last executing test programs: 40.700145886s ago: executing program 2 (id=5273): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0xc003}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffff}]}}}]}, 0x58}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000054d564b"]) 40.661576706s ago: executing program 2 (id=5275): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x80182, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000740)={0x11, 0x8000038, 0x5, 0x12, 0xa, 0x8, 0x4, 0xb1, 0x6080dc27b6b61158}) 40.634077846s ago: executing program 2 (id=5276): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) 40.573987466s ago: executing program 2 (id=5277): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001300)='./file2\x00', 0x0, &(0x7f0000010140)={[{@lazytime}, {@sysvgroups}, {@prjquota}, {@grpjquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@grpquota}, {@sysvgroups}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xfffffffffffffffe}}}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 40.527612516s ago: executing program 2 (id=5279): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@norecovery}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d1, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 40.407770167s ago: executing program 2 (id=5284): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="3ef3088a361577348f693fe88991549c25cfe4f9e2bf821e", 0x18}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1}, 0x2160) 40.360393017s ago: executing program 32 (id=5284): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="3ef3088a361577348f693fe88991549c25cfe4f9e2bf821e", 0x18}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1}, 0x2160) 21.308713208s ago: executing program 5 (id=5526): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r0}, 0x10) unshare(0x22020600) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f00000022c0)}, 0x10) 21.286723268s ago: executing program 5 (id=5527): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.849147653s ago: executing program 5 (id=5564): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0], 0x6, 0x2c6, &(0x7f0000000f00)="$eJzs3T+LHGUYAPBn7vZmRy32CisRMmAKq+ClE5s9JAHxKsMWaqGHSUBuFyGBA//gmsrWxsLCTyAIfpA0fgPBVrAzQmDknZ3JzJ3ruivZSHK/X3PPPfM+M887+7I3V+y7H748O7lZxu17X/wSRZHFzjjG8SCL/diJ1ldxxvibAACeZg+qKn6vFjapyyKi2F5bAMAWrff3f9CFPz2RtgCALbrx7ntvHx4dXXuniCKuz74+naT/7NPPxfHD2/FxTONWvBajeBhRPyjsRf20kMLrVVXNB2WyH5dn89NJqpx9cL85/+FvEXX9QYxiv049etqo6986unZQLvTq56mP55vrj1P91RjFi4+Kz9RfXVIfkzxefaXX/5UYxc8fxScxjZt1E139lwdl+Wb17R+fv5/aS/XZ/HQyrMd1qt0n/NIAAAAAAAAAAAAAAAAAAAAAAPAMu9LsnTOM8lJcnqVUs//O7sPI069la7+rSscXUdam+vsDVVU1r+L73paCZdUM7Pb3GcRLg/7GggAAAAAAAAAAAAAAAAAAAHBx3f30s5Pj6fTWnccStLsBDCLizxsR//U8417mUqwePGyueTyd7jThmTH3834mdtsxWcTKNtIkHtNt+bfgufM9t8EPP6YJbnLCopd5ffkE97Y/r3Z1nRxny681jDZTNIvkuzyiG5PHmtfK/+lQFZssv3zpodH6U07LKp3nhTozXzE4slWNvfHr4s41mez8LPL6ri4t32uCXvm5tbHW6x7Fovzv7xVZvVvHcHtvRgAAAAAAAAAAAAAAAAAAcMF1n/5dcvDeytKdykeBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhGdN//v0Ewb4rXGJzHnbv/8xQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4AP4KAAD//1+nVHQ=") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x147842, 0x88) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 17.755529374s ago: executing program 5 (id=5566): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x809411, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0f8015b6f9ff587f1bad132b46a8007a15a804898399d8c1141594a01dc4ff710925108ead165185fe3912465738b3cfa0c3a2ff876fd90bacfdb2292cad3368d1eee67dfc2b87b7b2", 0x49}], 0x1}, 0xe6c8cf0f9c3ece28) rmdir(&(0x7f00000000c0)='./file0\x00') 17.577899444s ago: executing program 5 (id=5567): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) 17.438950015s ago: executing program 5 (id=5571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x44, r1, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5f09}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000) 17.373057115s ago: executing program 33 (id=5571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x44, r1, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5f09}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000) 13.216776853s ago: executing program 4 (id=5642): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x12) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0xffffffe4}) 13.182476033s ago: executing program 4 (id=5643): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)) 13.146783953s ago: executing program 4 (id=5644): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x64000600) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1004440, &(0x7f0000000000), 0x6, 0x595, &(0x7f00000000c0)="$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") 12.996425494s ago: executing program 4 (id=5647): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00') 12.992892454s ago: executing program 4 (id=5649): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 12.816068775s ago: executing program 4 (id=5652): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x0, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x3, 0x0, 0x40, 0x0, 0x1}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.801730545s ago: executing program 34 (id=5652): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x0, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x3, 0x0, 0x40, 0x0, 0x1}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.115965668s ago: executing program 7 (id=5786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 4.820127509s ago: executing program 7 (id=5790): unshare(0x2040400) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 4.804354839s ago: executing program 7 (id=5791): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x360, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 4.70769429s ago: executing program 7 (id=5793): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000004d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) 4.410528311s ago: executing program 7 (id=5796): add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.280138592s ago: executing program 7 (id=5798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x1}, {0xc}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.221269522s ago: executing program 35 (id=5798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x1}, {0xc}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.681589548s ago: executing program 8 (id=5864): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000180), 0x10) 2.482926319s ago: executing program 6 (id=5867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.30839681s ago: executing program 6 (id=5869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 2.2505158s ago: executing program 6 (id=5873): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write(r0, &(0x7f0000000240)="2338dcfa67c78a50095e74401b6cc0914ab28f7554d2f66e4932ccbd9df4aa717439252e20a2196296f5328f0800000000d05807f47d5d5db836f81553dae5", 0xfffffd5f) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000440)={0xf048, 0x9, 0x2, 0x6, 0x14}) 1.884121492s ago: executing program 1 (id=5880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.814089082s ago: executing program 8 (id=5883): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x2d0, 0x9403, 0x0, 0x2d0, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x5c, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@mcast1, @dev, [], [], 'veth1_to_hsr\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000001000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_read_part_table(0x5c9, &(0x7f0000000880)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) syz_emit_ethernet(0xce, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @loopback, @empty, @multicast2]}, @cipso={0x86, 0x4d, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x2}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}]}}, "a815a23d"}}}}}, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80, @void, @value}, 0x23) 1.348105984s ago: executing program 6 (id=5885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x40}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0xffffffff, 0x1000}}]}]}}}]}, 0x64}}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sched_getattr(r4, &(0x7f0000000040)={0x38}, 0x38, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.241857794s ago: executing program 3 (id=5887): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) io_uring_setup(0x6d95, &(0x7f0000000000)) 1.128103075s ago: executing program 3 (id=5888): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=', @ANYRESHEX, @ANYBLOB=',wf']) 1.122686095s ago: executing program 3 (id=5889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.113757165s ago: executing program 0 (id=5890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x4, 0x30, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r4, 0x0, 0x0, 0x0}, 0x30) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 1.045189515s ago: executing program 3 (id=5891): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$packet(0x11, 0x2, 0x300) 1.044705245s ago: executing program 0 (id=5892): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, 0x0, 0x0) 1.010705065s ago: executing program 1 (id=5893): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 993.856156ms ago: executing program 0 (id=5894): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, 0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[], &(0x7f0000000480)=""/116, 0xac, 0x74, 0x0, 0x5, 0x10000, @value}, 0x28) pwritev(r0, 0x0, 0x0, 0x295, 0xbfcb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc}) close_range(r4, 0xffffffffffffffff, 0x0) 993.157715ms ago: executing program 3 (id=5895): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000fbbfffff0100"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5a73, r0}, 0xc8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x3a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 919.159446ms ago: executing program 8 (id=5896): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 918.003716ms ago: executing program 3 (id=5897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x2d0, 0x9403, 0x0, 0x2d0, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x5c, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@mcast1, @dev, [], [], 'veth1_to_hsr\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000001000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_read_part_table(0x5c9, &(0x7f0000000880)="$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") r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='balance_dirty_pages\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) syz_emit_ethernet(0xda, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @loopback, @empty, @multicast2]}, @cipso={0x86, 0x54, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x4}]}}, "a815a23d"}}}}}, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80, @void, @value}, 0x23) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 868.053436ms ago: executing program 1 (id=5898): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 845.691396ms ago: executing program 8 (id=5899): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 827.367676ms ago: executing program 0 (id=5900): request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='%-#{+(-}\x00', 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000002c0), 0x4) 813.285706ms ago: executing program 8 (id=5901): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x401, 0x7a92}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000001080)=ANY=[@ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 759.673637ms ago: executing program 0 (id=5902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\t'}]}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 730.502717ms ago: executing program 8 (id=5903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 683.128417ms ago: executing program 0 (id=5904): unshare(0x60600) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0xe017be00}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 514.892068ms ago: executing program 6 (id=5905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002010000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 404.031388ms ago: executing program 6 (id=5906): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0xffffffff, 0x0, {{@in=@multicast1, @in=@multicast2}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {0x0, 0x0, 0x0, 0x8000000}, {0x1}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 89.151719ms ago: executing program 1 (id=5907): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xabf, 0x840) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) 67.31046ms ago: executing program 1 (id=5908): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x2, 0x0, [{}, {}]}) 0s ago: executing program 1 (id=5909): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24}}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x40, 0x8c) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x96, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x81, 0x0, {0x200000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0xffffffffffffffda, 0x0, {0xb4, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {0x1, 0x10000000}, 0x0, 0xfffffffd}}}}) kernel console output (not intermixed with test programs): 305e5 [ 1829.377343][T25520] loop2: detected capacity change from 0 to 40427 [ 1829.384381][T25520] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1829.431493][T25520] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1829.517194][T25520] F2FS-fs (loop2): invalid crc value [ 1829.571699][T25520] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1829.959693][T16660] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1829.968947][T25520] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1829.976334][T16660] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1829.999547][T25520] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1830.855472][T25559] overlayfs: failed to resolve './file0': -2 [ 1830.963337][T25554] loop1: detected capacity change from 0 to 40427 [ 1831.005389][T25554] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1831.044884][T25554] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1831.085140][T25554] F2FS-fs (loop1): invalid crc value [ 1831.105776][T25555] loop4: detected capacity change from 0 to 40427 [ 1831.118484][T25554] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1831.147830][T25555] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1831.171205][T25555] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1831.201330][T25555] F2FS-fs (loop4): invalid crc value [ 1831.248788][T25555] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1831.275137][T25554] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1831.282245][T25554] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1831.324266][T25561] loop0: detected capacity change from 0 to 40427 [ 1831.348332][T25561] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1831.364979][T25561] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1831.385212][T25561] F2FS-fs (loop0): invalid crc value [ 1831.407862][ T599] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1831.413611][T25561] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1831.423211][ T599] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1831.423961][T25555] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1831.453001][T25555] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1831.497339][T25561] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1831.508545][T25561] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1832.385122][T25580] overlayfs: failed to resolve './file1': -2 [ 1832.844954][ T28] audit: type=1326 audit(1733273143.967:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25578 comm="syz.3.5185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe08777ff19 code=0x0 [ 1832.885144][T14455] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1832.910769][T14455] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1832.913019][T25584] overlayfs: failed to resolve './file0': -2 [ 1833.291208][T25598] loop4: detected capacity change from 0 to 256 [ 1833.302502][T25598] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿ" or missing value [ 1833.333661][T25596] overlayfs: failed to resolve './file0': -2 [ 1833.558511][T14455] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1833.580140][T14455] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1833.958946][ T2803] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1833.975273][ T2803] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1834.683531][T25629] loop0: detected capacity change from 0 to 256 [ 1834.690003][T25629] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿ" or missing value [ 1834.726301][ T321] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1834.845243][T25619] loop1: detected capacity change from 0 to 40427 [ 1834.855071][T25619] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1834.862929][T25619] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1834.873354][T25619] F2FS-fs (loop1): invalid crc value [ 1834.891660][T25619] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1834.990555][T25619] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1835.003786][T25619] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1835.339235][T25645] loop3: detected capacity change from 0 to 512 [ 1835.379892][T25645] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 1835.504041][T25648] overlayfs: failed to resolve './file0': -2 [ 1835.564218][ T28] audit: type=1400 audit(1733273146.687:305): avc: denied { read write } for pid=25649 comm="syz.0.5200" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1835.574910][T24443] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1835.595917][ T28] audit: type=1400 audit(1733273146.687:306): avc: denied { open } for pid=25649 comm="syz.0.5200" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1835.622345][ T28] audit: type=1400 audit(1733273146.697:307): avc: denied { ioctl } for pid=25649 comm="syz.0.5200" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1835.724917][T22641] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1835.796074][T24443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.814908][T24443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.833615][T24443] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1835.875491][T24443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.896931][ T9347] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1835.907723][ T9347] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1835.916948][T24443] usb 5-1: config 0 descriptor?? [ 1835.924902][T22641] usb 4-1: Using ep0 maxpacket: 8 [ 1835.930807][T22641] usb 4-1: config 112 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.961098][T22641] usb 4-1: config 112 has 0 interfaces, different from the descriptor's value: 1 [ 1835.980387][T22641] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1835.999492][T22641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.123921][T24443] usbhid 5-1:0.0: can't add hid device: -71 [ 1836.130505][T24443] usbhid: probe of 5-1:0.0 failed with error -71 [ 1836.146311][T24443] usb 5-1: USB disconnect, device number 65 [ 1836.236587][T22641] usb 4-1: string descriptor 0 read error: -71 [ 1836.244259][T22641] usb 4-1: USB disconnect, device number 61 [ 1836.260053][T25660] loop2: detected capacity change from 0 to 40427 [ 1836.268362][T25663] loop0: detected capacity change from 0 to 40427 [ 1836.275589][T25660] F2FS-fs (loop2): fault_type options not supported [ 1836.278654][T25663] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1836.293025][T25663] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1836.294926][T25660] F2FS-fs (loop2): invalid crc value [ 1836.307428][T25663] F2FS-fs (loop0): invalid crc value [ 1836.308744][T25660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1836.335075][T25663] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1836.359832][T25660] F2FS-fs (loop2): Start checkpoint disabled! [ 1836.375050][T25660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1836.405591][ T28] audit: type=1400 audit(1733273147.537:308): avc: denied { ioctl } for pid=25659 comm="syz.2.5204" path="/438/file1/file0" dev="loop2" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1836.443551][T25679] loop1: detected capacity change from 0 to 512 [ 1836.459862][T25663] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1836.466907][T25663] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1836.499234][ T9347] kworker/u4:0: attempt to access beyond end of device [ 1836.499234][ T9347] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1836.534047][T25679] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1836.543243][T25679] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1836.578712][ T28] audit: type=1400 audit(1733273147.707:309): avc: denied { setattr } for pid=25678 comm="syz.1.5210" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1836.620352][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1836.706312][ T28] audit: type=1400 audit(1733273147.837:310): avc: denied { read } for pid=25686 comm="syz.4.5213" name="usbmon6" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1836.707495][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5212'. [ 1836.794318][T25693] loop4: detected capacity change from 0 to 512 [ 1836.803569][ T28] audit: type=1400 audit(1733273147.857:311): avc: denied { open } for pid=25686 comm="syz.4.5213" path="/dev/usbmon6" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1836.832892][T25699] loop3: detected capacity change from 0 to 512 [ 1836.841336][T25693] EXT4-fs: Ignoring removed orlov option [ 1836.853192][T25693] EXT4-fs: Invalid want_extra_isize 3 [ 1836.865154][ T28] audit: type=1400 audit(1733273147.867:312): avc: denied { ioctl } for pid=25686 comm="syz.4.5213" path="/dev/usbmon6" dev="devtmpfs" ino=173 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1836.897044][T25663] F2FS-fs (loop0): Start checkpoint disabled! [ 1836.902657][ T28] audit: type=1400 audit(1733273148.027:313): avc: denied { remount } for pid=25662 comm="syz.0.5206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1836.914280][T25699] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.5217: inode #1: comm syz.3.5217: iget: illegal inode # [ 1836.960034][T25699] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.5217: error while reading EA inode 1 err=-117 [ 1837.013389][T25714] loop1: detected capacity change from 0 to 128 [ 1837.022596][T25699] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.5217: inode #1: comm syz.3.5217: iget: illegal inode # [ 1837.036030][T25714] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1837.048542][T25714] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1837.057701][T25699] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.5217: error while reading EA inode 1 err=-117 [ 1837.090305][T25699] EXT4-fs (loop3): 1 orphan inode deleted [ 1837.103925][T25718] loop2: detected capacity change from 0 to 2048 [ 1837.116127][T25699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1837.146532][T25699] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 254: comm syz.3.5217: bad entry in directory: rec_len is too small for name_len - offset=784, inode=21, rec_len=240, size=1024 fake=0 [ 1837.195304][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1837.208841][T25718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1837.239006][T14519] EXT4-fs (loop2): unmounting filesystem. [ 1837.379117][T25751] loop1: detected capacity change from 0 to 512 [ 1837.390320][T25756] loop3: detected capacity change from 0 to 256 [ 1837.396846][T25751] EXT4-fs: Ignoring removed i_version option [ 1837.415919][T25751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1837.447635][T25751] EXT4-fs (loop1): 1 truncate cleaned up [ 1837.453203][T25751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1837.484003][T25766] loop2: detected capacity change from 0 to 128 [ 1837.541277][T25766] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1837.545566][T25769] loop3: detected capacity change from 0 to 256 [ 1837.632282][T25766] FAT-fs (loop2): Filesystem has been set read-only [ 1837.681531][T25766] syz.2.5243: attempt to access beyond end of device [ 1837.681531][T25766] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1837.736068][T25773] loop3: detected capacity change from 0 to 4096 [ 1837.743184][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1837.759034][T25766] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1837.768036][T25767] loop4: detected capacity change from 0 to 8192 [ 1837.774251][T25766] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1837.782980][T25766] syz.2.5243: attempt to access beyond end of device [ 1837.782980][T25766] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1837.803728][T25767] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1837.824617][T25766] syz.2.5243: attempt to access beyond end of device [ 1837.824617][T25766] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1837.825617][T25773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1837.838332][T25766] syz.2.5243: attempt to access beyond end of device [ 1837.838332][T25766] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1837.847484][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1837.859651][T25766] syz.2.5243: attempt to access beyond end of device [ 1837.859651][T25766] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1837.878850][T25781] loop0: detected capacity change from 0 to 512 [ 1837.882479][T25767] FAT-fs (loop4): Filesystem has been set read-only [ 1837.894046][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1837.902809][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1837.912531][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1837.921504][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1837.921521][ T28] audit: type=1400 audit(1733273149.047:322): avc: denied { create } for pid=25772 comm="syz.3.5245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1837.921683][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1837.930858][ T28] audit: type=1400 audit(1733273149.057:323): avc: denied { read } for pid=25772 comm="syz.3.5245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1837.969192][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1838.031756][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1838.040534][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1838.058247][ T28] audit: type=1400 audit(1733273149.057:324): avc: denied { open } for pid=25772 comm="syz.3.5245" path="/464/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1838.067898][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1838.102339][T25781] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1838.122019][ T28] audit: type=1400 audit(1733273149.157:325): avc: denied { remove_name } for pid=25772 comm="syz.3.5245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1838.122178][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1838.167253][ T28] audit: type=1400 audit(1733273149.157:326): avc: denied { rename } for pid=25772 comm="syz.3.5245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1838.216408][T25767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1838.216645][T25781] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.5248: bad orphan inode 131083 [ 1838.226248][ T28] audit: type=1400 audit(1733273149.157:327): avc: denied { unlink } for pid=25772 comm="syz.3.5245" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1838.252453][T25781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1838.291491][ T28] audit: type=1400 audit(1733273149.347:328): avc: denied { write } for pid=25786 comm="syz.1.5250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1838.300216][T25781] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.5248: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1838.311202][ T28] audit: type=1400 audit(1733273149.417:329): avc: denied { rename } for pid=25780 comm="syz.0.5248" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1838.351142][T25781] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 1838.365503][T25798] xt_hashlimit: size too large, truncated to 1048576 [ 1838.372491][ T28] audit: type=1400 audit(1733273149.417:330): avc: denied { reparent } for pid=25780 comm="syz.0.5248" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1838.397847][T25781] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.5248: Deleting old file: nlink 5, error=-117 [ 1838.415789][ T28] audit: type=1400 audit(1733273149.497:331): avc: denied { setopt } for pid=25797 comm="syz.4.5254" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1838.475959][T15122] EXT4-fs (loop0): unmounting filesystem. [ 1838.554948][T24443] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1838.598406][T25805] loop0: detected capacity change from 0 to 128 [ 1838.670423][T25805] FAT-fs (loop0): error, clusters badly computed (0 != 1) [ 1838.678075][T25805] FAT-fs (loop0): Filesystem has been set read-only [ 1838.684599][T25805] FAT-fs (loop0): error, clusters badly computed (1 != 2) [ 1838.706428][T25805] FAT-fs (loop0): error, clusters badly computed (2 != 3) [ 1838.722045][T25805] FAT-fs (loop0): error, clusters badly computed (3 != 4) [ 1838.731579][T25805] FAT-fs (loop0): error, clusters badly computed (4 != 5) [ 1838.735995][T24443] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1838.747350][T25805] FAT-fs (loop0): error, clusters badly computed (5 != 6) [ 1838.754342][T24443] usb 3-1: config 0 has no interface number 0 [ 1838.760486][T25805] FAT-fs (loop0): error, clusters badly computed (6 != 7) [ 1838.767661][T25805] FAT-fs (loop0): error, clusters badly computed (7 != 8) [ 1838.775280][T25805] FAT-fs (loop0): error, clusters badly computed (8 != 9) [ 1838.782436][T25805] FAT-fs (loop0): error, clusters badly computed (9 != 10) [ 1838.790011][T24443] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=16.5f [ 1838.799097][T25805] FAT-fs (loop0): error, clusters badly computed (10 != 11) [ 1838.806362][T24443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.814223][T25805] FAT-fs (loop0): error, clusters badly computed (11 != 12) [ 1838.821779][T24443] usb 3-1: Product: syz [ 1838.826608][T25805] FAT-fs (loop0): error, clusters badly computed (12 != 13) [ 1838.833874][T24443] usb 3-1: Manufacturer: syz [ 1838.838541][T24443] usb 3-1: SerialNumber: syz [ 1838.843017][T25805] FAT-fs (loop0): error, clusters badly computed (13 != 14) [ 1838.850823][T25805] FAT-fs (loop0): error, clusters badly computed (14 != 15) [ 1838.858231][T24443] usb 3-1: config 0 descriptor?? [ 1838.863434][T25805] FAT-fs (loop0): error, clusters badly computed (15 != 16) [ 1838.872491][T25805] FAT-fs (loop0): error, clusters badly computed (16 != 17) [ 1838.881029][T25805] FAT-fs (loop0): error, clusters badly computed (17 != 18) [ 1838.888474][T25805] FAT-fs (loop0): error, clusters badly computed (18 != 19) [ 1838.896332][T25805] FAT-fs (loop0): error, clusters badly computed (19 != 20) [ 1838.903639][T25805] FAT-fs (loop0): error, clusters badly computed (20 != 21) [ 1838.905355][T22641] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1838.911135][T25805] FAT-fs (loop0): error, clusters badly computed (21 != 22) [ 1838.925578][T25805] FAT-fs (loop0): error, clusters badly computed (22 != 23) [ 1838.932741][T25805] FAT-fs (loop0): error, clusters badly computed (23 != 24) [ 1838.940200][T25805] FAT-fs (loop0): error, clusters badly computed (24 != 25) [ 1838.947628][T25805] FAT-fs (loop0): error, clusters badly computed (25 != 26) [ 1838.984933][ T6] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1839.001743][T25819] loop0: detected capacity change from 0 to 256 [ 1839.025923][T25817] loop4: detected capacity change from 0 to 8192 [ 1839.073744][ T469] usb 3-1: USB disconnect, device number 67 [ 1839.128666][T25826] loop4: detected capacity change from 0 to 256 [ 1839.134985][T22641] usb 2-1: Using ep0 maxpacket: 8 [ 1839.147876][T22641] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1839.153628][T25828] loop0: detected capacity change from 0 to 1024 [ 1839.159740][T25826] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1839.175667][T22641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1839.186473][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1839.196783][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1839.206499][T22641] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1839.215981][T22641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1839.219035][T25828] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1839.226964][T22641] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1839.235772][T25828] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1839.245076][T22641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.263240][ T6] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1839.274013][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.282627][ T6] usb 4-1: Product: syz [ 1839.284184][T25828] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.5266: corrupted xattr block 128 [ 1839.297278][T22641] usb 2-1: config 0 descriptor?? [ 1839.305546][T25828] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 1839.308914][T25835] netlink: 'syz.4.5268': attribute type 6 has an invalid length. [ 1839.314457][ T6] usb 4-1: Manufacturer: syz [ 1839.322152][T25835] netlink: 'syz.4.5268': attribute type 7 has an invalid length. [ 1839.326910][T25828] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.5266: corrupted xattr block 128 [ 1839.334473][T25835] netlink: 'syz.4.5268': attribute type 8 has an invalid length. [ 1839.346259][T25806] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1839.361150][ T6] usb 4-1: SerialNumber: syz [ 1839.365998][T25836] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.5266: corrupted xattr block 128 [ 1839.386654][T25828] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 1839.389490][ T6] usb 4-1: config 0 descriptor?? [ 1839.400381][T25838] loop4: detected capacity change from 0 to 2048 [ 1839.401136][T25811] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1839.407095][T25828] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.5266: corrupted xattr block 128 [ 1839.415745][T25836] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 1839.434592][T25811] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1839.440535][T25828] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 1839.453848][T25838] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 1839.462799][T25838] System zones: 0-7 [ 1839.463647][T25827] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #15: comm syz.0.5266: corrupted xattr block 128 [ 1839.467231][T25838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1839.479577][T25827] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 1839.504165][T25838] EXT4-fs (loop4): shut down requested (2) [ 1839.504308][T15122] EXT4-fs (loop0): unmounting filesystem. [ 1839.524410][T14586] EXT4-fs (loop4): unmounting filesystem. [ 1839.533142][T25843] loop0: detected capacity change from 0 to 512 [ 1839.548084][T25843] EXT4-fs: Ignoring removed mblk_io_submit option [ 1839.554602][T25843] ext4: Unknown parameter 'noacl' [ 1839.617998][T25852] loop0: detected capacity change from 0 to 512 [ 1839.628467][T25852] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5274: invalid block [ 1839.640649][T25852] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5274: invalid indirect mapped block 4294967295 (level 1) [ 1839.658135][T25811] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1839.670810][T25811] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1839.670924][T25852] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5274: invalid indirect mapped block 4294967295 (level 1) [ 1839.694778][T25852] EXT4-fs (loop0): 2 truncates cleaned up [ 1839.700703][T25852] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1839.717437][T25860] loop2: detected capacity change from 0 to 512 [ 1839.730010][T25860] EXT4-fs (loop2): 1 truncate cleaned up [ 1839.736298][T25860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1839.746709][T15122] EXT4-fs (loop0): unmounting filesystem. [ 1839.750035][T25860] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #18: comm syz.2.5277: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 1839.769853][T25860] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1839.798060][T14519] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /450/file2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 1839.819376][T14519] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 1839.830803][T14519] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 1839.852008][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5281'. [ 1839.860889][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5281'. [ 1839.884289][T14519] EXT4-fs (loop2): unmounting filesystem. [ 1840.054285][T25882] loop0: detected capacity change from 0 to 4096 [ 1840.074201][T25882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1840.083669][ T6] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1840.091332][T25882] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #15: comm syz.0.5289: corrupted inode contents [ 1840.103138][T25882] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #15: comm syz.0.5289: mark_inode_dirty error [ 1840.106768][T24443] usb 2-1: USB disconnect, device number 72 [ 1840.122155][T25882] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #15: comm syz.0.5289: corrupted inode contents [ 1840.135541][T25882] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.5289: mark_inode_dirty error [ 1840.147043][T25882] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #15: comm syz.0.5289: corrupted inode contents [ 1840.147489][T25886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1840.159655][T25882] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.5289: mark_inode_dirty error [ 1840.165735][T25886] IPv6: NLM_F_CREATE should be set when creating new route [ 1840.184298][T25882] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #15: comm syz.0.5289: corrupted inode contents [ 1840.198445][T25882] EXT4-fs error (device loop0): ext4_truncate:4313: inode #15: comm syz.0.5289: mark_inode_dirty error [ 1840.209959][T25882] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.5289: couldn't truncate inode 15 (err -117) [ 1840.232518][T15122] EXT4-fs (loop0): unmounting filesystem. [ 1840.239181][T25883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.246302][T25883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.258979][T25883] device bridge_slave_0 entered promiscuous mode [ 1840.268031][T25883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.275142][T25883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.282762][T25883] device bridge_slave_1 entered promiscuous mode [ 1840.373523][T25883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.380431][T25883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1840.387736][T25883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.394606][T25883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1840.430634][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1840.438317][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.445650][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.458174][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1840.466653][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.473510][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1840.507443][T14455] device bridge_slave_0 left promiscuous mode [ 1840.527855][T14455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.540002][T14455] device veth1_macvtap left promiscuous mode [ 1840.546364][T14455] device veth0_vlan left promiscuous mode [ 1840.828948][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1840.837111][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.844052][ T9347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1840.859071][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1840.867143][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1840.880656][T25905] loop4: detected capacity change from 0 to 512 [ 1840.888400][T25905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1840.896159][T25883] device veth0_vlan entered promiscuous mode [ 1840.903470][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1840.908889][T25905] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.5295: corrupted inode contents [ 1840.912529][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1840.927143][T25905] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #16: comm syz.4.5295: mark_inode_dirty error [ 1840.932150][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1840.943904][T25905] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.5295: corrupted inode contents [ 1840.950628][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1840.962281][T25905] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.5295: mark_inode_dirty error [ 1840.970389][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1840.988267][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1840.990977][T25905] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.5295: corrupted inode contents [ 1840.996798][ T6] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1841.015909][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1841.017499][T25905] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 1841.024410][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1841.032321][T25905] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.5295: corrupted inode contents [ 1841.052001][T25905] EXT4-fs error (device loop4): ext4_truncate:4313: inode #16: comm syz.4.5295: mark_inode_dirty error [ 1841.052300][T25883] device veth1_macvtap entered promiscuous mode [ 1841.063873][T25905] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 1841.078924][T25905] EXT4-fs (loop4): 1 truncate cleaned up [ 1841.081028][ T6] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, c2:b1:87:41:c0:6f [ 1841.085766][T25905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1841.097021][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1841.106559][T25905] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1841.114141][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1841.132339][ T6] usb 4-1: USB disconnect, device number 62 [ 1841.139371][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1841.147983][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1841.156428][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1841.163211][ T2803] EXT4-fs error (device loop4): ext4_release_dquot:6811: comm kworker/u4:11: Failed to release dquot type 1 [ 1841.165052][ T6] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 1841.244067][T25914] loop5: detected capacity change from 0 to 256 [ 1841.256367][T25914] FAT-fs (loop5): Directory bread(block 64) failed [ 1841.262731][T25914] FAT-fs (loop5): Directory bread(block 65) failed [ 1841.269545][T25914] FAT-fs (loop5): Directory bread(block 66) failed [ 1841.276676][T25914] FAT-fs (loop5): Directory bread(block 67) failed [ 1841.283231][T25914] FAT-fs (loop5): Directory bread(block 68) failed [ 1841.289696][T25914] FAT-fs (loop5): Directory bread(block 69) failed [ 1841.296127][T25914] FAT-fs (loop5): Directory bread(block 70) failed [ 1841.302449][T25914] FAT-fs (loop5): Directory bread(block 71) failed [ 1841.309433][T25914] FAT-fs (loop5): Directory bread(block 72) failed [ 1841.317977][T14586] EXT4-fs (loop4): unmounting filesystem. [ 1841.318051][T25914] FAT-fs (loop5): Directory bread(block 73) failed [ 1841.504939][T24443] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1841.675499][T25924] loop3: detected capacity change from 0 to 512 [ 1841.694884][T24443] usb 1-1: Using ep0 maxpacket: 16 [ 1841.706004][T24443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1841.725012][T24443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1841.737059][T24443] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1841.737714][T25924] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1841.761466][T24443] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1841.771292][T24443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.782357][T24443] usb 1-1: config 0 descriptor?? [ 1841.785209][T25924] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 1841.798567][T25924] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5301: Corrupt directory, running e2fsck is recommended [ 1841.813014][T25924] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1841.823262][T25924] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.5301: corrupted in-inode xattr [ 1841.836856][T25924] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.5301: couldn't read orphan inode 15 (err -117) [ 1841.850049][T25924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1841.937316][T25924] EXT4-fs error (device loop3): ext4_xattr_set_entry:1619: inode #2: comm syz.3.5301: corrupted xattr entries [ 1841.986990][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1842.332331][T24443] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input4 [ 1842.375677][T25920] loop5: detected capacity change from 0 to 131072 [ 1842.382543][T25920] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 1842.389140][T25920] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1842.394956][T15857] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1842.399315][T25920] F2FS-fs (loop5): invalid crc value [ 1842.412181][T25920] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1842.417240][T24443] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1842.458382][T25920] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1842.465325][T25920] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1842.496497][T25920] fscrypt (loop5, inode 8): Error -61 getting encryption context [ 1842.585978][T15857] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1842.594985][T15857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.603965][T15857] usb 4-1: config 0 descriptor?? [ 1842.649409][T15857] usb 1-1: USB disconnect, device number 74 [ 1842.954944][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1843.155084][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 1843.166391][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.182493][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.195885][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1843.195903][ T28] audit: type=1400 audit(1733273154.327:354): avc: denied { bind } for pid=25944 comm="syz.4.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1843.197473][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1843.202574][ T28] audit: type=1400 audit(1733273154.327:355): avc: denied { name_bind } for pid=25944 comm="syz.4.5307" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1843.221562][ T6] usb 6-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 1843.241904][ T28] audit: type=1400 audit(1733273154.327:356): avc: denied { node_bind } for pid=25944 comm="syz.4.5307" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1843.263178][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.265574][ T28] audit: type=1400 audit(1733273154.397:357): avc: denied { connect } for pid=25942 comm="syz.0.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1843.292535][ T6] usb 6-1: config 0 descriptor?? [ 1843.402308][T25951] loop4: detected capacity change from 0 to 512 [ 1843.409567][T25951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1843.427162][T25951] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1843.437702][T25951] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1843.442752][ T28] audit: type=1400 audit(1733273154.567:358): avc: denied { unmount } for pid=14948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1843.447012][T25951] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.5309: Failed to acquire dquot type 0 [ 1843.478605][T25951] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1843.489754][T25951] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1843.499208][T25951] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.5309: Failed to acquire dquot type 0 [ 1843.515835][T25951] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1843.527100][T25957] loop3: detected capacity change from 0 to 512 [ 1843.533740][T25951] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.5309: Failed to acquire dquot type 0 [ 1843.547203][T25951] EXT4-fs (loop4): 1 orphan inode deleted [ 1843.547328][T25957] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1843.555623][T25951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1843.568266][T25957] EXT4-fs (loop3): 1 truncate cleaned up [ 1843.571381][T25951] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1843.578121][T25957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1843.620328][T25951] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.5309: Failed to acquire dquot type 0 [ 1843.638311][T25951] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.5309: Failed to acquire dquot type 0 [ 1843.659174][T25967] loop1: detected capacity change from 0 to 512 [ 1843.659345][T14586] EXT4-fs (loop4): unmounting filesystem. [ 1843.665960][T25967] EXT4-fs: Ignoring removed mblk_io_submit option [ 1843.678537][T25967] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1843.687665][T25967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 1843.695655][T25967] System zones: 1-12 [ 1843.703390][T25967] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.5314: corrupted in-inode xattr [ 1843.715501][T25967] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.5314: couldn't read orphan inode 15 (err -117) [ 1843.727626][T25967] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1843.737848][ T6] wacom 0003:056A:00B5.0002: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 1843.748551][ T6] wacom 0003:056A:00B5.0002: hidraw0: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.5-1/input0 [ 1843.760491][ T6] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B5.0002/input/input5 [ 1843.760611][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1843.809671][T25975] loop1: detected capacity change from 0 to 512 [ 1843.818915][T25975] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5317: invalid indirect mapped block 256 (level 2) [ 1843.832407][T25975] EXT4-fs (loop1): Remounting filesystem read-only [ 1843.838936][T25975] EXT4-fs (loop1): 2 truncates cleaned up [ 1843.844988][T25975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1843.857835][T25975] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.5317: bg 0: block 5: invalid block bitmap [ 1843.870461][T25975] EXT4-fs (loop1): Remounting filesystem read-only [ 1843.877155][T25975] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3355443200 > max in inode 15 [ 1843.887961][T25975] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3355443201 > max in inode 15 [ 1843.904595][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1843.947744][ T6] usb 6-1: USB disconnect, device number 2 [ 1844.008737][T25983] loop1: detected capacity change from 0 to 512 [ 1844.034902][T25983] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 1844.380663][T25999] loop1: detected capacity change from 0 to 512 [ 1844.387991][T25999] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1844.437663][T25999] EXT4-fs (loop1): 1 truncate cleaned up [ 1844.443162][T25999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1844.586843][T26003] loop5: detected capacity change from 0 to 256 [ 1844.694893][T26003] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5cae190c, utbl_chksum : 0xe619d30d) [ 1845.055058][T24443] usb 4-1: USB disconnect, device number 63 [ 1845.063369][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1845.105717][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1845.168698][T26016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5330'. [ 1845.180043][T26015] loop5: detected capacity change from 0 to 512 [ 1845.218732][T26015] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.5332: casefold flag without casefold feature [ 1845.236153][T26015] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.5332: couldn't read orphan inode 15 (err -117) [ 1845.254986][T26024] loop3: detected capacity change from 0 to 512 [ 1845.261803][T26026] loop1: detected capacity change from 0 to 512 [ 1845.287911][T26015] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1845.352345][T25883] EXT4-fs (loop5): unmounting filesystem. [ 1845.369914][T26026] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1845.387926][T26026] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1845.417469][T26026] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #2: comm syz.1.5336: corrupted inode contents [ 1845.432095][T26037] loop4: detected capacity change from 0 to 1024 [ 1845.439107][T26037] EXT4-fs: Ignoring removed bh option [ 1845.457437][T26026] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #2: comm syz.1.5336: mark_inode_dirty error [ 1845.469318][T26026] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #2: comm syz.1.5336: corrupted inode contents [ 1845.476632][T26037] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1845.502513][T26043] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #2: comm syz.1.5336: corrupted inode contents [ 1845.514719][T26043] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #2: comm syz.1.5336: mark_inode_dirty error [ 1845.528606][T26043] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #2: comm syz.1.5336: corrupted inode contents [ 1845.538549][T26037] EXT4-fs (loop4): mount failed [ 1845.552230][T26043] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.5336: mark_inode_dirty error [ 1845.563682][T26043] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #2: comm syz.1.5336: corrupted inode contents [ 1845.584807][T26043] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #2: comm syz.1.5336: mark_inode_dirty error [ 1845.614711][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1845.671731][T26060] loop3: detected capacity change from 0 to 1024 [ 1845.678402][T26060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1845.711566][T26060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1845.721947][T26069] loop1: detected capacity change from 0 to 2048 [ 1845.752044][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1845.766637][T26069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1845.766740][T26073] capability: warning: `syz.4.5356' uses deprecated v2 capabilities in a way that may be insecure [ 1845.775239][T26069] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1845.795899][T24443] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1845.821487][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1845.858672][T26078] kvm: emulating exchange as write [ 1845.924902][T22641] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1845.974878][T24443] usb 6-1: Using ep0 maxpacket: 32 [ 1845.982323][T24443] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1845.999620][T24443] usb 6-1: config 14 has an invalid interface number: 127 but max is 0 [ 1846.016772][T24443] usb 6-1: config 14 has no interface number 0 [ 1846.029714][T24443] usb 6-1: config 14 interface 127 has no altsetting 0 [ 1846.116111][T22641] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 1846.124719][T22641] usb 1-1: config 0 has no interface number 0 [ 1846.126102][T24443] usb 6-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 1846.139623][T22641] usb 1-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1846.139658][T22641] usb 1-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1846.156180][T22641] usb 1-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 1846.161194][T24443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.178284][T24443] usb 6-1: Product: syz [ 1846.180174][T22641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.182317][T24443] usb 6-1: Manufacturer: syz [ 1846.195830][T24443] usb 6-1: SerialNumber: syz [ 1846.200884][T22641] usb 1-1: Product: syz [ 1846.206370][T22641] usb 1-1: Manufacturer: syz [ 1846.210813][T22641] usb 1-1: SerialNumber: syz [ 1846.534040][T22641] usb 1-1: config 0 descriptor?? [ 1846.540839][T24443] usb-storage 6-1:14.127: USB Mass Storage device detected [ 1846.553572][T22641] snd-usb-audio: probe of 1-1:0.216 failed with error -2 [ 1846.566179][T17756] udevd[17756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.216/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1846.656833][T24443] usb 6-1: USB disconnect, device number 3 [ 1846.751582][T26109] loop4: detected capacity change from 0 to 256 [ 1846.758584][T22641] usb 1-1: USB disconnect, device number 75 [ 1846.769183][T26109] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1846.977411][T26139] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1847.030746][T26146] loop3: detected capacity change from 0 to 256 [ 1847.037870][T26146] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1847.074213][T26151] loop5: detected capacity change from 0 to 512 [ 1847.090642][T26151] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1847.100107][T26151] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1847.115057][ T362] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1847.115566][T26151] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #18: comm syz.5.5387: corrupted inode contents [ 1847.134490][T26151] EXT4-fs (loop5): Remounting filesystem read-only [ 1847.141808][T26151] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #18: comm syz.5.5387: mark_inode_dirty error [ 1847.153509][T26151] EXT4-fs (loop5): Remounting filesystem read-only [ 1847.159924][T26151] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #18: comm syz.5.5387: corrupted inode contents [ 1847.169545][T26160] loop1: detected capacity change from 0 to 512 [ 1847.178034][T26151] EXT4-fs (loop5): Remounting filesystem read-only [ 1847.192113][T26151] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2954: inode #18: comm syz.5.5387: mark_inode_dirty error [ 1847.204511][T26160] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1847.214601][T26151] EXT4-fs (loop5): Remounting filesystem read-only [ 1847.221230][T26151] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2957: inode #18: comm syz.5.5387: mark inode dirty (error -117) [ 1847.234675][T26151] EXT4-fs (loop5): Remounting filesystem read-only [ 1847.241519][T26151] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 1847.251685][T26160] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1847.266720][T26160] EXT4-fs (loop1): 1 truncate cleaned up [ 1847.275785][T26169] syz.3.5393 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1847.281178][T26160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1847.295581][T25883] EXT4-fs (loop5): unmounting filesystem. [ 1847.304902][ T362] usb 5-1: Using ep0 maxpacket: 8 [ 1847.310913][T26160] EXT4-fs (loop1): shut down requested (2) [ 1847.355097][T26176] loop5: detected capacity change from 0 to 1024 [ 1847.362620][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1847.367434][T26176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1847.404092][T26181] tmpfs: Unknown parameter 'if' [ 1847.404435][ T362] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1847.424317][T26176] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1847.433108][ T362] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1847.463124][T25883] EXT4-fs (loop5): unmounting filesystem. [ 1847.476172][ T362] usb 5-1: can't read configurations, error -71 [ 1847.547702][T26199] loop1: detected capacity change from 0 to 2048 [ 1847.566234][T26199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1847.576909][T26199] process 'syz.1.5406' launched './file1' with NULL argv: empty string added [ 1847.591820][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1847.755029][T24443] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1847.986622][T24443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1848.057348][T24443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1848.107336][T24443] usb 4-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 1848.143178][T24443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.185829][T24443] usb 4-1: config 0 descriptor?? [ 1849.113049][T24443] wacom 0003:056A:0090.0003: hidraw0: USB HID v40.00 Device [HID 056a:0090] on usb-dummy_hcd.3-1/input0 [ 1849.141468][ T362] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1849.163728][T26262] loop5: detected capacity change from 0 to 1024 [ 1849.181532][T26262] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.5430: Invalid block bitmap block 0 in block_group 0 [ 1849.195212][T26262] __quota_error: 36 callbacks suppressed [ 1849.195233][T26262] Quota error (device loop5): write_blk: dquota write failed [ 1849.208566][T26262] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1849.218784][T26262] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.5430: Failed to acquire dquot type 0 [ 1849.230572][T26262] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.5430: Freeing blocks not in datazone - block = 0, count = 4096 [ 1849.244242][T26262] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.5430: Invalid inode bitmap blk 0 in block_group 0 [ 1849.257673][T26262] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 1849.265774][ T2803] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 1849.266775][T26262] EXT4-fs (loop5): 1 orphan inode deleted [ 1849.275089][ T2803] EXT4-fs error (device loop5): ext4_release_dquot:6811: comm kworker/u4:11: Failed to release dquot type 0 [ 1849.280989][T26262] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1849.314989][T24443] usb 4-1: USB disconnect, device number 64 [ 1849.315150][T25883] EXT4-fs (loop5): unmounting filesystem. [ 1849.653915][T14455] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 1849.669319][ T362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1849.673616][T14455] EXT4-fs error (device loop5): ext4_release_dquot:6811: comm kworker/u4:4: Failed to release dquot type 0 [ 1849.690271][ T362] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1849.699732][ T362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.715827][ T362] usb 5-1: config 0 descriptor?? [ 1849.738749][ T28] audit: type=1400 audit(1733273160.857:389): avc: denied { map } for pid=26276 comm="syz.5.5431" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1849.771309][ T28] audit: type=1400 audit(1733273160.857:390): avc: denied { call } for pid=26276 comm="syz.5.5431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1849.812734][T26282] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5437'. [ 1850.730565][T26291] loop3: detected capacity change from 0 to 128 [ 1850.738770][T26292] netlink: 'syz.0.5440': attribute type 5 has an invalid length. [ 1850.766030][T26291] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1850.777781][ T28] audit: type=1400 audit(1733273161.907:391): avc: denied { setcheckreqprot } for pid=26295 comm="syz.1.5442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1850.798310][T26296] SELinux: syz.1.5442 (26296) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release. [ 1850.810874][T26296] SELinux: https://github.com/SELinuxProject/selinux-kernel/wiki/DEPRECATE-checkreqprot [ 1850.812034][T26291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1850.829592][T26291] ext4 filesystem being mounted at /499/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1850.848466][T26291] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1850.858971][T26291] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1850.877070][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1850.956467][ T362] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 1851.154096][T24443] usb 5-1: USB disconnect, device number 67 [ 1851.224917][T22641] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1851.225008][ T6] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1851.414902][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 1851.421586][ T6] usb 6-1: config 0 interface 0 altsetting 25 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.433326][ T6] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1851.440197][T22641] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1851.449272][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=0221, bcdDevice= 0.00 [ 1851.458451][T22641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.466368][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.479374][T22641] usb 4-1: config 0 descriptor?? [ 1851.502292][ T6] usb 6-1: config 0 descriptor?? [ 1851.747429][T26314] loop4: detected capacity change from 0 to 128 [ 1851.778180][T26314] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1851.787609][T26314] ext4 filesystem being mounted at /506/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1851.892574][T14586] EXT4-fs (loop4): unmounting filesystem. [ 1851.923015][ T6] apple 0003:05AC:0221.0005: unknown main item tag 0x5 [ 1851.930278][ T6] apple 0003:05AC:0221.0005: unknown main item tag 0x3 [ 1852.118424][ T6] apple 0003:05AC:0221.0005: item fetching failed at offset 2/5 [ 1852.127054][ T6] apple 0003:05AC:0221.0005: parse failed [ 1852.132811][ T6] apple: probe of 0003:05AC:0221.0005 failed with error -22 [ 1852.150729][ T6] usb 6-1: USB disconnect, device number 4 [ 1852.555145][ T28] audit: type=1400 audit(1733273163.617:392): avc: denied { write } for pid=26318 comm="syz.4.5449" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1852.730324][T26322] input: syz1 as /devices/virtual/input/input11 [ 1852.813135][T22641] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1852.823029][T22641] asix: probe of 4-1:0.0 failed with error -71 [ 1852.829689][T22641] usb 4-1: USB disconnect, device number 65 [ 1852.874982][T24443] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1853.066939][T24443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.078229][T24443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.100258][T24443] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1853.114262][T24443] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1853.124334][T24443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.177146][T24443] usb 5-1: config 0 descriptor?? [ 1853.346592][ T28] audit: type=1326 audit(1733273164.477:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26332 comm="syz.3.5451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x0 [ 1853.624658][T24443] logitech 0003:046D:C293.0006: unknown main item tag 0x0 [ 1853.631737][T24443] logitech 0003:046D:C293.0006: unknown main item tag 0x0 [ 1853.639491][T24443] logitech 0003:046D:C293.0006: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.4-1/input0 [ 1853.650694][T24443] logitech 0003:046D:C293.0006: no inputs found [ 1853.814360][T26339] loop5: detected capacity change from 0 to 4096 [ 1853.823628][T26339] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1853.837744][ T28] audit: type=1400 audit(1733273164.967:394): avc: denied { accept } for pid=26318 comm="syz.4.5449" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1853.953926][T25883] EXT4-fs (loop5): unmounting filesystem. [ 1854.117731][T26361] loop5: detected capacity change from 0 to 512 [ 1854.129042][T26361] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.5461: inode #1: comm syz.5.5461: iget: illegal inode # [ 1854.142687][T26361] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.5461: error while reading EA inode 1 err=-117 [ 1854.155155][T26361] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.5461: inode #1: comm syz.5.5461: iget: illegal inode # [ 1854.168551][T26361] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.5461: error while reading EA inode 1 err=-117 [ 1854.181696][T26361] EXT4-fs (loop5): 1 orphan inode deleted [ 1854.193611][T26361] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1854.193685][T26366] loop3: detected capacity change from 0 to 512 [ 1854.219574][T26366] EXT4-fs (loop3): 1 orphan inode deleted [ 1854.225365][T26366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1854.234317][T26366] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1854.258534][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1854.288788][T26373] loop3: detected capacity change from 0 to 256 [ 1854.318319][T25883] EXT4-fs (loop5): unmounting filesystem. [ 1854.323661][T26375] loop3: detected capacity change from 0 to 512 [ 1854.346401][T26375] EXT4-fs: Ignoring removed nobh option [ 1854.360043][T26375] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1854.376024][T26381] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5468'. [ 1854.386703][T26375] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1854.387653][T26381] loop5: detected capacity change from 0 to 256 [ 1854.403676][T26381] exfat: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1854.428471][T26375] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5465: bg 0: block 224: padding at end of block bitmap is not set [ 1854.442879][T26375] EXT4-fs (loop3): Remounting filesystem read-only [ 1854.540312][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1854.540329][ T28] audit: type=1400 audit(1733273165.667:396): avc: denied { mount } for pid=26395 comm="syz.3.5474" name="/" dev="ramfs" ino=105563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1854.569806][ T28] audit: type=1400 audit(1733273165.697:397): avc: denied { unmount } for pid=14819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1854.604731][T26400] binder: 26399:26400 ioctl c0306201 0 returned -14 [ 1854.624205][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5477'. [ 1854.633053][T26402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5477'. [ 1854.938741][T22641] usb 5-1: USB disconnect, device number 68 [ 1855.268568][T26417] kvm [26416]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x81 [ 1855.312068][ T28] audit: type=1400 audit(1733273166.437:398): avc: denied { setattr } for pid=26419 comm="syz.4.5483" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1855.987484][T26444] input: syz1 as /devices/virtual/input/input12 [ 1855.998405][ T28] audit: type=1400 audit(1733273167.127:399): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=4602 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1856.022787][ T28] audit: type=1400 audit(1733273167.127:400): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4602 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1856.046445][ T28] audit: type=1400 audit(1733273167.127:401): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4602 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1856.119128][T26451] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5495'. [ 1856.143088][ T28] audit: type=1400 audit(1733273167.267:402): avc: denied { getattr } for pid=26452 comm="syz.1.5496" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1856.230736][T26437] kvm [26436]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1856.285053][T26312] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1856.292608][T22641] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1856.338581][T26437] kvm [26436]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1856.356904][T26437] kvm [26436]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1856.374978][T26437] kvm [26436]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1856.392836][T26437] kvm [26436]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1856.440034][T26437] kvm [26436]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1856.455125][ T6] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1856.484969][T22641] usb 5-1: Using ep0 maxpacket: 16 [ 1856.491206][T26312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1856.502529][T26312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1856.512877][T22641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1856.523850][T26312] usb 6-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 1856.533097][T22641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1856.543485][T26312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.551779][T22641] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1856.565374][T22641] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1856.574760][T26312] usb 6-1: config 0 descriptor?? [ 1856.580096][T22641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.590653][T22641] usb 5-1: config 0 descriptor?? [ 1856.646494][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1856.654698][ T6] usb 2-1: not running at top speed; connect to a high speed hub [ 1856.663790][ T6] usb 2-1: config 8 has an invalid interface number: 150 but max is 0 [ 1856.672443][ T6] usb 2-1: config 8 has an invalid interface descriptor of length 5, skipping [ 1856.681575][ T6] usb 2-1: config 8 has an invalid interface descriptor of length 7, skipping [ 1856.690894][ T6] usb 2-1: config 8 descriptor has 1 excess byte, ignoring [ 1856.698308][ T6] usb 2-1: config 8 has no interface number 0 [ 1856.704500][ T6] usb 2-1: config 8 interface 150 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1856.718376][ T6] usb 2-1: config 8 interface 150 has no altsetting 0 [ 1856.727106][ T6] usb 2-1: New USB device found, idVendor=1781, idProduct=0c30, bcdDevice=86.70 [ 1856.736542][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.744579][ T6] usb 2-1: Product: syz [ 1856.749199][ T6] usb 2-1: Manufacturer: syz [ 1856.753838][ T6] usb 2-1: SerialNumber: syz [ 1856.939430][T26462] loop3: detected capacity change from 0 to 1024 [ 1856.945978][T26462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1856.952882][T26462] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1856.964671][T26462] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1856.978285][ T28] audit: type=1400 audit(1733273168.107:403): avc: denied { mount } for pid=26461 comm="syz.3.5500" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1857.001965][T22641] ryos 0003:1E7D:31CE.0007: unknown main item tag 0x0 [ 1857.009569][ T6] ftdi_sio 2-1:8.150: FTDI USB Serial Device converter detected [ 1857.017574][T26312] hid (null): global environment stack underflow [ 1857.024783][T26312] hid-generic 0003:18D1:5030.0008: global environment stack underflow [ 1857.032851][T22641] ryos 0003:1E7D:31CE.0007: unknown main item tag 0x0 [ 1857.039730][ T6] ftdi_sio ttyUSB0: unknown device type: 0x8670 [ 1857.047231][T22641] ryos 0003:1E7D:31CE.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.4-1/input0 [ 1857.058364][ T6] usb 2-1: USB disconnect, device number 73 [ 1857.064441][ T6] ftdi_sio 2-1:8.150: device disconnected [ 1857.070244][T26312] hid-generic 0003:18D1:5030.0008: item 0 0 1 11 parsing failed [ 1857.077829][T26312] hid-generic: probe of 0003:18D1:5030.0008 failed with error -22 [ 1857.105724][ T28] audit: type=1400 audit(1733273168.237:404): avc: denied { unmount } for pid=14819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1857.135177][ T28] audit: type=1400 audit(1733273168.267:405): avc: denied { append } for pid=26464 comm="syz.3.5501" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1857.203089][ T362] usb 5-1: USB disconnect, device number 69 [ 1857.231536][T13813] usb 6-1: USB disconnect, device number 5 [ 1857.444956][T26312] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1857.464955][T22641] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1857.513055][T26477] loop1: detected capacity change from 0 to 512 [ 1857.519597][T26477] journal_path: Lookup failure for './bus' [ 1857.525874][T26477] EXT4-fs: error: could not find journal device path [ 1857.634930][T26312] usb 1-1: Using ep0 maxpacket: 16 [ 1857.641262][T26312] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 1857.649515][T26312] usb 1-1: config 0 has no interface number 0 [ 1857.655631][T22641] usb 4-1: Using ep0 maxpacket: 32 [ 1857.660566][T26312] usb 1-1: config 0 interface 160 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1857.980703][T26312] usb 1-1: config 0 interface 160 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1857.991666][T22641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1858.001378][T22641] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0003, bcdDevice= 0.00 [ 1858.010861][T22641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.019891][T22641] usb 4-1: config 0 descriptor?? [ 1858.025633][T26312] usb 1-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=6c.f5 [ 1858.034514][T26312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.045882][T26312] usb 1-1: Product: syz [ 1858.051172][T26312] usb 1-1: Manufacturer: syz [ 1858.065027][T26312] usb 1-1: SerialNumber: syz [ 1858.070375][T26312] usb 1-1: config 0 descriptor?? [ 1858.076177][T26469] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1858.083296][T26469] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1858.170201][T26488] kvm [26486]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1858.282104][T26488] kvm [26486]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1858.293903][T26312] asix 1-1:0.160 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1858.304047][T26312] asix: probe of 1-1:0.160 failed with error -71 [ 1858.314782][T26488] kvm [26486]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1858.324941][ T1904] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1858.330510][T26312] usb 1-1: USB disconnect, device number 76 [ 1858.345727][T26488] kvm [26486]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1858.450967][T22641] hid-generic 0003:0DFC:0003.0009: hidraw0: USB HID v0.00 Device [HID 0dfc:0003] on usb-dummy_hcd.3-1/input0 [ 1858.514892][ T1904] usb 5-1: Using ep0 maxpacket: 8 [ 1858.525567][ T1904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.536322][ T1904] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1858.545291][ T1904] usb 5-1: config 1 has no interface number 1 [ 1858.551409][ T1904] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1858.560457][ T1904] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1858.573002][ T1904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1858.574684][T26498] loop1: detected capacity change from 0 to 128 [ 1858.594317][ T1904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.603357][ T1904] usb 5-1: Product: syz [ 1858.607389][T26498] ext4 filesystem being mounted at /502/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1858.622633][ T1904] usb 5-1: Manufacturer: syz [ 1858.627395][ T1904] usb 5-1: SerialNumber: syz [ 1858.655247][ T9488] usb 4-1: USB disconnect, device number 66 [ 1858.842802][ T1904] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1858.855029][ T1904] usb 5-1: 2:1 : format type 91 is not supported yet [ 1858.877346][ T1904] usb 5-1: USB disconnect, device number 70 [ 1859.194985][ T9488] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1859.305042][T24443] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1859.333030][T26533] loop3: detected capacity change from 0 to 512 [ 1859.339614][T26533] EXT4-fs: Ignoring removed i_version option [ 1859.346520][T26533] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1859.358196][T26533] EXT4-fs (loop3): 1 truncate cleaned up [ 1859.400505][T26538] loop4: detected capacity change from 0 to 128 [ 1859.406792][ T9488] usb 2-1: Using ep0 maxpacket: 32 [ 1859.413552][ T9488] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 1859.422394][T26538] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1859.429257][ T9488] usb 2-1: config 0 has no interface number 0 [ 1859.436854][T26538] ext4 filesystem being mounted at /514/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1859.448933][ T9488] usb 2-1: New USB device found, idVendor=0079, idProduct=245b, bcdDevice=85.be [ 1859.460592][ T9488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.468813][ T9488] usb 2-1: Product: syz [ 1859.472902][ T9488] usb 2-1: Manufacturer: syz [ 1859.477857][ T9488] usb 2-1: SerialNumber: syz [ 1859.483494][ T9488] usb 2-1: config 0 descriptor?? [ 1859.494923][T24443] usb 6-1: Using ep0 maxpacket: 32 [ 1859.502845][T24443] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.514248][T24443] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.525486][T24443] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1859.534889][T24443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.559334][T24443] usb 6-1: config 0 descriptor?? [ 1859.565347][T24443] hub 6-1:0.0: USB hub found [ 1860.734780][T26562] request_module fs-hfsplus succeeded, but still no fs? [ 1860.772274][T24443] hub 6-1:0.0: 1 port detected [ 1860.795007][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1860.795067][ T28] audit: type=1400 audit(1733273171.447:410): avc: denied { nlmsg_write } for pid=26558 comm="syz.4.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1860.994604][ T9488] usb 2-1: USB disconnect, device number 74 [ 1861.151739][T26589] loop4: detected capacity change from 0 to 1024 [ 1861.344976][T15194] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1861.354918][ T1904] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1861.554962][ T1904] usb 1-1: Using ep0 maxpacket: 16 [ 1861.560099][T15194] usb 4-1: Using ep0 maxpacket: 16 [ 1861.566427][T15194] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 1861.574443][T15194] usb 4-1: config 0 has no interface number 0 [ 1861.580402][ T1904] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1861.591461][ T1904] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1861.602266][ T1904] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1861.615148][ T1904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1861.621681][ T1904] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1861.630608][ T1904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.639231][T15194] usb 4-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=df.5d [ 1861.648660][ T1904] usb 1-1: config 0 descriptor?? [ 1861.653505][T15194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.661319][T15194] usb 4-1: Product: syz [ 1861.666088][T15194] usb 4-1: Manufacturer: syz [ 1861.670526][T15194] usb 4-1: SerialNumber: syz [ 1861.675761][T15194] usb 4-1: config 0 descriptor?? [ 1861.695268][ T9488] hub 6-1:0.0: activate --> -90 [ 1861.886587][T15194] usb 4-1: USB disconnect, device number 67 [ 1861.933409][T24443] usb 6-1: USB disconnect, device number 6 [ 1861.939479][ T9488] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1861.946318][ T9488] usb 6-1-port1: connect-debounce failed [ 1862.005173][ T28] audit: type=1400 audit(1733273173.137:411): avc: denied { module_load } for pid=26598 comm="syz.4.5552" path="/sys/power/wakeup_count" dev="sysfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1862.070451][ T1904] hid-led 0003:1294:1320.000A: unknown main item tag 0x0 [ 1862.077676][ T1904] hid-led 0003:1294:1320.000A: unknown main item tag 0x0 [ 1862.081035][T26602] loop4: detected capacity change from 0 to 256 [ 1862.085708][ T1904] hid-led 0003:1294:1320.000A: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 1862.103702][ T1904] hid-led 0003:1294:1320.000A: Riso Kagaku Webmail Notifier initialized [ 1862.132790][ T28] audit: type=1400 audit(1733273173.257:412): avc: denied { wake_alarm } for pid=26603 comm="syz.4.5554" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1862.241050][ T28] audit: type=1400 audit(1733273173.367:413): avc: denied { ioctl } for pid=26609 comm="syz.4.5557" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1862.282367][T24443] usb 1-1: USB disconnect, device number 77 [ 1862.288866][ T1904] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1862.297008][ T1904] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1862.305228][ T1904] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1862.354954][T26614] loop4: detected capacity change from 0 to 512 [ 1862.368248][T26614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1862.387390][T26614] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1862.464261][T26624] loop1: detected capacity change from 0 to 8192 [ 1862.522462][T26629] loop5: detected capacity change from 0 to 256 [ 1862.542552][T26629] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1862.552684][T26629] FAT-fs (loop5): Filesystem has been set read-only [ 1862.578642][T26631] loop5: detected capacity change from 0 to 512 [ 1862.597665][T26631] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1862.611610][T26631] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.5566: corrupted inode contents [ 1862.623584][T26631] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #2: comm syz.5.5566: mark_inode_dirty error [ 1862.635344][T26631] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.5566: corrupted inode contents [ 1862.647329][T26631] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.5566: mark_inode_dirty error [ 1862.665251][ T28] audit: type=1400 audit(1733273173.797:414): avc: denied { rmdir } for pid=26630 comm="syz.5.5566" name="file0" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1862.665259][T26631] EXT4-fs error (device loop5): __ext4_get_inode_loc:4508: comm syz.5.5566: Invalid inode table block 178 in block_group 0 [ 1862.665465][T26631] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1862.708935][T26631] EXT4-fs error (device loop5): ext4_rmdir:3252: inode #18: comm syz.5.5566: mark_inode_dirty error [ 1862.732906][T25883] EXT4-fs error (device loop5): __ext4_get_inode_loc:4508: comm syz-executor: Invalid inode table block 178 in block_group 0 [ 1862.746502][T25883] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1862.756167][T25883] EXT4-fs error (device loop5): __ext4_unlink:3327: inode #2: comm syz-executor: mark_inode_dirty error [ 1862.811164][ T28] audit: type=1400 audit(1733273173.937:415): avc: denied { bind } for pid=26638 comm="syz.0.5569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1862.832104][ T28] audit: type=1400 audit(1733273173.937:416): avc: denied { ioctl } for pid=26638 comm="syz.0.5569" path="socket:[106348]" dev="sockfs" ino=106348 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1862.832113][T25883] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1862.858402][T26312] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1863.052774][T26645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.060005][T26645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.067704][T26645] device bridge_slave_0 entered promiscuous mode [ 1863.074463][T26645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.081544][T26645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.083592][T26312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1863.089272][T26645] device bridge_slave_1 entered promiscuous mode [ 1863.098334][T26312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1863.115827][T26312] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1863.124892][T26312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.133619][T26312] usb 2-1: Product: syz [ 1863.137797][T26312] usb 2-1: Manufacturer: syz [ 1863.142281][T26312] usb 2-1: SerialNumber: syz [ 1863.150693][T26312] usb 2-1: config 0 descriptor?? [ 1863.155879][T26633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1863.162915][T26633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1863.219055][T26645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.225975][T26645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.233053][T26645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.239855][T26645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.307077][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1863.322471][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1863.331041][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1863.340662][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1863.349366][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1863.366601][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1863.376889][T26633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1863.380341][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1863.392902][T26633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1863.405802][T26661] loop3: detected capacity change from 0 to 512 [ 1863.422091][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1863.431367][T26661] ext4 filesystem being mounted at /534/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1863.436085][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1863.452322][T26645] device veth0_vlan entered promiscuous mode [ 1863.463538][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1863.463661][ T28] audit: type=1400 audit(1733273174.587:417): avc: denied { ioctl } for pid=26660 comm="syz.3.5577" path="/534/bus/file2" dev="loop3" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1863.471203][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1863.510622][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1863.519056][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1863.529071][T26645] device veth1_macvtap entered promiscuous mode [ 1863.546266][T14455] device bridge_slave_1 left promiscuous mode [ 1863.553821][T14455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.562106][T14455] device bridge_slave_0 left promiscuous mode [ 1863.568289][T14455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.582056][T14455] device veth1_macvtap left promiscuous mode [ 1863.588024][T14455] device veth0_vlan left promiscuous mode [ 1863.709881][T26671] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5581'. [ 1863.721623][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1863.730202][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1863.739837][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1863.774678][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1863.795865][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1863.845690][T26679] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5572'. [ 1863.845690][ T28] audit: type=1400 audit(1733273174.977:418): avc: denied { nlmsg_read } for pid=26676 comm="syz.6.5572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1863.875926][T26312] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1864.002319][T26687] loop6: detected capacity change from 0 to 512 [ 1864.010618][T26687] EXT4-fs: Ignoring removed i_version option [ 1864.095575][T26687] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1864.134459][T26687] EXT4-fs (loop6): 1 truncate cleaned up [ 1864.766251][T26312] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1864.790710][T26312] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 56:1f:5d:59:f4:37 [ 1864.837616][T26312] usb 2-1: USB disconnect, device number 75 [ 1864.846567][T26703] loop4: detected capacity change from 0 to 512 [ 1864.853314][T26312] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 1864.866163][T26703] EXT4-fs: Ignoring removed nobh option [ 1864.872701][T26703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1864.897416][T26703] EXT4-fs (loop4): 1 truncate cleaned up [ 1864.939749][T26703] syz.4.5591 (pid 26703) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1864.955935][T26703] fscrypt: key with description 'fscrypt:0000111122223333' is too short (got 19 bytes, need 32+ bytes) [ 1864.961744][T26715] loop3: detected capacity change from 0 to 128 [ 1864.966992][T26703] fscrypt: key with description 'fscrypt:0000111122223333' is too short (got 19 bytes, need 32+ bytes) [ 1864.993967][T26703] fscrypt: key with description 'fscrypt:0000111122223333' is too short (got 19 bytes, need 32+ bytes) [ 1865.027706][T26715] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1865.066988][T26703] fscrypt: key with description 'fscrypt:0000111122223333' is too short (got 19 bytes, need 32+ bytes) [ 1865.173085][T26732] loop4: detected capacity change from 0 to 256 [ 1865.189884][T26732] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1865.235752][T26732] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1865.263326][T26743] xt_hashlimit: size too large, truncated to 1048576 [ 1865.574914][ T362] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1865.775259][ T362] usb 1-1: Using ep0 maxpacket: 32 [ 1865.783441][ T362] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.785428][T26771] loop4: detected capacity change from 0 to 128 [ 1865.804966][ T362] usb 1-1: config 0 has no interfaces? [ 1865.811523][ T362] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1865.813579][T26771] ext4 filesystem being mounted at /541/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1865.821095][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.839351][ T362] usb 1-1: config 0 descriptor?? [ 1865.893450][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1865.893468][ T28] audit: type=1400 audit(1733273177.017:423): avc: denied { ioctl } for pid=26778 comm="syz.4.5608" path="socket:[106796]" dev="sockfs" ino=106796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1865.926643][T26779] netlink: 'syz.4.5608': attribute type 25 has an invalid length. [ 1865.934338][T26779] netlink: 'syz.4.5608': attribute type 8 has an invalid length. [ 1866.061206][T24443] usb 1-1: USB disconnect, device number 78 [ 1866.105268][T26794] loop4: detected capacity change from 0 to 1024 [ 1866.140205][ T28] audit: type=1400 audit(1733273177.267:424): avc: denied { module_load } for pid=26792 comm="syz.4.5614" path="/547/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=system permissive=1 [ 1866.140337][T26794] Invalid ELF header len 10 [ 1866.256592][ T28] audit: type=1400 audit(1733273177.387:425): avc: denied { write } for pid=26801 comm="syz.3.5617" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1866.266826][T26800] loop1: detected capacity change from 0 to 1024 [ 1866.292097][ T28] audit: type=1400 audit(1733273177.417:426): avc: denied { read } for pid=26801 comm="syz.3.5617" dev="nsfs" ino=4026532457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1866.301064][T26800] EXT4-fs: quotafile must be on filesystem root [ 1866.317746][ T28] audit: type=1400 audit(1733273177.417:427): avc: denied { open } for pid=26801 comm="syz.3.5617" path="net:[4026532457]" dev="nsfs" ino=4026532457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1866.485725][T26822] loop6: detected capacity change from 0 to 512 [ 1866.517096][T26822] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #3: comm syz.6.5627: corrupted inode contents [ 1866.529097][T26822] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #3: comm syz.6.5627: mark_inode_dirty error [ 1866.541279][T26822] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #3: comm syz.6.5627: corrupted inode contents [ 1866.553450][T26822] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.5627: mark_inode_dirty error [ 1866.565177][T26822] Quota error (device loop6): write_blk: dquota write failed [ 1866.572930][T26822] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1866.582716][T26822] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.5627: Failed to acquire dquot type 0 [ 1866.593702][ T362] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1866.594289][T26822] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.5627: corrupted inode contents [ 1866.613064][T26822] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #16: comm syz.6.5627: mark_inode_dirty error [ 1866.624752][T26822] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.5627: corrupted inode contents [ 1866.636931][T26822] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.5627: mark_inode_dirty error [ 1866.648473][T26822] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.5627: corrupted inode contents [ 1866.663107][T26822] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 1866.671865][T26822] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.5627: corrupted inode contents [ 1866.685445][T26822] EXT4-fs error (device loop6): ext4_truncate:4313: inode #16: comm syz.6.5627: mark_inode_dirty error [ 1866.698761][T26822] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 1866.710077][T26822] EXT4-fs (loop6): 1 truncate cleaned up [ 1866.716704][T26822] EXT4-fs mount: 28 callbacks suppressed [ 1866.716732][T26822] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1866.734966][T26822] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1866.776349][ T28] audit: type=1400 audit(1733273177.907:428): avc: denied { remount } for pid=26828 comm="syz.0.5628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1866.797433][ T362] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.808095][ T362] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1866.817896][ T362] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1866.834185][T26645] EXT4-fs (loop6): unmounting filesystem. [ 1866.840056][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1866.873236][ T362] usb 4-1: SerialNumber: syz [ 1866.896573][ T28] audit: type=1400 audit(1733273178.027:429): avc: denied { create } for pid=26843 comm="syz.6.5635" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1866.921730][ T28] audit: type=1400 audit(1733273178.047:430): avc: denied { write } for pid=26843 comm="syz.6.5635" name="file0" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1867.066927][T26861] loop4: detected capacity change from 0 to 512 [ 1867.088555][ T362] usb 4-1: 0:2 : does not exist [ 1867.098156][T26861] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1867.102310][ T362] usb 4-1: unit 5: unexpected type 0x09 [ 1867.107433][T26861] ext4 filesystem being mounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1867.135009][ T362] usb 4-1: USB disconnect, device number 68 [ 1867.142351][T14586] EXT4-fs (loop4): unmounting filesystem. [ 1867.207538][T26867] loop4: detected capacity change from 0 to 512 [ 1867.221720][T26867] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1867.235851][T26869] loop6: detected capacity change from 0 to 512 [ 1867.265627][T17756] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1867.323226][ T1904] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1867.346339][T26875] loop6: detected capacity change from 0 to 512 [ 1867.351117][T26877] loop1: detected capacity change from 0 to 128 [ 1867.363184][T26877] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1867.371186][T26877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1867.371533][T26875] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.5648: Failed to acquire dquot type 0 [ 1867.380442][T26877] ext4 filesystem being mounted at /520/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1867.402156][T26875] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.5648: Failed to acquire dquot type 0 [ 1867.414189][T26875] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.5648: Failed to acquire dquot type 0 [ 1867.425656][T26875] EXT4-fs (loop6): 1 orphan inode deleted [ 1867.431291][T26875] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1867.432682][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1867.440125][T26875] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1867.467548][T26875] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.5648: Failed to acquire dquot type 0 [ 1867.492734][T26645] EXT4-fs (loop6): unmounting filesystem. [ 1867.525197][ T1904] usb 1-1: Using ep0 maxpacket: 32 [ 1867.545587][ T1904] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1867.551088][T26887] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5654'. [ 1867.563406][ T1904] usb 1-1: config 0 has no interface number 0 [ 1867.563626][T26887] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5654'. [ 1867.586783][ T1904] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1867.604966][ T1904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.620565][ T1904] usb 1-1: Product: syz [ 1867.645116][ T1904] usb 1-1: Manufacturer: syz [ 1867.649634][ T1904] usb 1-1: SerialNumber: syz [ 1867.661277][T26893] loop1: detected capacity change from 0 to 2048 [ 1867.682332][T26893] EXT4-fs: Ignoring removed bh option [ 1867.685702][ T1904] usb 1-1: config 0 descriptor?? [ 1867.695777][ T1904] smsc95xx v2.0.0 [ 1867.719338][T26897] input: syz1 as /devices/virtual/input/input14 [ 1867.745068][T26893] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1867.858639][T26898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.865834][T26898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.875887][T26898] device bridge_slave_0 entered promiscuous mode [ 1867.884191][T26898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.891533][T26898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.899790][T26898] device bridge_slave_1 entered promiscuous mode [ 1867.901047][ T1904] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1868.027385][T26911] virtio-fs: tag <(null)> not found [ 1868.052563][ T1904] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 1868.060794][ T1904] usb 1-1: USB disconnect, device number 79 [ 1868.152429][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1868.161990][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1868.188947][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1868.205905][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1868.222578][T17012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.229498][T17012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1868.241987][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1868.257786][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1868.266171][T17012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.273044][T17012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1868.292740][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1868.308656][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1868.316765][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1868.336621][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1868.351651][T26898] device veth0_vlan entered promiscuous mode [ 1868.360310][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1868.369767][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1868.377711][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1868.395648][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1868.405242][T26898] device veth1_macvtap entered promiscuous mode [ 1868.420716][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1868.442545][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1868.687796][T26936] loop7: detected capacity change from 0 to 512 [ 1868.696090][ T599] device bridge_slave_0 left promiscuous mode [ 1868.704195][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.722243][T26936] EXT4-fs: Ignoring removed i_version option [ 1868.729429][T26936] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1868.745802][ T599] device veth1_macvtap left promiscuous mode [ 1868.751780][ T599] device veth0_vlan left promiscuous mode [ 1868.759497][T26936] EXT4-fs (loop7): 1 truncate cleaned up [ 1868.775111][T26936] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1868.806757][T26898] EXT4-fs (loop7): unmounting filesystem. [ 1868.857924][T26949] loop7: detected capacity change from 0 to 1024 [ 1868.912703][T26949] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1868.984496][T26961] loop1: detected capacity change from 0 to 1024 [ 1868.991550][T26961] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1869.001904][T26961] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1869.027490][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1869.201665][T26979] device wg2 entered promiscuous mode [ 1869.205706][T26980] loop1: detected capacity change from 0 to 512 [ 1869.236882][T26980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1869.248157][T26980] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1869.301701][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1869.384669][T26999] 9pnet_fd: Insufficient options for proto=fd [ 1869.392395][T26999] overlayfs: failed to resolve './file1': -2 [ 1869.430216][T27005] loop1: detected capacity change from 0 to 128 [ 1869.459088][T27005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1869.471312][T27005] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1869.568057][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1869.762929][T26898] EXT4-fs (loop7): unmounting filesystem. [ 1869.900715][T27037] loop3: detected capacity change from 0 to 512 [ 1869.915317][T27037] EXT4-fs: Ignoring removed i_version option [ 1869.935812][T27038] loop1: detected capacity change from 0 to 1024 [ 1869.941952][T27037] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1869.948363][T27038] EXT4-fs: Ignoring removed orlov option [ 1869.952675][T27040] loop7: detected capacity change from 0 to 512 [ 1869.972672][T27038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1869.973790][T27040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1869.990773][T27037] EXT4-fs (loop3): 1 truncate cleaned up [ 1869.998478][T27037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1870.000425][T27038] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1870.035202][T27040] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1870.055622][T27040] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1870.135554][T27040] EXT4-fs (loop7): 1 truncate cleaned up [ 1870.147306][T14948] EXT4-fs (loop1): unmounting filesystem. [ 1870.153206][T27040] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1870.247137][T27040] serio: Serial port ptm0 [ 1870.282444][T27040] EXT4-fs (loop7): unmounting filesystem. [ 1870.288941][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1871.035391][T27080] loop3: detected capacity change from 0 to 512 [ 1871.072859][T27080] EXT4-fs: Ignoring removed i_version option [ 1871.079579][T27080] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1871.094530][T27080] EXT4-fs (loop3): 1 truncate cleaned up [ 1871.100524][T27080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1871.343671][T27090] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5729'. [ 1871.370624][T27095] serio: Serial port pts0 [ 1871.407789][ T1904] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1871.459165][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1871.610192][T27121] loop3: detected capacity change from 0 to 512 [ 1871.636015][ T1904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1871.647545][T27121] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1871.650740][ T1904] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1871.662943][ T1904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.664187][T27121] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1871.672126][ T1904] usb 2-1: config 0 descriptor?? [ 1871.684230][T27121] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1871.693275][T27121] EXT4-fs (loop3): 1 truncate cleaned up [ 1871.699270][T27121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1871.710706][T27121] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1871.717531][T27121] serio: Serial port ptm0 [ 1871.734052][T27121] EXT4-fs (loop3): unmounting filesystem. [ 1871.865373][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1871.865389][ T28] audit: type=1326 audit(1733273182.997:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1871.925375][ T28] audit: type=1326 audit(1733273183.057:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1871.985413][ T28] audit: type=1326 audit(1733273183.117:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1872.045405][ T28] audit: type=1326 audit(1733273183.177:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1872.105503][ T28] audit: type=1326 audit(1733273183.237:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1872.165540][ T28] audit: type=1326 audit(1733273183.297:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1872.225519][ T28] audit: type=1326 audit(1733273183.357:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1872.285430][ T28] audit: type=1326 audit(1733273183.417:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1872.309963][ T1904] hid-led: probe of 0003:0FC5:B080.000B failed with error -71 [ 1872.318623][ T1904] usb 2-1: USB disconnect, device number 76 [ 1872.345439][ T28] audit: type=1326 audit(1733273183.477:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1872.405408][ T28] audit: type=1326 audit(1733273183.537:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08777ff19 code=0x7fc00000 [ 1872.666489][T27155] loop3: detected capacity change from 0 to 512 [ 1872.690796][T27155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1872.732329][T27155] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1872.740541][T27155] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1872.749163][T27155] EXT4-fs (loop3): 1 truncate cleaned up [ 1872.754763][T27155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1872.766465][T27155] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 4: comm syz.3.5753: lblock 0 mapped to illegal pblock 4 (length 1) [ 1872.802136][T27155] EXT4-fs (loop3): Remounting filesystem read-only [ 1872.841177][T27155] EXT4-fs (loop3): unmounting filesystem. [ 1872.849315][T27166] tmpfs: Unknown parameter 'if' [ 1872.923503][T27170] input: syz0 as /devices/virtual/input/input15 [ 1873.344972][ T362] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1873.535853][ T362] usb 4-1: Using ep0 maxpacket: 8 [ 1873.695505][ T362] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1873.718032][ T362] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1873.725570][ T362] usb 4-1: can't read configurations, error -71 [ 1873.959345][T27198] loop7: detected capacity change from 0 to 128 [ 1874.008514][T27198] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1874.026155][T27198] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1874.084383][T27198] EXT4-fs (loop7): shut down requested (0) [ 1874.158417][T26898] EXT4-fs (loop7): unmounting filesystem. [ 1874.302013][T27207] loop7: detected capacity change from 0 to 1024 [ 1874.334704][T27207] EXT4-fs: Ignoring removed mblk_io_submit option [ 1874.379255][T27207] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1874.399954][T27207] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1874.445040][T27207] EXT4-fs error (device loop7): __ext4_get_inode_loc:4508: comm syz.7.5770: Invalid inode table block 0 in block_group 0 [ 1874.477751][T27221] serio: Serial port pts0 [ 1874.512280][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.528561][T27207] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1874.595028][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.614570][T27207] EXT4-fs error (device loop7): ext4_quota_write:7183: inode #3: comm syz.7.5770: mark_inode_dirty error [ 1874.645290][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.651817][T27207] EXT4-fs error (device loop7): ext4_acquire_dquot:6788: comm syz.7.5770: Failed to acquire dquot type 0 [ 1874.697192][T27229] xt_hashlimit: size too large, truncated to 1048576 [ 1874.699625][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.720557][T27207] EXT4-fs error (device loop7): __ext4_get_inode_loc:4508: comm syz.7.5770: Invalid inode table block 0 in block_group 0 [ 1874.762448][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.779900][T27207] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1874.817023][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.824506][T27207] EXT4-fs error (device loop7): ext4_ext_truncate:4453: inode #15: comm syz.7.5770: mark_inode_dirty error [ 1874.839510][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.846420][T27207] EXT4-fs error (device loop7): __ext4_get_inode_loc:4508: comm syz.7.5770: Invalid inode table block 0 in block_group 0 [ 1874.873475][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.887160][T27207] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1874.898238][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.905091][T27207] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 1874.919663][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.929181][T27207] EXT4-fs error (device loop7): __ext4_get_inode_loc:4508: comm syz.7.5770: Invalid inode table block 0 in block_group 0 [ 1874.942131][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.949056][T27207] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1874.962004][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.969521][T27207] EXT4-fs error (device loop7): ext4_truncate:4313: inode #15: comm syz.7.5770: mark_inode_dirty error [ 1874.983909][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1874.990865][T27207] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 1875.011375][T27242] overlayfs: invalid redirect ((null)) [ 1875.036162][T27207] EXT4-fs (loop7): Remounting filesystem read-only [ 1875.043392][T27207] EXT4-fs (loop7): 1 truncate cleaned up [ 1875.051083][T27207] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1875.123866][T27207] EXT4-fs error (device loop7): __ext4_get_inode_loc:4508: comm syz.7.5770: Invalid inode table block 0 in block_group 0 [ 1875.158343][T27249] loop1: detected capacity change from 0 to 256 [ 1875.168945][T26898] EXT4-fs (loop7): unmounting filesystem. [ 1875.174157][T27249] exfat: Bad value for 'uid' [ 1875.676232][T27265] loop7: detected capacity change from 0 to 512 [ 1875.757111][T27265] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1875.819315][T27265] EXT4-fs (loop7): 1 truncate cleaned up [ 1875.824806][T27265] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1875.841054][T27268] loop3: detected capacity change from 0 to 512 [ 1875.865219][T27268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1875.878922][T27268] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1875.936056][T27268] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1875.945075][T27273] loop6: detected capacity change from 0 to 256 [ 1875.961230][T27268] EXT4-fs warning (device loop3): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1875.979717][T26898] EXT4-fs (loop7): unmounting filesystem. [ 1875.985674][T27273] exfat: Bad value for 'uid' [ 1875.991979][T27268] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1875.998929][T27268] EXT4-fs (loop3): 1 truncate cleaned up [ 1876.004478][T27268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1876.045625][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1876.117512][T27278] loop3: detected capacity change from 0 to 256 [ 1876.144597][T27279] loop6: detected capacity change from 0 to 1024 [ 1876.204019][T27279] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1876.219857][T27279] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1876.263946][T26645] EXT4-fs (loop6): unmounting filesystem. [ 1876.425134][T27304] loop1: detected capacity change from 0 to 256 [ 1876.431554][T27304] exfat: Bad value for 'uid' [ 1876.514206][T27295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.522000][T27295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.529534][T27295] device bridge_slave_0 entered promiscuous mode [ 1876.538506][T16660] device bridge_slave_1 left promiscuous mode [ 1876.544522][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.551954][T16660] device bridge_slave_0 left promiscuous mode [ 1876.559055][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.569103][T16660] device veth1_macvtap left promiscuous mode [ 1876.576506][T16660] device veth0_vlan left promiscuous mode [ 1876.697323][T27295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.704440][T27295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.711891][T27295] device bridge_slave_1 entered promiscuous mode [ 1876.790817][T27295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.797749][T27295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1876.804811][T27295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.811691][T27295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1876.822365][T27344] device pim6reg1 entered promiscuous mode [ 1876.845457][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.852645][ T599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.860880][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1876.868406][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1876.885359][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1876.893773][ T599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.900762][ T599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1876.908903][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1876.917265][ T599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.924152][ T599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1876.933394][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1876.942107][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1876.960345][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1876.973544][T27295] device veth0_vlan entered promiscuous mode [ 1876.980332][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1876.988674][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1876.997912][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1877.013278][T27295] device veth1_macvtap entered promiscuous mode [ 1877.020394][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'. [ 1877.029325][T27354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.037408][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1877.051279][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1877.068112][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1877.247799][T27383] loop8: detected capacity change from 0 to 256 [ 1877.254163][T27383] exfat: Bad value for 'uid' [ 1877.285672][ T321] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1877.314692][T27390] syz.8.5847[27390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1877.314779][T27390] syz.8.5847[27390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1877.527837][T27412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1877.546097][T27412] IPv6: NLM_F_CREATE should be set when creating new route [ 1877.574527][T27418] loop6: detected capacity change from 0 to 256 [ 1877.581341][T27418] exfat: Bad value for 'uid' [ 1877.625372][ T321] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1877.669353][T27431] loop6: detected capacity change from 0 to 2048 [ 1877.677945][T27431] EXT4-fs error (device loop6): __ext4_fill_super:5387: inode #2: comm syz.6.5865: casefold flag without casefold feature [ 1877.690963][T27431] EXT4-fs (loop6): get root inode failed [ 1877.696741][T27431] EXT4-fs (loop6): mount failed [ 1877.752312][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1877.752331][ T28] audit: type=1400 audit(1733273188.877:468): avc: denied { create } for pid=27429 comm="syz.6.5865" name="#147" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1877.779628][ T28] audit: type=1400 audit(1733273188.877:469): avc: denied { link } for pid=27429 comm="syz.6.5865" name="#147" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1877.802177][ T28] audit: type=1400 audit(1733273188.877:470): avc: denied { rename } for pid=27429 comm="syz.6.5865" name="#148" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1878.381378][T27465] input: syz1 as /devices/virtual/input/input18 [ 1878.543382][T27475] loop8: detected capacity change from 0 to 2048 [ 1878.578751][T27477] loop3: detected capacity change from 0 to 512 [ 1878.585556][T27477] EXT4-fs: Ignoring removed i_version option [ 1878.591861][T27477] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1878.604393][T27477] EXT4-fs (loop3): 1 truncate cleaned up [ 1878.604424][T27477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1879.082057][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1879.175858][T27489] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1879.289771][T27497] input: syz1 as /devices/virtual/input/input19 [ 1879.342044][T27501] loop3: detected capacity change from 0 to 128 [ 1879.351685][T27501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1879.361339][T27501] ext4 filesystem being mounted at /597/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1879.405585][T14819] EXT4-fs (loop3): unmounting filesystem. [ 1879.451673][T27509] loop3: detected capacity change from 0 to 2048 [ 1879.528778][T27519] loop8: detected capacity change from 0 to 1024 [ 1879.541687][T27519] EXT4-fs: Ignoring removed oldalloc option [ 1879.557249][T27520] xt_TCPMSS: Only works on TCP SYN packets [ 1879.564745][T27519] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1879.593105][T27295] EXT4-fs (loop8): unmounting filesystem. [ 1879.758933][T27528] loop0: detected capacity change from 0 to 512 [ 1879.847794][T27528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1879.936368][T27528] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1880.037964][T27528] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1880.169446][T27528] EXT4-fs (loop0): 1 truncate cleaned up [ 1880.213729][T27528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1880.337316][T27528] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1880.357102][T27543] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1880.368662][T27543] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1880.377300][T27543] CPU: 1 PID: 27543 Comm: syz.1.5909 Not tainted 6.1.115-syzkaller-00045-g997d1e6f69f1 #0 [ 1880.387131][T27543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1880.397009][T27528] serio: Serial port ptm0 [ 1880.397295][T27543] RIP: 0010:filename_create+0x2d8/0x530 [ 1880.406951][T27543] Code: 92 00 00 00 4c 89 7c 24 28 45 84 e4 0f 95 c0 83 7c 24 14 00 0f 94 c3 20 c3 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 1f 02 00 00 45 8b 26 41 bd 00 00 70 00 be [ 1880.426490][T27543] RSP: 0018:ffffc90000a47cc0 EFLAGS: 00010247 [ 1880.432387][T27543] RAX: 0000000000000000 RBX: 1ffff92000148f00 RCX: dffffc0000000000 [ 1880.440198][T27543] RDX: ffffc9000269e000 RSI: 0000000000000176 RDI: 0000000000000177 [ 1880.448009][T27543] RBP: ffffc90000a47db0 R08: ffffffff81cc18f8 R09: fffff52000148f71 [ 1880.455833][T27543] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1880.463632][T27543] R13: 0000000000000600 R14: 0000000000000006 R15: ffffc90000a47e60 [ 1880.471532][T27543] FS: 00007f454b3ff6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1880.480396][T27543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1880.486992][T27543] CR2: 0000000000000000 CR3: 000000012828e000 CR4: 00000000003526a0 [ 1880.494802][T27543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1880.502607][T27543] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1880.510415][T27543] Call Trace: [ 1880.513537][T27543] [ 1880.516322][T27543] ? __die_body+0x62/0xb0 [ 1880.520485][T27543] ? die_addr+0x9f/0xd0 [ 1880.524475][T27543] ? exc_general_protection+0x317/0x4c0 [ 1880.529883][T27543] ? asm_exc_general_protection+0x27/0x30 [ 1880.535411][T27543] ? fast_dput+0x78/0x2a0 [ 1880.539580][T27543] ? filename_create+0x2d8/0x530 [ 1880.544363][T27543] ? kern_path_create+0x1a0/0x1a0 [ 1880.549220][T27543] ? __ia32_sys_get_robust_list+0x90/0x90 [ 1880.554769][T27543] do_mknodat+0x1a4/0x5c0 [ 1880.558943][T27543] ? __check_object_size+0x48e/0x650 [ 1880.564054][T27543] ? strncpy_from_user+0x169/0x2b0 [ 1880.569006][T27543] ? do_o_path+0x230/0x230 [ 1880.573260][T27543] ? getname_flags+0x1fd/0x520 [ 1880.577940][T27543] __x64_sys_mknodat+0xa9/0xc0 [ 1880.582558][T27543] x64_sys_call+0x6cd/0x9a0 [ 1880.586883][T27543] do_syscall_64+0x3b/0xb0 [ 1880.591128][T27543] ? clear_bhb_loop+0x55/0xb0 [ 1880.595685][T27543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1880.601372][T27543] RIP: 0033:0x7f454b57ff19 [ 1880.605637][T27543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1880.625284][T27543] RSP: 002b:00007f454b3ff058 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1880.633617][T27543] RAX: ffffffffffffffda RBX: 00007f454b745fa0 RCX: 00007f454b57ff19 [ 1880.641427][T27543] RDX: 0000000000000040 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1880.649229][T27543] RBP: 00007f454b5f3986 R08: 0000000000000000 R09: 0000000000000000 [ 1880.657075][T27543] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000000 [ 1880.664855][T27543] R13: 0000000000000000 R14: 00007f454b745fa0 R15: 00007ffe2b34e498 [ 1880.672777][T27543] [ 1880.675631][T27543] Modules linked in: [ 1880.702890][T27543] ---[ end trace 0000000000000000 ]--- [ 1880.708633][T27543] RIP: 0010:filename_create+0x2d8/0x530 [ 1880.714478][T27543] Code: 92 00 00 00 4c 89 7c 24 28 45 84 e4 0f 95 c0 83 7c 24 14 00 0f 94 c3 20 c3 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 1f 02 00 00 45 8b 26 41 bd 00 00 70 00 be [ 1880.718376][T27528] EXT4-fs (loop0): unmounting filesystem. [ 1880.734634][T27543] RSP: 0018:ffffc90000a47cc0 EFLAGS: 00010247 [ 1880.748053][T27543] RAX: 0000000000000000 RBX: 1ffff92000148f00 RCX: dffffc0000000000 [ 1880.755925][T27543] RDX: ffffc9000269e000 RSI: 0000000000000176 RDI: 0000000000000177 [ 1880.763875][T27543] RBP: ffffc90000a47db0 R08: ffffffff81cc18f8 R09: fffff52000148f71 [ 1880.779107][T27543] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1880.788381][T27543] R13: 0000000000000600 R14: 0000000000000006 R15: ffffc90000a47e60 [ 1880.796622][T27543] FS: 00007f454b3ff6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1880.805460][T27543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1880.811861][T27543] CR2: 00007f05dcd0cab8 CR3: 000000012828e000 CR4: 00000000003506a0 [ 1880.819847][T27543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1880.827751][T27543] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1880.835568][T27543] Kernel panic - not syncing: Fatal exception [ 1880.841641][T27543] Kernel Offset: disabled [ 1880.845773][T27543] Rebooting in 86400 seconds..