-fs (loop3): Remounting filesystem read-only [ 317.439470][ T3640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 318.030674][ T3660] device bridge0 entered promiscuous mode [ 318.063982][ T3660] device macsec1 entered promiscuous mode [ 318.101418][ T555] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 318.101876][ T3660] bridge0: port 3(macsec1) entered blocking state [ 318.157329][ T3660] bridge0: port 3(macsec1) entered disabled state [ 318.177293][ T3655] loop0: detected capacity change from 0 to 40427 [ 318.184286][ T3655] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 318.241474][ T3655] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 318.261519][ T3660] device bridge0 left promiscuous mode [ 318.267110][ T3655] F2FS-fs (loop0): invalid crc value [ 318.302003][ T3649] loop4: detected capacity change from 0 to 40427 [ 318.311517][ T3649] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 318.319255][ T3649] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 318.329173][ T3649] F2FS-fs (loop4): invalid crc value [ 318.330646][ T555] usb 4-1: Using ep0 maxpacket: 32 [ 318.347029][ T3649] F2FS-fs (loop4): Found nat_bits in checkpoint [ 318.354187][ T555] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 318.375649][ T555] usb 4-1: config 0 has no interface number 0 [ 318.385389][ T3655] F2FS-fs (loop0): Found nat_bits in checkpoint [ 318.432111][ T555] usb 4-1: config 0 interface 196 has no altsetting 0 [ 318.492170][ T555] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 318.582816][ T555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.613191][ T3649] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 318.620482][ T3655] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 318.629662][ T3655] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 318.638669][ T3649] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 318.742221][ T555] usb 4-1: Product: syz [ 318.746601][ T555] usb 4-1: Manufacturer: syz [ 318.755828][ T555] usb 4-1: SerialNumber: syz [ 318.832889][ T555] usb 4-1: config 0 descriptor?? [ 319.047322][ T3680] device bridge0 entered promiscuous mode [ 319.053271][ T3680] device macsec1 entered promiscuous mode [ 319.061332][ T3680] bridge0: port 3(macsec1) entered blocking state [ 319.067837][ T3680] bridge0: port 3(macsec1) entered disabled state [ 319.271374][ T3680] device bridge0 left promiscuous mode [ 319.280802][ T555] ipheth 4-1:0.196: Unable to find endpoints [ 319.287958][ T555] usb 4-1: USB disconnect, device number 23 [ 319.299614][ T286] EXT4-fs (loop3): unmounting filesystem. [ 319.361474][ T28] audit: type=1400 audit(1762235013.751:203): avc: denied { remount } for pid=3681 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 319.689104][ T3695] device bridge0 entered promiscuous mode [ 319.695031][ T3695] device macsec1 entered promiscuous mode [ 319.702678][ T3695] bridge0: port 3(macsec1) entered blocking state [ 319.709132][ T3695] bridge0: port 3(macsec1) entered disabled state [ 319.864023][ T3695] device bridge0 left promiscuous mode [ 320.986715][ T3708] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 320.995528][ T3708] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 321.007167][ T3708] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 321.527945][ T3721] device bridge0 entered promiscuous mode [ 321.533945][ T3721] device macsec1 entered promiscuous mode [ 321.540899][ T3721] bridge0: port 3(macsec1) entered blocking state [ 321.547404][ T3721] bridge0: port 3(macsec1) entered disabled state [ 321.555881][ T3721] device bridge0 left promiscuous mode [ 321.648598][ T3719] tmpfs: Unknown parameter 'cg™l' [ 321.839784][ T3729] tmpfs: Unknown parameter 'cg™l' [ 321.921420][ T334] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 322.238832][ T3722] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 322.325880][ T3731] loop1: detected capacity change from 0 to 40427 [ 322.334823][ T334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.933708][ T3737] device bridge0 entered promiscuous mode [ 322.939557][ T3737] device macsec1 entered promiscuous mode [ 322.946281][ T3737] bridge0: port 3(macsec1) entered blocking state [ 322.952770][ T3737] bridge0: port 3(macsec1) entered disabled state [ 322.965916][ T3737] device bridge0 left promiscuous mode [ 323.164428][ T3731] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 323.175404][ T334] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.191778][ T3731] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 323.202301][ T3731] F2FS-fs (loop1): invalid crc value [ 323.222082][ T334] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 323.223562][ T3741] loop3: detected capacity change from 0 to 512 [ 323.231217][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.241333][ T3722] usb 1-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 323.247419][ T334] usb 5-1: config 0 descriptor?? [ 323.256974][ T3731] F2FS-fs (loop1): Found nat_bits in checkpoint [ 323.277349][ T3722] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.298350][ T334] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 323.330135][ T3722] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 323.337707][ T3741] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.765: casefold flag without casefold feature [ 323.340328][ T3722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.363968][ T3722] usb 1-1: config 0 descriptor?? [ 323.369456][ T3741] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.765: couldn't read orphan inode 15 (err -117) [ 323.382135][ T3741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 323.401637][ T3731] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 323.409460][ T3731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 323.441612][ T3722] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 327.948717][ T286] EXT4-fs (loop3): unmounting filesystem. [ 328.043609][ T59] usb 5-1: USB disconnect, device number 23 [ 328.184886][ T555] usb 1-1: USB disconnect, device number 17 [ 328.464253][ T3771] device bridge0 entered promiscuous mode [ 328.470026][ T3771] device macsec1 entered promiscuous mode [ 328.476385][ T3771] bridge0: port 3(macsec1) entered blocking state [ 328.482819][ T3771] bridge0: port 3(macsec1) entered disabled state [ 328.493601][ T3771] device bridge0 left promiscuous mode [ 330.347407][ T3806] loop2: detected capacity change from 0 to 512 [ 330.371129][ T3806] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.778: casefold flag without casefold feature [ 330.383880][ T3806] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.778: couldn't read orphan inode 15 (err -117) [ 330.395818][ T3806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 330.623177][ T3815] overlayfs: failed to resolve './file0': -2 [ 330.990718][ T3814] loop0: detected capacity change from 0 to 512 [ 331.460075][ T285] EXT4-fs (loop2): unmounting filesystem. [ 331.492204][ T3814] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 331.534051][ T3814] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.777: bad orphan inode 15 [ 331.601698][ T3814] ext4_test_bit(bit=14, block=4) = 1 [ 331.621457][ T3814] is_bad_inode(inode)=0 [ 331.651455][ T3814] NEXT_ORPHAN(inode)=0 [ 331.655658][ T3814] max_ino=32 [ 331.751554][ T3814] i_nlink=1 [ 331.766783][ T3814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 331.894837][ T3826] device bridge0 entered promiscuous mode [ 331.920125][ T3826] device macsec1 entered promiscuous mode [ 331.975933][ T3826] bridge0: port 3(macsec1) entered blocking state [ 331.994454][ T3826] bridge0: port 3(macsec1) entered disabled state [ 332.039131][ T3826] device bridge0 left promiscuous mode [ 332.277799][ T3831] device bridge0 entered promiscuous mode [ 332.283686][ T3831] device macsec1 entered promiscuous mode [ 332.289842][ T3831] bridge0: port 3(macsec1) entered blocking state [ 332.296374][ T3831] bridge0: port 3(macsec1) entered disabled state [ 332.303721][ T3831] device bridge0 left promiscuous mode [ 332.517300][ T3820] loop2: detected capacity change from 0 to 40427 [ 332.538789][ T3820] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 332.561527][ T3820] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 332.582688][ T3820] F2FS-fs (loop2): invalid crc value [ 332.624656][ T3836] device bridge0 entered promiscuous mode [ 332.630558][ T3836] device macsec1 entered promiscuous mode [ 332.638228][ T3836] bridge0: port 3(macsec1) entered blocking state [ 332.644703][ T3836] bridge0: port 3(macsec1) entered disabled state [ 332.655911][ T3836] device bridge0 left promiscuous mode [ 332.824768][ T3820] F2FS-fs (loop2): Found nat_bits in checkpoint [ 332.859051][ T3820] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 332.866350][ T3820] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 332.975873][ T3845] loop1: detected capacity change from 0 to 512 [ 332.992311][ T3845] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.785: casefold flag without casefold feature [ 333.033614][ T3845] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.785: couldn't read orphan inode 15 (err -117) [ 333.110294][ T3845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 334.051896][ T3852] overlayfs: failed to resolve './file0': -2 [ 335.203914][ T283] EXT4-fs (loop1): unmounting filesystem. [ 335.232353][ T3864] loop1: detected capacity change from 0 to 512 [ 335.278033][ T3864] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.790: casefold flag without casefold feature [ 335.290894][ T3864] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.790: couldn't read orphan inode 15 (err -117) [ 335.299179][ T3869] loop3: detected capacity change from 0 to 512 [ 335.309424][ T3864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 335.330340][ T3869] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.791: casefold flag without casefold feature [ 335.391613][ T3869] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.791: couldn't read orphan inode 15 (err -117) [ 335.411919][ T3869] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 338.162139][ T3878] overlayfs: failed to resolve './file0': -2 [ 338.827955][ T283] EXT4-fs (loop1): unmounting filesystem. [ 338.875499][ T3881] loop4: detected capacity change from 0 to 512 [ 338.893585][ T284] EXT4-fs (loop0): unmounting filesystem. [ 338.911728][ T3881] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.932398][ T3881] EXT4-fs (loop4): Test dummy encryption mode enabled [ 338.975333][ T286] EXT4-fs (loop3): unmounting filesystem. [ 339.052248][ T3881] EXT4-fs (loop4): orphan cleanup on readonly fs [ 339.092378][ T3881] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.794: inode #13: comm syz.4.794: iget: illegal inode # [ 339.105226][ T3881] EXT4-fs (loop4): Remounting filesystem read-only [ 339.111865][ T3881] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.794: couldn't read orphan inode 13 (err -117) [ 339.158094][ T3881] EXT4-fs (loop4): Remounting filesystem read-only [ 339.165001][ T3881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 340.748541][ T3897] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 340.757840][ T3897] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 340.769495][ T3897] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 342.118609][ T3910] device bridge0 entered promiscuous mode [ 342.124546][ T3910] device macsec1 entered promiscuous mode [ 342.132048][ T3910] bridge0: port 3(macsec1) entered blocking state [ 342.138490][ T3910] bridge0: port 3(macsec1) entered disabled state [ 342.150027][ T3910] device bridge0 left promiscuous mode [ 342.321419][ T3722] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 342.377440][ T3903] tmpfs: Unknown parameter 'cg™l' [ 342.415764][ T3901] loop2: detected capacity change from 0 to 40427 [ 342.423401][ T3901] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 342.431135][ T3901] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 342.447906][ T3905] loop1: detected capacity change from 0 to 40427 [ 342.465315][ T3901] F2FS-fs (loop2): invalid crc value [ 342.473308][ T3905] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 342.481955][ T3905] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 342.511415][ T3722] usb 5-1: Using ep0 maxpacket: 32 [ 342.517691][ T3722] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 342.529163][ T3722] usb 5-1: config 0 has no interface number 0 [ 342.537020][ T3722] usb 5-1: config 0 interface 196 has no altsetting 0 [ 342.540867][ T3905] F2FS-fs (loop1): invalid crc value [ 342.550155][ T3901] F2FS-fs (loop2): Found nat_bits in checkpoint [ 342.553600][ T3722] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 342.566253][ T3905] F2FS-fs (loop1): Found nat_bits in checkpoint [ 342.579190][ T3722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.587642][ T3722] usb 5-1: Product: syz [ 342.591015][ T3901] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 342.592096][ T3722] usb 5-1: Manufacturer: syz [ 342.598869][ T3901] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 342.604131][ T3722] usb 5-1: SerialNumber: syz [ 342.843828][ T19] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 342.863267][ T3722] usb 5-1: config 0 descriptor?? [ 342.866401][ T3905] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 342.875315][ T3905] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 343.212521][ T3722] ipheth 5-1:0.196: Unable to find endpoints [ 343.219383][ T287] EXT4-fs (loop4): unmounting filesystem. [ 343.249827][ T3929] loop4: detected capacity change from 0 to 512 [ 343.296328][ T3929] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.803: casefold flag without casefold feature [ 343.309118][ T3929] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.803: couldn't read orphan inode 15 (err -117) [ 343.362743][ T3722] usb 5-1: USB disconnect, device number 24 [ 343.376050][ T3929] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 343.746377][ T3934] device bridge0 entered promiscuous mode [ 343.752667][ T3934] device macsec1 entered promiscuous mode [ 343.764736][ T3934] bridge0: port 3(macsec1) entered blocking state [ 343.771260][ T3934] bridge0: port 3(macsec1) entered disabled state [ 344.204769][ T3934] device bridge0 left promiscuous mode [ 344.222118][ T19] usb 4-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 344.241413][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.254684][ T19] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 345.961034][ T3945] device bridge0 entered promiscuous mode [ 345.966888][ T3945] device macsec1 entered promiscuous mode [ 345.973069][ T3945] bridge0: port 3(macsec1) entered blocking state [ 345.979496][ T3945] bridge0: port 3(macsec1) entered disabled state [ 346.715332][ T3945] device bridge0 left promiscuous mode [ 346.725570][ T287] EXT4-fs (loop4): unmounting filesystem. [ 346.731628][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.740304][ T19] usb 4-1: config 0 descriptor?? [ 346.759313][ T19] usb 4-1: can't set config #0, error -71 [ 346.778518][ T19] usb 4-1: USB disconnect, device number 24 [ 346.892306][ T3955] loop2: detected capacity change from 0 to 512 [ 346.894388][ T3952] loop1: detected capacity change from 0 to 512 [ 346.906171][ T3956] loop0: detected capacity change from 0 to 512 [ 346.920119][ T3956] EXT4-fs: Ignoring removed mblk_io_submit option [ 346.924809][ T3962] loop3: detected capacity change from 0 to 512 [ 346.927629][ T3955] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.811: casefold flag without casefold feature [ 346.933833][ T3952] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.810: casefold flag without casefold feature [ 346.945701][ T3955] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.811: couldn't read orphan inode 15 (err -117) [ 346.958471][ T3952] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.810: couldn't read orphan inode 15 (err -117) [ 346.981830][ T3955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 346.981835][ T3952] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 347.004938][ T3961] loop4: detected capacity change from 0 to 512 [ 347.028662][ T3962] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.812: casefold flag without casefold feature [ 347.029109][ T3961] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 347.041333][ T3956] EXT4-fs (loop0): Test dummy encryption mode enabled [ 347.049661][ T3961] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.808: bad orphan inode 15 [ 347.056044][ T3962] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.812: couldn't read orphan inode 15 (err -117) [ 347.066190][ T3961] ext4_test_bit(bit=14, block=4) = 1 [ 347.082892][ T3961] is_bad_inode(inode)=0 [ 347.087015][ T3961] NEXT_ORPHAN(inode)=0 [ 347.091049][ T3961] max_ino=32 [ 347.094240][ T3961] i_nlink=1 [ 347.097416][ T3961] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 347.106402][ T3962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 347.126649][ T3961] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 347.208826][ T3956] EXT4-fs (loop0): orphan cleanup on readonly fs [ 347.215747][ T3956] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.809: inode #13: comm syz.0.809: iget: illegal inode # [ 347.235722][ T3956] EXT4-fs (loop0): Remounting filesystem read-only [ 347.243448][ T3956] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.809: couldn't read orphan inode 13 (err -117) [ 347.290133][ T3956] EXT4-fs (loop0): Remounting filesystem read-only [ 347.304078][ T3956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 352.693203][ T285] EXT4-fs (loop2): unmounting filesystem. [ 352.699371][ T286] EXT4-fs (loop3): unmounting filesystem. [ 352.706245][ T287] EXT4-fs (loop4): unmounting filesystem. [ 352.728304][ T284] EXT4-fs (loop0): unmounting filesystem. [ 352.821075][ T283] EXT4-fs (loop1): unmounting filesystem. [ 353.219932][ T3990] device bridge0 entered promiscuous mode [ 353.225725][ T3990] device macsec1 entered promiscuous mode [ 353.232204][ T3990] bridge0: port 3(macsec1) entered blocking state [ 353.238623][ T3990] bridge0: port 3(macsec1) entered disabled state [ 353.252277][ T3990] device bridge0 left promiscuous mode [ 353.856395][ T4002] loop1: detected capacity change from 0 to 512 [ 353.915491][ T4002] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.943005][ T4002] EXT4-fs (loop1): Test dummy encryption mode enabled [ 354.064052][ T4008] loop2: detected capacity change from 0 to 1024 [ 354.072555][ T4008] EXT4-fs: Ignoring removed mblk_io_submit option [ 354.080797][ T4008] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 354.299228][ T4002] EXT4-fs (loop1): orphan cleanup on readonly fs [ 354.311933][ T4008] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 354.435362][ T4002] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.820: inode #13: comm syz.1.820: iget: illegal inode # [ 354.603328][ T4002] EXT4-fs (loop1): Remounting filesystem read-only [ 354.809142][ T4002] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.820: couldn't read orphan inode 13 (err -117) [ 354.836380][ T4002] EXT4-fs (loop1): Remounting filesystem read-only [ 354.853531][ T4002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 354.864661][ T285] EXT4-fs (loop2): unmounting filesystem. [ 355.056929][ T4016] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 355.065754][ T4016] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 355.077607][ T4016] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 355.157850][ T4019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.820'. [ 355.258970][ T4017] device bridge0 entered promiscuous mode [ 355.317966][ T4017] device macsec1 entered promiscuous mode [ 355.340742][ T4017] bridge0: port 3(macsec1) entered blocking state [ 355.355939][ T4017] bridge0: port 3(macsec1) entered disabled state [ 355.375055][ T4017] device bridge0 left promiscuous mode [ 355.390489][ T283] EXT4-fs (loop1): unmounting filesystem. [ 355.927693][ T28] audit: type=1400 audit(1762235050.061:204): avc: denied { remount } for pid=4021 comm="syz.4.825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 356.714105][ T4041] loop0: detected capacity change from 0 to 512 [ 356.730120][ T4041] EXT4-fs: Ignoring removed mblk_io_submit option [ 356.747951][ T4041] EXT4-fs (loop0): Test dummy encryption mode enabled [ 356.773799][ T4041] EXT4-fs (loop0): orphan cleanup on readonly fs [ 356.785321][ T4041] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.827: inode #13: comm syz.0.827: iget: illegal inode # [ 356.821957][ T4041] EXT4-fs (loop0): Remounting filesystem read-only [ 356.831530][ T4041] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.827: couldn't read orphan inode 13 (err -117) [ 356.843716][ T4041] EXT4-fs (loop0): Remounting filesystem read-only [ 356.850259][ T4041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 357.255405][ T4050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 357.711531][ T348] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 357.901539][ T348] usb 1-1: Using ep0 maxpacket: 32 [ 357.907824][ T348] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 358.053626][ T348] usb 1-1: config 0 has no interface number 0 [ 358.059861][ T348] usb 1-1: config 0 interface 196 has no altsetting 0 [ 358.074013][ T348] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 358.093521][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.113746][ T348] usb 1-1: Product: syz [ 358.121511][ T348] usb 1-1: Manufacturer: syz [ 358.131257][ T348] usb 1-1: SerialNumber: syz [ 358.198785][ T4059] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 358.207582][ T4059] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 358.219247][ T4059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 358.312908][ T348] usb 1-1: config 0 descriptor?? [ 358.465102][ T28] audit: type=1326 audit(1762235052.861:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcf818f6c9 code=0x0 [ 358.555900][ T4063] device bridge0 entered promiscuous mode [ 358.611001][ T4063] device macsec1 entered promiscuous mode [ 358.623481][ T4063] bridge0: port 3(macsec1) entered blocking state [ 358.637190][ T4063] bridge0: port 3(macsec1) entered disabled state [ 358.644813][ T4063] device bridge0 left promiscuous mode [ 358.683325][ T4070] fuse: Bad value for 'fd' [ 358.915157][ T4071] device bridge0 entered promiscuous mode [ 358.920967][ T4071] device macsec1 entered promiscuous mode [ 358.929926][ T4071] bridge0: port 3(macsec1) entered blocking state [ 358.936764][ T4071] bridge0: port 3(macsec1) entered disabled state [ 358.944156][ T4071] device bridge0 left promiscuous mode [ 359.101900][ T4077] loop1: detected capacity change from 0 to 512 [ 359.281167][ T4077] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.835: casefold flag without casefold feature [ 359.294836][ T4077] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.835: couldn't read orphan inode 15 (err -117) [ 359.307876][ T4077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 359.701872][ T4086] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 359.710589][ T4086] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 359.722177][ T4086] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 359.737257][ T4089] device bridge0 entered promiscuous mode [ 359.743107][ T4089] device macsec1 entered promiscuous mode [ 359.749808][ T4089] bridge0: port 3(macsec1) entered blocking state [ 359.756372][ T4089] bridge0: port 3(macsec1) entered disabled state [ 360.190761][ T4089] device bridge0 left promiscuous mode [ 361.140440][ T4097] device bridge0 entered promiscuous mode [ 361.146277][ T4097] device macsec1 entered promiscuous mode [ 361.152502][ T4097] bridge0: port 3(macsec1) entered blocking state [ 361.158939][ T4097] bridge0: port 3(macsec1) entered disabled state [ 361.166416][ T4097] device bridge0 left promiscuous mode [ 361.177531][ T348] ipheth 1-1:0.196: Unable to find endpoints [ 361.228642][ T4100] device bridge0 entered promiscuous mode [ 361.234429][ T4100] device macsec1 entered promiscuous mode [ 361.240627][ T4100] bridge0: port 3(macsec1) entered blocking state [ 361.247065][ T4100] bridge0: port 3(macsec1) entered disabled state [ 361.254505][ T4100] device bridge0 left promiscuous mode [ 361.280282][ T348] usb 1-1: USB disconnect, device number 18 [ 361.362210][ T283] EXT4-fs (loop1): unmounting filesystem. [ 361.444694][ T4099] device bridge0 entered promiscuous mode [ 361.450477][ T4099] device macsec1 entered promiscuous mode [ 361.456826][ T4099] bridge0: port 3(macsec1) entered blocking state [ 361.470941][ T284] EXT4-fs (loop0): unmounting filesystem. [ 361.512517][ T4099] bridge0: port 3(macsec1) entered disabled state [ 361.848019][ T4099] device bridge0 left promiscuous mode [ 361.872791][ T4106] device bridge0 entered promiscuous mode [ 361.878697][ T4106] device macsec1 entered promiscuous mode [ 361.886408][ T4106] bridge0: port 3(macsec1) entered blocking state [ 361.892900][ T4106] bridge0: port 3(macsec1) entered disabled state [ 362.013006][ T4106] device bridge0 left promiscuous mode [ 362.022518][ T4108] device bridge0 entered promiscuous mode [ 362.028292][ T4108] device macsec1 entered promiscuous mode [ 362.034498][ T4108] bridge0: port 3(macsec1) entered blocking state [ 362.040937][ T4108] bridge0: port 3(macsec1) entered disabled state [ 362.048289][ T4108] device bridge0 left promiscuous mode [ 363.494686][ T4131] device bridge0 entered promiscuous mode [ 363.500812][ T4131] device macsec1 entered promiscuous mode [ 363.512525][ T4131] bridge0: port 3(macsec1) entered blocking state [ 363.519071][ T4131] bridge0: port 3(macsec1) entered disabled state [ 363.575086][ T4131] device bridge0 left promiscuous mode [ 363.820461][ T4118] loop4: detected capacity change from 0 to 1024 [ 363.850024][ T4118] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 363.874544][ T4118] EXT4-fs (loop4): write access will be enabled during recovery [ 363.950761][ T4144] device bridge0 entered promiscuous mode [ 363.956669][ T4144] device macsec1 entered promiscuous mode [ 363.964343][ T4144] bridge0: port 3(macsec1) entered blocking state [ 363.970801][ T4144] bridge0: port 3(macsec1) entered disabled state [ 363.981772][ T4144] device bridge0 left promiscuous mode [ 364.095161][ T4118] EXT4-fs (loop4): barriers disabled [ 364.100591][ T4118] JBD2: no valid journal superblock found [ 364.108626][ T4141] loop2: detected capacity change from 0 to 1024 [ 364.165585][ T4141] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 364.175561][ T4118] EXT4-fs (loop4): error loading journal [ 364.187934][ T4141] EXT4-fs (loop2): write access will be enabled during recovery [ 364.209065][ T4141] EXT4-fs (loop2): barriers disabled [ 364.223306][ T4141] JBD2: no valid journal superblock found [ 364.236910][ T4141] EXT4-fs (loop2): error loading journal [ 364.487510][ T28] audit: type=1326 audit(1762235058.881:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="syz.4.852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcf818f6c9 code=0x0 [ 364.537842][ T4153] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 364.546624][ T4153] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 364.558235][ T4153] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 364.699240][ T4158] fuse: Bad value for 'rootmode' [ 365.403976][ T4161] device bridge0 entered promiscuous mode [ 365.409754][ T4161] device macsec1 entered promiscuous mode [ 365.416099][ T4161] bridge0: port 3(macsec1) entered blocking state [ 365.422563][ T4161] bridge0: port 3(macsec1) entered disabled state [ 365.429832][ T4161] device bridge0 left promiscuous mode [ 365.685835][ T4165] device bridge0 entered promiscuous mode [ 365.691633][ T4165] device macsec1 entered promiscuous mode [ 365.697838][ T4165] bridge0: port 3(macsec1) entered blocking state [ 365.704309][ T4165] bridge0: port 3(macsec1) entered disabled state [ 365.745804][ T4165] device bridge0 left promiscuous mode [ 366.245122][ T4174] loop1: detected capacity change from 0 to 512 [ 366.280101][ T4174] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 366.483279][ T4177] device bridge0 entered promiscuous mode [ 366.489613][ T4177] device macsec1 entered promiscuous mode [ 366.505561][ T4177] bridge0: port 3(macsec1) entered blocking state [ 366.512095][ T4177] bridge0: port 3(macsec1) entered disabled state [ 366.707749][ T4177] device bridge0 left promiscuous mode [ 366.723077][ T4174] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.856: bad orphan inode 15 [ 366.735635][ T4174] ext4_test_bit(bit=14, block=4) = 1 [ 366.741030][ T4174] is_bad_inode(inode)=0 [ 366.745302][ T4174] NEXT_ORPHAN(inode)=0 [ 366.749445][ T4174] max_ino=32 [ 366.752755][ T4174] i_nlink=1 [ 366.756005][ T4174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 368.731190][ T4184] loop3: detected capacity change from 0 to 512 [ 368.751037][ T4184] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.762002][ T283] EXT4-fs (loop1): unmounting filesystem. [ 368.768739][ T4184] EXT4-fs (loop3): Test dummy encryption mode enabled [ 368.895284][ T4184] EXT4-fs (loop3): orphan cleanup on readonly fs [ 369.359479][ T4184] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.861: inode #13: comm syz.3.861: iget: illegal inode # [ 369.391978][ T4184] EXT4-fs (loop3): Remounting filesystem read-only [ 369.415328][ T4184] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.861: couldn't read orphan inode 13 (err -117) [ 369.506834][ T4184] EXT4-fs (loop3): Remounting filesystem read-only [ 369.514447][ T4184] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 369.737312][ T4196] device bridge0 entered promiscuous mode [ 369.743168][ T4196] device macsec1 entered promiscuous mode [ 369.749339][ T4196] bridge0: port 3(macsec1) entered blocking state [ 369.755808][ T4196] bridge0: port 3(macsec1) entered disabled state [ 369.763103][ T4196] device bridge0 left promiscuous mode [ 369.875820][ T4200] device bridge0 entered promiscuous mode [ 369.904111][ T4203] loop4: detected capacity change from 0 to 512 [ 369.923171][ T4203] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.865: casefold flag without casefold feature [ 369.935924][ T4203] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.865: couldn't read orphan inode 15 (err -117) [ 369.948063][ T4200] device macsec1 entered promiscuous mode [ 369.952043][ T348] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 369.953983][ T4203] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 369.963196][ T4200] bridge0: port 3(macsec1) entered blocking state [ 370.087942][ T4200] bridge0: port 3(macsec1) entered disabled state [ 370.097999][ T4208] overlayfs: failed to resolve './file0': -2 [ 370.109442][ T4200] device bridge0 left promiscuous mode [ 370.221413][ T348] usb 4-1: Using ep0 maxpacket: 32 [ 370.228191][ T348] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 370.241740][ T4210] loop1: detected capacity change from 0 to 1024 [ 370.250896][ T348] usb 4-1: config 0 has no interface number 0 [ 370.262136][ T348] usb 4-1: config 0 interface 196 has no altsetting 0 [ 370.283988][ T4210] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 370.297639][ T348] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 370.306959][ T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.316057][ T4210] EXT4-fs (loop1): write access will be enabled during recovery [ 370.323844][ T348] usb 4-1: Product: syz [ 370.328052][ T4210] EXT4-fs (loop1): barriers disabled [ 370.333410][ T348] usb 4-1: Manufacturer: syz [ 370.338109][ T348] usb 4-1: SerialNumber: syz [ 370.347178][ T4210] JBD2: no valid journal superblock found [ 370.353913][ T348] usb 4-1: config 0 descriptor?? [ 370.364312][ T4210] EXT4-fs (loop1): error loading journal [ 370.573362][ T348] ipheth 4-1:0.196: Unable to find endpoints [ 370.614041][ T4217] device bridge0 entered promiscuous mode [ 370.619949][ T4217] device macsec1 entered promiscuous mode [ 370.627648][ T4217] bridge0: port 3(macsec1) entered blocking state [ 370.634140][ T4217] bridge0: port 3(macsec1) entered disabled state [ 370.646109][ T4217] device bridge0 left promiscuous mode [ 370.728811][ T4216] loop0: detected capacity change from 0 to 512 [ 370.768081][ T348] usb 4-1: USB disconnect, device number 25 [ 370.780089][ T287] EXT4-fs (loop4): unmounting filesystem. [ 370.787271][ T4216] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.868: casefold flag without casefold feature [ 370.807407][ T4216] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.868: couldn't read orphan inode 15 (err -117) [ 370.819830][ T4216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 370.952290][ T4223] loop1: detected capacity change from 0 to 512 [ 370.962147][ T4223] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.870: casefold flag without casefold feature [ 370.975108][ T4223] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.870: couldn't read orphan inode 15 (err -117) [ 370.987317][ T4223] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 371.075073][ T4227] overlayfs: failed to resolve './file0': -2 [ 372.873682][ T284] EXT4-fs (loop0): unmounting filesystem. [ 372.908929][ T286] EXT4-fs (loop3): unmounting filesystem. [ 372.977730][ T283] EXT4-fs (loop1): unmounting filesystem. [ 373.025056][ T4228] loop4: detected capacity change from 0 to 512 [ 373.031658][ T4236] loop0: detected capacity change from 0 to 512 [ 373.040227][ T4236] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.104469][ T4242] loop3: detected capacity change from 0 to 512 [ 373.111163][ T4242] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.126624][ T4242] EXT4-fs (loop3): Test dummy encryption mode enabled [ 373.129963][ T4236] EXT4-fs (loop0): Test dummy encryption mode enabled [ 373.186019][ T4236] EXT4-fs (loop0): orphan cleanup on readonly fs [ 373.274027][ T4248] device bridge0 entered promiscuous mode [ 373.280017][ T4248] device macsec1 entered promiscuous mode [ 373.289151][ T4248] bridge0: port 3(macsec1) entered blocking state [ 373.295662][ T4248] bridge0: port 3(macsec1) entered disabled state [ 373.354072][ T4248] device bridge0 left promiscuous mode [ 373.366523][ T4236] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.871: inode #13: comm syz.0.871: iget: illegal inode # [ 373.385805][ T4228] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 373.394225][ T4228] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.869: bad orphan inode 15 [ 373.404397][ T4228] ext4_test_bit(bit=14, block=4) = 1 [ 373.409698][ T4228] is_bad_inode(inode)=0 [ 373.414791][ T4236] EXT4-fs (loop0): Remounting filesystem read-only [ 373.421305][ T4236] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.871: couldn't read orphan inode 13 (err -117) [ 373.444327][ T4242] EXT4-fs (loop3): orphan cleanup on readonly fs [ 373.450959][ T4242] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.875: inode #13: comm syz.3.875: iget: illegal inode # [ 373.462086][ T4236] EXT4-fs (loop0): Remounting filesystem read-only [ 373.470130][ T4242] EXT4-fs (loop3): Remounting filesystem read-only [ 373.472574][ T28] audit: type=1400 audit(1762235067.871:207): avc: denied { write } for pid=4232 comm="syz.2.872" name="/" dev="configfs" ino=13636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.476981][ T4228] NEXT_ORPHAN(inode)=0 [ 373.498874][ T4242] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.875: couldn't read orphan inode 13 (err -117) [ 373.502928][ T4236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 373.519275][ T4242] EXT4-fs (loop3): Remounting filesystem read-only [ 373.529690][ T4242] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 373.551632][ T4228] max_ino=32 [ 373.554932][ T4228] i_nlink=1 [ 373.558134][ T4228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 374.139093][ T4253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 374.169820][ T4256] loop1: detected capacity change from 0 to 512 [ 374.181817][ T4256] EXT4-fs: Ignoring removed mblk_io_submit option [ 374.211770][ T4256] EXT4-fs (loop1): Test dummy encryption mode enabled [ 374.225545][ T4256] EXT4-fs (loop1): orphan cleanup on readonly fs [ 374.247417][ T4256] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.876: inode #13: comm syz.1.876: iget: illegal inode # [ 374.316907][ T286] EXT4-fs (loop3): unmounting filesystem. [ 374.370822][ T4256] EXT4-fs (loop1): Remounting filesystem read-only [ 374.377601][ T4256] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.876: couldn't read orphan inode 13 (err -117) [ 374.389759][ T4256] EXT4-fs (loop1): Remounting filesystem read-only [ 374.453432][ T4256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 374.482447][ T4263] loop3: detected capacity change from 0 to 1024 [ 374.513305][ T4263] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 374.521167][ T4263] EXT4-fs (loop3): write access will be enabled during recovery [ 374.528861][ T4263] EXT4-fs (loop3): barriers disabled [ 374.534705][ T4263] JBD2: no valid journal superblock found [ 374.540480][ T4263] EXT4-fs (loop3): error loading journal [ 374.785877][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 374.934761][ T4266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.876'. [ 374.991496][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 374.999279][ T24] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 375.121509][ T24] usb 1-1: config 0 has no interface number 0 [ 375.127792][ T24] usb 1-1: config 0 interface 196 has no altsetting 0 [ 375.142435][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 375.158000][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.189958][ T24] usb 1-1: Product: syz [ 375.199046][ T24] usb 1-1: Manufacturer: syz [ 375.216950][ T283] EXT4-fs (loop1): unmounting filesystem. [ 375.218595][ T24] usb 1-1: SerialNumber: syz [ 375.292435][ T24] usb 1-1: config 0 descriptor?? [ 375.314631][ T4272] loop1: detected capacity change from 0 to 512 [ 375.402007][ T4272] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.878: casefold flag without casefold feature [ 375.415648][ T4272] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.878: couldn't read orphan inode 15 (err -117) [ 375.427745][ T4272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 375.510617][ T4277] device bridge0 entered promiscuous mode [ 375.516507][ T4277] device macsec1 entered promiscuous mode [ 375.524404][ T4277] bridge0: port 3(macsec1) entered blocking state [ 375.530861][ T4277] bridge0: port 3(macsec1) entered disabled state [ 375.542956][ T4277] device bridge0 left promiscuous mode [ 375.911898][ T4280] overlayfs: failed to resolve './file0': -2 [ 376.542714][ T283] EXT4-fs (loop1): unmounting filesystem. [ 376.573113][ T287] EXT4-fs (loop4): unmounting filesystem. [ 376.716927][ T4288] device bridge0 entered promiscuous mode [ 376.723169][ T4288] device macsec1 entered promiscuous mode [ 376.736050][ T4288] bridge0: port 3(macsec1) entered blocking state [ 376.742559][ T4288] bridge0: port 3(macsec1) entered disabled state [ 377.024352][ T4288] device bridge0 left promiscuous mode [ 377.151157][ T4295] tmpfs: Unknown parameter 'cg™l' [ 377.290631][ T4298] tmpfs: Unknown parameter 'cg™l' [ 377.391803][ T28] audit: type=1400 audit(1762235071.781:208): avc: denied { read } for pid=4301 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 377.432869][ T555] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 377.560146][ T4303] device bridge0 entered promiscuous mode [ 377.567572][ T4303] device macsec1 entered promiscuous mode [ 377.578613][ T4303] bridge0: port 3(macsec1) entered blocking state [ 377.587304][ T4303] bridge0: port 3(macsec1) entered disabled state [ 377.692388][ T3037] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 377.733083][ T555] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.752745][ T4303] device bridge0 left promiscuous mode [ 377.762260][ T555] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.779220][ T555] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 377.793720][ T555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.813829][ T555] usb 5-1: config 0 descriptor?? [ 377.824077][ T555] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 377.893047][ T3037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config Stopping sshd: [ 377.920839][ T3037] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 stopped /usr/sbin/sshd (pid 195) OK [ 377.962505][ T3037] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 377.982037][ T3037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping crond: [ 378.066817][ T3037] usb 3-1: config 0 descriptor?? [ 378.077561][ T3037] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 378.097409][ T24] ipheth 1-1:0.196: Unable to find endpoints stopped /usr/sbin/crond (pid 187) OK [ 378.122569][ T24] usb 1-1: USB disconnect, device number 19 [ 378.778438][ T4317] overlayfs: failed to resolve './file1': -2 [ 378.961468][ T28] audit: type=1400 audit(1762235073.171:209): avc: denied { unlink } for pid=4309 comm="syz.1.887" name="#81" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 378.990932][ T284] EXT4-fs (loop0): unmounting filesystem. [ 379.022832][ T28] audit: type=1326 audit(1762235073.361:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4319 comm="syz.3.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cecd8f6c9 code=0x0 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 141) [ 379.119138][ T28] audit: type=1400 audit(1762235073.381:211): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 Stopping network[ 379.161248][ T28] audit: type=1400 audit(1762235073.531:212): avc: denied { search } for pid=4328 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 : [ 379.188217][ T28] audit: type=1400 audit(1762235073.541:213): avc: denied { sqpoll } for pid=4319 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 379.256110][ T4335] fuse: Unknown parameter 'use00000000000000000000' [ 379.444079][ T28] audit: type=1400 audit(1762235073.701:214): avc: denied { mount } for pid=4322 comm="syz.0.889" name="/" dev="overlay" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 380.237355][ T28] audit: type=1400 audit(1762235074.631:215): avc: denied { write } for pid=142 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.302405][ T28] audit: type=1400 audit(1762235074.631:216): avc: denied { remove_name } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.334413][ T28] audit: type=1400 audit(1762235074.631:217): avc: denied { unlink } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 380.420355][ T28] audit: type=1400 audit(1762235074.661:218): avc: denied { unlink } for pid=142 comm="dhcpcd" name="pid" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 380.726228][ T4350] device bridge0 entered promiscuous mode [ 380.732141][ T4350] device macsec1 entered promiscuous mode [ 380.739112][ T4350] bridge0: port 3(macsec1) entered blocking state [ 380.745634][ T4350] bridge0: port 3(macsec1) entered disabled state [ 380.762408][ T4350] device bridge0 left promiscuous mode [ 381.194318][ T4352] device bridge0 entered promiscuous mode [ 381.200101][ T4352] device macsec1 entered promiscuous mode [ 381.206534][ T4352] bridge0: port 3(macsec1) entered blocking state [ 381.213281][ T4352] bridge0: port 3(macsec1) entered disabled state [ 381.250210][ T4352] device bridge0 left promiscuous mode [ 381.270522][ T3037] usb 3-1: USB disconnect, device number 14 [ 381.294981][ T24] usb 5-1: USB disconnect, device number 25 [ 381.460714][ T4362] loop3: detected capacity change from 0 to 512 [ 381.486580][ T4362] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.511462][ T4362] EXT4-fs (loop3): Test dummy encryption mode enabled OK [ 381.869823][ T4366] device bridge0 entered promiscuous mode [ 381.875660][ T4366] device macsec1 entered promiscuous mode [ 381.881873][ T4366] bridge0: port 3(macsec1) entered blocking state [ 381.888392][ T4366] bridge0: port 3(macsec1) entered disabled state [ 382.035344][ T4366] device bridge0 left promiscuous mode [ 382.315943][ T4368] device bridge0 entered promiscuous mode [ 382.322164][ T4368] device macsec1 entered promiscuous mode [ 382.330012][ T4368] bridge0: port 3(macsec1) entered blocking state [ 382.336488][ T4368] bridge0: port 3(macsec1) entered disabled state [ 382.347434][ T4368] device bridge0 left promiscuous mode [ 382.499288][ T4376] loop2: detected capacity change from 0 to 512 [ 382.507197][ T4362] EXT4-fs (loop3): orphan cleanup on readonly fs Stopping iptables: [ 382.517822][ T4376] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.897: casefold flag without casefold feature [ 382.530832][ T4376] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.897: couldn't read orphan inode 15 (err -117) [ 382.537580][ T4362] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.896: inode #13: comm syz.3.896: iget: illegal inode # [ 382.555294][ T4376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 382.583049][ T4362] EXT4-fs (loop3): Remounting filesystem read-only OK [ 382.613161][ T4362] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.896: couldn't read orphan inode 13 (err -117) Stopping system message bus: [ 382.655589][ T4362] EXT4-fs (loop3): Remounting filesystem read-only [ 382.712594][ T4362] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. done [ 382.885558][ T4390] overlayfs: failed to resolve './file0': -2 [ 383.578268][ T4393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'. [ 383.974491][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 383.974507][ T28] audit: type=1400 audit(1762235078.371:226): avc: denied { read write } for pid=4361 comm="syz.3.896" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.155884][ T28] audit: type=1400 audit(1762235078.371:227): avc: denied { open } for pid=4361 comm="syz.3.896" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.184849][ T285] EXT4-fs (loop2): unmounting filesystem. [ 384.249265][ T28] audit: type=1400 audit(1762235078.371:228): avc: denied { ioctl } for pid=4361 comm="syz.3.896" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.307932][ T4385] device bridge0 entered promiscuous mode [ 384.351438][ T288] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 384.362217][ T4385] device macsec1 entered promiscuous mode [ 384.402821][ T4402] loop2: detected capacity change from 0 to 1024 [ 384.403056][ T4385] bridge0: port 3(macsec1) entered blocking state Stopping klogd: [ 384.433977][ T4402] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 384.459606][ T4402] EXT4-fs (loop2): write access will be enabled during recovery OK [ 384.491846][ T4402] EXT4-fs (loop2): barriers disabled [ 384.502529][ T4385] bridge0: port 3(macsec1) entered disabled state Stopping acpid: [ 384.517855][ T4402] JBD2: no valid journal superblock found [ 384.536828][ T4402] EXT4-fs (loop2): error loading journal [ 384.543595][ T4385] device bridge0 left promiscuous mode [ 384.549149][ T28] audit: type=1400 audit(1762235078.941:229): avc: denied { remove_name } for pid=88 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.571428][ T288] usb 4-1: Using ep0 maxpacket: 32 [ 384.572471][ T288] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 384.590408][ T28] audit: type=1400 audit(1762235078.941:230): avc: denied { unlink } for pid=88 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 384.601393][ T288] usb 4-1: config 0 has no interface number 0 [ 384.630688][ T288] usb 4-1: config 0 interface 196 has no altsetting 0 [ 384.650005][ T288] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 384.669287][ T288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.691466][ T288] usb 4-1: Product: syz [ 384.695670][ T288] usb 4-1: Manufacturer: syz [ 384.720647][ T288] usb 4-1: SerialNumber: syz [ 385.116888][ T4418] device bridge0 entered promiscuous mode [ 385.122763][ T4418] device macsec1 entered promiscuous mode [ 385.129579][ T4418] bridge0: port 3(macsec1) entered blocking state [ 385.136092][ T4418] bridge0: port 3(macsec1) entered disabled state [ 385.148830][ T4418] device bridge0 left promiscuous mode [ 385.692934][ T288] usb 4-1: config 0 descriptor?? [ 385.729916][ T288] ipheth 4-1:0.196: Unable to find endpoints OK [ 385.756287][ T286] EXT4-fs (loop3): unmounting filesystem. [ 385.774507][ T288] usb 4-1: USB disconnect, device number 26 Stopping syslogd: stopped /sbin/syslogd (pid 85) OK [ 385.912207][ T4428] loop1: detected capacity change from 0 to 512 [ 385.944815][ T4428] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.955497][ T4428] EXT4-fs (loop1): Test dummy encryption mode enabled [ 385.972028][ T4427] loop3: detected capacity change from 0 to 1024 [ 385.977182][ T4428] EXT4-fs (loop1): orphan cleanup on readonly fs [ 386.049570][ T4428] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.903: inode #13: comm syz.1.903: iget: illegal inode # [ 386.094185][ T4427] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 386.102285][ T4428] EXT4-fs (loop1): Remounting filesystem read-only [ 386.108796][ T4428] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.903: couldn't read orphan inode 13 (err -117) [ 386.241613][ T28] audit: type=1400 audit(1762235080.561:231): avc: denied { mount } for pid=4432 comm="syz.4.904" name="/" dev="configfs" ino=13636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 386.271337][ T4428] EXT4-fs (loop1): Remounting filesystem read-only [ 386.328226][ T4428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 386.337167][ T4427] EXT4-fs (loop3): write access will be enabled during recovery [ 386.419179][ T4427] EXT4-fs (loop3): barriers disabled umount: can't remount debugfs read-only [ 386.437255][ T4427] JBD2: no valid journal superblock found [ 386.457448][ T4427] EXT4-fs (loop3): error loading journal [ 386.550168][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 386.755660][ T4445] loop2: detected capacity change from 0 to 1024 [ 386.765549][ T4445] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 386.773465][ T4445] EXT4-fs (loop2): write access will be enabled during recovery [ 386.781201][ T4445] EXT4-fs (loop2): barriers disabled [ 386.787280][ T4445] JBD2: no valid journal superblock found [ 386.793092][ T4445] EXT4-fs (loop2): error loading journal [ 386.864130][ T28] audit: type=1400 audit(1762235081.261:232): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 386.941464][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 387.161396][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 387.168950][ T24] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 387.186401][ T24] usb 2-1: config 0 has no interface number 0 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read[ 387.200145][ T24] usb 2-1: config 0 interface 196 has no altsetting 0 -only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.1.244 closed by remote host. [ 387.261678][ T28] audit: type=1400 audit(1762235081.651:233): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[14796]" dev="pipefs" ino=14796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Sent SIGTERM to all processes [ 387.454011][ T24] usb 2-1: string descriptor 0 read error: -71 [ 387.460231][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 387.478049][ T4211] EXT4-fs (loop1): unmounting filesystem. [ 387.518823][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.571889][ T24] usb 2-1: config 0 descriptor?? [ 387.591652][ T24] usb 2-1: can't set config #0, error -71 [ 387.610077][ T24] usb 2-1: USB disconnect, device number 19 [ 387.688198][ T283] syz-executor (283) used greatest stack depth: 21352 bytes left [ 387.695977][ T285] syz-executor (285) used greatest stack depth: 20768 bytes left [ 388.051906][ T8] device bridge_slave_1 left promiscuous mode [ 388.058099][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.065511][ T8] device bridge_slave_0 left promiscuous mode [ 388.071958][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.079487][ T8] device veth1_macvtap left promiscuous mode [ 388.085586][ T8] device veth0_vlan left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 388.842437][ T8] device bridge_slave_1 left promiscuous mode [ 388.848540][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.855892][ T8] device bridge_slave_0 left promiscuous mode [ 388.862011][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.869863][ T8] device bridge_slave_1 left promiscuous mode [ 388.875987][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.883380][ T8] device bridge_slave_0 left promiscuous mode [ 388.889458][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.897216][ T8] device bridge_slave_1 left promiscuous mode [ 388.903316][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.910610][ T8] device bridge_slave_0 left promiscuous mode [ 388.916717][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.925319][ T8] device bridge_slave_1 left promiscuous mode [ 388.931438][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.938703][ T8] device bridge_slave_0 left promiscuous mode [ 388.944830][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.952904][ T8] device veth1_macvtap left promiscuous mode [ 388.958893][ T8] device veth0_vlan left promiscuous mode [ 388.964923][ T8] device veth1_macvtap left promiscuous mode [ 388.970908][ T8] device veth0_vlan left promiscuous mode [ 388.976950][ T8] device veth1_macvtap left promiscuous mode [ 388.983003][ T8] device veth0_vlan left promiscuous mode [ 388.989085][ T8] device veth1_macvtap left promiscuous mode [ 388.995294][ T8] device veth0_vlan left promiscuous mode [ 389.435271][ T4454] kvm: exiting hardware virtualization [ 389.441651][ T4454] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 389.448823][ T4454] ACPI: PM: Preparing to enter system sleep state S5 [ 389.456155][ T4454] reboot: Power down serialport: VM disconnected.