last executing test programs: 2m50.903624613s ago: executing program 32 (id=952): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000180)={[{@stripe={'stripe', 0x3d, 0xa}}, {}, {@init_itable_val={'init_itable', 0x3d, 0x400}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nomblk_io_submit}, {@resuid}, {@nomblk_io_submit}, {@data_writeback}, {@nojournal_checksum}, {@nojournal_checksum}, {@nodiscard}, {@quota}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fe6}}, {@sb={'sb', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x63e}}], [{@appraise_type}, {@fowner_lt}]}, 0x3, 0x56c, &(0x7f0000000640)="$eJzs3d9rW1UcAPDvTdv9qroOxlAfZLAHJ3Pp2vpjgrD5KDoc6PsM7V0ZTZfRpGOtg20P7sUXGYKIA/EP8N3H4T/gXzHQwZBR9MGXyk1v2qxt+iPLTMf9fOCm59yb9NyTe78n35ObkAAK63h2U4p4LSK+TSIOt20bzG5eWqsvPbk5mS1JLC9//lcSSb6utT3J/w7nlVcj4revI06VNrZbX1icqVSr6VxeH23MXhutLyyevjJbmU6n06vjExNn350Y/+D993rW17cu/vPDZw8+PvvNiaXvf3l05F4S51e7196PZ3C7vXI8jufPyVCcX3fHsR40tpck/d4BujKQx/lQZGPA4RhYiXqgAG5FxDJQUIn4h4Jq5QGtuX2P5sEvjMcfrUyANvZ/cOW9kTjQnBsdWkqemhll892RHrSftfHrn/fvZUts8z7ErR60B9By+05EnBkc3Dj+Jfn4170zzXeWt7a+jaK9/kA/Pcjyn7c3y39Kq/lPbJL/DG8Su93YPv5Lj3rQTEdZ/vfhpvnv6tA1MpDXXm7mfEPJ5SvV9ExEvBIRJ2Nof1bf6nrO2aWHy522ted/2ZK138oF8/14NLj/6cdMVRqVZ+lzu8d3Il5fy3+T2DD+H2jmuuuPf/Z8XNxhG8fS+2902rZ9/9v1PgNe/jnizU2P/9oVrWTr65OjzfNhtHVWbPT33WO/d2p/d/3vvcfDEYe27v9I0n69tr77Nn468G/aaVu35/++5ItmeV++7kal0Zgbi9iXfLpx/fjaY1v11v2z8//kia3Hv83O/4MR8eUO+3/36N2Od+378b8TMbWr47/7wsNPvvqxU/s7O/7vNEsn8zU7Gf92uoPP8twBAAAAAADAXlNqfsU3KZVXy6VSubzy+Y6jcahUrdUbpy7X5q9OrXwVeCSGSq0r3YfbPg8xln8etlUfX1efiIgjEfHdwMFmvTxZq071u/MAAAAAAAAAAAAAAAAAAACwRwx3+P5/5o+Bfu8d8Nz5yW8orm3jvxe/9ATsSV7/objEPxSX+IfiEv9QXOIfikv8Q3GJfygu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9dfHChWxZXnpyczKrT11fmJ+pXT89ldZnyrPzk+XJ2ty18nStNl1Ny5O12e3+X7VWuzY2HvM3RhtpvTFaX1i8NFubv9q4dGW2Mp1eSof+l14BAAAAAAAAAAAAAAAAAADAi6W+sDhTqVbTOYWOhXOxJ3aj60Ky3VE+l58MXTUx2P8OKjyHQp8HJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo818AAAD//xxWMxs=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001100)=""/266, 0x10a}, {&(0x7f0000001240)=""/4097, 0x1001}, {&(0x7f0000000fc0)=""/231, 0xe7}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f00000022c0)=""/177, 0xb1}], 0x5}, 0x401}], 0x1, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/25], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='9p_protocol_dump\x00'}, 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000940)=@getae={0x4c, 0x1f, 0xcba42d12fcf5a167, 0x70bd26, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x0, 0x33}, @in6=@mcast2, 0x7, 0x3505}, [@mark={0xc, 0x15, {0x35075d, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x40054) 2m40.364158405s ago: executing program 5 (id=1083): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r0, 0x0, 0x0, 0x0) 2m40.363845075s ago: executing program 5 (id=1084): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000180)={[{@stripe={'stripe', 0x3d, 0xa}}, {}, {@init_itable_val={'init_itable', 0x3d, 0x400}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nomblk_io_submit}, {@resuid}, {@nomblk_io_submit}, {@data_writeback}, {@nojournal_checksum}, {@nojournal_checksum}, {@nodiscard}, {@quota}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fe6}}, {@sb={'sb', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x63e}}], [{@appraise_type}, {@fowner_lt}]}, 0x3, 0x56c, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001100)=""/266, 0x10a}, {&(0x7f0000001240)=""/4097, 0x1001}, {&(0x7f0000000fc0)=""/231, 0xe7}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f00000022c0)=""/177, 0xb1}], 0x5}, 0x401}], 0x1, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='9p_protocol_dump\x00'}, 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000940)=@getae={0x4c, 0x1f, 0xcba42d12fcf5a167, 0x70bd26, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x0, 0x33}, @in6=@mcast2, 0x7, 0x3505}, [@mark={0xc, 0x15, {0x35075d, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x40054) 2m39.977583816s ago: executing program 5 (id=1088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m39.879555114s ago: executing program 5 (id=1091): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000180)={[{@stripe={'stripe', 0x3d, 0xa}}, {}, {@init_itable_val={'init_itable', 0x3d, 0x400}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nomblk_io_submit}, {@resuid}, {@nomblk_io_submit}, {@data_writeback}, {@nojournal_checksum}, {@nojournal_checksum}, {@nodiscard}, {@quota}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fe6}}, {@sb={'sb', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x63e}}], [{@appraise_type}, {@fowner_lt}]}, 0x3, 0x56c, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001100)=""/266, 0x10a}, {&(0x7f0000001240)=""/4097, 0x1001}, {&(0x7f0000000fc0)=""/231, 0xe7}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f00000022c0)=""/177, 0xb1}], 0x5}, 0x401}], 0x1, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/25], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='9p_protocol_dump\x00'}, 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000940)=@getae={0x4c, 0x1f, 0xcba42d12fcf5a167, 0x70bd26, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x0, 0x33}, @in6=@mcast2, 0x7, 0x3505}, [@mark={0xc, 0x15, {0x35075d, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x40054) 2m38.660225463s ago: executing program 5 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) 2m38.504057946s ago: executing program 5 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) getsockname$packet(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000cf5191e861fe30d2b7a24f877c76cfa289589ba8b96c5f3bde1d5d6b7771373ba50bc0e6599cd203cd7827615714cfc4d621e23ad396d977ff420a6d81600c0f0b77da85159259c5c56e248b7c8ddfad7c94a6fa7640676203a627be6e5aad9d1c5e3fcf062420098e3293e15b4cb1289b0cbbe72c20dd533954898ac4779c744e467ddbd6776b969376f3563ac3cc369aed6b400c5f9a90273dc29038bcd92c69c7422ee651d0e83c9ee7e20d06cad15204138ce7e047aeee8f23f722cac5b27e55bb483587cf6fd2a74ce28021dd1880d5299dfad5124152927741dd77", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000040000000000"], 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) 2m38.503902456s ago: executing program 33 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) getsockname$packet(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000cf5191e861fe30d2b7a24f877c76cfa289589ba8b96c5f3bde1d5d6b7771373ba50bc0e6599cd203cd7827615714cfc4d621e23ad396d977ff420a6d81600c0f0b77da85159259c5c56e248b7c8ddfad7c94a6fa7640676203a627be6e5aad9d1c5e3fcf062420098e3293e15b4cb1289b0cbbe72c20dd533954898ac4779c744e467ddbd6776b969376f3563ac3cc369aed6b400c5f9a90273dc29038bcd92c69c7422ee651d0e83c9ee7e20d06cad15204138ce7e047aeee8f23f722cac5b27e55bb483587cf6fd2a74ce28021dd1880d5299dfad5124152927741dd77", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000040000000000"], 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) 1m24.798163019s ago: executing program 6 (id=1962): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005"], 0x40}}, 0x0) 1m24.651952021s ago: executing program 6 (id=1965): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x1, 0x6, 0xa, 0x7, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000880)={0x0, @adiantum}) r2 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x840, 0x100, 0x2e}, 0x18) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @remote, 0x47}, 0x1c) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="edf200fcfc95c54153ab2b7c67617313776fd2c44d4b2c68f8278d864be3c5bd73fa626bdb049c7dc034e5c89e1c41ac7f22b13c37d72001908b10b5ab29eef83eeeb90d221984a42508f434a6f82697135015c7d290198ba16dcc56b3b27753d99ada037fc66c51bcd9b545087952e5cfcc3ad2d7", 0x75}, {&(0x7f00000003c0)="ed6c5cc1cf59942fa3a6266a211042c17859ea32c6936887f73bfac8af1cc46ff6001f3a197b5c9cc26a47ee6fa39eb2d3c8fb3abdf4bb2203baa911f1b9e521d2d2854d104c8a1eafddf88b5a7ac1fb42a9080a8b7108b4c7a3fcd4e5a3548ce0aa6da999a21bf03dbbee99483719b592df008ed1528ed033ff59a627cf616f1ee1f99c5ea4ad5004a5130fb3c7dadf5554632dcd8eba9a455094ce61952bf1f87f0185893bb05282676fae4865481f004f5b6e0657f016a0dfc244b96f6cd951881c9480d34d3f6254a094cfa83d600064e3f569b83a86af", 0xd9}], 0x2}, 0x4010) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r3, 0x4, r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x952, &(0x7f0000000240), &(0x7f0000000840)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000000)=r10, 0x1) readv(r10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) io_uring_enter(r8, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0xa5a2, 0x982) 1m24.148313141s ago: executing program 6 (id=1971): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000159500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffde1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) fsetxattr(r6, &(0x7f0000000040)=@random={'osx.', '@\x00'}, &(0x7f0000000240)='GPL\x00', 0x4, 0x3) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0xffffffffffffffe5, 0x5, {0xf, 0xef, 0x6, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x1000004, 0x401, 0x6}, {0xb, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x4}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0x1000b, 0x2, 0x42}, {0x5, 0x4, 0x8, 0x81}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0xac}}, 0x40) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 1m23.101234346s ago: executing program 6 (id=1979): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000010c0)='./file0\x00', 0x800, &(0x7f0000001040)={[{@errors_remount}, {@bsdgroups}, {@oldalloc}, {@minixdf}, {@nojournal_checksum}, {@quota}, {@noauto_da_alloc}, {@grpquota}]}, 0x2, 0x46b, &(0x7f0000001100)="$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") mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="73656375726974792e71756f746188b6bf"], &(0x7f0000000300)=""/129, 0x81) 1m22.332083479s ago: executing program 0 (id=1990): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000840)="0b030600020002000200", 0xa, 0x0, &(0x7f0000000140)={0x11, 0x6558, r1, 0x1, 0x8, 0x6, @local}, 0x14) 1m22.053665051s ago: executing program 0 (id=1991): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus/file0\x00', 0x3000000, 0x0, 0x1, 0x0, &(0x7f0000000540)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m22.005187655s ago: executing program 6 (id=1994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1) 1m21.740116066s ago: executing program 6 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000005700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/75) 1m21.740022496s ago: executing program 34 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000005700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/75) 1m21.701778229s ago: executing program 0 (id=2002): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) 1m21.502763435s ago: executing program 0 (id=2005): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000010c0)='./file0\x00', 0x800, &(0x7f0000001040)={[{@errors_remount}, {@bsdgroups}, {@oldalloc}, {@minixdf}, {@nojournal_checksum}, {@quota}, {@noauto_da_alloc}, {@grpquota}]}, 0x2, 0x46b, &(0x7f0000001100)="$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") mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="73656375726974792e71756f746188b6bf"], &(0x7f0000000300)=""/129, 0x81) 1m20.504372556s ago: executing program 0 (id=2007): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r1], 0x38}, 0x0) 1m20.228201508s ago: executing program 0 (id=2010): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x7}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080)) 1m20.21239497s ago: executing program 35 (id=2010): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x7}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080)) 28.740166744s ago: executing program 1 (id=2647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 28.250400824s ago: executing program 1 (id=2648): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000038a700000700000006"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000007, 0x12, r1, 0x96562000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001240)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x9, r0}, 0x38) 27.939337169s ago: executing program 1 (id=2650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) 27.80555986s ago: executing program 1 (id=2652): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000008, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 27.18160576s ago: executing program 1 (id=2666): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$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") socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141", 0x2b, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 26.780222133s ago: executing program 1 (id=2681): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 26.772198414s ago: executing program 36 (id=2681): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 12.528373556s ago: executing program 9 (id=2924): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@random="49a188da23ac", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x8000, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x33, 0x8070}}}}}}, 0x0) 12.527965346s ago: executing program 9 (id=2926): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) flistxattr(r1, 0x0, 0x0) 12.48585102s ago: executing program 9 (id=2927): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x90, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) 12.407529696s ago: executing program 9 (id=2928): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 11.707616553s ago: executing program 9 (id=2937): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0xf0}], 0x1}, 0x0) 11.396142718s ago: executing program 9 (id=2946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) setitimer(0x2, 0x0, 0x0) 11.089138422s ago: executing program 37 (id=2946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) setitimer(0x2, 0x0, 0x0) 3.620697437s ago: executing program 7 (id=3072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.564497831s ago: executing program 7 (id=3074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r2}, 0x38) 3.508084016s ago: executing program 7 (id=3075): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080)={[{@nobh}, {@bsdgroups}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @remote, 0xe}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="08010000000000002900000002000000"], 0x108}}], 0x2, 0xc040) 3.380837846s ago: executing program 7 (id=3077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000159500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffde1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) fsetxattr(r6, &(0x7f0000000040)=@random={'osx.', '@\x00'}, &(0x7f0000000240)='GPL\x00', 0x4, 0x3) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xf, 0xef, 0x6, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x1000004, 0x401, 0x6}, {0xb, 0x7, 0x1008, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0x1000b, 0x2, 0x42}, {0x5, 0x4, 0x8, 0x81}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x9c}}, 0x40) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2.767635716s ago: executing program 3 (id=3086): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.732999779s ago: executing program 3 (id=3088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) get_robust_list(0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) 2.701588151s ago: executing program 3 (id=3090): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) getrlimit(0x0, &(0x7f0000000000)) 2.684657853s ago: executing program 3 (id=3091): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 2.641193846s ago: executing program 3 (id=3093): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x11, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) 2.622865288s ago: executing program 3 (id=3095): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e40)={0x34, &(0x7f0000000c00)={0x40, 0x15, 0x4, "00147800"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x14, 0x4, "5c51a667"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.46846826s ago: executing program 7 (id=3099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 2.371644058s ago: executing program 7 (id=3103): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xa, 0x2070, 0x1000, 0x9, 0x5, 0x8000, 0x0, 0x8, 0x7, 0xfffc, 0x8000, 0xf}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.879500238s ago: executing program 8 (id=3125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket(0xc1acd62b43d46ca9, 0x801, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xe, 0x3a, '.))', 0x3a, '&@', 0x3a, './file2'}, 0x2c) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) 994.668059ms ago: executing program 8 (id=3135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffff99) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 932.069884ms ago: executing program 8 (id=3136): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) getsockname$packet(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000cf5191e861fe30d2b7a24f877c76cfa289589ba8b96c5f3bde1d5d6b7771373ba50bc0e6599cd203cd7827615714cfc4d621e23ad396d977ff420a6d81600c0f0b77da85159259c5c56e248b7c8ddfad7c94a6fa7640676203a627be6e5aad9d1c5e3fcf062420098e3293e15b4cb1289b0cbbe72c20dd533954898ac4779c744e467ddbd6776b969376f3563ac3cc369aed6b400c5f9a90273dc29038bcd92c69c7422ee651d0e83c9ee7e20d06cad15204138ce7e047aeee8f23f722cac5b27e55bb483587cf6fd2a74ce28021dd1880d5299dfad5124152927741dd77", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400"/28], 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 600.158981ms ago: executing program 2 (id=3140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_getoverrun(0x0) 599.293121ms ago: executing program 2 (id=3141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 586.325442ms ago: executing program 2 (id=3142): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/205, 0xcd}, 0x9}], 0x1, 0x23, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x9, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 525.439367ms ago: executing program 2 (id=3143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x100}, 0x10}}, 0x0) 513.337248ms ago: executing program 2 (id=3144): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b01300000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 416.158297ms ago: executing program 2 (id=3145): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket(0xc1acd62b43d46ca9, 0x801, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xe, 0x3a, '.))', 0x3a, '&@', 0x3a, './file2'}, 0x2c) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) 336.779392ms ago: executing program 4 (id=3147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) 325.006334ms ago: executing program 4 (id=3148): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) personality(0x0) 248.137029ms ago: executing program 4 (id=3149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000ff000000000000000020c4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) 247.95919ms ago: executing program 4 (id=3150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 172.019146ms ago: executing program 4 (id=3151): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/29, 0x1d}, 0x2c}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffe, @mcast1}, 0x1c) 131.484819ms ago: executing program 8 (id=3152): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000240)='P', 0x0}, 0x20) 100.553472ms ago: executing program 8 (id=3153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 76.308604ms ago: executing program 4 (id=3154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r2) 0s ago: executing program 8 (id=3155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) time(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) kernel console output (not intermixed with test programs): b9 [ 194.697025][ T407] asix: probe of 4-1:0.0 failed with error -71 [ 194.706977][ T407] usb 4-1: USB disconnect, device number 8 [ 194.794091][ T5900] loop4: detected capacity change from 0 to 128 [ 194.816009][ T5900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 194.824213][ T5900] System zones: 1-3, 19-19, 35-36 [ 194.830272][ T5900] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 194.843395][ T5900] ext4 filesystem being mounted at /473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.005031][ T5905] loop4: detected capacity change from 0 to 512 [ 195.080656][ T5905] EXT4-fs (loop4): Ignoring removed bh option [ 195.202082][ T5905] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 195.229122][ T5905] EXT4-fs (loop4): 1 truncate cleaned up [ 195.247682][ T5905] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 195.301381][ T5915] loop3: detected capacity change from 0 to 1024 [ 195.404215][ T5915] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 195.418908][ T5915] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 195.430304][ T5915] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.447518][ T5915] EXT4-fs (loop3): invalid inodes per group: 0 [ 195.447518][ T5915] [ 195.533120][ T5915] incfs: Can't find or create .index dir in ./file0 [ 195.548277][ T5915] incfs: mount failed -14 [ 195.701706][ T5949] loop4: detected capacity change from 0 to 512 [ 195.768761][ T5963] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 195.794007][ T5949] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.2239: casefold flag without casefold feature [ 195.806965][ T5949] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2239: couldn't read orphan inode 15 (err -117) [ 196.009139][ T5949] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.033262][ T5968] loop1: detected capacity change from 0 to 1024 [ 196.056471][ T5968] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 196.068989][ T5968] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 196.076578][ T5968] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.079476][ T5970] loop4: detected capacity change from 0 to 1024 [ 196.089313][ T5968] EXT4-fs (loop1): invalid inodes per group: 0 [ 196.089313][ T5968] [ 196.106363][ T5970] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 196.114020][ T5970] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 196.121366][ T5970] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.133529][ T5970] EXT4-fs (loop4): invalid inodes per group: 0 [ 196.133529][ T5970] [ 196.173115][ T5968] incfs: Can't find or create .index dir in ./file0 [ 196.179781][ T5968] incfs: mount failed -14 [ 196.226418][ T5970] incfs: Can't find or create .index dir in ./file0 [ 196.238219][ T5970] incfs: mount failed -14 [ 196.689616][ T5994] loop7: detected capacity change from 0 to 1024 [ 196.745539][ T5994] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 196.776016][ T5994] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 196.817012][ T5994] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.838494][ T5991] loop3: detected capacity change from 0 to 40427 [ 196.848037][ T5994] EXT4-fs (loop7): invalid inodes per group: 0 [ 196.848037][ T5994] [ 196.903111][ T5991] F2FS-fs (loop3): invalid crc value [ 196.922160][ T5991] F2FS-fs (loop3): Found nat_bits in checkpoint [ 197.010881][ T6014] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 197.266456][ T5991] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 197.332906][ T282] attempt to access beyond end of device [ 197.332906][ T282] loop3: rw=2049, want=45104, limit=40427 [ 197.843750][ T6039] loop4: detected capacity change from 0 to 4096 [ 197.878671][ T6039] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.956730][ T6043] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 198.052247][ T407] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 198.217668][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 198.217685][ T30] audit: type=1400 audit(2000000394.663:3439): avc: denied { create } for pid=6050 comm="syz.7.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 198.259348][ T30] audit: type=1400 audit(2000000394.703:3440): avc: denied { setopt } for pid=6050 comm="syz.7.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 198.281711][ T30] audit: type=1400 audit(2000000394.733:3441): avc: denied { read write } for pid=6057 comm="syz.7.2280" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 198.305605][ T30] audit: type=1400 audit(2000000394.733:3442): avc: denied { open } for pid=6057 comm="syz.7.2280" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 198.344475][ T30] audit: type=1400 audit(2000000394.783:3443): avc: denied { mount } for pid=6057 comm="syz.7.2280" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 198.368709][ T685] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 198.376981][ T30] audit: type=1400 audit(2000000394.823:3444): avc: denied { unmount } for pid=5308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 198.405693][ T30] audit: type=1400 audit(2000000394.853:3445): avc: denied { ioctl } for pid=6061 comm="syz.7.2282" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 198.409712][ T6062] input: syz1 as /devices/virtual/input/input9 [ 198.499480][ T6064] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 198.602558][ T407] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.667815][ T30] audit: type=1400 audit(2000000395.043:3446): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.702195][ T30] audit: type=1400 audit(2000000395.043:3447): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.705839][ T407] usb 9-1: config 0 interface 0 has no altsetting 0 [ 198.732233][ T30] audit: type=1400 audit(2000000395.043:3448): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1846 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.757138][ T685] usb 5-1: Using ep0 maxpacket: 16 [ 198.762650][ T407] usb 9-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 198.782599][ T407] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.792483][ T407] usb 9-1: config 0 descriptor?? [ 198.882345][ T685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.893423][ T685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.903259][ T685] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.916172][ T685] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.925418][ T685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.934429][ T685] usb 5-1: config 0 descriptor?? [ 199.082187][ T307] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.264114][ T407] hid-generic 0003:28BD:0078.0010: hidraw0: USB HID v0.05 Device [HID 28bd:0078] on usb-dummy_hcd.8-1/input0 [ 199.342184][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 199.404209][ T685] HID 045e:07da: Invalid code 65791 type 1 [ 199.410306][ T685] HID 045e:07da: Invalid code 768 type 1 [ 199.416106][ T685] HID 045e:07da: Invalid code 769 type 1 [ 199.421751][ T685] HID 045e:07da: Invalid code 770 type 1 [ 199.427511][ T685] HID 045e:07da: Invalid code 771 type 1 [ 199.433202][ T685] HID 045e:07da: Invalid code 772 type 1 [ 199.438849][ T685] HID 045e:07da: Invalid code 773 type 1 [ 199.444529][ T685] HID 045e:07da: Invalid code 774 type 1 [ 199.450167][ T685] HID 045e:07da: Invalid code 775 type 1 [ 199.455912][ T685] HID 045e:07da: Invalid code 776 type 1 [ 199.462347][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.467696][ T58] usb 9-1: USB disconnect, device number 3 [ 199.478284][ T685] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0011/input/input10 [ 199.490538][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.500356][ T307] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 199.509627][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.518456][ T307] usb 4-1: config 0 descriptor?? [ 199.573386][ T685] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 199.606621][ T340] usb 5-1: USB disconnect, device number 5 [ 199.615100][ T6089] fido_id[6089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 199.682188][ T4304] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 200.035940][ T307] logitech 0003:046D:C295.0012: item fetching failed at offset 0/1 [ 200.044450][ T307] logitech 0003:046D:C295.0012: parse failed [ 200.050612][ T307] logitech: probe of 0003:046D:C295.0012 failed with error -22 [ 200.052419][ T4304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.070924][ T4304] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.158659][ T6098] loop8: detected capacity change from 0 to 16 [ 200.223352][ T6098] erofs: (device loop8): mounted with root inode @ nid 36. [ 200.386726][ T307] usb 4-1: USB disconnect, device number 9 [ 200.986174][ T6104] loop3: detected capacity change from 0 to 1024 [ 200.995562][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 201.006472][ T6104] EXT4-fs (loop3): Ignoring removed bh option [ 201.033988][ T6108] loop4: detected capacity change from 0 to 512 [ 201.042424][ T6104] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 201.142275][ T4304] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.151603][ T4304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.164928][ T4304] usb 2-1: Product: syz [ 201.169141][ T4304] usb 2-1: Manufacturer: syz [ 201.175073][ T4304] usb 2-1: SerialNumber: syz [ 201.212702][ T4304] cdc_mbim 2-1:1.0: skipping garbage [ 201.238759][ T6119] loop4: detected capacity change from 0 to 4096 [ 201.294679][ T6123] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 201.420566][ T6119] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 201.532237][ T4304] cdc_mbim 2-1:1.0: bind() failure [ 201.538350][ T4304] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 201.545437][ T4304] cdc_ncm 2-1:1.1: bind() failure [ 201.551793][ T4304] usb 2-1: USB disconnect, device number 7 [ 201.662279][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.675895][ T58] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.685883][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.695363][ T58] usb 8-1: config 0 descriptor?? [ 201.888466][ T6173] loop4: detected capacity change from 0 to 1024 [ 201.991232][ T6173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.007882][ T6183] loop1: detected capacity change from 0 to 1024 [ 202.073711][ T6183] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.848471][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 203.210861][ T58] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 203.230889][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 203.230906][ T30] audit: type=1404 audit(2000000399.673:3613): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 203.255114][ T58] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0013/input/input11 [ 203.296584][ T30] audit: type=1404 audit(2000000399.703:3614): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 203.316908][ T6200] syz.4.2336[6200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.316985][ T6200] syz.4.2336[6200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.333618][ T30] audit: type=1400 audit(2000000399.703:3615): avc: denied { prog_load } for pid=6191 comm="syz.8.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 203.368541][ T30] audit: type=1400 audit(2000000399.703:3616): avc: denied { bpf } for pid=6191 comm="syz.8.2334" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.398391][ T58] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 203.413526][ T30] audit: type=1400 audit(2000000399.703:3617): avc: denied { perfmon } for pid=6191 comm="syz.8.2334" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.458831][ T6209] loop1: detected capacity change from 0 to 1024 [ 203.486924][ T6209] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 203.503537][ T6215] loop8: detected capacity change from 0 to 1024 [ 203.510634][ T6209] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 203.512232][ T30] audit: type=1400 audit(2000000399.703:3618): avc: denied { create } for pid=6191 comm="syz.8.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.521081][ T6209] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.551137][ T6215] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 203.551137][ T6215] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 203.551137][ T6215] [ 203.560408][ T6209] EXT4-fs (loop1): invalid inodes per group: 0 [ 203.560408][ T6209] [ 203.596932][ T30] audit: type=1400 audit(2000000399.713:3619): avc: denied { prog_run } for pid=6191 comm="syz.8.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 203.602341][ T6215] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.626520][ T6219] loop3: detected capacity change from 0 to 1024 [ 203.629811][ T30] audit: type=1400 audit(2000000399.713:3620): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.637263][ T6215] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,stripe=0x0000000000000003,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,nouser_xattr,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 203.661288][ T30] audit: type=1400 audit(2000000399.713:3621): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.710656][ T30] audit: type=1400 audit(2000000399.713:3622): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.746226][ T6215] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3876: comm syz.8.2342: Allocating blocks 497-513 which overlap fs metadata [ 203.762872][ T6219] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.764294][ T6215] EXT4-fs (loop8): pa ffff888111945d20: logic 128, phys. 385, len 8 [ 203.781438][ T6215] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 203.815852][ T6209] incfs: Can't find or create .index dir in ./file0 [ 203.837601][ T6209] incfs: mount failed -14 [ 203.887230][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 204.268853][ T340] usb 8-1: USB disconnect, device number 2 [ 204.355190][ T6243] loop4: detected capacity change from 0 to 1024 [ 204.373518][ T6243] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.045674][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'. [ 205.093668][ T6244] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 205.719550][ T6287] xt_hashlimit: size too large, truncated to 1048576 [ 205.756113][ T6254] loop7: detected capacity change from 0 to 40427 [ 205.777913][ T6292] loop4: detected capacity change from 0 to 2048 [ 205.811738][ T6254] F2FS-fs (loop7): fault_injection options not supported [ 205.821733][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 205.849544][ T6254] F2FS-fs (loop7): invalid crc value [ 205.871788][ T6292] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.903030][ T6254] F2FS-fs (loop7): Found nat_bits in checkpoint [ 205.970181][ T6254] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 205.996881][ T6254] syz.7.2355[6254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.996970][ T6254] syz.7.2355[6254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.017766][ T5308] attempt to access beyond end of device [ 206.017766][ T5308] loop7: rw=2049, want=45104, limit=40427 [ 206.085349][ T6312] loop1: detected capacity change from 0 to 128 [ 206.093232][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.142198][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 206.208208][ T6312] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.252354][ T6312] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.254685][ T6314] loop4: detected capacity change from 0 to 32768 [ 206.297754][ T6314] loop4: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 206.304036][ T6324] loop7: detected capacity change from 0 to 512 [ 206.410390][ T6324] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2383: invalid indirect mapped block 10 (level 1) [ 206.425094][ T6324] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2383: invalid indirect mapped block 8 (level 1) [ 206.438985][ T6324] EXT4-fs (loop7): 1 truncate cleaned up [ 206.444850][ T6324] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 206.471004][ T6328] loop1: detected capacity change from 0 to 1024 [ 206.512437][ T6328] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.586359][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.621204][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.642738][ T42] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 206.665452][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.715765][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 206.886803][ T42] usb 4-1: config 0 descriptor?? [ 207.032856][ T6352] loop7: detected capacity change from 0 to 1024 [ 207.056615][ T6356] loop8: detected capacity change from 0 to 1024 [ 207.074369][ T6352] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.085793][ T6352] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.096786][ T6356] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.115822][ T6352] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2393: bg 0: block 393: padding at end of block bitmap is not set [ 207.131074][ T6352] incfs: Can't find or create .index dir in ./file0 [ 207.138380][ T6352] incfs: mount failed -117 [ 207.139495][ T6356] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 207.189223][ T6356] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 207.205257][ T6356] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 207.218356][ T6356] EXT4-fs (loop8): This should not happen!! Data will be lost [ 207.218356][ T6356] [ 207.229003][ T6356] EXT4-fs (loop8): Total free blocks count 0 [ 207.235182][ T6356] EXT4-fs (loop8): Free/Dirty block details [ 207.241190][ T6356] EXT4-fs (loop8): free_blocks=20480 [ 207.246810][ T6356] EXT4-fs (loop8): dirty_blocks=32 [ 207.251988][ T6356] EXT4-fs (loop8): Block reservation details [ 207.258753][ T6356] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 207.265119][ T6361] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 207.278995][ T6361] EXT4-fs (loop8): This should not happen!! Data will be lost [ 207.278995][ T6361] [ 207.350364][ T6369] input: syz0 as /devices/virtual/input/input12 [ 207.421428][ T6377] loop7: detected capacity change from 0 to 1024 [ 207.429712][ T42] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 207.466968][ T4426] udevd[4426]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 207.478216][ T336] udevd[336]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 207.478222][ T4427] udevd[4427]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 207.500026][ T401] udevd[401]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 207.510862][ T402] udevd[402]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 207.510899][ T734] udevd[734]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 207.522054][ T334] udevd[334]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 207.544451][ T6388] loop1: detected capacity change from 0 to 1024 [ 207.572528][ T6377] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.596612][ T6385] udevd[6385]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory [ 207.609194][ T6387] udevd[6387]: inotify_add_watch(7, /dev/loop4p12, 10) failed: No such file or directory [ 207.647460][ T6384] udevd[6384]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 207.692570][ T6388] EXT4-fs (loop1): Ignoring removed orlov option [ 207.882820][ T42] hid-led: probe of 0003:0FC5:B080.0014 failed with error -71 [ 207.991052][ T42] usb 4-1: USB disconnect, device number 10 [ 208.029401][ T6388] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 208.170510][ T6379] loop4: detected capacity change from 0 to 40427 [ 208.215908][ T6375] loop8: detected capacity change from 0 to 40427 [ 208.220936][ T6398] loop1: detected capacity change from 0 to 512 [ 208.241614][ T6379] F2FS-fs (loop4): Found nat_bits in checkpoint [ 208.280575][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 208.280590][ T30] audit: type=1326 audit(2000000404.693:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.7.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 208.310514][ T30] audit: type=1326 audit(2000000404.693:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.7.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 208.334110][ T6379] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 208.353026][ T6375] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 208.361641][ T6375] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 208.373052][ T6398] EXT4-fs (loop1): 1 truncate cleaned up [ 208.378764][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.399345][ T30] audit: type=1400 audit(2000000404.843:3836): avc: denied { ioctl } for pid=6397 comm="syz.1.2406" path="/521/file1/file0/file0" dev="loop1" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.425517][ T6398] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2406: invalid indirect mapped block 234881024 (level 0) [ 208.442726][ T6375] F2FS-fs (loop8): invalid crc value [ 208.455348][ T6405] loop3: detected capacity change from 0 to 1024 [ 208.473924][ T6408] tap0: tun_chr_ioctl cmd 1074025675 [ 208.479614][ T6408] tap0: persist disabled [ 208.485368][ T6375] F2FS-fs (loop8): Found nat_bits in checkpoint [ 208.494331][ T6379] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 208.529573][ T6405] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 208.544769][ T6405] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 208.556513][ T6405] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.558664][ T285] attempt to access beyond end of device [ 208.558664][ T285] loop4: rw=2049, want=45104, limit=40427 [ 208.575503][ T6405] EXT4-fs (loop3): invalid inodes per group: 0 [ 208.575503][ T6405] [ 208.603484][ T6414] loop1: detected capacity change from 0 to 1024 [ 208.620270][ T6375] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 208.633555][ T6375] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 208.711806][ T6414] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.734400][ T30] audit: type=1326 audit(2000000405.183:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea7b4be9 code=0x7ffc0000 [ 208.783329][ T30] audit: type=1326 audit(2000000405.183:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea7b4be9 code=0x7ffc0000 [ 208.807256][ T30] audit: type=1326 audit(2000000405.203:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01ea7b4be9 code=0x7ffc0000 [ 208.831249][ T30] audit: type=1326 audit(2000000405.203:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea7b4be9 code=0x7ffc0000 [ 208.904499][ T30] audit: type=1326 audit(2000000405.203:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea7b4be9 code=0x7ffc0000 [ 209.036334][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 209.312435][ T30] audit: type=1326 audit(2000000405.203:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01ea7b4be9 code=0x7ffc0000 [ 209.335951][ T30] audit: type=1326 audit(2000000405.203:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea7b4be9 code=0x7ffc0000 [ 209.399573][ T6434] input: syz0 as /devices/virtual/input/input13 [ 209.408979][ T6435] loop4: detected capacity change from 0 to 512 [ 209.415367][ T6434] input: failed to attach handler leds to device input13, error: -6 [ 209.712764][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 209.765022][ T6464] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 210.020117][ T6468] loop8: detected capacity change from 0 to 1024 [ 210.072224][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 210.082593][ T6468] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.276967][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2430'. [ 210.402339][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.551280][ T6479] loop1: detected capacity change from 0 to 1024 [ 210.554605][ T6480] loop7: detected capacity change from 0 to 2048 [ 210.572246][ T896] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 210.581418][ T6479] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 210.589493][ T6479] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 210.592662][ T6387] loop7: p1 < > p4 [ 210.597131][ T6479] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.601493][ T6387] loop7: p4 size 8388608 extends beyond EOD, [ 210.612959][ T6479] EXT4-fs (loop1): invalid inodes per group: 0 [ 210.612959][ T6479] [ 210.616378][ T6387] truncated [ 210.632555][ T6480] loop7: p1 < > p4 [ 210.636874][ T6480] loop7: p4 size 8388608 extends beyond EOD, truncated [ 210.642302][ T42] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 191, changing to 11 [ 210.657823][ T42] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.667704][ T42] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 64 [ 210.677641][ T42] usb 4-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.690576][ T42] usb 4-1: config 1 interface 0 has no altsetting 0 [ 210.693645][ T101] loop7: p1 < > p4 [ 210.704379][ T101] loop7: p4 size 8388608 extends beyond EOD, truncated [ 210.712878][ T6479] incfs: Can't find or create .index dir in ./file0 [ 210.719583][ T6479] incfs: mount failed -14 [ 210.762697][ T6484] loop7: detected capacity change from 0 to 512 [ 210.774864][ T6486] loop1: detected capacity change from 0 to 1024 [ 210.810246][ T6484] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.821599][ T6484] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.837037][ T6486] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.882308][ T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.891889][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.901152][ T42] usb 4-1: Product: syz [ 210.905855][ T42] usb 4-1: Manufacturer: syz [ 210.952317][ T896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.963725][ T896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.982957][ T896] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 210.994634][ T896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.006361][ T896] usb 5-1: config 0 descriptor?? [ 211.026695][ T42] usb 4-1: SerialNumber: syz [ 211.052251][ T6431] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.059374][ T6431] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.562271][ T42] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 211.757375][ T42] usb 4-1: USB disconnect, device number 11 [ 211.773189][ T896] arvo 0003:1E7D:30D4.0015: report_id 3574839499 is invalid [ 211.780510][ T896] arvo 0003:1E7D:30D4.0015: item 0 4 1 8 parsing failed [ 211.816101][ T896] arvo 0003:1E7D:30D4.0015: parse failed [ 211.833106][ T896] arvo: probe of 0003:1E7D:30D4.0015 failed with error -22 [ 211.846045][ T6507] device veth1_macvtap left promiscuous mode [ 211.852314][ T6507] device macsec0 entered promiscuous mode [ 212.037042][ T6520] loop1: detected capacity change from 0 to 16 [ 212.076744][ T6099] usb 5-1: USB disconnect, device number 6 [ 212.095493][ T6520] erofs: (device loop1): mounted with root inode @ nid 36. [ 212.134513][ T1709] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 212.602490][ T1709] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.690804][ T1709] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 213.046829][ T6549] loop3: detected capacity change from 0 to 1024 [ 213.053686][ T1709] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 213.062808][ T1709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 213.070890][ T1709] usb 8-1: Product: syz [ 213.075098][ T1709] usb 8-1: Manufacturer: syz [ 213.079716][ T1709] usb 8-1: SerialNumber: syz [ 213.102428][ T6549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.306675][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 213.306739][ T30] audit: type=1400 audit(2000000409.603:3947): avc: denied { connect } for pid=6539 comm="syz.4.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.338085][ T30] audit: type=1326 audit(2000000409.623:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8502e17be9 code=0x7ffc0000 [ 213.362898][ T30] audit: type=1326 audit(2000000409.623:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8502e17be9 code=0x7ffc0000 [ 213.389181][ T30] audit: type=1326 audit(2000000409.623:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8502e17be9 code=0x7ffc0000 [ 213.428746][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 213.580949][ T30] audit: type=1326 audit(2000000409.623:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8502e17be9 code=0x7ffc0000 [ 213.606472][ T58] usb 8-1: USB disconnect, device number 3 [ 213.622315][ T30] audit: type=1326 audit(2000000409.623:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8502e17be9 code=0x7ffc0000 [ 213.646124][ T30] audit: type=1326 audit(2000000409.623:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8502e17be9 code=0x7ffc0000 [ 213.673780][ T30] audit: type=1326 audit(2000000409.623:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8502e17be9 code=0x7ffc0000 [ 213.697771][ T30] audit: type=1326 audit(2000000409.623:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8502e17be9 code=0x7ffc0000 [ 213.721622][ T30] audit: type=1326 audit(2000000409.623:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8502e17be9 code=0x7ffc0000 [ 213.940171][ T6577] loop8: detected capacity change from 0 to 1024 [ 213.969624][ T6581] loop3: detected capacity change from 0 to 1024 [ 213.981925][ T6577] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.006675][ T6581] EXT4-fs (loop3): Ignoring removed nobh option [ 214.015269][ T6581] EXT4-fs (loop3): Ignoring removed bh option [ 214.035561][ T6581] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,sysvgroups,nojournal_checksum,lazytime,jqfmt=vfsv0,grpquota,nobh,jqfmt=vfsold,bh,usrquota,,errors=continue. Quota mode: writeback. [ 214.080026][ T6581] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.2473: Allocating blocks 497-513 which overlap fs metadata [ 214.095332][ T6580] EXT4-fs (loop3): pa ffff8881119452a0: logic 16, phys. 241, len 17 [ 214.103402][ T6580] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 214.204282][ T6602] loop8: detected capacity change from 0 to 1024 [ 214.494719][ T6602] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.709514][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2481'. [ 215.124901][ T6629] loop4: detected capacity change from 0 to 16 [ 215.225362][ T6629] erofs: (device loop4): mounted with root inode @ nid 36. [ 215.876011][ T6637] xt_hashlimit: size too large, truncated to 1048576 [ 216.055660][ T896] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.432868][ T6656] loop4: detected capacity change from 0 to 1024 [ 216.623596][ T6656] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.944791][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'. [ 217.321735][ T6677] loop2: detected capacity change from 0 to 7 [ 217.339324][ T6681] loop1: detected capacity change from 0 to 1024 [ 217.353817][ T6681] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 217.383690][ T6681] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 217.397218][ T6681] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.409405][ T896] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.420490][ T6681] EXT4-fs (loop1): invalid inodes per group: 0 [ 217.420490][ T6681] [ 217.428880][ T896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.435601][ T896] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 217.445073][ T896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.465034][ T896] usb 4-1: config 0 descriptor?? [ 217.476769][ T6693] device veth0 entered promiscuous mode [ 217.483178][ T6693] device veth0 left promiscuous mode [ 217.576164][ T6698] loop8: detected capacity change from 0 to 16 [ 217.629113][ T6698] erofs: (device loop8): mounted with root inode @ nid 36. [ 217.887486][ T6681] incfs: Backing dir is not set, filesystem can't be mounted. [ 218.030543][ T6681] incfs: mount failed -2 [ 218.396644][ T6706] loop7: detected capacity change from 0 to 1024 [ 218.423427][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 218.423443][ T30] audit: type=1400 audit(2000000414.873:4074): avc: denied { watch watch_reads } for pid=6707 comm="syz.3.2523" path="/426/file1" dev="tmpfs" ino=2412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 218.516060][ T6719] xt_hashlimit: size too large, truncated to 1048576 [ 218.603145][ T6706] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.622292][ T896] usbhid 4-1:0.0: can't add hid device: -71 [ 218.630150][ T30] audit: type=1326 audit(2000000415.073:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 218.661320][ T896] usbhid: probe of 4-1:0.0 failed with error -71 [ 218.673446][ T6723] loop1: detected capacity change from 0 to 512 [ 218.705819][ T896] usb 4-1: USB disconnect, device number 12 [ 218.716134][ T30] audit: type=1326 audit(2000000415.073:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 218.739687][ T30] audit: type=1326 audit(2000000415.073:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 218.787443][ T30] audit: type=1326 audit(2000000415.073:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 218.839429][ T6723] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.918205][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2520'. [ 219.065499][ T30] audit: type=1326 audit(2000000415.073:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 219.103132][ T6723] EXT4-fs (loop1): 1 truncate cleaned up [ 219.109022][ T6723] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,norecovery,nodiscard,grpid,,errors=continue. Quota mode: none. [ 219.139126][ T30] audit: type=1326 audit(2000000415.073:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 219.209417][ T6742] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 219.251172][ T30] audit: type=1326 audit(2000000415.073:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 219.359925][ T30] audit: type=1326 audit(2000000415.073:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 219.398372][ T30] audit: type=1326 audit(2000000415.073:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 219.437745][ T6754] loop4: detected capacity change from 0 to 512 [ 219.710074][ T6754] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 219.761907][ T6754] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.906295][ T6774] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2546'. [ 220.103102][ T6752] loop3: detected capacity change from 0 to 40427 [ 220.114488][ T6803] loop4: detected capacity change from 0 to 512 [ 220.114942][ T6752] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 220.122505][ T6798] loop7: detected capacity change from 0 to 4096 [ 220.133869][ T6752] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 220.188466][ T6803] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 220.204788][ T6798] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.226089][ T6752] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 220.244156][ T6803] EXT4-fs (loop4): Remounting filesystem read-only [ 220.250834][ T6803] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2561: invalid indirect mapped block 4278190080 (level 0) [ 220.266314][ T6803] EXT4-fs (loop4): Remounting filesystem read-only [ 220.272872][ T6803] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2561: invalid indirect mapped block 1 (level 1) [ 220.286449][ T6803] EXT4-fs (loop4): Remounting filesystem read-only [ 220.293367][ T6803] EXT4-fs (loop4): 1 truncate cleaned up [ 220.299134][ T6803] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x00000000000000cb,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 220.364814][ T6803] EXT4-fs (loop4): shut down requested (2) [ 220.385267][ T6752] F2FS-fs (loop3): Inconsistent i_blocks, ino:3, iblocks:0, sectors:8 [ 220.448432][ T6822] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 220.758506][ T6830] loop1: detected capacity change from 0 to 1024 [ 220.885887][ T6830] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.100280][ T6848] loop8: detected capacity change from 0 to 128 [ 222.210558][ T6848] FAT-fs (loop8): Directory bread(block 162) failed [ 222.233008][ T6848] FAT-fs (loop8): Directory bread(block 163) failed [ 222.239827][ T6848] FAT-fs (loop8): Directory bread(block 164) failed [ 222.246622][ T6848] FAT-fs (loop8): Directory bread(block 165) failed [ 222.287680][ T6848] FAT-fs (loop8): Directory bread(block 166) failed [ 222.361426][ T6848] FAT-fs (loop8): Directory bread(block 167) failed [ 222.493030][ T6848] FAT-fs (loop8): Directory bread(block 168) failed [ 222.500028][ T6848] FAT-fs (loop8): Directory bread(block 169) failed [ 222.513092][ T6848] FAT-fs (loop8): Directory bread(block 162) failed [ 222.519855][ T6848] FAT-fs (loop8): Directory bread(block 163) failed [ 222.526880][ T6848] attempt to access beyond end of device [ 222.526880][ T6848] loop8: rw=3, want=232, limit=128 [ 222.539537][ T6848] attempt to access beyond end of device [ 222.539537][ T6848] loop8: rw=2051, want=234, limit=128 [ 222.614289][ T6878] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 222.931273][ T6892] loop8: detected capacity change from 0 to 1024 [ 222.963255][ T6892] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.091236][ T6899] loop3: detected capacity change from 0 to 512 [ 223.116141][ T6899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.184352][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2595'. [ 223.483185][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 223.483210][ T30] audit: type=1400 audit(2000000419.933:4233): avc: denied { write } for pid=6909 comm="syz.4.2602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 223.501163][ T6907] loop7: detected capacity change from 0 to 8192 [ 223.511551][ T6899] EXT4-fs (loop3): 1 truncate cleaned up [ 223.521598][ T6899] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 223.564655][ T30] audit: type=1400 audit(2000000420.013:4234): avc: denied { read write } for pid=6914 comm="syz.1.2603" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 223.590124][ T30] audit: type=1400 audit(2000000420.013:4235): avc: denied { open } for pid=6914 comm="syz.1.2603" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 223.613622][ T30] audit: type=1400 audit(2000000420.013:4236): avc: denied { mount } for pid=6914 comm="syz.1.2603" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 223.636854][ T30] audit: type=1400 audit(2000000420.083:4237): avc: denied { wake_alarm } for pid=6913 comm="syz.4.2604" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 223.840532][ T30] audit: type=1400 audit(2000000420.283:4238): avc: denied { write } for pid=6932 comm="syz.8.2609" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.987763][ T6931] loop4: detected capacity change from 0 to 1024 [ 224.137797][ T6931] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.146530][ T6941] loop8: detected capacity change from 0 to 512 [ 224.155178][ T30] audit: type=1326 audit(2000000420.603:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55ffebbe9 code=0x7ffc0000 [ 224.179107][ T30] audit: type=1326 audit(2000000420.603:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55ffebbe9 code=0x7ffc0000 [ 224.203506][ T6941] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.256604][ T30] audit: type=1326 audit(2000000420.633:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff55ffebbe9 code=0x7ffc0000 [ 224.291633][ T30] audit: type=1326 audit(2000000420.633:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55ffebbe9 code=0x7ffc0000 [ 225.110329][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 225.140017][ T6949] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 225.395799][ T6952] af_packet: tpacket_rcv: packet too big, clamped from 114 to 4294967272. macoff=96 [ 225.613621][ T6968] loop3: detected capacity change from 0 to 16 [ 225.955592][ T6968] erofs: (device loop3): mounted with root inode @ nid 36. [ 226.487707][ T6980] loop8: detected capacity change from 0 to 1024 [ 226.501318][ T6981] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 226.544634][ T6980] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 226.566000][ T6983] loop1: detected capacity change from 0 to 1024 [ 226.587327][ T6986] loop4: detected capacity change from 0 to 256 [ 226.594984][ T6980] EXT4-fs (loop8): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 226.652478][ T6986] exfat: Deprecated parameter 'utf8' [ 226.678704][ T6986] exfat: Deprecated parameter 'namecase' [ 226.686589][ T6980] EXT4-fs (loop8): Project quota feature not enabled. Cannot enable project quota enforcement. [ 226.703507][ T6983] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.727523][ T6986] exfat: Deprecated parameter 'namecase' [ 226.733298][ T6986] exfat: Deprecated parameter 'utf8' [ 226.773514][ T6986] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 226.823632][ T6999] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2635'. [ 226.906215][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 227.223424][ T7004] loop4: detected capacity change from 0 to 128 [ 227.235540][ T7006] loop3: detected capacity change from 0 to 256 [ 227.270012][ T7004] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.280825][ T7004] ext4 filesystem being mounted at /567/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.364362][ T7012] pimreg: tun_chr_ioctl cmd 1074812117 [ 227.371216][ T7012] pimreg: tun_chr_ioctl cmd 1074025678 [ 227.379300][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'. [ 227.387410][ T7002] loop8: detected capacity change from 0 to 40427 [ 227.388314][ T7012] pimreg: group set to 0 [ 227.405252][ T7002] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 227.416953][ T7002] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 227.426165][ T7002] F2FS-fs (loop8): invalid crc value [ 227.450983][ T7002] F2FS-fs (loop8): Found nat_bits in checkpoint [ 227.518543][ T7002] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 227.526244][ T7002] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 227.681078][ T7035] loop3: detected capacity change from 0 to 16 [ 227.794361][ T7035] erofs: (device loop3): mounted with root inode @ nid 36. [ 228.511485][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 228.511502][ T30] audit: type=1400 audit(2000000424.953:4303): avc: denied { mount } for pid=7040 comm="syz.1.2650" name="/" dev="ramfs" ino=40632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 228.691926][ T7051] loop8: detected capacity change from 0 to 1024 [ 228.723238][ T30] audit: type=1400 audit(2000000425.173:4304): avc: denied { ioctl } for pid=7052 comm="syz.7.2655" path="socket:[40671]" dev="sockfs" ino=40671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.803501][ T7051] EXT4-fs (loop8): Ignoring removed orlov option [ 228.827687][ T7048] loop1: detected capacity change from 0 to 40427 [ 228.830606][ T30] audit: type=1400 audit(2000000425.203:4305): avc: denied { write } for pid=7052 comm="syz.7.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.834536][ T4304] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 228.864957][ T7051] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 228.896447][ T30] audit: type=1400 audit(2000000425.343:4306): avc: denied { bind } for pid=7064 comm="syz.7.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.924910][ T7063] loop3: detected capacity change from 0 to 128 [ 228.927311][ T30] audit: type=1400 audit(2000000425.363:4307): avc: denied { name_bind } for pid=7064 comm="syz.7.2660" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 228.935881][ T7048] F2FS-fs (loop1): fault_injection options not supported [ 228.964410][ T7048] F2FS-fs (loop1): invalid crc value [ 228.971574][ T30] audit: type=1400 audit(2000000425.363:4308): avc: denied { node_bind } for pid=7064 comm="syz.7.2660" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 228.992876][ T30] audit: type=1400 audit(2000000425.363:4309): avc: denied { setopt } for pid=7064 comm="syz.7.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.997531][ T7048] F2FS-fs (loop1): Found nat_bits in checkpoint [ 229.040707][ T7063] FAT-fs (loop3): Directory bread(block 162) failed [ 229.052227][ T7063] FAT-fs (loop3): Directory bread(block 163) failed [ 229.071483][ T7063] FAT-fs (loop3): Directory bread(block 164) failed [ 229.079455][ T7063] FAT-fs (loop3): Directory bread(block 165) failed [ 229.088110][ T7048] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 229.096171][ T7063] FAT-fs (loop3): Directory bread(block 166) failed [ 229.102895][ T7063] FAT-fs (loop3): Directory bread(block 167) failed [ 229.109662][ T7063] FAT-fs (loop3): Directory bread(block 168) failed [ 229.117180][ T4304] usb 5-1: Using ep0 maxpacket: 16 [ 229.125470][ T7074] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 229.132570][ T7063] FAT-fs (loop3): Directory bread(block 169) failed [ 229.146293][ T7048] overlayfs: invalid origin (0000) [ 229.147457][ T30] audit: type=1400 audit(2000000425.593:4310): avc: denied { mounton } for pid=7045 comm="syz.1.2652" path="/574/file0/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 229.201190][ T281] attempt to access beyond end of device [ 229.201190][ T281] loop1: rw=524288, want=45072, limit=40427 [ 229.223001][ T7063] FAT-fs (loop3): Directory bread(block 162) failed [ 229.231286][ T281] attempt to access beyond end of device [ 229.231286][ T281] loop1: rw=0, want=45072, limit=40427 [ 229.242632][ T30] audit: type=1326 audit(2000000425.663:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.7.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 229.252338][ T7063] FAT-fs (loop3): Directory bread(block 163) failed [ 229.270243][ T30] audit: type=1326 audit(2000000425.663:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.7.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 229.296854][ T7063] attempt to access beyond end of device [ 229.296854][ T7063] loop3: rw=3, want=232, limit=128 [ 229.302199][ T4304] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 229.321433][ T4304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.325369][ T2964] attempt to access beyond end of device [ 229.325369][ T2964] loop1: rw=2049, want=40984, limit=40427 [ 229.342928][ T4304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.344128][ T7063] attempt to access beyond end of device [ 229.344128][ T7063] loop3: rw=2051, want=234, limit=128 [ 229.502357][ T4304] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.521998][ T4304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.540446][ T4304] usb 5-1: Product: syz [ 229.546408][ T4304] usb 5-1: Manufacturer: syz [ 229.556410][ T4304] usb 5-1: SerialNumber: syz [ 229.575390][ T7106] loop8: detected capacity change from 0 to 4096 [ 229.596544][ T7106] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.624213][ T7106] EXT4-fs (loop8): shut down requested (2) [ 229.635015][ T7106] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 229.681203][ T7106] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 229.781703][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.789180][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.801393][ T7116] device bridge_slave_0 entered promiscuous mode [ 229.810496][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.817867][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.832739][ T7116] device bridge_slave_1 entered promiscuous mode [ 229.860158][ T7132] netem: change failed [ 229.962041][ T7137] loop8: detected capacity change from 0 to 16 [ 230.024046][ T7137] erofs: (device loop8): mounted with root inode @ nid 36. [ 230.191593][ T673] device bridge_slave_1 left promiscuous mode [ 230.207326][ T673] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.288103][ T673] device bridge_slave_0 left promiscuous mode [ 230.393654][ T673] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.536604][ T673] device veth1_macvtap left promiscuous mode [ 230.583890][ T673] device veth0_vlan left promiscuous mode [ 231.113995][ T4304] usb 5-1: 0:2 : does not exist [ 231.227371][ T7154] loop7: detected capacity change from 0 to 128 [ 231.265311][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.273773][ T7154] FAT-fs (loop7): Directory bread(block 162) failed [ 231.286454][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.287762][ T7154] FAT-fs (loop7): Directory bread(block 163) failed [ 231.332990][ T7154] FAT-fs (loop7): Directory bread(block 164) failed [ 231.363640][ T7168] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 231.402319][ T7154] FAT-fs (loop7): Directory bread(block 165) failed [ 231.453650][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.498685][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.515889][ T7154] FAT-fs (loop7): Directory bread(block 166) failed [ 231.556379][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.563466][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.570839][ T7154] FAT-fs (loop7): Directory bread(block 167) failed [ 231.577857][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.585418][ T7154] FAT-fs (loop7): Directory bread(block 168) failed [ 231.592931][ T7154] FAT-fs (loop7): Directory bread(block 169) failed [ 231.608065][ T7154] FAT-fs (loop7): Directory bread(block 162) failed [ 231.613732][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.622846][ T7154] FAT-fs (loop7): Directory bread(block 163) failed [ 231.623501][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.630380][ T7154] attempt to access beyond end of device [ 231.630380][ T7154] loop7: rw=3, want=232, limit=128 [ 231.639835][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.655401][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.662817][ T7154] attempt to access beyond end of device [ 231.662817][ T7154] loop7: rw=2051, want=234, limit=128 [ 231.689476][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.701234][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.714895][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.723402][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.746034][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.755615][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.777884][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.807618][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.826942][ T7116] device veth0_vlan entered promiscuous mode [ 231.833560][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.861195][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.867780][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 231.890468][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.908390][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.924039][ T7116] device veth1_macvtap entered promiscuous mode [ 231.946898][ T4304] usb 5-1: USB disconnect, device number 7 [ 231.969040][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.980371][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.036157][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.068260][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.154041][ T7214] loop9: detected capacity change from 0 to 128 [ 232.223516][ T7214] FAT-fs (loop9): Directory bread(block 162) failed [ 232.230342][ T7214] FAT-fs (loop9): Directory bread(block 163) failed [ 232.251763][ T7214] FAT-fs (loop9): Directory bread(block 164) failed [ 232.267446][ T7214] FAT-fs (loop9): Directory bread(block 165) failed [ 232.276343][ T7198] loop4: detected capacity change from 0 to 40427 [ 232.282527][ T7214] FAT-fs (loop9): Directory bread(block 166) failed [ 232.292388][ T7214] FAT-fs (loop9): Directory bread(block 167) failed [ 232.301592][ T7214] FAT-fs (loop9): Directory bread(block 168) failed [ 232.309316][ T7198] F2FS-fs (loop4): invalid crc value [ 232.309352][ T7214] FAT-fs (loop9): Directory bread(block 169) failed [ 232.332726][ T7198] F2FS-fs (loop4): Found nat_bits in checkpoint [ 232.340818][ T7225] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2725'. [ 232.359307][ T7214] FAT-fs (loop9): Directory bread(block 162) failed [ 232.376416][ T7214] FAT-fs (loop9): Directory bread(block 163) failed [ 232.392515][ T7214] attempt to access beyond end of device [ 232.392515][ T7214] loop9: rw=3, want=232, limit=128 [ 232.412580][ T7214] attempt to access beyond end of device [ 232.412580][ T7214] loop9: rw=2051, want=234, limit=128 [ 232.443761][ T7198] F2FS-fs (loop4): Start checkpoint disabled! [ 232.452952][ T7198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 232.478635][ T7236] loop8: detected capacity change from 0 to 512 [ 232.506448][ T7236] EXT4-fs (loop8): Ignoring removed orlov option [ 232.513668][ T7236] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 232.524098][ T7236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 232.532984][ T7236] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2228: inode #15: comm syz.8.2734: corrupted in-inode xattr [ 232.545872][ T7236] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2734: couldn't read orphan inode 15 (err -117) [ 232.561310][ T7236] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 232.683164][ T7255] loop8: detected capacity change from 0 to 128 [ 232.744542][ T7255] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.745997][ T1709] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.763427][ T7255] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.798431][ T7255] EXT4-fs warning (device loop8): verify_group_input:147: Cannot add at group 6 (only 1 groups) [ 232.876571][ T7260] loop4: detected capacity change from 0 to 16 [ 232.935308][ T7260] erofs: (device loop4): mounted with root inode @ nid 36. [ 233.162619][ T1709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.194075][ T1709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.285795][ T1709] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 233.331577][ T1709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.447012][ T1709] usb 4-1: config 0 descriptor?? [ 233.725737][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 233.725753][ T30] audit: type=1326 audit(2000000430.173:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 233.812823][ T30] audit: type=1326 audit(2000000430.213:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 233.836583][ T30] audit: type=1326 audit(2000000430.213:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 233.861663][ T30] audit: type=1326 audit(2000000430.213:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 233.885826][ T30] audit: type=1326 audit(2000000430.213:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5918abe9 code=0x7ffc0000 [ 233.916742][ T7274] loop7: detected capacity change from 0 to 2048 [ 233.923345][ T7278] loop4: detected capacity change from 0 to 256 [ 233.947863][ T7280] loop8: detected capacity change from 0 to 128 [ 233.973859][ T7274] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 233.991535][ T7274] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 233.991909][ T7266] loop9: detected capacity change from 0 to 40427 [ 234.007549][ T1709] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 234.013788][ T7280] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.032718][ T7274] overlayfs: failed to set xattr on upper [ 234.035586][ T1709] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 234.045444][ T7280] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.054875][ T30] audit: type=1400 audit(2000000430.493:4385): avc: denied { write } for pid=7273 comm="syz.7.2750" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.064437][ T7274] EXT4-fs (loop7): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 5 with error 28 [ 234.080725][ T30] audit: type=1400 audit(2000000430.513:4386): avc: denied { remove_name } for pid=7273 comm="syz.7.2750" name="file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.100930][ T7266] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 234.116318][ T30] audit: type=1400 audit(2000000430.513:4387): avc: denied { rename } for pid=7273 comm="syz.7.2750" name="file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.146071][ T30] audit: type=1400 audit(2000000430.513:4388): avc: denied { add_name } for pid=7273 comm="syz.7.2750" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.168722][ T30] audit: type=1400 audit(2000000430.513:4389): avc: denied { unlink } for pid=7273 comm="syz.7.2750" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 234.179915][ T7266] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 234.192215][ T7274] EXT4-fs (loop7): This should not happen!! Data will be lost [ 234.192215][ T7274] [ 234.209999][ T7274] EXT4-fs (loop7): Total free blocks count 0 [ 234.216354][ T7274] EXT4-fs (loop7): Free/Dirty block details [ 234.225791][ T1709] cp2112 0003:10C4:EA90.0016: Part Number: 0xED Device Version: 0x46 [ 234.229815][ T7274] EXT4-fs (loop7): free_blocks=66060288 [ 234.241126][ T7274] EXT4-fs (loop7): dirty_blocks=16 [ 234.246684][ T7274] EXT4-fs (loop7): Block reservation details [ 234.256620][ T7274] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 234.258269][ T7266] F2FS-fs (loop9): Found nat_bits in checkpoint [ 234.349593][ T7266] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 234.357224][ T7266] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 234.643426][ T1709] cp2112 0003:10C4:EA90.0016: error setting SMBus config [ 234.696242][ T7327] loop4: detected capacity change from 0 to 512 [ 234.740674][ T1709] cp2112: probe of 0003:10C4:EA90.0016 failed with error -71 [ 234.752829][ T1709] usb 4-1: USB disconnect, device number 13 [ 234.766579][ T7327] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 234.873755][ T7333] loop9: detected capacity change from 0 to 16 [ 234.930989][ T7331] fido_id[7331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 234.946350][ T7327] EXT4-fs (loop4): Test dummy encryption mode enabled [ 234.956306][ T7333] erofs: (device loop9): mounted with root inode @ nid 36. [ 235.042719][ T7327] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 235.143848][ T7327] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.467847][ T7327] EXT4-fs (loop4): 1 truncate cleaned up [ 235.578921][ T7327] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 235.763972][ T7340] incfs: Options parsing error. -22 [ 235.775203][ T7340] incfs: mount failed -22 [ 235.873105][ T7347] virtiofs: Unknown parameter 'always 1 V3 [ 235.873105][ T7347] 010000E0 1 0:00000000 0 [ 235.873105][ T7347] 18 wg1 : 1 V3 [ 235.873105][ T7347] 010000E0 1 0:00000000 0 [ 235.873105][ T7347] 19 wg2 : 1 V3 [ 235.873105][ T7347] 010000E0 1 0:00000000 0 [ 235.873105][ T7347] 20 veth0_to_bridge: 1 V3 [ 235.873105][ T7347] 010000E0 1 0:00000000 0 [ 235.873105][ T7347] 21 bridge_slave_0: 1 V3 [ 235.873105][ T7347] 010000E0 1 0:00000000 0 [ 235.873105][ T7347] 22 veth1_to_bridge: 1 V3 [ 235.873105][ T7347] 010000E0 1 0:00000000 0 [ 235.873105][ T7347] 23 bridge_slave_1: 1 V3 [ 235.873105][ T7347] 010000E0 1 0:00000000 0 [ 235.873105][ T7347] 24 veth0_to_bond: 1 V3 [ 235.873105][ T7347] 010000E0 1 0:00000000 0 [ 235.873105][ T7347] 26 veth1_to_bond: 1 V3 [ 235.873105][ T7347] 010000E0 1 0:00000000 0 [ 235.992744][ T7355] tipc: Started in network mode [ 235.997671][ T7355] tipc: Node identity ac14140f, cluster identity 8 [ 236.016145][ T7360] binfmt_misc: register: failed to install interpreter file ./file0 [ 236.032101][ T7355] tipc: New replicast peer: 255.255.255.83 [ 236.045067][ T7355] tipc: Enabled bearer , priority 10 [ 236.080336][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2782'. [ 236.092547][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2782'. [ 236.293176][ T7374] loop8: detected capacity change from 0 to 40427 [ 236.309993][ T7374] F2FS-fs (loop8): Unrecognized mount option "back >c=obactive_logs=4" or missing value [ 236.417416][ T7397] loop8: detected capacity change from 0 to 1024 [ 236.442411][ T6099] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 236.466154][ T7397] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 236.481191][ T7397] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 236.498937][ T7397] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.514597][ T7397] EXT4-fs (loop8): invalid inodes per group: 0 [ 236.514597][ T7397] [ 236.762301][ T6099] usb 5-1: Using ep0 maxpacket: 8 [ 236.811951][ T7397] incfs: Can't find or create .index dir in ./file0 [ 236.818670][ T7397] incfs: mount failed -14 [ 236.862443][ T4304] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 236.892262][ T6099] usb 5-1: config 0 has no interfaces? [ 236.897805][ T6099] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.907156][ T6099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.916753][ T6099] usb 5-1: config 0 descriptor?? [ 236.954934][ T7415] loop7: detected capacity change from 0 to 1024 [ 236.983906][ T7415] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.162356][ T6099] tipc: Node number set to 2886997007 [ 237.457535][ T7434] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2813'. [ 237.466729][ T7434] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2813'. [ 237.475094][ T7377] UDC core: couldn't find an available UDC or it's busy: -16 [ 237.492389][ T7377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 237.500606][ T58] usb 5-1: USB disconnect, device number 8 [ 237.542283][ T4304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.554124][ T4304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.564029][ T4304] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 237.573217][ T4304] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.585816][ T4304] usb 10-1: config 0 descriptor?? [ 237.915741][ T7463] loop7: detected capacity change from 0 to 256 [ 237.943669][ T7463] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.954451][ T7463] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 237.965427][ T7463] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 238.150989][ T7457] loop8: detected capacity change from 0 to 131072 [ 238.170284][ T7457] F2FS-fs (loop8): invalid crc value [ 238.187827][ T7457] F2FS-fs (loop8): Found nat_bits in checkpoint [ 238.433752][ T7457] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 238.440494][ T4304] usb 10-1: string descriptor 0 read error: -22 [ 238.467168][ T7457] F2FS-fs (loop8): Corrupted max_depth of 3: 16842753 [ 238.955307][ T4304] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0017/input/input14 [ 239.174028][ T5341] F2FS-fs (loop8): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 239.184236][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 239.184251][ T30] audit: type=1400 audit(2000000435.643:4629): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=2421 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.213046][ T30] audit: type=1400 audit(2000000435.643:4630): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2421 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.235021][ T4304] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0017/input/input15 [ 239.252383][ T30] audit: type=1400 audit(2000000435.703:4631): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2421 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.288259][ T4304] uclogic 0003:256C:006D.0017: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.9-1/input0 [ 239.349494][ T4304] usb 10-1: USB disconnect, device number 2 [ 239.477688][ T7488] loop8: detected capacity change from 0 to 1024 [ 239.533255][ T7488] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.545389][ T30] audit: type=1326 audit(2000000436.003:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.8.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97245e4be9 code=0x7ffc0000 [ 239.568999][ T30] audit: type=1326 audit(2000000436.003:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.8.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97245e4be9 code=0x7ffc0000 [ 239.592696][ T30] audit: type=1326 audit(2000000436.023:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.8.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97245e4be9 code=0x7ffc0000 [ 239.616758][ T30] audit: type=1326 audit(2000000436.023:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.8.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97245e4be9 code=0x7ffc0000 [ 239.640310][ T30] audit: type=1326 audit(2000000436.023:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.8.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97245e4be9 code=0x7ffc0000 [ 239.663865][ T30] audit: type=1326 audit(2000000436.023:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.8.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97245e4be9 code=0x7ffc0000 [ 239.688097][ T30] audit: type=1326 audit(2000000436.023:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.8.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97245e4be9 code=0x7ffc0000 [ 240.769740][ T7539] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 241.078569][ T7555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7555 comm=syz.4.2863 [ 241.091177][ T7555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7555 comm=syz.4.2863 [ 241.521655][ T7566] loop3: detected capacity change from 0 to 1024 [ 241.544249][ T7566] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 241.562277][ T7566] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.620755][ T7635] loop9: detected capacity change from 0 to 1024 [ 242.632433][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2894'. [ 242.672796][ T7635] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.818247][ T7653] loop8: detected capacity change from 0 to 512 [ 242.947702][ T7653] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.2904: Invalid inode bitmap blk 4 in block_group 0 [ 243.054330][ T7653] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 243.686403][ T7682] loop4: detected capacity change from 0 to 1024 [ 243.753583][ T7682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 243.765438][ T7682] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,barrier,minixdf,noblock_validity,debug_want_extra_isize=0x0000000000000080,bsddf,debug,acl,noinit_itable,,errors=continue. Quota mode: none. [ 243.791595][ T7682] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 243.866850][ T7704] loop7: detected capacity change from 0 to 1024 [ 243.895267][ T7704] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.008412][ T7718] loop9: detected capacity change from 0 to 512 [ 244.437601][ T7718] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 244.460367][ T7718] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.464923][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 244.464941][ T30] audit: type=1400 audit(2000000440.974:4832): avc: denied { create } for pid=7732 comm="syz.4.2934" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.520568][ T7735] loop3: detected capacity change from 0 to 512 [ 244.528744][ T30] audit: type=1400 audit(2000000441.034:4833): avc: denied { write } for pid=7717 comm="syz.9.2928" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.550792][ T30] audit: type=1400 audit(2000000441.034:4834): avc: denied { add_name } for pid=7717 comm="syz.9.2928" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.572337][ T30] audit: type=1400 audit(2000000441.034:4835): avc: denied { create } for pid=7717 comm="syz.9.2928" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 244.592768][ T30] audit: type=1400 audit(2000000441.064:4836): avc: denied { setattr } for pid=7717 comm="syz.9.2928" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.616551][ T7718] overlayfs: invalid origin (0000) [ 244.618350][ T30] audit: type=1400 audit(2000000441.064:4837): avc: denied { mounton } for pid=7717 comm="syz.9.2928" path="/45/bus/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.651516][ T7116] EXT4-fs error (device loop9): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 244.672202][ T30] audit: type=1400 audit(2000000441.064:4838): avc: denied { write } for pid=7717 comm="syz.9.2928" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 244.684418][ T7116] EXT4-fs error (device loop9): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 244.697680][ T30] audit: type=1400 audit(2000000441.064:4839): avc: denied { add_name } for pid=7717 comm="syz.9.2928" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 244.742368][ T7735] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 244.782589][ T30] audit: type=1400 audit(2000000441.064:4840): avc: denied { setattr } for pid=7717 comm="syz.9.2928" name="work" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 244.806261][ T30] audit: type=1400 audit(2000000441.064:4841): avc: denied { create } for pid=7717 comm="syz.9.2928" name="#a1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 244.830423][ T7735] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2935: bg 0: block 104: invalid block bitmap [ 244.860663][ T7735] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 244.870027][ T7735] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2935: invalid indirect mapped block 1 (level 1) [ 244.892673][ T7735] EXT4-fs (loop3): 1 truncate cleaned up [ 244.900635][ T7735] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.351402][ T7763] loop3: detected capacity change from 0 to 512 [ 245.401397][ T7769] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.414023][ T7763] EXT4-fs (loop3): Ignoring removed orlov option [ 245.422392][ T7769] FAT-fs (loop17): unable to read boot sector [ 245.429202][ T7763] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 245.470891][ T7763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 245.492289][ T7763] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.2949: corrupted in-inode xattr [ 245.512022][ T7775] loop7: detected capacity change from 0 to 512 [ 245.542297][ T7763] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2949: couldn't read orphan inode 15 (err -117) [ 245.557831][ T7763] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 245.564243][ T7780] hub 1-0:1.0: USB hub found [ 245.585724][ T7780] hub 1-0:1.0: 1 port detected [ 245.615773][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.624663][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.638687][ T7771] device bridge_slave_0 entered promiscuous mode [ 245.646122][ T7775] EXT4-fs (loop7): too many log groups per flexible block group [ 245.649580][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.661888][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.670024][ T7775] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 245.677096][ T7775] EXT4-fs (loop7): mount failed [ 245.685445][ T7771] device bridge_slave_1 entered promiscuous mode [ 245.750118][ T7788] Illegal XDP return value 4294967274, expect packet loss! [ 245.812550][ T7775] loop7: detected capacity change from 0 to 512 [ 245.832732][ T7775] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2954: bg 0: block 288: padding at end of block bitmap is not set [ 245.847467][ T7775] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 245.862364][ T7775] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.2954: attempt to clear invalid blocks 1024 len 1 [ 245.887464][ T7775] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2954: invalid indirect mapped block 1819239214 (level 0) [ 245.909861][ T7775] EXT4-fs (loop7): 1 truncate cleaned up [ 245.917011][ T7775] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.109926][ T7835] loop8: detected capacity change from 0 to 4096 [ 246.138631][ T2964] device bridge_slave_1 left promiscuous mode [ 246.145859][ T7835] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.162971][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.183743][ T2964] device bridge_slave_0 left promiscuous mode [ 246.190031][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.198557][ T2964] device veth1_macvtap left promiscuous mode [ 246.205057][ T2964] device veth0_vlan left promiscuous mode [ 246.211586][ T7835] EXT4-fs (loop8): re-mounted. Opts: . Quota mode: writeback. [ 246.384524][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.392104][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.401458][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.410924][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.419806][ T673] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.426881][ T673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.443005][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.687255][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.696142][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.704494][ T673] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.711548][ T673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.721790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.732069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.747988][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.784721][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.800421][ T7771] device veth0_vlan entered promiscuous mode [ 246.807705][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.816929][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.825868][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.846146][ T7771] device veth1_macvtap entered promiscuous mode [ 246.854658][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.877917][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.886426][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.899774][ T7876] binfmt_misc: register: failed to install interpreter file ./file0 [ 246.912984][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.927264][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.093305][ T7889] loop3: detected capacity change from 0 to 1024 [ 247.183012][ T7890] loop2: detected capacity change from 0 to 16 [ 247.294805][ T7890] erofs: (device loop2): mounted with root inode @ nid 36. [ 247.480872][ T7889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.961457][ T7900] 9pnet: p9_errstr2errno: server reported unknown error @΂0x0000000000000004 [ 248.010369][ T7902] loop4: detected capacity change from 0 to 1024 [ 248.113047][ T7902] EXT4-fs (loop4): Ignoring removed oldalloc option [ 248.119784][ T7902] EXT4-fs (loop4): Ignoring removed bh option [ 248.137129][ T7904] loop7: detected capacity change from 0 to 1024 [ 248.138798][ T7902] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.193589][ T7904] EXT4-fs (loop7): Ignoring removed orlov option [ 248.203379][ T7902] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 248.274447][ T7904] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 248.338938][ T285] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 20: block 81:freeing already freed block (bit 5); block bitmap corrupt. [ 248.512561][ T896] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 248.547431][ T7934] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3012'. [ 248.775322][ T7938] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 248.802204][ T896] usb 3-1: Using ep0 maxpacket: 16 [ 248.922248][ T896] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 248.930766][ T896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.940922][ T896] usb 3-1: config 0 has no interface number 0 [ 249.132310][ T896] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 249.141429][ T896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.149577][ T896] usb 3-1: Product: syz [ 249.153797][ T896] usb 3-1: Manufacturer: syz [ 249.158409][ T896] usb 3-1: SerialNumber: syz [ 249.164216][ T896] usb 3-1: config 0 descriptor?? [ 249.183553][ T7940] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3017'. [ 249.203847][ T896] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 249.212423][ T896] usb 3-1: No valid video chain found. [ 249.223864][ T7944] loop7: detected capacity change from 0 to 256 [ 249.339771][ T7942] loop3: detected capacity change from 0 to 40427 [ 249.375059][ T7942] F2FS-fs (loop3): invalid crc value [ 249.385180][ T7950] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3022'. [ 249.396500][ T7942] F2FS-fs (loop3): Found nat_bits in checkpoint [ 249.406073][ T6099] usb 3-1: USB disconnect, device number 5 [ 249.458512][ T7942] F2FS-fs (loop3): Start checkpoint disabled! [ 249.482292][ T7942] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 249.493946][ T7958] loop7: detected capacity change from 0 to 256 [ 249.545616][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 249.545633][ T30] audit: type=1400 audit(2000000452.061:4977): avc: denied { rename } for pid=7941 comm="syz.3.3018" name="bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 249.780017][ T7962] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3026'. [ 249.790402][ T30] audit: type=1400 audit(2000000452.291:4978): avc: denied { nlmsg_read } for pid=7961 comm="syz.7.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.905555][ T7968] device macsec1 entered promiscuous mode [ 249.905734][ T332] attempt to access beyond end of device [ 249.905734][ T332] loop3: rw=2049, want=40984, limit=40427 [ 249.911410][ T7968] device vlan0 entered promiscuous mode [ 249.935787][ T7968] device vlan0 left promiscuous mode [ 250.008492][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3031'. [ 250.030353][ T7972] IPv6: sit1: Disabled Multicast RS [ 250.049938][ T7976] loop3: detected capacity change from 0 to 128 [ 250.148712][ T7974] loop7: detected capacity change from 0 to 40427 [ 250.157570][ T7976] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.158174][ T7974] F2FS-fs (loop7): fault_injection options not supported [ 250.168763][ T7976] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.176581][ T7974] F2FS-fs (loop7): invalid crc value [ 250.200123][ T30] audit: type=1400 audit(2000000452.711:4979): avc: denied { read write open } for pid=7975 comm="syz.3.3028" path="/500/bus/file2" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 250.204118][ T7974] F2FS-fs (loop7): Found nat_bits in checkpoint [ 250.263004][ T7974] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 250.264065][ T7981] loop3: detected capacity change from 0 to 512 [ 250.305145][ T30] audit: type=1400 audit(2000000452.821:4980): avc: denied { append } for pid=7973 comm="syz.7.3032" path="/207/file1/mnt" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 250.328895][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3034'. [ 250.338312][ T5308] attempt to access beyond end of device [ 250.338312][ T5308] loop7: rw=2049, want=45104, limit=40427 [ 250.338957][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3034'. [ 250.375458][ T7987] loop4: detected capacity change from 0 to 512 [ 250.384207][ T7981] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 250.398521][ T7981] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.422115][ T7987] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 250.430592][ T7987] EXT4-fs (loop4): invalid journal inode [ 250.440830][ T30] audit: type=1400 audit(2000000452.951:4981): avc: denied { watch watch_reads } for pid=7980 comm="syz.3.3033" path="/501/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 250.472304][ T7987] EXT4-fs (loop4): can't get journal size [ 250.482216][ T7987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 250.496578][ T7987] System zones: 1-12, 13-13 [ 250.503955][ T7987] EXT4-fs (loop4): 1 truncate cleaned up [ 250.511384][ T7987] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 250.519090][ T7993] loop7: detected capacity change from 0 to 1024 [ 250.531415][ T30] audit: type=1400 audit(2000000453.041:4982): avc: denied { read } for pid=7985 comm="syz.4.3036" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.556191][ T30] audit: type=1400 audit(2000000453.071:4983): avc: denied { ioctl } for pid=7985 comm="syz.4.3036" path="/641/file0/file1" dev="loop4" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.595971][ T7995] loop3: detected capacity change from 0 to 512 [ 250.599724][ T7993] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 250.621468][ T7995] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.3037: casefold flag without casefold feature [ 250.637006][ T7995] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.3037: couldn't read orphan inode 15 (err -117) [ 250.638767][ T7993] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 250.651820][ T8000] loop4: detected capacity change from 0 to 512 [ 250.664898][ T7995] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.670788][ T7993] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 250.693948][ T7993] EXT4-fs (loop7): This should not happen!! Data will be lost [ 250.693948][ T7993] [ 250.703653][ T7993] EXT4-fs (loop7): Total free blocks count 0 [ 250.709638][ T7993] EXT4-fs (loop7): Free/Dirty block details [ 250.715812][ T7993] EXT4-fs (loop7): free_blocks=68451041280 [ 250.721720][ T7993] EXT4-fs (loop7): dirty_blocks=16 [ 250.727006][ T7993] EXT4-fs (loop7): Block reservation details [ 250.733150][ T7993] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 250.761254][ T8003] loop8: detected capacity change from 0 to 1024 [ 250.777982][ T8000] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.3039: casefold flag without casefold feature [ 250.791942][ T8000] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.3039: couldn't read orphan inode 15 (err -117) [ 250.804018][ T8000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.828884][ T8006] loop2: detected capacity change from 0 to 512 [ 250.839332][ T30] audit: type=1400 audit(2000000453.351:4984): avc: denied { ioctl } for pid=7999 comm="syz.4.3039" path="/642/file0/file1" dev="loop4" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 250.868466][ T8003] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.880785][ T30] audit: type=1326 audit(2000000453.391:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.8.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97245e4be9 code=0x7ffc0000 [ 250.882392][ T8010] loop7: detected capacity change from 0 to 128 [ 250.906542][ T30] audit: type=1326 audit(2000000453.391:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.8.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97245e4be9 code=0x7ffc0000 [ 250.952273][ T8006] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 250.952273][ T8006] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 250.952273][ T8006] [ 250.976794][ T8006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 250.992345][ T8013] loop3: detected capacity change from 0 to 512 [ 250.994268][ T8006] EXT4-fs (loop2): 1 truncate cleaned up [ 251.004709][ T8006] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,stripe=0x0000000000004000,nouser_xattr,grpid,,errors=continue. Quota mode: none. [ 251.040297][ T8010] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 251.053018][ T8010] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.171910][ T8013] EXT4-fs (loop3): orphan cleanup on readonly fs [ 251.267613][ T8013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3042: bg 0: block 248: padding at end of block bitmap is not set [ 251.387900][ T8013] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3042: Failed to acquire dquot type 1 [ 251.417430][ T8024] loop2: detected capacity change from 0 to 256 [ 251.449351][ T8013] EXT4-fs (loop3): 1 truncate cleaned up [ 251.455371][ T8013] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.472632][ T8013] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 251.483539][ T8024] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff0x0000000000000000" or missing value [ 251.487939][ T8027] loop4: detected capacity change from 0 to 256 [ 251.504569][ T8013] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 251.514069][ T8013] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3042: Failed to acquire dquot type 1 [ 251.515719][ T8030] loop7: detected capacity change from 0 to 512 [ 251.536318][ T8027] FAT-fs (loop4): Directory bread(block 64) failed [ 251.543240][ T8027] FAT-fs (loop4): Directory bread(block 65) failed [ 251.549844][ T8027] FAT-fs (loop4): Directory bread(block 66) failed [ 251.556530][ T8027] FAT-fs (loop4): Directory bread(block 67) failed [ 251.563207][ T8027] FAT-fs (loop4): Directory bread(block 68) failed [ 251.569779][ T8027] FAT-fs (loop4): Directory bread(block 69) failed [ 251.576951][ T8027] FAT-fs (loop4): Directory bread(block 70) failed [ 251.584177][ T8027] FAT-fs (loop4): Directory bread(block 71) failed [ 251.591070][ T8030] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.3047: inode #1: comm syz.7.3047: iget: illegal inode # [ 251.622919][ T8027] FAT-fs (loop4): Directory bread(block 72) failed [ 251.646661][ T8027] FAT-fs (loop4): Directory bread(block 73) failed [ 251.657571][ T8030] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.3047: error while reading EA inode 1 err=-117 [ 251.690488][ T8030] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.3047: inode #1: comm syz.7.3047: iget: illegal inode # [ 251.721294][ T8030] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.3047: error while reading EA inode 1 err=-117 [ 251.770192][ T8030] EXT4-fs (loop7): 1 orphan inode deleted [ 251.776354][ T8030] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000000,norecovery,quota,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,abort,dioread_lock,noblock_validity,data_err=abort,,errors=continue. Quota mode: writeback. [ 251.981757][ T8043] loop7: detected capacity change from 0 to 128 [ 251.992835][ T4304] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 251.999833][ T8040] loop4: detected capacity change from 0 to 512 [ 252.004252][ T8043] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 252.015888][ T8043] FAT-fs (loop7): Filesystem has been set read-only [ 252.022732][ T8043] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 252.116594][ T8040] EXT4-fs (loop4): error: journal path ./file1 is not a block device [ 252.265352][ T8047] loop7: detected capacity change from 0 to 512 [ 252.275816][ T8049] tipc: New replicast peer: 255.255.255.255 [ 252.284471][ T8049] tipc: Enabled bearer , priority 10 [ 252.295070][ T8047] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 252.312357][ T8047] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.322357][ T8053] xt_bpf: check failed: parse error [ 252.376343][ T8058] loop7: detected capacity change from 0 to 512 [ 252.412189][ T4304] usb 3-1: Using ep0 maxpacket: 16 [ 252.464197][ T8067] loop7: detected capacity change from 0 to 512 [ 252.486471][ T8067] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 252.512901][ T8067] EXT4-fs (loop7): orphan cleanup on readonly fs [ 252.519478][ T8067] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #3: comm syz.7.3062: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 252.541842][ T4304] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.554483][ T4304] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.564375][ T8067] EXT4-fs error (device loop7): ext4_quota_enable:6409: comm syz.7.3062: Bad quota inode: 3, type: 0 [ 252.565234][ T4304] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 252.588572][ T8067] EXT4-fs warning (device loop7): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 252.603365][ T8067] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 252.610063][ T8067] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.640967][ T4304] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.647934][ T4304] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 252.663124][ T8074] loop3: detected capacity change from 0 to 512 [ 252.672073][ T4304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.681422][ T4304] usb 3-1: config 0 descriptor?? [ 252.700397][ T8074] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.717347][ T8074] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.3066: inode #0: comm syz.3.3066: iget: illegal inode # [ 252.734415][ T8080] device veth0 entered promiscuous mode [ 252.748034][ T8074] EXT4-fs (loop3): Remounting filesystem read-only [ 252.749020][ T8079] device veth0 left promiscuous mode [ 252.754945][ T8074] EXT4-fs (loop3): get orphan inode failed [ 252.766592][ T8074] EXT4-fs (loop3): mount failed [ 252.818120][ T8089] loop3: detected capacity change from 0 to 512 [ 252.853155][ T8089] EXT4-fs (loop3): Ignoring removed oldalloc option [ 252.863714][ T8094] loop7: detected capacity change from 0 to 512 [ 252.869102][ T8089] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.883845][ T8089] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.3073: Parent and EA inode have the same ino 15 [ 252.896807][ T8089] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.3073: Parent and EA inode have the same ino 15 [ 252.911059][ T8094] EXT4-fs (loop7): Ignoring removed nobh option [ 252.912392][ T8089] EXT4-fs (loop3): 1 orphan inode deleted [ 252.923226][ T8089] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,sysvgroups,,errors=continue. Quota mode: none. [ 252.932326][ T8094] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.3075: iget: bad i_size value: 38620345925642 [ 252.958974][ T8089] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.3073: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 252.966574][ T8094] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3075: couldn't read orphan inode 15 (err -117) [ 252.991002][ T8094] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,bsdgroups,data_err=ignore,,errors=continue. Quota mode: writeback. [ 253.427892][ T4304] hid (null): invalid report_count 2029249823 [ 253.436902][ T4304] hid (null): unknown global tag 0xd [ 253.442315][ T4304] hid (null): unknown global tag 0xe [ 253.447648][ T4304] hid (null): unknown global tag 0xd [ 253.454893][ T4304] hid (null): unknown global tag 0x8b [ 253.465087][ T4304] hid (null): invalid report_size 892956265 [ 253.476568][ T8112] loop4: detected capacity change from 0 to 256 [ 253.479067][ T4304] usb 3-1: USB disconnect, device number 6 [ 253.493442][ T8112] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.512219][ T8112] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 253.533666][ T8112] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 253.650840][ T8126] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3086'. [ 253.692542][ T8130] loop8: detected capacity change from 0 to 512 [ 253.808270][ T896] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 253.828848][ T896] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.910565][ T8146] hid-generic 0000:0000:0000.0019: pid 8146 passed too short report [ 253.976361][ T8149] fido_id[8149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.016861][ T8161] loop8: detected capacity change from 0 to 128 [ 254.051342][ T8164] tmpfs: Unknown parameter 'nolazytime' [ 254.077470][ T8166] loop2: detected capacity change from 0 to 1024 [ 254.084076][ T42] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 254.102647][ T8161] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.113487][ T8161] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.159031][ T8166] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.282194][ T6099] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 254.332198][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 254.412467][ T26] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 254.432268][ T8206] serio: Serial port ptm0 [ 254.452255][ T42] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 254.460489][ T42] usb 4-1: config 0 has no interface number 0 [ 254.467077][ T42] usb 4-1: config 0 interface 184 has no altsetting 0 [ 254.504249][ T8210] loop2: detected capacity change from 0 to 1024 [ 254.534183][ T8210] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.545041][ T8210] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.575184][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 254.575201][ T30] audit: type=1400 audit(2000000457.091:5128): avc: denied { append } for pid=8209 comm="syz.2.3124" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.601688][ T8210] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 254.618658][ T8210] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28 [ 254.631263][ T8210] EXT4-fs (loop2): This should not happen!! Data will be lost [ 254.631263][ T8210] [ 254.641102][ T8210] EXT4-fs (loop2): Total free blocks count 0 [ 254.647182][ T8210] EXT4-fs (loop2): Free/Dirty block details [ 254.653430][ T8210] EXT4-fs (loop2): free_blocks=4293918720 [ 254.659231][ T8210] EXT4-fs (loop2): dirty_blocks=48 [ 254.664567][ T42] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 254.674119][ T8210] EXT4-fs (loop2): Block reservation details [ 254.680141][ T8210] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 254.686127][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.694215][ T42] usb 4-1: Product: syz [ 254.698380][ T42] usb 4-1: Manufacturer: syz [ 254.703045][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 254.708735][ T42] usb 4-1: SerialNumber: syz [ 254.719357][ T42] usb 4-1: config 0 descriptor?? [ 254.722729][ T8217] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 254.731904][ T2964] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28 [ 254.744785][ T2964] EXT4-fs (loop2): This should not happen!! Data will be lost [ 254.744785][ T2964] [ 254.763857][ T42] smsc75xx v1.0.0 [ 254.832458][ T6099] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.841710][ T6099] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.853232][ T6099] usb 8-1: Product: syz [ 254.857469][ T6099] usb 8-1: Manufacturer: syz [ 254.863230][ T6099] usb 8-1: SerialNumber: syz [ 254.887127][ T30] audit: type=1326 audit(2000000457.401:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf4b7fbe9 code=0x7ffc0000 [ 254.911071][ T26] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.925885][ T8222] syz.2.3127[8222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.925958][ T8222] syz.2.3127[8222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.926295][ T26] usb 5-1: config 1 interface 0 has no altsetting 0 [ 254.942701][ T30] audit: type=1326 audit(2000000457.401:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf4b7fbe9 code=0x7ffc0000 [ 254.988867][ T30] audit: type=1326 audit(2000000457.441:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaf4b7fbe9 code=0x7ffc0000 [ 255.012557][ T30] audit: type=1326 audit(2000000457.471:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf4b7fbe9 code=0x7ffc0000 [ 255.040937][ T30] audit: type=1326 audit(2000000457.471:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaf4b7fbe9 code=0x7ffc0000 [ 255.067892][ T30] audit: type=1326 audit(2000000457.501:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf4b7fbe9 code=0x7ffc0000 [ 255.091840][ T30] audit: type=1326 audit(2000000457.501:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbaf4b7fbe9 code=0x7ffc0000 [ 255.116584][ T30] audit: type=1326 audit(2000000457.501:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf4b7fbe9 code=0x7ffc0000 [ 255.140563][ T30] audit: type=1326 audit(2000000457.501:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fbaf4b7fbe9 code=0x7ffc0000 [ 255.202254][ T26] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 255.208294][ T8235] loop2: detected capacity change from 0 to 1024 [ 255.211463][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.227131][ T26] usb 5-1: Product: 은諢셠쬦Ӟ꺨䟻㸥䲙ᄬ숴轊ᓮ獾鱤政肘舙䨬糀䞵굯魀꾀퉦旴췛갯湞翸퍅﹛甭ꜜ厙䶅ᘫ㋪줊㏓믠滩 [ 255.233392][ T8235] EXT4-fs (loop2): Ignoring removed oldalloc option [ 255.246124][ T26] usb 5-1: Manufacturer: ⢨䬢퇼⒏ㄬℎ㻝肤鄥Ʋ軻ோ晽㼊伦⡈찋ﺇွ㝢稳鬀㷘㵴嶀쑶ₐ⹱籀鄤ᴙ꯶∲维軖煭ᲁ㔆夋鼅͠해ꃂ⇡晫ナ旎慭叏ꚹं㭯⪱䁌眮熯瘘⋳笵ڸ漁ຄ飋샽铎⠧첽禵侈뒷Ừ [ 255.252499][ T8235] EXT4-fs (loop2): Ignoring removed bh option [ 255.277242][ T26] usb 5-1: SerialNumber: syz [ 255.282878][ T8235] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.303654][ T8235] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 255.357770][ T7771] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 20: block 81:freeing already freed block (bit 5); block bitmap corrupt. [ 255.511347][ T8239] loop2: detected capacity change from 0 to 40427 [ 255.552872][ T8239] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 255.559306][ T8239] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 255.568845][ T8239] F2FS-fs (loop2): invalid crc value [ 255.575753][ T8239] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 255.600383][ T8239] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 255.607628][ T8239] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.772716][ T26] usbhid 5-1:1.0: can't add hid device: -71 [ 255.779111][ T26] usbhid: probe of 5-1:1.0 failed with error -71 [ 255.794195][ T26] usb 5-1: USB disconnect, device number 9 [ 255.895439][ T8265] loop2: detected capacity change from 0 to 256 [ 255.926440][ T8265] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.013069][ T6099] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 256.019559][ T6099] cdc_ncm 8-1:1.0: setting tx_max = 84 [ 256.141365][ T8277] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 256.152419][ T42] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 256.167595][ T42] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 256.202285][ T42] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 256.215149][ T6099] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM, 42:42:42:42:42:42 [ 256.226319][ T42] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 256.246094][ T6099] usb 8-1: USB disconnect, device number 4 [ 256.273631][ T6099] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM [ 256.283596][ T42] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 256.315956][ T42] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 256.345626][ T42] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 256.373254][ T42] usb 4-1: USB disconnect, device number 14 [ 256.380133][ T307] ================================================================== [ 256.388225][ T307] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 256.396058][ T307] Read of size 8 at addr ffff888135edac70 by task kworker/1:2/307 [ 256.403875][ T307] [ 256.406236][ T307] CPU: 1 PID: 307 Comm: kworker/1:2 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 256.416139][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.426213][ T307] Workqueue: events_long br_fdb_cleanup [ 256.431799][ T307] Call Trace: [ 256.435087][ T307] [ 256.438034][ T307] __dump_stack+0x21/0x30 [ 256.442379][ T307] dump_stack_lvl+0xee/0x150 [ 256.446997][ T307] ? show_regs_print_info+0x20/0x20 [ 256.452214][ T307] ? load_image+0x3a0/0x3a0 [ 256.456764][ T307] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 256.463469][ T307] print_address_description+0x7f/0x2c0 [ 256.469040][ T307] ? __list_del_entry_valid+0xa6/0x120 [ 256.474514][ T307] kasan_report+0xf1/0x140 [ 256.478942][ T307] ? __list_del_entry_valid+0xa6/0x120 [ 256.484419][ T307] __asan_report_load8_noabort+0x14/0x20 [ 256.490075][ T307] __list_del_entry_valid+0xa6/0x120 [ 256.495401][ T307] process_one_work+0x453/0xba0 [ 256.500272][ T307] worker_thread+0xa59/0x1200 [ 256.504949][ T307] kthread+0x411/0x500 [ 256.509025][ T307] ? worker_clr_flags+0x190/0x190 [ 256.514040][ T307] ? kthread_blkcg+0xd0/0xd0 [ 256.518751][ T307] ret_from_fork+0x1f/0x30 [ 256.523177][ T307] [ 256.526184][ T307] [ 256.528496][ T307] Allocated by task 6099: [ 256.532811][ T307] __kasan_kmalloc+0xda/0x110 [ 256.537607][ T307] __kmalloc+0x13d/0x2c0 [ 256.541904][ T307] kvmalloc_node+0x206/0x300 [ 256.546619][ T307] alloc_netdev_mqs+0x8d/0xc90 [ 256.551391][ T307] alloc_etherdev_mqs+0x34/0x40 [ 256.556241][ T307] usbnet_probe+0x219/0x2860 [ 256.560840][ T307] usb_probe_interface+0x5ff/0xae0 [ 256.565948][ T307] really_probe+0x285/0x970 [ 256.570444][ T307] __driver_probe_device+0x198/0x280 [ 256.575720][ T307] driver_probe_device+0x54/0x3e0 [ 256.580740][ T307] __device_attach_driver+0x2a6/0x460 [ 256.586133][ T307] bus_for_each_drv+0x175/0x200 [ 256.590978][ T307] __device_attach+0x2a2/0x400 [ 256.595745][ T307] device_initial_probe+0x1a/0x20 [ 256.600758][ T307] bus_probe_device+0xc0/0x1e0 [ 256.605509][ T307] device_add+0xb31/0xed0 [ 256.609828][ T307] usb_set_configuration+0x19c2/0x1f10 [ 256.615283][ T307] usb_generic_driver_probe+0x91/0x150 [ 256.620756][ T307] usb_probe_device+0x148/0x260 [ 256.625603][ T307] really_probe+0x285/0x970 [ 256.630106][ T307] __driver_probe_device+0x198/0x280 [ 256.635402][ T307] driver_probe_device+0x54/0x3e0 [ 256.640454][ T307] __device_attach_driver+0x2a6/0x460 [ 256.645817][ T307] bus_for_each_drv+0x175/0x200 [ 256.650661][ T307] __device_attach+0x2a2/0x400 [ 256.655434][ T307] device_initial_probe+0x1a/0x20 [ 256.660470][ T307] bus_probe_device+0xc0/0x1e0 [ 256.665228][ T307] device_add+0xb31/0xed0 [ 256.669546][ T307] usb_new_device+0xd06/0x1620 [ 256.674324][ T307] hub_event+0x27d8/0x42c0 [ 256.678737][ T307] process_one_work+0x6be/0xba0 [ 256.683579][ T307] worker_thread+0xa59/0x1200 [ 256.688250][ T307] kthread+0x411/0x500 [ 256.692320][ T307] ret_from_fork+0x1f/0x30 [ 256.696748][ T307] [ 256.699081][ T307] Freed by task 6099: [ 256.703057][ T307] kasan_set_track+0x4a/0x70 [ 256.707679][ T307] kasan_set_free_info+0x23/0x40 [ 256.712633][ T307] ____kasan_slab_free+0x125/0x160 [ 256.717747][ T307] __kasan_slab_free+0x11/0x20 [ 256.722522][ T307] slab_free_freelist_hook+0xc2/0x190 [ 256.727893][ T307] kfree+0xc4/0x270 [ 256.731714][ T307] kvfree+0x35/0x40 [ 256.735523][ T307] netdev_freemem+0x3f/0x60 [ 256.740026][ T307] netdev_release+0x7f/0xb0 [ 256.744551][ T307] device_release+0x96/0x1c0 [ 256.749137][ T307] kobject_put+0x18a/0x270 [ 256.753544][ T307] put_device+0x1f/0x30 [ 256.757692][ T307] free_netdev+0x34b/0x450 [ 256.762107][ T307] usbnet_disconnect+0x24b/0x3a0 [ 256.767064][ T307] usb_unbind_interface+0x212/0x8c0 [ 256.772276][ T307] device_release_driver_internal+0x4c1/0x760 [ 256.778333][ T307] device_release_driver+0x19/0x20 [ 256.783438][ T307] bus_remove_device+0x2dd/0x340 [ 256.788373][ T307] device_del+0x696/0xe90 [ 256.792697][ T307] usb_disable_device+0x3a8/0x750 [ 256.797717][ T307] usb_disconnect+0x31e/0x850 [ 256.802409][ T307] hub_event+0x190c/0x42c0 [ 256.806820][ T307] process_one_work+0x6be/0xba0 [ 256.811670][ T307] worker_thread+0xd7b/0x1200 [ 256.816347][ T307] kthread+0x411/0x500 [ 256.820409][ T307] ret_from_fork+0x1f/0x30 [ 256.824821][ T307] [ 256.827142][ T307] Last potentially related work creation: [ 256.832844][ T307] kasan_save_stack+0x3a/0x60 [ 256.837517][ T307] __kasan_record_aux_stack+0xd2/0x100 [ 256.842974][ T307] kasan_record_aux_stack_noalloc+0xb/0x10 [ 256.848785][ T307] insert_work+0x51/0x310 [ 256.853126][ T307] __queue_work+0x8e5/0xc60 [ 256.857624][ T307] queue_work_on+0xd2/0x140 [ 256.862122][ T307] usbnet_link_change+0x176/0x1a0 [ 256.867151][ T307] usbnet_probe+0x1dfd/0x2860 [ 256.871819][ T307] usb_probe_interface+0x5ff/0xae0 [ 256.876933][ T307] really_probe+0x285/0x970 [ 256.881434][ T307] __driver_probe_device+0x198/0x280 [ 256.886715][ T307] driver_probe_device+0x54/0x3e0 [ 256.891730][ T307] __device_attach_driver+0x2a6/0x460 [ 256.897102][ T307] bus_for_each_drv+0x175/0x200 [ 256.901953][ T307] __device_attach+0x2a2/0x400 [ 256.906710][ T307] device_initial_probe+0x1a/0x20 [ 256.911737][ T307] bus_probe_device+0xc0/0x1e0 [ 256.916497][ T307] device_add+0xb31/0xed0 [ 256.920823][ T307] usb_set_configuration+0x19c2/0x1f10 [ 256.926292][ T307] usb_generic_driver_probe+0x91/0x150 [ 256.931842][ T307] usb_probe_device+0x148/0x260 [ 256.936707][ T307] really_probe+0x285/0x970 [ 256.941208][ T307] __driver_probe_device+0x198/0x280 [ 256.946484][ T307] driver_probe_device+0x54/0x3e0 [ 256.951503][ T307] __device_attach_driver+0x2a6/0x460 [ 256.956871][ T307] bus_for_each_drv+0x175/0x200 [ 256.961720][ T307] __device_attach+0x2a2/0x400 [ 256.966486][ T307] device_initial_probe+0x1a/0x20 [ 256.971513][ T307] bus_probe_device+0xc0/0x1e0 [ 256.976380][ T307] device_add+0xb31/0xed0 [ 256.980713][ T307] usb_new_device+0xd06/0x1620 [ 256.985490][ T307] hub_event+0x27d8/0x42c0 [ 256.989900][ T307] process_one_work+0x6be/0xba0 [ 256.994749][ T307] worker_thread+0xa59/0x1200 [ 256.999434][ T307] kthread+0x411/0x500 [ 257.003505][ T307] ret_from_fork+0x1f/0x30 [ 257.007916][ T307] [ 257.010237][ T307] The buggy address belongs to the object at ffff888135eda000 [ 257.010237][ T307] which belongs to the cache kmalloc-4k of size 4096 [ 257.024281][ T307] The buggy address is located 3184 bytes inside of [ 257.024281][ T307] 4096-byte region [ffff888135eda000, ffff888135edb000) [ 257.037814][ T307] The buggy address belongs to the page: [ 257.043442][ T307] page:ffffea0004d7b600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x135ed8 [ 257.053680][ T307] head:ffffea0004d7b600 order:3 compound_mapcount:0 compound_pincount:0 [ 257.062008][ T307] flags: 0x4000000000010200(slab|head|zone=1) [ 257.068184][ T307] raw: 4000000000010200 ffffea00043f4a00 0000000200000002 ffff888100043380 [ 257.076775][ T307] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 257.085367][ T307] page dumped because: kasan: bad access detected [ 257.091780][ T307] page_owner tracks the page as allocated [ 257.097568][ T307] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2634, ts 85721575189, free_ts 81244664723 [ 257.118056][ T307] post_alloc_hook+0x192/0x1b0 [ 257.122826][ T307] prep_new_page+0x1c/0x110 [ 257.127314][ T307] get_page_from_freelist+0x2cc5/0x2d50 [ 257.132846][ T307] __alloc_pages+0x18f/0x440 [ 257.137429][ T307] new_slab+0xa1/0x4d0 [ 257.141490][ T307] ___slab_alloc+0x381/0x810 [ 257.146066][ T307] __slab_alloc+0x49/0x90 [ 257.150378][ T307] kmem_cache_alloc_trace+0x146/0x270 [ 257.155823][ T307] kobject_uevent_env+0x272/0x700 [ 257.160837][ T307] kobject_uevent+0x1d/0x30 [ 257.165331][ T307] __kobject_del+0xd7/0x2f0 [ 257.169818][ T307] kobject_put+0x1db/0x270 [ 257.174215][ T307] net_rx_queue_update_kobjects+0x40e/0x480 [ 257.180094][ T307] netif_set_real_num_rx_queues+0x107/0x1f0 [ 257.185972][ T307] veth_init_queues+0x116/0x180 [ 257.190806][ T307] veth_newlink+0xab7/0xda0 [ 257.195302][ T307] page last free stack trace: [ 257.199960][ T307] free_unref_page_prepare+0x542/0x550 [ 257.205410][ T307] free_unref_page+0xa2/0x550 [ 257.210105][ T307] __free_pages+0x6c/0x100 [ 257.214509][ T307] free_pages+0x82/0x90 [ 257.218651][ T307] packet_set_ring+0x18a5/0x2400 [ 257.223576][ T307] packet_release+0x791/0xc90 [ 257.228243][ T307] sock_close+0xe0/0x270 [ 257.232471][ T307] __fput+0x20b/0x8b0 [ 257.236442][ T307] ____fput+0x15/0x20 [ 257.240429][ T307] task_work_run+0x127/0x190 [ 257.245006][ T307] exit_to_user_mode_loop+0xd0/0xe0 [ 257.250202][ T307] exit_to_user_mode_prepare+0x5a/0xa0 [ 257.255644][ T307] syscall_exit_to_user_mode+0x1a/0x30 [ 257.261084][ T307] do_syscall_64+0x58/0xa0 [ 257.265479][ T307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.271375][ T307] [ 257.273682][ T307] Memory state around the buggy address: [ 257.279289][ T307] ffff888135edab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.287340][ T307] ffff888135edab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.295378][ T307] >ffff888135edac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.303429][ T307] ^ [ 257.311125][ T307] ffff888135edac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.319168][ T307] ffff888135edad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.327221][ T307] ================================================================== [ 257.335352][ T307] Disabling lock debugging due to kernel taint [ 257.359316][ T8295] loop8: detected capacity change from 0 to 1024 [ 257.444984][ T8295] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.642273][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3155'.