last executing test programs: 10.267013595s ago: executing program 3 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010007da298205c400000000000001090212000100000a000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d29863301b0b811f69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff1eec72b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a14c16837394d2b3673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fb9bec59ae347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbde0f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de14275bf4a53e95235ae13768ab3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd33570000000000000000251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c4c314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829be1827f9df303160df18597efba46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406200b3b1c321cc158dbe17123eace3000000000000000000000000000000000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b675639a26c76840cce40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c0705caae54024cf8ade6396ff44482284f415e5769d9ae8688a8d5516690aae9ce1c785262734723519b042a161e6efabf263a46ba92254a51ff6502470f3038cf6d8d991931cfd82ea97e1b596133e7754908d912d1054d174f5a731c019f152a5ca2e48599b6d563bfcd8c0950f4292769217a6e309452b14e64ae64ad58ced33582a1b3d2e0c300059fb1ee78cdddb827293de267d64bf47c3c8c419683c948e46de8cea0b232da00ff39ebef3b73b3d6fbeecd3f9ff06b7e08ed8ce2b9b9cf2e08975f5959fa7028f68c525ab173c0c553d21bd1e9176abdf799e7a08d2f3c14e1ca99d525bc3af0ca0f48f145c65b10dfc67803aab67f6b631d3d7e237fec4bc6eacc364b7cdd925973705d40c5a614e354d9b92357845d15ea41ad3e3a98396131f835e17f0cbfbdc59453991e689f9ce19bd4a3b4121e5a8b5dbb519b5556cb70603ceac0b7ca02cb05a01afa3164ca428add947673cdba49a0e6e8aeeddf52c0f0ef224c69a3c96c2fddf56d74c4ae7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0x9, 0x1ff, 0x7, 0x3}, 0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 7.25081987s ago: executing program 3 (id=304): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x101, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x20100, 0x0) socket(0x10, 0x80002, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8", 0x18) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, r5}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c000000010101010000000000000000020000000c001980080002006a0900003c0002802c00"], 0x5c}}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000140)=[{{0x77359400}}], 0x18) write$input_event(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0xea60}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kvm_test_age_hva\x00'}, 0x10) 6.818580472s ago: executing program 4 (id=305): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB, @ANYRESHEX]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000ec000000001400ff00180001801400020073797a5f74756e000000000000000000080005"], 0x34}}, 0x0) 6.362020936s ago: executing program 3 (id=309): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f0000000280)={[{@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@i_version}]}, 0x1, 0x50a, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gALF4TQSog9gtQNiRtFseModkoTekjPXJGoxAmO/AGce+LCiQuCG5dyQOJHBGqQOHg140nqpHYTNYkdxZ+PNJr35k39/b6m8179kvgFMLSuR8RuRIxFxKcRMZ1dz2VHfNQ+kvue7j1Y2t97sJSLVuuTf+XS9uRadPyZxLXsNYsR8cPvRvwk93zcxvbO2mK1WtnM6rPN2sZsY3vn1mptcaWyUlkvlxfmF+Y+uP1++dz6+lZtLCt9+ckfd7/xsyStqexKZz/OxW771O564TBOYjQivn+uwQZnJOvP2KAT4aXkI+L1iHg7ff6nYyT9agIAV1mrNR2t6c46AHDV5dM1sFy+lK0FTEU+Xyq11/DeiMl8td5o3rxb31pfbq+VzUQhf3e1WpnL1gpnopBL6vNp+Vm9fKx+OyJei4hfjE+k9dJSvbo8yP/4AMAQu3Zs/v/veHv+BwCuuOKgEwAA+s78DwDDx/wPAMPH/A8Aw6c9/08MOg0AoI+8/weA4VN8YRUAuGJ+8PHHydHazz7/evne9tZa/d6t5UpjrVTbWiot1Tc3Siv1+kr6mT21k16vWq9vzL8XW/dnvrnRaM42tnfu1Opb68076ed636kU0rt2+9AzAKCX1956/JdcMiN/OJEe0bGXQ2GgmQEXLT/oBICBGRl0AsDA2O0LhtcZ3uNbHoArossWvUcUu/2CUKvVal1cSsAFu/EF6/8wrDrW//3YLwwZ6/8wvI6u///hOwNLBOi7Vit32j3/47Q3AgCXmzV+oMf3/1/Pzr/Nvjnw4+Xjdzy6yKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcjvY/7eU7QU+Ffl8qRTxSkTMRCF3d7VamYuIVyPiz+OF8aQ+P+CcAYCzyv89l+3/dWP63akjTW9eOyyORcRPf/XJL+8vNpubf4oYy/17/OB681F2vdz/7AGAkx3M0+m54438070HSwdHP/P5x7cjotiOv783FvuH8UdjND0XoxARk//JZfW2XMfaxVnsPoyIz3frfy6m0jWQ9s6nx+MnsV/pS/yJLH7+SPx82tY+J38XnzuHXGDYPE7Gn4+6PX/5uJ6euz//xXSEOrts/Eteamk/HQOfxT8Y/0Z6jH/XTxvjvd9/r12aeL7tYcQXRyMOYu93jD8H8XM94r97yvh//dKbb/dqa/064kZ0j98Za7ZZ25htbO/cWq0trlRWKuvl8sL8wtwHt98vz6Zr1LO9Z4N/fnjz1V5tSf8ne8QvntD/r56y/7/5/6c/+soL4n/9nW7x8/HGC+Inc+LXThl/cfJ3xV5tSfzlHv0/6et/85Txn/xt57ltwwGAwWls76wtVquVTQWFy19I/slegjS6Fr7Vr1hj0b3p5++0n+ljTa3WS8XqNWKcx6obcBkcPvQR8b9BJwMAAAAAAAAAAAAAAHTVj99YGnQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLo+CwAA//8L6NC5") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x3040, 0x10, 0x2, 0x1000, 0x6, 0x3}) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ff010000ef8086dd6001010000161100fe8000000000000000000000000000bbfe8000000010000000000000000000aa00000e2200169078020300008000000030b00afe4e70"], 0x0) (async) r3 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$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") write(r3, &(0x7f00000002c0)="f39883ba61850289a76718a72faa7bc8dd035675f6509eaea6b3b1392798ce45cfe7a8b1a366dc813389db7065ed385df7fef893d92eb5da68311716dbe5eed0d33f8a621bcf16514406fec888d2b67d51f2e32dc1beb18c47ef3b1720ba0ec4b46304a474793d787203f92ebd00b04ea1cda71af644f41f53eec087e0559c7e3c86a88378ba9851552a218b7224814c9c8248acb0ca5d7acc5cff8bab3aefa425481e57df341d051c72bb81a90c7fa94c423872691a2afa23af554546176b5b7251e52b895eded80e9b5ebbd3d70e0b73ddbb89b885ea2c37d0a0", 0xdb) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000030000000000000000000008850000008700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000008500000086000000950000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = dup3(r0, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0x1817c3, 0x0) (async) getpeername(r5, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x80) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)) (async) syz_mount_image$fuse(&(0x7f0000000440), &(0x7f00000005c0)='./file0\x00', 0x20, &(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',max_read=0x000000000000000f,blksize=0x0000000000001000,default_permissions,blksize=0x0000000000000200,max_read=0xfffffffffffffeff,blksize=0x0000000000001000,allow_other,allow_other,allow_other,blksize=0x0000000000001e00,subj_user=::$,smackfsdef=,\x00'], 0x0, 0x0, &(0x7f0000000880)="96b65c3057bd8b8b4d497c369775cdb44b75dd21a7d08c34c63b5cea6e3fc43e5255c3bb98c4df0982f75e35075fe86746ec592cb7514bea79106269366d5d8be4d06b065a50e1297e1da2e892ea65185c96baa78ece6b44192b577185783509ea79b9becbb3fb7eadd146a3c8") (async) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00=\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c00d37a424f"], 0x1, 0x1503, &(0x7f00000021c0)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) 6.224985006s ago: executing program 3 (id=310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb8e, &(0x7f00000017c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.979972275s ago: executing program 3 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r9, &(0x7f0000000080)='.log\x00', 0x0, 0x0) 5.623158631s ago: executing program 4 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c7800000000002020207b1af8ff00000000bfa100000000000007010000f8ffffbfb702000008000000b703000000000000850000002d000000fe00000000000000387def650d48daefc46b099bd07272589511126d885f3b9a2bc07f85258bb0c85ed63b5c97355fbc5d1f3e362a8b945f80"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="201800001000010700006c383032313100"/28], 0x20}}, 0x0) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x88814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2, 0x2}, {@private=0xa010104}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@broadcast, @rand_addr]}]}}}}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0) r11 = dup(r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 5.525800388s ago: executing program 0 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = dup2(r4, r4) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='kfree\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = syz_open_dev$usbmon(0x0, 0x4, 0x88a880) ioctl$MON_IOCX_GET(r10, 0x40189206, 0x0) 5.437690545s ago: executing program 1 (id=315): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) 5.293197605s ago: executing program 1 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a90e26281487d088f9195544f922e3", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x1000, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) 4.877408357s ago: executing program 3 (id=317): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) write$selinux_context(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:hald_mac_exec_t:s0\x00', 0x25) syslog(0xa, &(0x7f0000000240)=""/104, 0x68) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r4, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) 3.76207323s ago: executing program 2 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000440)={[{@journal_async_commit}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@mblk_io_submit}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000008c0)="dc", 0x1}], 0x1, 0x7fff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0/../file0/file0/file0\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) utimes(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x2a, 0x6}]}, {0x0, [0x30, 0x5f, 0x2c]}}, 0x0, 0x2d}, 0x20) mount$9p_virtio(0x0, &(0x7f0000000100)='./file0/../file0/file0/file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x1800, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0xffffffffffffffd1, r7, {0x7, 0x28, 0x0, 0x28da801, 0x0, 0x0, 0x1, 0x401}}, 0x50) socket$inet(0x2, 0x3, 0x5) 3.75509767s ago: executing program 0 (id=319): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) 3.738064122s ago: executing program 0 (id=320): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r7, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) 3.683941785s ago: executing program 4 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c000000000201040000000000000000021000002400028014000180080001000000000008000200ac1414000c00028005000100000000002400038014000180080001000000000008000200000000000c0002800500010000000000300001802c0001800a000300fc00000000000000000000000000000014000400ff010000000000000000000000000001"], 0x8c}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.35757776s ago: executing program 1 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB, @ANYRESHEX]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000ec000000001400ff00180001801400020073797a5f74756e000000000000000000080005"], 0x34}}, 0x0) 3.244897548s ago: executing program 0 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c000000000201040000000000000000021000002400028014000180080001000000000008000200ac1414000c00028005000100000000002400038014000180080001000000000008000200000000000c0002800500010000000000300001802c0001800a000300fc00000000000000000000000000000014000400ff010000000000000000000000000001"], 0x8c}}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.836435668s ago: executing program 2 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x2006}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x1, 0x5, 0x3, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', r1, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 2.748965595s ago: executing program 4 (id=325): ftruncate(0xffffffffffffffff, 0x1f) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendto$inet(r5, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044084}, 0x0) 2.312392248s ago: executing program 0 (id=326): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8bf8ff00000000bfa200000000000007020000f8ffe5ffb703410b755a630ad97a000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="b8"], 0xb8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x3) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="535b47b8083f014f"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) chdir(&(0x7f0000000300)='./bus\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) 2.169763438s ago: executing program 0 (id=327): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800051000000000000006808500000050000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000007c0)='ext4_es_find_extent_range_exit\x00', r6}, 0x10) write(r5, &(0x7f0000004200)='t', 0x1) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000400)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1, 0x7bff, 0x0, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = open(&(0x7f0000000040)='./file1\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x810, r9, 0x0) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r10 = socket$inet6(0xa, 0x1, 0x40) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r10, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a444", 0x1f}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.094367884s ago: executing program 1 (id=328): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x54f, &(0x7f0000000b00)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x7c, 0x1, 0x1400, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0xfffffffd, 0x3}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x0, 0x0) connect$inet(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x30, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x4c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 1.787248427s ago: executing program 2 (id=329): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') readv(r3, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000300)=""/41, 0x29}], 0x2) getpgrp(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002980), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x12, 0x1, 0xfffffff7, 0x8, 0x1]}, &(0x7f0000002240)=0x54) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = epoll_create(0x8002) epoll_wait(r6, &(0x7f0000000080)=[{}], 0x1, 0xcccf) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.444487772s ago: executing program 4 (id=330): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c}) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x41c0b1, 0x108) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000750000009500"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2802}, 0x80) 1.07749009s ago: executing program 1 (id=331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) 1.07691678s ago: executing program 1 (id=332): r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "9635351307938504fc03c70281b497735831d92412a7a4572743ce0c5dd0199b49ec8360f72368400f1ef8416e8670ffe5068649977d426da0149fc041243782", 0x19}, 0x48, 0xfffffffffffffffb) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xbe992aebbb8fba6b, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "14db65a2"}]}}, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000280)="50400b34be", &(0x7f0000000340)=""/203}, 0x20) getsockopt$nfc_llcp(r2, 0x6, 0x1b, 0x0, 0x2000e881) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0xfffffffffffffffd, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xf, 0x10, 0x5, 0x2038, r6, 0xad, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0xf}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) wait4(r8, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18c331475e51a176590000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000001000010701700ff000000000001090224000100000000090400000203000000092100000001220b0009058103"], 0x0) 809.71833ms ago: executing program 2 (id=333): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r7, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) 548.548029ms ago: executing program 2 (id=334): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syslog(0x2, &(0x7f0000006900)=""/91, 0x5b) 422.831298ms ago: executing program 4 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c000000000201040000000000000000021000002400028014000180080001000000000008000200ac1414000c00028005000100000000002400038014000180080001000000000008000200000000000c0002800500010000000000300001802c0001800a000300fc00000000000000000000000000000014000400ff010000000000000000000000000001"], 0x8c}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000b000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) fremovexattr(r0, &(0x7f0000000180)=@random={'os2.', 'sys_enter\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600702, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x6}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1d}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4000881) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000240)='GPL\x00', 0x97c, 0x1000, &(0x7f0000000640)=""/4096, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='xprtrdma_decode_seg\x00', r0}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) kernel console output (not intermixed with test programs): atadv_slave_0 may have been left with an inconsistent configuration, please check. [ 34.213270][ T546] device pim6reg1 entered promiscuous mode [ 34.218298][ T294] lua 0003:1E7D:2C2E.0002: global environment stack underflow [ 34.226395][ T294] lua 0003:1E7D:2C2E.0002: item 0 0 1 11 parsing failed [ 34.234744][ T294] lua 0003:1E7D:2C2E.0002: parse failed [ 34.240723][ T294] lua: probe of 0003:1E7D:2C2E.0002 failed with error -22 [ 34.487939][ T556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'. [ 35.096355][ T313] usb 1-1: USB disconnect, device number 2 [ 35.560756][ T578] loop0: detected capacity change from 0 to 512 [ 35.571177][ T578] EXT4-fs: Ignoring removed orlov option [ 35.580485][ T578] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 36.001891][ T583] loop1: detected capacity change from 0 to 1024 [ 36.009372][ T578] loop0: detected capacity change from 0 to 40427 [ 36.019687][ T583] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.64: casefold flag without casefold feature [ 36.021077][ T578] F2FS-fs (loop0): invalid crc value [ 36.037630][ T583] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 36.040891][ T578] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.048370][ T583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.085604][ T578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 36.433414][ T289] syz-executor: attempt to access beyond end of device [ 36.433414][ T289] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 36.447343][ T594] loop3: detected capacity change from 0 to 1024 [ 36.471909][ T594] EXT4-fs: Ignoring removed orlov option [ 36.517997][ T594] EXT4-fs (loop3): Test dummy encryption mode enabled [ 36.551854][ T594] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.567385][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.576322][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 36.576337][ T28] audit: type=1400 audit(1725251803.936:167): avc: denied { setopt } for pid=593 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.692434][ T28] audit: type=1400 audit(1725251804.036:168): avc: denied { map } for pid=599 comm="syz.4.68" path="socket:[16902]" dev="sockfs" ino=16902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 36.778819][ T594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 36.788674][ T594] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=594 comm=syz.3.67 [ 36.791491][ T28] audit: type=1400 audit(1725251804.156:169): avc: denied { create } for pid=593 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 36.801417][ T594] overlayfs: unrecognized mount option "\" or missing value [ 36.838892][ T28] audit: type=1400 audit(1725251804.156:170): avc: denied { write } for pid=593 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 36.859283][ T28] audit: type=1400 audit(1725251804.166:171): avc: denied { read } for pid=593 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 36.879307][ T28] audit: type=1400 audit(1725251804.166:172): avc: denied { mounton } for pid=593 comm="syz.3.67" path="/14/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.879612][ T290] EXT4-fs (loop3): unmounting filesystem. [ 36.910434][ T608] input: syz0 as /devices/virtual/input/input5 [ 36.943991][ T610] loop3: detected capacity change from 0 to 4096 [ 36.962608][ T610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.037339][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 37.038533][ T610] fsverity_msg: 2 callbacks suppressed [ 37.038545][ T610] fs-verity (loop3, inode 13): Error -27 writing Merkle tree block 8709239245 [ 37.057156][ T610] fs-verity (loop3, inode 13): Error -27 building Merkle tree [ 37.099705][ T290] EXT4-fs (loop3): unmounting filesystem. [ 37.128149][ T28] audit: type=1400 audit(1725251804.496:173): avc: denied { create } for pid=613 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.148468][ T28] audit: type=1400 audit(1725251804.516:174): avc: denied { write } for pid=613 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.167538][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.277421][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 37.286335][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 37.294485][ T19] usb 2-1: SerialNumber: syz [ 37.299640][ T19] usb 2-1: config 0 descriptor?? [ 37.340907][ T28] audit: type=1400 audit(1725251804.706:175): avc: denied { load_policy } for pid=615 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.340939][ T616] SELinux: failed to load policy [ 37.380446][ T618] loop4: detected capacity change from 0 to 1024 [ 37.389548][ T618] EXT4-fs: Ignoring removed orlov option [ 37.395633][ T618] EXT4-fs (loop4): Test dummy encryption mode enabled [ 37.404866][ T618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.420014][ T28] audit: type=1400 audit(1725251804.786:176): avc: denied { create } for pid=617 comm="syz.4.72" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.440475][ T618] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 37.458239][ T292] EXT4-fs (loop4): unmounting filesystem. [ 37.567465][ T19] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 37.574267][ T19] usb 2-1: No valid video chain found. [ 37.707376][ T313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.757582][ T628] loop3: detected capacity change from 0 to 1024 [ 37.764048][ T628] EXT4-fs: Ignoring removed orlov option [ 37.771274][ T628] EXT4-fs (loop3): Test dummy encryption mode enabled [ 37.773554][ T294] usb 2-1: USB disconnect, device number 3 [ 37.783131][ T628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.802845][ T290] EXT4-fs (loop3): unmounting filesystem. [ 37.816393][ T631] overlayfs: unrecognized mount option "verity=off" or missing value [ 37.831245][ T631] loop3: detected capacity change from 0 to 2048 [ 37.849919][ T631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.067427][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.078170][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.127368][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 38.167416][ T313] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 38.176352][ T313] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 38.184117][ T313] usb 1-1: Product: syz [ 38.189199][ T313] usb 1-1: config 0 descriptor?? [ 38.285985][ T291] EXT4-fs (loop1): unmounting filesystem. [ 38.377355][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 38.560312][ T640] input: syz1 as /devices/virtual/input/input6 [ 38.580950][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 38.817400][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.828209][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.829440][ T622] loop0: detected capacity change from 0 to 256 [ 38.841001][ T19] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.867135][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.994368][ T622] syz.0.73: attempt to access beyond end of device [ 38.994368][ T622] loop0: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 38.996360][ T19] usb 4-1: config 0 descriptor?? [ 39.033331][ T622] syz.0.73: attempt to access beyond end of device [ 39.033331][ T622] loop0: rw=2049, sector=608, nr_sectors = 416 limit=256 [ 39.061515][ T622] syz.0.73: attempt to access beyond end of device [ 39.061515][ T622] loop0: rw=2049, sector=1056, nr_sectors = 888 limit=256 [ 39.109716][ T313] konepure 0003:1E7D:2DB4.0003: item fetching failed at offset 10/11 [ 39.117832][ T313] konepure 0003:1E7D:2DB4.0003: parse failed [ 39.123653][ T313] konepure: probe of 0003:1E7D:2DB4.0003 failed with error -22 [ 39.310609][ T313] usb 1-1: USB disconnect, device number 3 [ 39.437393][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 39.443229][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 39.451252][ T19] usb 4-1: USB disconnect, device number 3 [ 39.603201][ T668] input: syz0 as /devices/virtual/input/input7 [ 39.814182][ T43] kworker/u4:2: attempt to access beyond end of device [ 39.814182][ T43] loop0: rw=1, sector=256, nr_sectors = 288 limit=256 [ 39.827789][ T43] kworker/u4:2: attempt to access beyond end of device [ 39.827789][ T43] loop0: rw=1, sector=608, nr_sectors = 416 limit=256 [ 39.841682][ T43] kworker/u4:2: attempt to access beyond end of device [ 39.841682][ T43] loop0: rw=1, sector=1056, nr_sectors = 888 limit=256 [ 39.841944][ T290] EXT4-fs (loop3): unmounting filesystem. [ 39.915617][ T678] loop0: detected capacity change from 0 to 128 [ 39.922547][ T678] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.930094][ T678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.938581][ T678] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038 (0x7fffffff) [ 39.999217][ T681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 40.104461][ T678] EXT4-fs warning (device loop0): ext4_group_extend:1899: can't read last block, resize aborted [ 40.154997][ T289] EXT4-fs (loop0): unmounting filesystem. [ 40.198067][ T685] loop0: detected capacity change from 0 to 512 [ 40.211968][ T685] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 40.220088][ T685] System zones: 0-2, 18-18, 34-35 [ 40.225422][ T688] FAULT_INJECTION: forcing a failure. [ 40.225422][ T688] name failslab, interval 1, probability 0, space 0, times 1 [ 40.226178][ T685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.237923][ T688] CPU: 0 PID: 688 Comm: syz.1.86 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0 [ 40.247144][ T685] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 40.255956][ T688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 40.255979][ T688] Call Trace: [ 40.255984][ T688] [ 40.255991][ T688] dump_stack_lvl+0x151/0x1b7 [ 40.256011][ T688] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 40.256025][ T688] ? __stack_depot_save+0x36/0x480 [ 40.256043][ T688] dump_stack+0x15/0x1c [ 40.300383][ T688] should_fail_ex+0x3d0/0x520 [ 40.304978][ T688] ? p9_client_create+0xd1/0x11c0 [ 40.310281][ T688] __should_failslab+0xaf/0xf0 [ 40.314871][ T688] should_failslab+0x9/0x20 [ 40.319211][ T688] __kmem_cache_alloc_node+0x3d/0x250 [ 40.324421][ T688] ? p9_client_create+0xd1/0x11c0 [ 40.329281][ T688] kmalloc_trace+0x2a/0xa0 [ 40.333551][ T688] p9_client_create+0xd1/0x11c0 [ 40.338224][ T688] ? do_trace_9p_fid_put+0x110/0x110 [ 40.343341][ T688] ? kasan_save_alloc_info+0x1f/0x30 [ 40.348476][ T688] ? __kasan_kmalloc+0x9c/0xb0 [ 40.353152][ T688] ? kstrdup+0x54/0x70 [ 40.357060][ T688] v9fs_session_init+0x1f2/0x1950 [ 40.361918][ T688] ? v9fs_show_options+0x570/0x570 [ 40.366865][ T688] ? kasan_save_alloc_info+0x1f/0x30 [ 40.371984][ T688] ? __kasan_kmalloc+0x9c/0xb0 [ 40.376754][ T688] ? kmalloc_trace+0x44/0xa0 [ 40.381182][ T688] v9fs_mount+0xca/0xb60 [ 40.385255][ T688] ? incfs_get_verity_signature+0x420/0x420 [ 40.391129][ T688] ? cap_capable+0x1d2/0x270 [ 40.395583][ T688] legacy_get_tree+0xf1/0x190 [ 40.400107][ T688] ? incfs_get_verity_signature+0x420/0x420 [ 40.405789][ T688] vfs_get_tree+0x88/0x290 [ 40.410044][ T688] do_new_mount+0x2ba/0xb30 [ 40.414384][ T688] ? do_move_mount_old+0x160/0x160 [ 40.419335][ T688] ? security_capable+0x87/0xb0 [ 40.424016][ T688] ? ns_capable+0x89/0xe0 [ 40.428182][ T688] path_mount+0x671/0x1070 [ 40.432463][ T688] ? user_path_at_empty+0x14e/0x1a0 [ 40.437473][ T688] __se_sys_mount+0x2c4/0x3b0 [ 40.441984][ T688] ? __x64_sys_mount+0xd0/0xd0 [ 40.446672][ T688] ? debug_smp_processor_id+0x17/0x20 [ 40.451881][ T688] __x64_sys_mount+0xbf/0xd0 [ 40.456305][ T688] x64_sys_call+0x49d/0x9a0 [ 40.460644][ T688] do_syscall_64+0x3b/0xb0 [ 40.464901][ T688] ? clear_bhb_loop+0x55/0xb0 [ 40.469427][ T688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.475139][ T688] RIP: 0033:0x7f13cbf79eb9 [ 40.479483][ T688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.498920][ T688] RSP: 002b:00007f13ccdbe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.507252][ T688] RAX: ffffffffffffffda RBX: 00007f13cc115f80 RCX: 00007f13cbf79eb9 [ 40.515060][ T688] RDX: 0000000020000040 RSI: 0000000020000180 RDI: 0000000000000000 [ 40.522873][ T688] RBP: 00007f13ccdbe090 R08: 0000000020000580 R09: 0000000000000000 [ 40.530687][ T688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.538671][ T688] R13: 0000000000000000 R14: 00007f13cc115f80 R15: 00007fffffa90438 [ 40.546501][ T688] [ 40.547341][ T294] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.567457][ T691] loop1: detected capacity change from 0 to 1024 [ 40.578689][ T691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.593918][ T291] EXT4-fs (loop1): unmounting filesystem. [ 40.772436][ T702] loop1: detected capacity change from 0 to 2048 [ 40.787970][ T702] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.90: casefold flag without casefold feature [ 40.800894][ T702] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 40.810841][ T702] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 40.818283][ T702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.829308][ T294] usb 1-1: Using ep0 maxpacket: 16 [ 40.974279][ T705] ªªªªªª: renamed from syzkaller0 [ 41.018622][ T705] loop3: detected capacity change from 0 to 512 [ 41.061914][ T705] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.89: casefold flag without casefold feature [ 41.074547][ T705] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.89: missing EA_INODE flag [ 41.086067][ T705] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.89: error while reading EA inode 12 err=-117 [ 41.098217][ T705] EXT4-fs (loop3): 1 orphan inode deleted [ 41.103753][ T705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.117372][ T294] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 41.126978][ T294] usb 1-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 41.137245][ T294] usb 1-1: config 0 has no interface number 0 [ 41.143599][ T294] usb 1-1: too many endpoints for config 0 interface 2 altsetting 243: 235, using maximum allowed: 30 [ 41.154494][ T294] usb 1-1: config 0 interface 2 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 235 [ 41.168365][ T294] usb 1-1: config 0 interface 2 has no altsetting 0 [ 41.204675][ T709] netlink: 88 bytes leftover after parsing attributes in process `syz.1.90'. [ 41.287447][ T294] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 41.296358][ T294] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 41.304145][ T294] usb 1-1: Product: syz [ 41.308214][ T294] usb 1-1: SerialNumber: syz [ 41.313504][ T294] usb 1-1: config 0 descriptor?? [ 41.600599][ T294] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 41.608425][ T294] usb 1-1: USB disconnect, device number 4 [ 41.618135][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.634549][ T291] EXT4-fs (loop1): unmounting filesystem. [ 42.063798][ T289] EXT4-fs (loop0): unmounting filesystem. [ 42.077022][ T713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 42.127084][ T715] FAULT_INJECTION: forcing a failure. [ 42.127084][ T715] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.140042][ T715] CPU: 1 PID: 715 Comm: syz.1.93 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0 [ 42.149210][ T715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 42.159194][ T715] Call Trace: [ 42.162317][ T715] [ 42.165267][ T715] dump_stack_lvl+0x151/0x1b7 [ 42.169784][ T715] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 42.175083][ T715] dump_stack+0x15/0x1c [ 42.179069][ T715] should_fail_ex+0x3d0/0x520 [ 42.183583][ T715] should_fail+0xb/0x10 [ 42.187572][ T715] should_fail_usercopy+0x1a/0x20 [ 42.192436][ T715] _copy_to_user+0x1e/0x90 [ 42.196692][ T715] simple_read_from_buffer+0xc7/0x150 [ 42.201984][ T715] proc_fail_nth_read+0x1a3/0x210 [ 42.206847][ T715] ? proc_fault_inject_write+0x390/0x390 [ 42.212422][ T715] ? fsnotify_perm+0x470/0x5d0 [ 42.217021][ T715] ? security_file_permission+0x86/0xb0 [ 42.222406][ T715] ? proc_fault_inject_write+0x390/0x390 [ 42.227871][ T715] vfs_read+0x26c/0xad0 [ 42.231882][ T715] ? kernel_read+0x1f0/0x1f0 [ 42.236290][ T715] ? mutex_lock+0xb1/0x1e0 [ 42.240543][ T715] ? bit_wait_io_timeout+0x120/0x120 [ 42.245700][ T715] ? __fdget_pos+0x2e2/0x390 [ 42.250092][ T715] ? ksys_read+0x77/0x2c0 [ 42.254259][ T715] ksys_read+0x199/0x2c0 [ 42.258345][ T715] ? __ia32_sys_recv+0xb0/0xb0 [ 42.262942][ T715] ? vfs_write+0xeb0/0xeb0 [ 42.267194][ T715] ? debug_smp_processor_id+0x17/0x20 [ 42.272396][ T715] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.278300][ T715] __x64_sys_read+0x7b/0x90 [ 42.282640][ T715] x64_sys_call+0x28/0x9a0 [ 42.286890][ T715] do_syscall_64+0x3b/0xb0 [ 42.291141][ T715] ? clear_bhb_loop+0x55/0xb0 [ 42.295657][ T715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.301406][ T715] RIP: 0033:0x7f13cbf788fc [ 42.305640][ T715] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 42.325082][ T715] RSP: 002b:00007f13ccdbe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.333325][ T715] RAX: ffffffffffffffda RBX: 00007f13cc115f80 RCX: 00007f13cbf788fc [ 42.342191][ T715] RDX: 000000000000000f RSI: 00007f13ccdbe0a0 RDI: 0000000000000007 [ 42.349999][ T715] RBP: 00007f13ccdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 42.357808][ T715] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 42.365626][ T715] R13: 0000000000000000 R14: 00007f13cc115f80 R15: 00007fffffa90438 [ 42.373444][ T715] [ 42.681839][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 42.681852][ T28] audit: type=1400 audit(1725251810.046:191): avc: denied { create } for pid=726 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.709547][ T727] loop1: detected capacity change from 0 to 512 [ 42.717181][ T727] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.97: iget: bad extended attribute block 1 [ 42.729772][ T727] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.97: couldn't read orphan inode 15 (err -117) [ 42.741450][ T727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.792272][ T730] FAULT_INJECTION: forcing a failure. [ 42.792272][ T730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.805197][ T730] CPU: 0 PID: 730 Comm: syz.0.98 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0 [ 42.814491][ T730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 42.824384][ T730] Call Trace: [ 42.827518][ T730] [ 42.830287][ T730] dump_stack_lvl+0x151/0x1b7 [ 42.834797][ T730] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 42.840106][ T730] dump_stack+0x15/0x1c [ 42.844084][ T730] should_fail_ex+0x3d0/0x520 [ 42.848599][ T730] should_fail+0xb/0x10 [ 42.852588][ T730] should_fail_usercopy+0x1a/0x20 [ 42.857455][ T730] _copy_from_user+0x1e/0xc0 [ 42.861881][ T730] bpf_test_init+0x12e/0x190 [ 42.866309][ T730] bpf_prog_test_run_skb+0x297/0x13a0 [ 42.871519][ T730] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 42.877248][ T730] ? __kasan_check_write+0x14/0x20 [ 42.882190][ T730] ? fput+0x15b/0x1b0 [ 42.886006][ T730] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 42.891739][ T730] bpf_prog_test_run+0x3b0/0x630 [ 42.896512][ T730] ? bpf_prog_query+0x260/0x260 [ 42.901198][ T730] ? selinux_bpf+0xd2/0x100 [ 42.905538][ T730] ? security_bpf+0x82/0xb0 [ 42.909882][ T730] __sys_bpf+0x59f/0x7f0 [ 42.913958][ T730] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 42.919167][ T730] ? __ia32_sys_read+0x90/0x90 [ 42.923764][ T730] ? debug_smp_processor_id+0x17/0x20 [ 42.928975][ T730] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.934879][ T730] __x64_sys_bpf+0x7c/0x90 [ 42.939128][ T730] x64_sys_call+0x87f/0x9a0 [ 42.943469][ T730] do_syscall_64+0x3b/0xb0 [ 42.947719][ T730] ? clear_bhb_loop+0x55/0xb0 [ 42.952247][ T730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.957960][ T730] RIP: 0033:0x7f34d3f79eb9 [ 42.962214][ T730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.981752][ T730] RSP: 002b:00007f34d4d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.989989][ T730] RAX: ffffffffffffffda RBX: 00007f34d4115f80 RCX: 00007f34d3f79eb9 [ 42.997803][ T730] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 43.005704][ T730] RBP: 00007f34d4d47090 R08: 0000000000000000 R09: 0000000000000000 [ 43.013515][ T730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.021326][ T730] R13: 0000000000000000 R14: 00007f34d4115f80 R15: 00007fffee0bc9c8 [ 43.029141][ T730] [ 43.072057][ T735] loop0: detected capacity change from 0 to 256 [ 43.532379][ T291] EXT4-fs (loop1): unmounting filesystem. [ 43.546164][ T739] loop1: detected capacity change from 0 to 256 [ 43.653402][ T740] netlink: 68 bytes leftover after parsing attributes in process `syz.1.100'. [ 43.799667][ T290] EXT4-fs (loop3): unmounting filesystem. [ 43.955516][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.962863][ T745] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.972584][ T745] device bridge_slave_0 entered promiscuous mode [ 43.982576][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.990416][ T745] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.018759][ T745] device bridge_slave_1 entered promiscuous mode [ 44.044422][ T752] overlayfs: failed to resolve './file2': -2 [ 44.177653][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.184995][ T745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.192085][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.198847][ T745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.219261][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.226790][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.234525][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.256856][ T745] device veth0_vlan entered promiscuous mode [ 44.263773][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.272006][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.280140][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.287416][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.294618][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.303119][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.309998][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.317117][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.325158][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.331994][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.339268][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.346988][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.360892][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.370842][ T745] device veth1_macvtap entered promiscuous mode [ 44.381840][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.405250][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.416891][ T28] audit: type=1400 audit(1725251811.776:192): avc: denied { mount } for pid=745 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 44.442970][ T28] audit: type=1400 audit(1725251811.806:193): avc: denied { mounton } for pid=745 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 44.636811][ T761] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 44.710595][ T763] loop3: detected capacity change from 0 to 256 [ 44.785072][ T8] device bridge_slave_1 left promiscuous mode [ 44.795660][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.799733][ T28] audit: type=1400 audit(1725251812.156:194): avc: denied { ioctl } for pid=765 comm="syz.0.106" path="socket:[16228]" dev="sockfs" ino=16228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.827389][ T8] device bridge_slave_0 left promiscuous mode [ 44.839894][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.852729][ T28] audit: type=1400 audit(1725251812.196:195): avc: denied { write } for pid=765 comm="syz.0.106" name="psched" dev="proc" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.875952][ T8] device veth1_macvtap left promiscuous mode [ 44.882066][ T8] device veth0_vlan left promiscuous mode [ 45.127510][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 45.300335][ T770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 45.332572][ T774] xt_hashlimit: size too large, truncated to 1048576 [ 45.397334][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 45.432103][ T777] loop2: detected capacity change from 0 to 256 [ 45.441134][ T777] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 45.517486][ T19] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 45.525591][ T19] usb 1-1: config 0 has no interface number 0 [ 45.531765][ T19] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.543320][ T19] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.553647][ T19] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.566539][ T19] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 45.575761][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.583822][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.594375][ T19] usb 1-1: config 0 descriptor?? [ 45.737878][ T782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 45.804187][ T28] audit: type=1400 audit(1725251813.166:196): avc: denied { write } for pid=776 comm="syz.2.110" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.606091][ T28] audit: type=1400 audit(1725251813.166:197): avc: denied { add_name } for pid=776 comm="syz.2.110" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.633168][ T28] audit: type=1400 audit(1725251813.166:198): avc: denied { associate } for pid=776 comm="syz.2.110" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.032418][ T6] usb 2-1: device descriptor read/64, error -71 [ 47.039424][ T19] holtek_mouse 0003:04D9:A072.0004: item fetching failed at offset 1/4 [ 47.047925][ T19] holtek_mouse 0003:04D9:A072.0004: hid parse failed: -22 [ 47.054873][ T19] holtek_mouse: probe of 0003:04D9:A072.0004 failed with error -22 [ 47.118884][ T797] overlayfs: failed to resolve './file2': -2 [ 47.261391][ T768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.270093][ T768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.278321][ T28] audit: type=1400 audit(1725251814.646:199): avc: denied { remount } for pid=767 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.298290][ T296] usb 1-1: USB disconnect, device number 5 [ 47.457389][ T6] usb 2-1: device descriptor read/64, error -71 [ 47.772204][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 47.783400][ T28] audit: type=1400 audit(1725251815.126:200): avc: denied { remount } for pid=801 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.804696][ T805] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.857351][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 48.052735][ T813] loop0: detected capacity change from 0 to 40427 [ 48.059454][ T813] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 48.067175][ T813] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 48.075693][ T813] F2FS-fs (loop0): invalid crc value [ 48.081063][ T813] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 48.087764][ T813] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 48.121558][ T817] loop2: detected capacity change from 0 to 4096 [ 48.136732][ T817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.151128][ T817] fs-verity (loop2, inode 13): Error -27 writing Merkle tree block 8709239245 [ 48.159950][ T817] fs-verity (loop2, inode 13): Error -27 building Merkle tree [ 48.167446][ T6] usb 2-1: device descriptor read/64, error -71 [ 48.185692][ T745] EXT4-fs (loop2): unmounting filesystem. [ 48.517188][ T825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.122'. [ 49.558408][ T836] loop0: detected capacity change from 0 to 40427 [ 49.567130][ T836] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.591064][ T836] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.790188][ T853] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.797120][ T853] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.804375][ T853] device bridge_slave_0 entered promiscuous mode [ 49.811224][ T853] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.818303][ T853] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.825488][ T853] device bridge_slave_1 entered promiscuous mode [ 49.869444][ T853] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.876311][ T853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.883446][ T853] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.890210][ T853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.897902][ T296] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 49.913149][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.920685][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.929698][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.941968][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.950417][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.957307][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.975926][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.983931][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.990880][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.004899][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.013147][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.029760][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.041996][ T853] device veth0_vlan entered promiscuous mode [ 50.053278][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.064690][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.072973][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.080727][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.089361][ T865] loop2: detected capacity change from 0 to 1024 [ 50.090391][ T853] device veth1_macvtap entered promiscuous mode [ 50.103993][ T865] EXT4-fs (loop2): Test dummy encryption mode enabled [ 50.112429][ T865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.127603][ T28] audit: type=1400 audit(1725251817.496:201): avc: denied { block_suspend } for pid=864 comm="syz.2.131" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.128010][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.162946][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.216606][ T883] loop4: detected capacity change from 0 to 4096 [ 50.226076][ T883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.240676][ T883] fs-verity (loop4, inode 13): Error -27 writing Merkle tree block 8709239245 [ 50.249505][ T883] fs-verity (loop4, inode 13): Error -27 building Merkle tree [ 50.261659][ T853] EXT4-fs (loop4): unmounting filesystem. [ 50.297459][ T296] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.316344][ T745] EXT4-fs (loop2): unmounting filesystem. [ 50.329164][ T296] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 50.342994][ T912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 50.364287][ T296] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 50.375053][ T296] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 50.428500][ T8] device bridge_slave_1 left promiscuous mode [ 50.438509][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.455923][ T8] device bridge_slave_0 left promiscuous mode [ 50.462844][ T916] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 50.465769][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.472011][ T6] usb 2-1: device descriptor read/64, error -71 [ 50.484869][ T296] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.494613][ T8] device veth1_macvtap left promiscuous mode [ 50.497312][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.505028][ T8] device veth0_vlan left promiscuous mode [ 50.517331][ T296] usb 1-1: SerialNumber: syz [ 50.547418][ T836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.554492][ T836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.568181][ T296] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 50.607398][ T6] usb usb2-port1: attempt power cycle [ 50.627410][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.808068][ T296] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 50.815238][ T296] usb 1-1: USB disconnect, device number 6 [ 50.907331][ T39] usb 3-1: device descriptor read/64, error -71 [ 51.017352][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 51.117427][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 51.237369][ T6] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 51.276196][ T922] loop4: detected capacity change from 0 to 40427 [ 51.285633][ T922] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.297427][ T39] usb 3-1: device descriptor read/64, error -71 [ 51.314034][ T922] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.321987][ T289] syz-executor: attempt to access beyond end of device [ 51.321987][ T289] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 51.694602][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 51.848213][ T6] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 51.857097][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.864928][ T6] usb 2-1: Product: syz [ 51.868911][ T6] usb 2-1: Manufacturer: syz [ 51.873311][ T6] usb 2-1: SerialNumber: syz [ 51.880746][ T6] usb 2-1: config 0 descriptor?? [ 51.918089][ T6] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 51.925801][ T6] usb 2-1: Detected FT232R [ 51.967351][ T39] usb 3-1: device descriptor read/64, error -71 [ 52.004445][ T853] syz-executor: attempt to access beyond end of device [ 52.004445][ T853] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.118850][ T859] loop1: detected capacity change from 0 to 16 [ 52.125553][ T859] erofs: (device loop1): mounted with root inode @ nid 36. [ 52.292195][ T28] audit: type=1400 audit(1725251819.656:202): avc: denied { create } for pid=858 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.313926][ T28] audit: type=1400 audit(1725251819.676:203): avc: denied { read } for pid=942 comm="syz.0.141" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.336560][ T28] audit: type=1400 audit(1725251819.676:204): avc: denied { open } for pid=942 comm="syz.0.141" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.363355][ T39] usb 3-1: device descriptor read/64, error -71 [ 52.401514][ T28] audit: type=1400 audit(1725251819.676:205): avc: denied { setopt } for pid=858 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.497382][ T39] usb usb3-port1: attempt power cycle [ 52.572794][ T28] audit: type=1400 audit(1725251819.936:206): avc: denied { read } for pid=942 comm="syz.0.141" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.573255][ T945] binder: 942:945 ioctl 4018620d 0 returned -22 [ 52.605546][ T28] audit: type=1400 audit(1725251819.936:207): avc: denied { open } for pid=942 comm="syz.0.141" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.629797][ T945] process 'syz.0.141' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 52.651270][ T28] audit: type=1400 audit(1725251819.936:208): avc: denied { ioctl } for pid=942 comm="syz.0.141" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.680656][ T945] loop0: detected capacity change from 0 to 512 [ 52.697635][ T945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.709780][ T945] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 52.720403][ T945] EXT4-fs (loop0): group descriptors corrupted! [ 52.917372][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.087405][ T39] usb 3-1: device descriptor read/8, error -71 [ 53.137355][ T790] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 53.147638][ T28] audit: type=1400 audit(1725251820.516:209): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.169855][ T28] audit: type=1400 audit(1725251820.516:210): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.191785][ T28] audit: type=1400 audit(1725251820.516:211): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.246244][ T954] loop4: detected capacity change from 0 to 4096 [ 53.254890][ T954] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 53.269011][ T954] fs-verity (loop4, inode 13): Error -27 writing Merkle tree block 8709239245 [ 53.277866][ T954] fs-verity (loop4, inode 13): Error -27 building Merkle tree [ 53.289707][ T853] EXT4-fs (loop4): unmounting filesystem. [ 53.337086][ T957] mmap: syz.4.145 (957): VmData 17715200 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 53.394768][ T39] usb 3-1: device descriptor read/8, error -71 [ 53.417395][ T790] usb 1-1: Using ep0 maxpacket: 16 [ 53.559777][ T966] loop4: detected capacity change from 0 to 40427 [ 53.568670][ T966] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 53.576274][ T966] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 53.584396][ T966] F2FS-fs (loop4): Unrecognized mount option "01777777777777777777777ÿÿÿÿ" or missing value [ 53.607410][ T790] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 53.664780][ T966] loop4: detected capacity change from 0 to 128 [ 53.887527][ T790] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 53.896921][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.904896][ T790] usb 1-1: Product: syz [ 53.911383][ T790] usb 1-1: Manufacturer: syz [ 53.915936][ T790] usb 1-1: SerialNumber: syz [ 53.927518][ T790] usb 1-1: config 0 descriptor?? [ 53.957389][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 53.977375][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 53.977932][ T790] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 53.992352][ T790] usb 1-1: Detected FT232R [ 53.997492][ T6] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 54.005118][ T6] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 54.015247][ T6] usb 2-1: USB disconnect, device number 6 [ 54.027255][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 54.036726][ T6] ftdi_sio 2-1:0.0: device disconnected [ 54.147201][ T28] audit: type=1400 audit(1725251821.506:212): avc: denied { ioctl } for pid=973 comm="syz.1.149" path="socket:[17792]" dev="sockfs" ino=17792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.251484][ T981] loop2: detected capacity change from 0 to 256 [ 55.782869][ T1008] loop3: detected capacity change from 0 to 256 [ 55.790681][ T1008] exfat: Deprecated parameter 'namecase' [ 55.796392][ T1008] exfat: Deprecated parameter 'utf8' [ 55.932045][ T790] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 55.953415][ T1008] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x43dffc04, utbl_chksum : 0xe619d30d) [ 55.967396][ T790] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 55.976307][ T1012] loop0: detected capacity change from 0 to 512 [ 55.983381][ T1012] EXT4-fs: Ignoring removed orlov option [ 55.989355][ T790] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 55.996488][ T790] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 56.004917][ T28] audit: type=1400 audit(1725251823.376:213): avc: denied { read append open } for pid=1002 comm="syz.3.156" path="/32/file1/memory.current" dev="loop3" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.029311][ T1012] EXT4-fs: dax option not supported [ 56.033820][ T790] usb 1-1: USB disconnect, device number 7 [ 56.041234][ T790] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 56.050825][ T790] ftdi_sio 1-1:0.0: device disconnected [ 56.119222][ T1005] kvm: emulating exchange as write [ 56.238692][ T1024] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 56.369665][ T28] audit: type=1400 audit(1725251823.736:214): avc: denied { name_bind } for pid=1022 comm="syz.2.162" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.646905][ T28] audit: type=1400 audit(1725251823.926:215): avc: denied { node_bind } for pid=1022 comm="syz.2.162" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.827714][ T28] audit: type=1400 audit(1725251824.196:216): avc: denied { create } for pid=1031 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.904241][ T1032] loop4: detected capacity change from 0 to 512 [ 56.938629][ T1032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 56.950780][ T1032] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 57.200804][ T1044] loop2: detected capacity change from 0 to 1024 [ 57.207323][ T1044] EXT4-fs: Ignoring removed orlov option [ 57.212924][ T1044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.235961][ T1047] loop1: detected capacity change from 0 to 2048 [ 57.253525][ T1044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.295112][ T1047] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.168: casefold flag without casefold feature [ 57.308537][ T1051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 57.327576][ T1047] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 57.353209][ T1047] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 57.362369][ T1047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.669202][ T1058] loop3: detected capacity change from 0 to 512 [ 57.837239][ T1058] EXT4-fs (loop3): 1 orphan inode deleted [ 57.841692][ T296] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 57.850386][ T1058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.859109][ T1058] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 57.893558][ T28] audit: type=1400 audit(1725251825.256:217): avc: denied { map } for pid=1054 comm="syz.3.169" path="/34/file1/memory.events" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.918175][ T853] EXT4-fs (loop4): unmounting filesystem. [ 57.934100][ T1064] input: syz0 as /devices/virtual/input/input8 [ 58.075864][ T291] EXT4-fs (loop1): unmounting filesystem. [ 58.117390][ T39] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 58.257438][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.268267][ T296] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.281092][ T296] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.290090][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.298572][ T296] usb 3-1: config 0 descriptor?? [ 58.365104][ T290] EXT4-fs (loop3): unmounting filesystem. [ 58.397386][ T790] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 58.477379][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 58.488501][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 58.499545][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.517456][ T39] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.526386][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.534815][ T39] usb 1-1: config 0 descriptor?? [ 58.557451][ T1062] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.637437][ T790] usb 2-1: Using ep0 maxpacket: 16 [ 58.757403][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.768158][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.777892][ T790] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 58.784099][ T296] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 58.786773][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.805111][ T296] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 58.806551][ T790] usb 2-1: config 0 descriptor?? [ 58.853054][ T313] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 58.973561][ T1078] fuse: Unknown parameter 'gd' [ 59.046784][ T39] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 59.101579][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 59.109808][ T39] plantronics 0003:047F:FFFF.0006: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 59.123683][ T39] usb 3-1: USB disconnect, device number 7 [ 59.158237][ T790] ryos 0003:1E7D:3232.0007: unknown main item tag 0x0 [ 59.165406][ T790] ryos 0003:1E7D:3232.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 59.217366][ T313] usb 4-1: config 2 has an invalid interface number: 204 but max is 0 [ 59.225564][ T313] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 59.234206][ T313] usb 4-1: config 2 has no interface number 0 [ 59.240126][ T313] usb 4-1: config 2 interface 204 has no altsetting 0 [ 59.258083][ T790] usb 1-1: USB disconnect, device number 8 [ 59.357932][ T1068] overlayfs: missing 'lowerdir' [ 59.362951][ T39] usb 2-1: USB disconnect, device number 7 [ 59.397414][ T313] usb 4-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=7d.30 [ 59.406361][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.414294][ T313] usb 4-1: Product: syz [ 59.418356][ T313] usb 4-1: Manufacturer: syz [ 59.422694][ T313] usb 4-1: SerialNumber: syz [ 59.613345][ T745] EXT4-fs (loop2): unmounting filesystem. [ 59.818272][ T1089] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 59.957349][ T335] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.327369][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.338158][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.347779][ T335] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 60.358746][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.359878][ T1096] loop0: detected capacity change from 0 to 128 [ 60.369345][ T335] usb 5-1: config 0 descriptor?? [ 60.377714][ T1096] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 60.732876][ T1085] device syzkaller0 entered promiscuous mode [ 60.754028][ T28] audit: type=1400 audit(1725251828.116:218): avc: denied { relabelfrom } for pid=1084 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.773975][ T28] audit: type=1400 audit(1725251828.116:219): avc: denied { relabelto } for pid=1084 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.779549][ T1103] loop1: detected capacity change from 0 to 128 [ 60.978157][ T335] holtek 0003:1241:5015.0008: unknown main item tag 0x0 [ 60.986322][ T335] holtek 0003:1241:5015.0008: unknown main item tag 0x0 [ 60.993362][ T335] holtek 0003:1241:5015.0008: unknown main item tag 0x0 [ 61.000451][ T335] holtek 0003:1241:5015.0008: unknown main item tag 0x0 [ 61.007374][ T335] holtek 0003:1241:5015.0008: unknown main item tag 0x0 [ 61.017719][ T335] holtek 0003:1241:5015.0008: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 61.028948][ T335] holtek 0003:1241:5015.0008: no inputs found [ 61.219027][ T8] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 61.233262][ T39] usb 5-1: USB disconnect, device number 3 [ 61.253894][ T1108] loop0: detected capacity change from 0 to 4096 [ 61.262363][ T1108] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.276244][ T1108] fs-verity (loop0, inode 13): Error -27 writing Merkle tree block 8709239245 [ 61.285120][ T1108] fs-verity (loop0, inode 13): Error -27 building Merkle tree [ 61.297065][ T289] EXT4-fs (loop0): unmounting filesystem. [ 61.322827][ T1111] FAULT_INJECTION: forcing a failure. [ 61.322827][ T1111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.335880][ T1111] CPU: 1 PID: 1111 Comm: syz.0.184 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0 [ 61.345235][ T1111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.355132][ T1111] Call Trace: [ 61.358255][ T1111] [ 61.361035][ T1111] dump_stack_lvl+0x151/0x1b7 [ 61.365545][ T1111] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 61.370842][ T1111] dump_stack+0x15/0x1c [ 61.374938][ T1111] should_fail_ex+0x3d0/0x520 [ 61.379440][ T1111] should_fail+0xb/0x10 [ 61.383425][ T1111] should_fail_usercopy+0x1a/0x20 [ 61.388290][ T1111] _copy_to_user+0x1e/0x90 [ 61.392538][ T1111] simple_read_from_buffer+0xc7/0x150 [ 61.397750][ T1111] proc_fail_nth_read+0x1a3/0x210 [ 61.402610][ T1111] ? proc_fault_inject_write+0x390/0x390 [ 61.408076][ T1111] ? fsnotify_perm+0x470/0x5d0 [ 61.412679][ T1111] ? security_file_permission+0x86/0xb0 [ 61.418236][ T1111] ? proc_fault_inject_write+0x390/0x390 [ 61.423716][ T1111] vfs_read+0x26c/0xad0 [ 61.427694][ T1111] ? kernel_read+0x1f0/0x1f0 [ 61.432120][ T1111] ? mutex_lock+0xb1/0x1e0 [ 61.436386][ T1111] ? bit_wait_io_timeout+0x120/0x120 [ 61.441504][ T1111] ? __fdget_pos+0x2e2/0x390 [ 61.445923][ T1111] ? ksys_read+0x77/0x2c0 [ 61.450087][ T1111] ksys_read+0x199/0x2c0 [ 61.454164][ T1111] ? vfs_write+0xeb0/0xeb0 [ 61.458422][ T1111] ? debug_smp_processor_id+0x17/0x20 [ 61.463622][ T1111] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 61.469525][ T1111] __x64_sys_read+0x7b/0x90 [ 61.473861][ T1111] x64_sys_call+0x28/0x9a0 [ 61.478116][ T1111] do_syscall_64+0x3b/0xb0 [ 61.482369][ T1111] ? clear_bhb_loop+0x55/0xb0 [ 61.486884][ T1111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.492610][ T1111] RIP: 0033:0x7f34d3f788fc [ 61.496863][ T1111] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 61.516304][ T1111] RSP: 002b:00007f34d4d47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.524551][ T1111] RAX: ffffffffffffffda RBX: 00007f34d4115f80 RCX: 00007f34d3f788fc [ 61.532361][ T1111] RDX: 000000000000000f RSI: 00007f34d4d470a0 RDI: 0000000000000009 [ 61.540174][ T1111] RBP: 00007f34d4d47090 R08: 0000000000000000 R09: 0000000000000000 [ 61.547987][ T1111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.555794][ T1111] R13: 0000000000000000 R14: 00007f34d4115f80 R15: 00007fffee0bc9c8 [ 61.563614][ T1111] [ 61.587488][ T28] audit: type=1400 audit(1725251828.946:220): avc: denied { bind } for pid=1118 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.589006][ T1119] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 61.608544][ T1115] FAULT_INJECTION: forcing a failure. [ 61.608544][ T1115] name failslab, interval 1, probability 0, space 0, times 0 [ 61.614474][ T1119] audit: out of memory in audit_log_start [ 61.639697][ T1121] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 61.646805][ T1115] CPU: 1 PID: 1115 Comm: syz.3.186 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0 [ 61.656254][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.666233][ T1115] Call Trace: [ 61.669359][ T1115] [ 61.672135][ T1115] dump_stack_lvl+0x151/0x1b7 [ 61.676647][ T1115] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 61.681944][ T1115] dump_stack+0x15/0x1c [ 61.685935][ T1115] should_fail_ex+0x3d0/0x520 [ 61.690451][ T1115] ? p9_client_prepare_req+0x38c/0xd70 [ 61.695739][ T1115] __should_failslab+0xaf/0xf0 [ 61.700348][ T1115] should_failslab+0x9/0x20 [ 61.704684][ T1115] __kmem_cache_alloc_node+0x3d/0x250 [ 61.709891][ T1115] ? p9_client_prepare_req+0x38c/0xd70 [ 61.715207][ T1115] __kmalloc+0xa3/0x1e0 [ 61.719178][ T1115] p9_client_prepare_req+0x38c/0xd70 [ 61.724297][ T1115] ? trace_raw_output_9p_fid_ref+0x160/0x160 [ 61.730115][ T1115] ? htab_map_hash+0x356/0x7e0 [ 61.734717][ T1115] p9_client_rpc+0x18b/0xaa0 [ 61.739142][ T1115] ? bpf_trace_run3+0x2e0/0x2e0 [ 61.743826][ T1115] ? p9_fid_create+0x360/0x360 [ 61.748424][ T1115] ? arch_stack_walk+0xf3/0x140 [ 61.753117][ T1115] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 61.758587][ T1115] ? __alloc_pages+0x727/0x780 [ 61.763180][ T1115] p9_client_read_once+0x32b/0x9a0 [ 61.768134][ T1115] ? p9_client_read+0x1b0/0x1b0 [ 61.772821][ T1115] ? kasan_poison+0x5d/0x70 [ 61.777162][ T1115] ? __kasan_kmalloc_large+0xad/0xc0 [ 61.782278][ T1115] ? __kmalloc_large_node+0x10d/0x1b0 [ 61.787487][ T1115] p9_client_read+0xae/0x1b0 [ 61.787910][ T1124] loop4: detected capacity change from 0 to 512 [ 61.791912][ T1115] v9fs_dir_readdir+0x357/0x940 [ 61.791936][ T1115] ? v9fs_dir_release+0x220/0x220 [ 61.807543][ T1115] ? security_file_permission+0x86/0xb0 [ 61.812920][ T1115] iterate_dir+0x265/0x610 [ 61.817167][ T1115] ? v9fs_dir_release+0x220/0x220 [ 61.822028][ T1115] __se_sys_getdents64+0x1c1/0x460 [ 61.826973][ T1115] ? __kasan_check_write+0x14/0x20 [ 61.831930][ T1115] ? __x64_sys_getdents64+0x90/0x90 [ 61.836955][ T1115] ? filldir+0x670/0x670 [ 61.841038][ T1115] ? __ia32_sys_read+0x90/0x90 [ 61.845636][ T1115] ? debug_smp_processor_id+0x17/0x20 [ 61.850841][ T1115] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 61.856746][ T1115] __x64_sys_getdents64+0x7b/0x90 [ 61.861606][ T1115] x64_sys_call+0x5ae/0x9a0 [ 61.865943][ T1115] do_syscall_64+0x3b/0xb0 [ 61.870199][ T1115] ? clear_bhb_loop+0x55/0xb0 [ 61.874709][ T1115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.880439][ T1115] RIP: 0033:0x7f3683779eb9 [ 61.884706][ T1115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.904222][ T1115] RSP: 002b:00007f368458e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 61.912471][ T1115] RAX: ffffffffffffffda RBX: 00007f3683915f80 RCX: 00007f3683779eb9 [ 61.920402][ T1115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 61.928185][ T1115] RBP: 00007f368458e090 R08: 0000000000000000 R09: 0000000000000000 [ 61.936013][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.943887][ T1115] R13: 0000000000000000 R14: 00007f3683915f80 R15: 00007ffca765ae18 [ 61.951702][ T1115] [ 61.981320][ T313] zaurus 4-1:2.204: invalid descriptor buffer length [ 62.001837][ T1124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.007490][ T313] usb 4-1: bad CDC descriptors [ 62.034417][ T1124] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 62.044691][ T313] usb 4-1: USB disconnect, device number 4 [ 62.045998][ T1133] FAULT_INJECTION: forcing a failure. [ 62.045998][ T1133] name failslab, interval 1, probability 0, space 0, times 0 [ 62.085402][ T1124] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.190: corrupted inode contents [ 62.097654][ T335] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 62.105064][ T1133] CPU: 0 PID: 1133 Comm: syz.0.193 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0 [ 62.114509][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.124398][ T1133] Call Trace: [ 62.127527][ T1133] [ 62.130295][ T1133] dump_stack_lvl+0x151/0x1b7 [ 62.134815][ T1133] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 62.140104][ T1133] ? stack_trace_save+0x113/0x1c0 [ 62.144966][ T1133] dump_stack+0x15/0x1c [ 62.148957][ T1133] should_fail_ex+0x3d0/0x520 [ 62.153471][ T1133] ? p9_fid_create+0x53/0x360 [ 62.157985][ T1133] __should_failslab+0xaf/0xf0 [ 62.162584][ T1133] should_failslab+0x9/0x20 [ 62.166925][ T1133] __kmem_cache_alloc_node+0x3d/0x250 [ 62.172133][ T1133] ? p9_fid_create+0x53/0x360 [ 62.176648][ T1133] kmalloc_trace+0x2a/0xa0 [ 62.180901][ T1133] p9_fid_create+0x53/0x360 [ 62.185239][ T1133] p9_client_walk+0x103/0x6a0 [ 62.189753][ T1133] ? p9_client_rpc+0xaa0/0xaa0 [ 62.194350][ T1133] ? v9fs_fid_lookup+0x118/0x160 [ 62.199126][ T1133] v9fs_file_open+0x273/0xa10 [ 62.203643][ T1133] ? v9fs_vfs_write_folio_locked+0x3b0/0x3b0 [ 62.209455][ T1133] ? fsnotify_perm+0x470/0x5d0 [ 62.214055][ T1133] ? v9fs_vfs_write_folio_locked+0x3b0/0x3b0 [ 62.219875][ T1133] do_dentry_open+0x891/0x1250 [ 62.224474][ T1133] vfs_open+0x73/0x80 [ 62.228288][ T1133] path_openat+0x2532/0x2d60 [ 62.232719][ T1133] ? kasan_save_alloc_info+0x1f/0x30 [ 62.237844][ T1133] ? slab_post_alloc_hook+0x53/0x2c0 [ 62.242957][ T1133] ? getname+0x19/0x20 [ 62.246860][ T1133] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.252770][ T1133] ? do_filp_open+0x480/0x480 [ 62.257370][ T1133] do_filp_open+0x230/0x480 [ 62.261705][ T1133] ? vfs_tmpfile+0x480/0x480 [ 62.266138][ T1133] ? alloc_fd+0x4fa/0x5a0 [ 62.270300][ T1133] do_sys_openat2+0x151/0x890 [ 62.274829][ T1133] ? bit_wait_io_timeout+0x120/0x120 [ 62.279930][ T1133] ? __mutex_lock_slowpath+0x10/0x10 [ 62.285055][ T1133] ? do_sys_open+0x220/0x220 [ 62.289480][ T1133] ? fput+0x15b/0x1b0 [ 62.293472][ T1133] ? ksys_write+0x260/0x2c0 [ 62.297872][ T1133] __x64_sys_open+0x221/0x270 [ 62.302331][ T1133] ? do_sys_openat2+0x890/0x890 [ 62.307009][ T1133] ? debug_smp_processor_id+0x17/0x20 [ 62.312220][ T1133] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 62.318119][ T1133] ? exit_to_user_mode_prepare+0x39/0xa0 [ 62.323587][ T1133] x64_sys_call+0x36/0x9a0 [ 62.327839][ T1133] do_syscall_64+0x3b/0xb0 [ 62.332104][ T1133] ? clear_bhb_loop+0x55/0xb0 [ 62.336606][ T1133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.342351][ T1133] RIP: 0033:0x7f34d3f79eb9 [ 62.346586][ T1133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.366031][ T1133] RSP: 002b:00007f34d4d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 62.369961][ T1138] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 62.374272][ T1133] RAX: ffffffffffffffda RBX: 00007f34d4115f80 RCX: 00007f34d3f79eb9 [ 62.391206][ T1133] RDX: 0000000000000000 RSI: 00000000a0024420 RDI: 0000000020000280 [ 62.399015][ T1133] RBP: 00007f34d4d47090 R08: 0000000000000000 R09: 0000000000000000 [ 62.406997][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.414824][ T1133] R13: 0000000000000000 R14: 00007f34d4115f80 R15: 00007fffee0bc9c8 [ 62.422885][ T1133] [ 62.429362][ T1140] request_module fs-cifs succeeded, but still no fs? [ 62.436561][ T1124] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.190: mark_inode_dirty error [ 62.460160][ T1124] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.190: corrupted inode contents [ 62.481577][ T1124] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.190: mark_inode_dirty error [ 62.501504][ T1146] loop1: detected capacity change from 0 to 256 [ 62.511379][ T1146] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 62.519764][ T1146] FAT-fs (loop1): Filesystem has been set read-only [ 62.753357][ T1148] overlayfs: missing 'workdir' [ 62.766885][ T28] audit: type=1400 audit(1725251830.116:221): avc: denied { mounton } for pid=1123 comm="syz.4.190" path="/18/file0/bus" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 62.924741][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 63.047530][ T335] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.067317][ T335] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.076879][ T335] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.086513][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 63.093784][ T335] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 63.103749][ T335] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 63.120759][ T335] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 63.130700][ T335] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 63.217405][ T335] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.226916][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 63.234822][ T335] usb 3-1: SerialNumber: syz [ 63.367990][ T1170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.201'. [ 63.661291][ T335] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 63.669274][ T335] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 63.685332][ T1173] loop0: detected capacity change from 0 to 512 [ 63.693113][ T1173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.707038][ T1173] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.202: casefold flag without casefold feature [ 63.719846][ T1173] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.202: missing EA_INODE flag [ 63.731729][ T1173] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.202: error while reading EA inode 12 err=-117 [ 63.744346][ T1173] EXT4-fs (loop0): 1 orphan inode deleted [ 63.750104][ T1173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.777436][ T6] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 63.786510][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.798237][ T6] usb 2-1: config 0 descriptor?? [ 63.825574][ T1173] capability: warning: `syz.0.202' uses deprecated v2 capabilities in a way that may be insecure [ 63.837742][ T6] ums-karma 2-1:0.0: USB Mass Storage device detected [ 64.254568][ T28] audit: type=1326 audit(1725251831.616:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1181 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3683779eb9 code=0x7ffc0000 [ 64.279845][ T28] audit: type=1326 audit(1725251831.616:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1181 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3683779eb9 code=0x7ffc0000 [ 64.303467][ T28] audit: type=1326 audit(1725251831.616:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1181 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3683779eb9 code=0x7ffc0000 [ 64.326697][ T28] audit: type=1326 audit(1725251831.616:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1181 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3683779eb9 code=0x7ffc0000 [ 64.357045][ T1185] loop3: detected capacity change from 0 to 1024 [ 64.369090][ T1185] JBD2: no valid journal superblock found [ 64.374988][ T1185] EXT4-fs (loop3): error loading journal [ 64.550996][ T289] EXT4-fs (loop0): unmounting filesystem. [ 64.653786][ T19] usb 3-1: USB disconnect, device number 8 [ 64.695229][ T1185] loop3: detected capacity change from 0 to 40427 [ 64.706271][ T1185] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.714304][ T1185] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.722042][ T1189] loop2: detected capacity change from 0 to 4096 [ 64.734808][ T1189] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.743457][ T1185] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.775602][ T1189] fs-verity (loop2, inode 13): Error -27 writing Merkle tree block 8709239245 [ 64.776078][ T1185] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.784605][ T1189] fs-verity (loop2, inode 13): Error -27 building Merkle tree [ 64.798850][ T1185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.823487][ T853] EXT4-fs (loop4): unmounting filesystem. [ 64.832675][ T745] EXT4-fs (loop2): unmounting filesystem. [ 64.861757][ T1198] loop4: detected capacity change from 0 to 512 [ 64.946576][ T1203] loop2: detected capacity change from 0 to 2048 [ 64.986675][ T1203] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.209: casefold flag without casefold feature [ 65.000715][ T1203] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 65.087646][ T1207] netlink: 'syz.4.207': attribute type 2 has an invalid length. [ 65.332291][ T1203] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 65.341158][ T1203] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.547873][ T6] usb 2-1: USB disconnect, device number 8 [ 65.694676][ T1217] loop0: detected capacity change from 0 to 512 [ 65.715021][ T1217] EXT4-fs: Ignoring removed nobh option [ 65.725917][ T1217] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 65.734075][ T1217] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 65.746538][ T1217] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #13: comm syz.0.212: casefold flag without casefold feature [ 65.759963][ T1217] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #13: comm syz.0.212: unexpected EA_INODE flag [ 65.807326][ T1217] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.212: couldn't read orphan inode 13 (err -117) [ 65.808137][ T745] EXT4-fs (loop2): unmounting filesystem. [ 65.835491][ T1217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.961344][ T1222] loop4: detected capacity change from 0 to 40427 [ 65.967768][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 66.031585][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 66.031627][ T28] audit: type=1400 audit(1725251833.396:287): avc: denied { write } for pid=1215 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.091263][ T1229] Zero length message leads to an empty skb [ 66.105101][ T1222] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 66.187860][ T1222] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 66.196796][ T1222] F2FS-fs (loop4): invalid crc value [ 66.207987][ T1222] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.243897][ T1222] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.250925][ T1222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.467336][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 66.778413][ T1243] bridge0: port 3(vlan2) entered blocking state [ 66.784492][ T1243] bridge0: port 3(vlan2) entered disabled state [ 66.791043][ T1243] device vlan2 entered promiscuous mode [ 67.048092][ T289] EXT4-fs (loop0): unmounting filesystem. [ 67.077425][ T6] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 67.094368][ T6] usb 2-1: config 0 has no interface number 0 [ 67.107350][ T6] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.119674][ T1250] loop0: detected capacity change from 0 to 2048 [ 67.127320][ T6] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.161781][ T1250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.176820][ T1250] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038 (0x7fffffff) [ 67.204133][ T28] audit: type=1400 audit(1725251834.566:288): avc: denied { mount } for pid=1249 comm="syz.0.222" name="/" dev="ramfs" ino=19231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 67.226356][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 67.236938][ T6] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 67.309158][ T6] usb 2-1: Manufacturer: syz [ 67.314502][ T6] usb 2-1: config 0 descriptor?? [ 67.402841][ T28] audit: type=1400 audit(1725251834.766:289): avc: denied { read } for pid=1265 comm="syz.3.224" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.444945][ T28] audit: type=1400 audit(1725251834.796:290): avc: denied { open } for pid=1265 comm="syz.3.224" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.579557][ T1275] loop3: detected capacity change from 0 to 2048 [ 67.611774][ T1275] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.225: casefold flag without casefold feature [ 67.664375][ T1278] loop4: detected capacity change from 0 to 256 [ 67.747677][ T1275] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 67.760160][ T1278] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 67.787736][ T1275] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 67.795529][ T1275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.022718][ T1212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.031482][ T1212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.039834][ T1212] 9pnet_fd: Insufficient options for proto=fd [ 68.047051][ T6] usb 2-1: USB disconnect, device number 9 [ 68.426775][ T290] EXT4-fs (loop3): unmounting filesystem. [ 68.464014][ T28] audit: type=1400 audit(1725251835.826:291): avc: denied { name_bind } for pid=1288 comm="syz.3.228" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 68.534504][ T1291] loop3: detected capacity change from 0 to 4096 [ 68.549406][ T1282] loop4: detected capacity change from 0 to 131072 [ 68.550373][ T1291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.576449][ T1282] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (6747996280161764837, 6747996279205463525) [ 68.598316][ T1291] fs-verity (loop3, inode 13): Error -27 writing Merkle tree block 8709239245 [ 68.607096][ T1291] fs-verity (loop3, inode 13): Error -27 building Merkle tree [ 68.621367][ T1282] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.630577][ T290] EXT4-fs (loop3): unmounting filesystem. [ 69.147909][ T1310] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 69.704542][ T1314] loop2: detected capacity change from 0 to 128 [ 69.722637][ T1314] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 69.731271][ T1314] FAT-fs (loop2): Filesystem has been set read-only [ 70.223513][ T1322] loop2: detected capacity change from 0 to 512 [ 70.346733][ T289] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 70.432713][ T1322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.455689][ T1322] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 70.478383][ T1325] loop4: detected capacity change from 0 to 1024 [ 70.503118][ T1325] EXT4-fs: Ignoring removed oldalloc option [ 70.509813][ T28] audit: type=1400 audit(1725251837.876:292): avc: denied { rmdir } for pid=289 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.536655][ T289] EXT4-fs (loop0): unmounting filesystem. [ 70.539159][ T28] audit: type=1400 audit(1725251837.896:293): avc: denied { unlink } for pid=289 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 70.565053][ T28] audit: type=1400 audit(1725251837.906:294): avc: denied { set_context_mgr } for pid=1329 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 70.584898][ T28] audit: type=1400 audit(1725251837.906:295): avc: denied { map } for pid=1329 comm="syz.1.239" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.609026][ T28] audit: type=1400 audit(1725251837.906:296): avc: denied { call } for pid=1329 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 70.613743][ T313] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 70.640454][ T1332] FAULT_INJECTION: forcing a failure. [ 70.640454][ T1332] name failslab, interval 1, probability 0, space 0, times 0 [ 70.653677][ T1332] CPU: 0 PID: 1332 Comm: syz.0.238 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0 [ 70.655077][ T1325] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.663135][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 70.663148][ T1332] Call Trace: [ 70.663154][ T1332] [ 70.663159][ T1332] dump_stack_lvl+0x151/0x1b7 [ 70.663180][ T1332] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 70.663193][ T1332] ? release_sock+0x163/0x1b0 [ 70.701930][ T1332] dump_stack+0x15/0x1c [ 70.705916][ T1332] should_fail_ex+0x3d0/0x520 [ 70.710429][ T1332] ? __alloc_skb+0xcc/0x2d0 [ 70.714771][ T1332] __should_failslab+0xaf/0xf0 [ 70.719370][ T1332] should_failslab+0x9/0x20 [ 70.723713][ T1332] kmem_cache_alloc_node+0x3e/0x2d0 [ 70.728743][ T1332] __alloc_skb+0xcc/0x2d0 [ 70.732911][ T1332] netlink_sendmsg+0x7a6/0xd30 [ 70.737510][ T1332] ? netlink_getsockopt+0x540/0x540 [ 70.742543][ T1332] ? security_socket_sendmsg+0x82/0xb0 [ 70.747836][ T1332] ? netlink_getsockopt+0x540/0x540 [ 70.752870][ T1332] ____sys_sendmsg+0x5d3/0x9a0 [ 70.757473][ T1332] ? __sys_sendmsg_sock+0x40/0x40 [ 70.762335][ T1332] __sys_sendmsg+0x2a9/0x390 [ 70.766844][ T1332] ? ____sys_sendmsg+0x9a0/0x9a0 [ 70.771619][ T1332] ? __kasan_check_write+0x14/0x20 [ 70.776570][ T1332] ? mutex_unlock+0xb2/0x260 [ 70.780994][ T1332] ? __kasan_check_write+0x14/0x20 [ 70.785940][ T1332] ? __ia32_sys_read+0x90/0x90 [ 70.790547][ T1332] ? debug_smp_processor_id+0x17/0x20 [ 70.795749][ T1332] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 70.801651][ T1332] __x64_sys_sendmsg+0x7f/0x90 [ 70.806253][ T1332] x64_sys_call+0x16a/0x9a0 [ 70.810592][ T1332] do_syscall_64+0x3b/0xb0 [ 70.814842][ T1332] ? clear_bhb_loop+0x55/0xb0 [ 70.819354][ T1332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.825081][ T1332] RIP: 0033:0x7f34d3f79eb9 [ 70.829338][ T1332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.848786][ T1332] RSP: 002b:00007f34d4d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.857024][ T1332] RAX: ffffffffffffffda RBX: 00007f34d4115f80 RCX: 00007f34d3f79eb9 [ 70.865030][ T1332] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 70.872841][ T1332] RBP: 00007f34d4d47090 R08: 0000000000000000 R09: 0000000000000000 [ 70.880653][ T1332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.888463][ T1332] R13: 0000000000000000 R14: 00007f34d4115f80 R15: 00007fffee0bc9c8 [ 70.896278][ T1332] [ 70.977676][ T1325] loop4: detected capacity change from 1024 to 0 [ 70.987684][ C0] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.997823][ C0] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.007101][ C0] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.016713][ C0] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.026165][ C0] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.037282][ C0] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.047302][ C0] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.057657][ C1] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.077535][ C1] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.084443][ T1337] loop0: detected capacity change from 0 to 40427 [ 71.097073][ C1] I/O error, dev loop4, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.106716][ T1337] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.111356][ T1338] EXT4-fs error (device loop4): ext4_get_inode_loc:4635: inode #15: block 8: comm syz.4.233: unable to read itable block [ 71.114846][ T1340] fuse: Unknown parameter 'ÿ0x000000000000000a' [ 71.126995][ T8] loop: Write error at byte offset 9223372036854776831, length 1024. [ 71.141101][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.144402][ T1337] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.149211][ T1338] EXT4-fs (loop4): I/O error while writing superblock [ 71.164741][ T1338] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: IO failure [ 71.173764][ T904] loop: Write error at byte offset 9223372036854776831, length 1024. [ 71.175034][ T1337] F2FS-fs (loop0): invalid crc value [ 71.183852][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.194995][ T1338] EXT4-fs (loop4): I/O error while writing superblock [ 71.201686][ T1338] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #15: comm syz.4.233: mark_inode_dirty error [ 71.202018][ T1337] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.213181][ T904] loop: Write error at byte offset 9223372036854776831, length 1024. [ 71.226825][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.234941][ T1338] EXT4-fs (loop4): I/O error while writing superblock [ 71.241923][ T1338] EXT4-fs error (device loop4): ext4_get_inode_loc:4635: inode #15: block 8: comm syz.4.233: unable to read itable block [ 71.252205][ T1337] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.254491][ T904] loop: Write error at byte offset 9223372036854776831, length 1024. [ 71.261650][ T1337] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.269245][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.285862][ T1338] EXT4-fs (loop4): I/O error while writing superblock [ 71.292574][ T1338] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: IO failure [ 71.317744][ T904] loop: Write error at byte offset 9223372036854776831, length 1024. [ 71.325772][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.333948][ T1338] EXT4-fs (loop4): I/O error while writing superblock [ 71.340673][ T1338] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #15: comm syz.4.233: mark_inode_dirty error [ 71.352083][ T904] loop: Write error at byte offset 9223372036854776831, length 1024. [ 71.353136][ T313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.360058][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.373014][ T313] usb 4-1: config 0 has no interfaces? [ 71.378253][ T1338] EXT4-fs (loop4): I/O error while writing superblock [ 71.383596][ T313] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 71.390786][ T1338] EXT4-fs error (device loop4): ext4_get_inode_loc:4635: inode #15: block 8: comm syz.4.233: unable to read itable block [ 71.399137][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.411878][ T8] loop: Write error at byte offset 9223372036854776831, length 1024. [ 71.427234][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.435347][ T1338] EXT4-fs (loop4): I/O error while writing superblock [ 71.442296][ T1338] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: IO failure [ 71.464250][ T1350] syz.0.240: attempt to access beyond end of device [ 71.464250][ T1350] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 71.479080][ T8] loop: Write error at byte offset 9223372036854776831, length 1024. [ 71.487037][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.495298][ T1338] EXT4-fs (loop4): I/O error while writing superblock [ 71.501644][ T313] usb 4-1: config 0 descriptor?? [ 71.506904][ T1338] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #15: comm syz.4.233: mark_inode_dirty error [ 71.518959][ T8] loop: Write error at byte offset 9223372036854776831, length 1024. [ 71.526885][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.535010][ T1338] EXT4-fs (loop4): I/O error while writing superblock [ 71.664773][ T1352] fuse: Unknown parameter 'gd' [ 71.923814][ T745] EXT4-fs (loop2): unmounting filesystem. [ 72.041564][ T1356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 72.227150][ T1338] syz.4.233 (1338) used greatest stack depth: 20136 bytes left [ 72.228469][ T853] EXT4-fs error (device loop4): ext4_get_inode_loc:4635: inode #2: block 5: comm syz-executor: unable to read itable block [ 72.247438][ T904] loop: Write error at byte offset 9223372036854776831, length 1024. [ 72.255412][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 72.266193][ C0] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 112) [ 72.277263][ C0] Buffer I/O error on device loop4, logical block 112 [ 72.319401][ T1360] loop1: detected capacity change from 0 to 1024 [ 72.325904][ T1360] EXT4-fs: Ignoring removed orlov option [ 72.331887][ T1360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.350652][ T1360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.365748][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 72.365762][ T28] audit: type=1400 audit(1725251839.726:298): avc: denied { mounton } for pid=1359 comm="syz.1.244" path="/45/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.368745][ T1360] incfs: Can't find or create .index dir in ./file0 [ 72.400771][ T28] audit: type=1400 audit(1725251839.726:299): avc: denied { mounton } for pid=1359 comm="syz.1.244" path="/45/file1/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.424486][ T1360] incfs: mount failed -14 [ 72.430536][ T28] audit: type=1400 audit(1725251839.796:300): avc: denied { name_bind } for pid=1359 comm="syz.1.244" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 72.490959][ T291] EXT4-fs (loop1): unmounting filesystem. [ 72.572417][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.586541][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.597907][ T1365] device bridge_slave_0 entered promiscuous mode [ 72.607798][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.614817][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.622158][ T1365] device bridge_slave_1 entered promiscuous mode [ 72.642820][ T1377] loop0: detected capacity change from 0 to 2048 [ 72.660066][ T1377] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.250: casefold flag without casefold feature [ 72.674930][ T1377] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.685240][ T1377] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 72.692839][ T1377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.762342][ T1380] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 72.821392][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.828273][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.835441][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.842279][ T1365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.985093][ T28] audit: type=1400 audit(1725251840.326:301): avc: denied { sqpoll } for pid=1382 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.163846][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.172255][ T790] usb 4-1: USB disconnect, device number 5 [ 73.181655][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.183935][ T1391] loop3: detected capacity change from 0 to 256 [ 73.199599][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.200080][ T1391] FAT-fs (loop3): Directory bread(block 64) failed [ 73.213072][ T1391] FAT-fs (loop3): Directory bread(block 65) failed [ 73.219744][ T1391] FAT-fs (loop3): Directory bread(block 66) failed [ 73.226142][ T1391] FAT-fs (loop3): Directory bread(block 67) failed [ 73.232666][ T1391] FAT-fs (loop3): Directory bread(block 68) failed [ 73.239086][ T1391] FAT-fs (loop3): Directory bread(block 69) failed [ 73.245411][ T1391] FAT-fs (loop3): Directory bread(block 70) failed [ 73.251828][ T1391] FAT-fs (loop3): Directory bread(block 71) failed [ 73.252007][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.258132][ T1391] FAT-fs (loop3): Directory bread(block 72) failed [ 73.258153][ T1391] FAT-fs (loop3): Directory bread(block 73) failed [ 73.266448][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.285417][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.293916][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.302173][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.309046][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.318440][ T8] device vlan2 left promiscuous mode [ 73.323852][ T8] bridge0: port 3(vlan2) entered disabled state [ 73.330351][ T8] device bridge_slave_1 left promiscuous mode [ 73.336335][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.343723][ T8] device bridge_slave_0 left promiscuous mode [ 73.349840][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.357520][ T8] device veth1_macvtap left promiscuous mode [ 73.363375][ T8] device veth0_vlan left promiscuous mode [ 73.441062][ T1399] loop1: detected capacity change from 0 to 4096 [ 73.449564][ T1399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.463806][ T1399] fs-verity (loop1, inode 13): Error -27 writing Merkle tree block 8709239245 [ 73.472897][ T1399] fs-verity (loop1, inode 13): Error -27 building Merkle tree [ 73.487038][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.487993][ T291] EXT4-fs (loop1): unmounting filesystem. [ 73.506708][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.514610][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.529993][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.542268][ T289] EXT4-fs (loop0): unmounting filesystem. [ 73.561562][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.571610][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.583553][ T1365] device veth0_vlan entered promiscuous mode [ 73.625275][ T1365] device veth1_macvtap entered promiscuous mode [ 73.668405][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.676137][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.684257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.692867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.759453][ T790] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 73.926878][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.938253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.946608][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.979355][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.992317][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.001369][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.007062][ T1402] loop1: detected capacity change from 0 to 40427 [ 74.019274][ T1402] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 74.021968][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.034910][ T1402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 74.044704][ T1402] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(65536) [ 74.053636][ T1402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 74.227700][ T790] usb 4-1: device descriptor read/64, error -71 [ 74.485728][ T1418] loop1: detected capacity change from 0 to 2048 [ 74.531398][ T1418] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.258: casefold flag without casefold feature [ 74.564035][ T1418] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 74.575958][ T1418] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 74.603858][ T1418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.717328][ T790] usb 4-1: device descriptor read/64, error -71 [ 74.795789][ T1429] loop4: detected capacity change from 0 to 2048 [ 74.840958][ T1429] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.875603][ T1429] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.987381][ T790] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 75.287759][ T790] usb 4-1: device descriptor read/64, error -71 [ 75.323634][ T291] EXT4-fs (loop1): unmounting filesystem. [ 75.448091][ T28] audit: type=1400 audit(1725251842.816:302): avc: denied { setattr } for pid=1442 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.490594][ T1444] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 75.542491][ T1447] loop2: detected capacity change from 0 to 512 [ 75.571111][ T1447] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.583152][ T1447] EXT4-fs: Ignoring removed i_version option [ 75.591167][ T1365] EXT4-fs (loop4): unmounting filesystem. [ 75.599715][ T1447] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.264: invalid block [ 75.626553][ T1447] EXT4-fs (loop2): Remounting filesystem read-only [ 75.633101][ T1447] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.264: couldn't read orphan inode 11 (err -117) [ 75.644964][ T1447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.680066][ T1452] loop4: detected capacity change from 0 to 512 [ 75.696113][ T1452] ext4: Bad value for 'auto_da_alloc' [ 75.737326][ T790] usb 4-1: device descriptor read/64, error -71 [ 75.751544][ T1452] 9pnet_fd: Insufficient options for proto=fd [ 75.786085][ T745] EXT4-fs (loop2): unmounting filesystem. [ 75.873127][ T790] usb usb4-port1: attempt power cycle [ 75.888053][ T1457] loop2: detected capacity change from 0 to 2048 [ 75.894457][ T1457] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.914946][ T1457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.925541][ T1457] EXT4-fs (loop2): shut down requested (0) [ 75.984783][ T28] audit: type=1400 audit(1725251843.346:303): avc: denied { read } for pid=1456 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.004712][ T1455] loop4: detected capacity change from 0 to 40427 [ 76.011601][ T1455] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 76.020418][ T1455] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.030755][ T1455] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.055697][ T1455] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.062644][ T1455] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.205501][ T1468] input: syz0 as /devices/virtual/input/input9 [ 76.729791][ T745] EXT4-fs (loop2): unmounting filesystem. [ 76.954570][ T1365] syz-executor: attempt to access beyond end of device [ 76.954570][ T1365] loop4: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 76.993557][ T1484] loop2: detected capacity change from 0 to 512 [ 77.115502][ T1487] loop3: detected capacity change from 0 to 1024 [ 77.124839][ T1487] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 77.134455][ T1487] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 77.147346][ T1487] EXT4-fs error (device loop3): ext4_get_journal_inode:5720: inode #5: comm syz.3.273: unexpected bad inode w/o EXT4_IGET_BAD [ 77.160867][ T1487] EXT4-fs (loop3): no journal found [ 77.165902][ T1487] EXT4-fs (loop3): can't get journal size [ 77.179377][ T1487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 77.198411][ T1484] EXT4-fs (loop2): 1 orphan inode deleted [ 77.218049][ T1484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.234625][ T1493] loop4: detected capacity change from 0 to 2048 [ 77.247738][ T1484] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 77.269050][ T1493] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.272: casefold flag without casefold feature [ 77.282651][ T1493] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 77.294017][ T1493] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 77.303472][ T1493] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.314244][ T745] EXT4-fs (loop2): unmounting filesystem. [ 77.709386][ T6] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 77.947320][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 77.959151][ T290] EXT4-fs error (device loop3): __ext4_iget:5046: inode #15: block 1803188595: comm syz-executor: invalid block [ 77.971239][ T290] EXT4-fs error (device loop3): __ext4_iget:5046: inode #15: block 1803188595: comm syz-executor: invalid block [ 78.018951][ T290] EXT4-fs (loop3): unmounting filesystem. [ 78.074703][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.088112][ T1365] EXT4-fs (loop4): unmounting filesystem. [ 78.098772][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.118307][ T6] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 78.127650][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.141401][ T6] usb 1-1: config 0 descriptor?? [ 78.165643][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.172881][ T1506] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.182656][ T1506] device bridge_slave_0 entered promiscuous mode [ 78.189752][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.196662][ T1506] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.204248][ T1506] device bridge_slave_1 entered promiscuous mode [ 78.362494][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.369409][ T1506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.376503][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.383269][ T1506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.436215][ T1516] loop2: detected capacity change from 0 to 128 [ 78.489548][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.497340][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.504741][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.520949][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.531151][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.538025][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.545613][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.553781][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.560636][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.574234][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.582748][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.614640][ T1497] loop0: detected capacity change from 0 to 332 [ 78.621128][ T313] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.790716][ T1519] tipc: Started in network mode [ 78.795427][ T1519] tipc: Node identity ac1414aa, cluster identity 4711 [ 78.802154][ T1519] tipc: New replicast peer: 100.1.1.1 [ 78.807597][ T1519] tipc: Enabled bearer , priority 10 [ 78.807719][ T333] blk_print_req_error: 110 callbacks suppressed [ 78.807729][ T333] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.834054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.846635][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.854539][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.861882][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.869863][ T1506] device veth0_vlan entered promiscuous mode [ 78.881258][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.890234][ T1506] device veth1_macvtap entered promiscuous mode [ 78.899080][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.909286][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.017829][ T902] device bridge_slave_1 left promiscuous mode [ 79.023859][ T902] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.032534][ T902] device bridge_slave_0 left promiscuous mode [ 79.038819][ T902] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.048283][ T902] device veth1_macvtap left promiscuous mode [ 79.054256][ T902] device veth0_vlan left promiscuous mode [ 79.079365][ T1524] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 79.287592][ T313] usb 5-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 79.296916][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.305095][ T313] usb 5-1: Product: syz [ 79.309224][ T313] usb 5-1: Manufacturer: syz [ 79.313635][ T313] usb 5-1: SerialNumber: syz [ 79.319030][ T313] usb 5-1: config 0 descriptor?? [ 79.357939][ T313] smsc75xx v1.0.0 [ 79.361454][ T313] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 79.371516][ T313] smsc75xx: probe of 5-1:0.0 failed with error -22 [ 79.537559][ T528] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 79.561118][ T1513] loop4: detected capacity change from 0 to 256 [ 79.567837][ T1513] exFAT-fs (loop4): bogus sectors bits per cluster : 143 [ 79.574682][ T1513] exFAT-fs (loop4): failed to read boot sector [ 79.580852][ T1513] exFAT-fs (loop4): failed to recognize exfat type [ 79.817361][ T528] usb 3-1: Using ep0 maxpacket: 16 [ 79.886656][ T1531] loop3: detected capacity change from 0 to 40427 [ 79.893627][ T1531] F2FS-fs (loop3): Unrecognized mount option "act" or missing value [ 79.927595][ T296] tipc: Node number set to 2886997162 [ 79.957341][ T528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.968183][ T528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.187420][ T528] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 80.196522][ T528] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 80.205029][ T528] usb 3-1: Product: syz [ 80.209447][ T528] usb 3-1: Manufacturer: syz [ 80.233601][ T528] usb 3-1: config 0 descriptor?? [ 80.367384][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 80.373165][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 80.380225][ T6] usb 1-1: USB disconnect, device number 9 [ 80.417417][ T39] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 80.667301][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 80.710656][ T528] kovaplus 0003:1E7D:2D50.000A: item fetching failed at offset 5/7 [ 80.740333][ T528] kovaplus 0003:1E7D:2D50.000A: parse failed [ 80.746301][ T528] kovaplus: probe of 0003:1E7D:2D50.000A failed with error -22 [ 80.987696][ T39] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 81.001042][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.009376][ T39] usb 4-1: Product: syz [ 81.013562][ T39] usb 4-1: Manufacturer: syz [ 81.018200][ T39] usb 4-1: SerialNumber: syz [ 81.025338][ T313] usb 3-1: USB disconnect, device number 9 [ 81.046411][ T39] r8152-cfgselector 4-1: config 0 descriptor?? [ 81.142426][ T6] usb 5-1: USB disconnect, device number 4 [ 81.162181][ T1553] loop4: detected capacity change from 0 to 512 [ 81.179300][ T1553] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters [ 81.193804][ T1553] EXT4-fs (loop4): 1 orphan inode deleted [ 81.199523][ T1553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.207516][ T8] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 81.208679][ T1553] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 81.218335][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6787: comm kworker/u4:0: Failed to release dquot type 1 [ 81.274846][ T1553] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.287: deleted inode referenced: 16 [ 81.287706][ T28] audit: type=1400 audit(1725251848.646:304): avc: denied { ioctl } for pid=1552 comm="syz.4.287" path="socket:[20154]" dev="sockfs" ino=20154 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.347404][ T39] r8152-cfgselector 4-1: Unknown version 0x5460 [ 81.372160][ T1559] loop0: detected capacity change from 0 to 2048 [ 81.379528][ T1559] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.288: casefold flag without casefold feature [ 81.392370][ T1559] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 81.402453][ T1559] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 81.409839][ T1559] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.010314][ T1365] EXT4-fs (loop4): unmounting filesystem. [ 82.110440][ T28] audit: type=1326 audit(1725251849.476:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.4.290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac2a179eb9 code=0x0 [ 82.223385][ T289] EXT4-fs (loop0): unmounting filesystem. [ 82.237672][ T1572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 82.517312][ T296] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 82.807343][ T39] r8152-cfgselector 4-1: Unknown version 0x0000 [ 82.814450][ T39] r8152-cfgselector 4-1: bad CDC descriptors [ 82.847380][ T39] r8152-cfgselector 4-1: Unknown version 0x0000 [ 82.856468][ T39] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 82.877348][ T296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.893584][ T296] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.909066][ T296] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 82.918564][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.928995][ T296] usb 1-1: config 0 descriptor?? [ 83.132839][ T1580] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 83.987323][ T296] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 84.257385][ T296] usb 4-1: device descriptor read/64, error -71 [ 84.647340][ T296] usb 4-1: device descriptor read/64, error -71 [ 84.670054][ T1591] loop2: detected capacity change from 0 to 2048 [ 84.676858][ T1591] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 85.027369][ T296] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 85.239323][ T6] usb 1-1: USB disconnect, device number 10 [ 85.279305][ T28] audit: type=1400 audit(1725251852.646:306): avc: denied { getopt } for pid=1598 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.297346][ T296] usb 4-1: device descriptor read/64, error -71 [ 85.800650][ T6] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 85.877332][ T296] usb 4-1: device descriptor read/64, error -71 [ 85.958960][ T1605] loop4: detected capacity change from 0 to 4096 [ 85.967753][ T1605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 85.983066][ T1605] fs-verity (loop4, inode 13): Error -27 writing Merkle tree block 8709239245 [ 85.991976][ T1605] fs-verity (loop4, inode 13): Error -27 building Merkle tree [ 85.999425][ T296] usb usb4-port1: attempt power cycle [ 86.006927][ T1365] EXT4-fs (loop4): unmounting filesystem. [ 86.047388][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 86.167372][ T6] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 86.187348][ T6] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.196831][ T6] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.377417][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.390722][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.407529][ T296] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 86.419648][ T6] usb 1-1: Product: syz [ 86.425583][ T6] usb 1-1: Manufacturer: syz [ 86.430408][ T6] usb 1-1: SerialNumber: syz [ 86.481154][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.488052][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.495327][ T1614] device bridge_slave_0 entered promiscuous mode [ 86.502356][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.509227][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.516557][ T1614] device bridge_slave_1 entered promiscuous mode [ 86.587394][ T296] usb 4-1: device descriptor read/8, error -71 [ 86.632422][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.639349][ T1614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.646415][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.653234][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.706593][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.714710][ T790] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.721948][ T790] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.769237][ T1616] loop2: detected capacity change from 0 to 40427 [ 86.790679][ T1616] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 86.798433][ T296] usb 4-1: device descriptor read/8, error -71 [ 86.804690][ T6] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 86.829132][ T1616] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.837834][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.845845][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.852719][ T528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.860005][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.868058][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.874996][ T528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.909966][ T1616] F2FS-fs (loop2): invalid crc value [ 86.943308][ T1625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 87.049465][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.103760][ T1616] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.114784][ T6] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 87.131212][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.148024][ T6] usb 1-1: USB disconnect, device number 11 [ 87.187823][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.205521][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.219627][ T1614] device veth0_vlan entered promiscuous mode [ 87.222371][ T1616] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.234118][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.240672][ T1616] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.247601][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.282499][ T1614] device veth1_macvtap entered promiscuous mode [ 87.298523][ T902] device bridge_slave_1 left promiscuous mode [ 87.316247][ T902] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.360298][ T902] device bridge_slave_0 left promiscuous mode [ 87.366368][ T902] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.375351][ T902] device veth1_macvtap left promiscuous mode [ 87.490660][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.514268][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.525561][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.528241][ T1639] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 87.555011][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.565354][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.638740][ T1642] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 87.670644][ T1642] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 87.729661][ T1650] loop3: detected capacity change from 0 to 4096 [ 87.767542][ T1650] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.880898][ T1650] fs-verity (loop3, inode 13): Error -27 writing Merkle tree block 8709239245 [ 87.921794][ T1650] fs-verity (loop3, inode 13): Error -27 building Merkle tree [ 88.017067][ T1506] EXT4-fs (loop3): unmounting filesystem. [ 90.235468][ T1689] loop2: detected capacity change from 0 to 512 [ 90.242911][ T1689] EXT4-fs: Ignoring removed nobh option [ 90.249219][ T1689] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.260136][ T1689] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.263249][ T1693] loop0: detected capacity change from 0 to 1024 [ 90.270510][ T1689] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 90.285303][ T1693] EXT4-fs: Ignoring removed orlov option [ 90.290857][ T1693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.309013][ T1693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.363652][ T1693] incfs: Can't find or create .index dir in ./file0 [ 90.486329][ T1700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.321'. [ 90.525365][ T1693] incfs: mount failed -14 [ 90.587357][ T528] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 90.762717][ T289] EXT4-fs (loop0): unmounting filesystem. [ 91.007466][ T1711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.323'. [ 91.137554][ T528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.261533][ T528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.262596][ T1717] loop2: detected capacity change from 0 to 512 [ 91.289182][ T1717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.291574][ T528] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.298422][ T1717] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff) [ 91.356841][ T528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.379965][ T528] usb 4-1: config 0 descriptor?? [ 91.530137][ T1725] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 91.692055][ T1729] loop0: detected capacity change from 0 to 512 [ 91.716029][ T1729] EXT4-fs (loop0): 1 truncate cleaned up [ 91.721536][ T1729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.748170][ T1729] syz.0.326 (pid 1729) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 91.777964][ T289] EXT4-fs (loop0): unmounting filesystem. [ 91.906479][ T1735] loop1: detected capacity change from 0 to 1024 [ 91.928128][ T333] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.058392][ T1736] loop0: detected capacity change from 0 to 2048 [ 92.188196][ T1735] loop1: detected capacity change from 0 to 128 [ 92.200201][ T745] EXT4-fs (loop2): unmounting filesystem. [ 92.229065][ T1736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.257092][ T1733] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.271740][ T1733] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 92.283861][ T1733] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.283861][ T1733] [ 92.293320][ T1733] EXT4-fs (loop0): Total free blocks count 0 [ 92.299120][ T1733] EXT4-fs (loop0): Free/Dirty block details [ 92.304808][ T1733] EXT4-fs (loop0): free_blocks=2415919104 [ 92.310467][ T1733] EXT4-fs (loop0): dirty_blocks=16 [ 92.315307][ T1733] EXT4-fs (loop0): Block reservation details [ 92.321201][ T1733] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 92.510791][ T28] audit: type=1400 audit(1725251859.696:307): avc: denied { map } for pid=1731 comm="syz.0.327" path="/68/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.662075][ T28] audit: type=1326 audit(1725251860.006:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1739 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0f779eb9 code=0x7ffc0000 [ 92.709868][ T28] audit: type=1326 audit(1725251860.006:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1739 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0f779eb9 code=0x7ffc0000 [ 92.737927][ T28] audit: type=1326 audit(1725251860.006:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1739 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9f0f779eb9 code=0x7ffc0000 [ 92.763815][ T28] audit: type=1326 audit(1725251860.006:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1739 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0f779eb9 code=0x7ffc0000 [ 92.787784][ T28] audit: type=1326 audit(1725251860.006:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1739 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0f779eb9 code=0x7ffc0000 [ 92.812831][ T28] audit: type=1326 audit(1725251860.016:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1739 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f9f0f779eb9 code=0x7ffc0000 [ 92.836267][ T528] uclogic 0003:256C:006D.000B: interface is invalid, ignoring [ 92.929530][ T28] audit: type=1326 audit(1725251860.286:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1755 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937c579eb9 code=0x7ffc0000 [ 93.011832][ T28] audit: type=1326 audit(1725251860.286:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1755 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f937c579eb9 code=0x7ffc0000 [ 93.079563][ T28] audit: type=1326 audit(1725251860.286:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1755 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937c579eb9 code=0x7ffc0000 [ 93.164944][ T1759] loop2: detected capacity change from 0 to 1024 [ 93.188155][ T1759] EXT4-fs: Ignoring removed orlov option [ 93.205964][ T1759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.247315][ T295] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 93.257028][ T1759] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.307812][ T1759] incfs: Can't find or create .index dir in ./file0 [ 93.374078][ T1759] incfs: mount failed -14 [ 93.463926][ T745] EXT4-fs (loop2): unmounting filesystem. [ 93.640001][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.685363][ T1769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.335'. [ 93.782652][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.812921][ T295] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 93.843585][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.929442][ T313] usb 4-1: USB disconnect, device number 14 [ 93.997167][ T295] usb 2-1: config 0 descriptor?? [ 94.041183][ T1772] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 94.048821][ T1772] #PF: supervisor instruction fetch in kernel mode [ 94.055156][ T1772] #PF: error_code(0x0010) - not-present page [ 94.060980][ T1772] PGD 11a3b5067 P4D 11a3b5067 PUD 11a3b1067 PMD 0 [ 94.067305][ T1772] Oops: 0010 [#1] PREEMPT SMP KASAN [ 94.072337][ T1772] CPU: 1 PID: 1772 Comm: syz.2.336 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0 [ 94.081800][ T1772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 94.091695][ T1772] RIP: 0010:0x0 [ 94.094993][ T1772] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 94.102191][ T1772] RSP: 0018:ffffc90002e0eff8 EFLAGS: 00010246 [ 94.108098][ T1772] RAX: 1ffff920005c1eb8 RBX: dffffc0000000000 RCX: 0000000000040000 [ 94.115910][ T1772] RDX: ffffc9000e67d000 RSI: ffffea0004806e00 RDI: ffff888111e26780 [ 94.123738][ T1772] RBP: ffffc90002e0f150 R08: ffffffff81a46b48 R09: fffff94000900dc7 [ 94.131531][ T1772] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002e0f5c0 [ 94.139337][ T1772] R13: ffffea0004806e00 R14: ffffc90002e0f5d8 R15: 0000000000000000 [ 94.147152][ T1772] FS: 00007f9f104c46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 94.155918][ T1772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.162338][ T1772] CR2: ffffffffffffffd6 CR3: 000000012c40f000 CR4: 00000000003506a0 [ 94.170238][ T1772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.178044][ T1772] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.185859][ T1772] Call Trace: [ 94.188994][ T1772] [ 94.191767][ T1772] ? __die_body+0x62/0xb0 [ 94.195930][ T1772] ? __die+0x7e/0x90 [ 94.199661][ T1772] ? page_fault_oops+0x7f9/0xa90 [ 94.204434][ T1772] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 94.209815][ T1772] ? cgroup_rstat_updated+0xe5/0x370 [ 94.215035][ T1772] ? is_errata93+0xc7/0x240 [ 94.219559][ T1772] ? exc_page_fault+0x529/0x6d0 [ 94.224243][ T1772] ? asm_exc_page_fault+0x27/0x30 [ 94.229092][ T1772] ? read_pages+0x838/0xd40 [ 94.233442][ T1772] read_pages+0x89c/0xd40 [ 94.237608][ T1772] ? workingset_activation+0x430/0x430 [ 94.242896][ T1772] ? folio_add_lru+0x280/0x3f0 [ 94.247493][ T1772] ? page_cache_ra_unbounded+0x690/0x690 [ 94.252956][ T1772] ? filemap_add_folio+0x18f/0x200 [ 94.257907][ T1772] ? __filemap_add_folio+0xd10/0xd10 [ 94.263462][ T1772] page_cache_ra_order+0x822/0xc40 [ 94.268412][ T1772] ? do_page_cache_ra+0x110/0x110 [ 94.273268][ T1772] ? xas_create+0xf3a/0x1630 [ 94.277706][ T1772] ondemand_readahead+0x91a/0xee0 [ 94.282649][ T1772] ? cgroup_rstat_updated+0xe5/0x370 [ 94.287780][ T1772] ? page_cache_sync_ra+0x450/0x450 [ 94.292816][ T1772] ? blk_cgroup_congested+0x132/0x150 [ 94.298012][ T1772] page_cache_sync_ra+0x3d6/0x450 [ 94.302877][ T1772] hpage_collapse_scan_file+0x19ba/0x46e0 [ 94.308438][ T1772] ? __kasan_check_write+0x14/0x20 [ 94.313392][ T1772] ? wake_up_q+0x11c/0x1d0 [ 94.317629][ T1772] ? hugepage_vma_revalidate+0x310/0x310 [ 94.323096][ T1772] ? mutex_unlock+0x17b/0x260 [ 94.327620][ T1772] ? __lru_add_drain_all+0x714/0x770 [ 94.332729][ T1772] madvise_collapse+0x639/0xcf0 [ 94.337448][ T1772] ? khugepaged_min_free_kbytes_update+0x90/0x90 [ 94.343589][ T1772] ? memset+0x35/0x40 [ 94.347484][ T1772] ? blk_start_plug+0x9c/0x130 [ 94.352092][ T1772] do_madvise+0x1604/0x40b0 [ 94.356423][ T1772] ? _raw_spin_unlock+0x4c/0x70 [ 94.361120][ T1772] ? madvise_set_anon_name+0x4c0/0x4c0 [ 94.366406][ T1772] ? __kasan_check_read+0x11/0x20 [ 94.371265][ T1772] ? schedule+0xda/0x180 [ 94.375345][ T1772] ? futex_unqueue+0x110/0x140 [ 94.379944][ T1772] ? futex_wait+0x4b7/0x7e0 [ 94.384283][ T1772] ? futex_wait_setup+0x330/0x330 [ 94.389233][ T1772] ? __kasan_slab_free+0x11/0x20 [ 94.394006][ T1772] ? getname_flags+0x3a2/0x520 [ 94.398608][ T1772] ? do_futex+0x55a/0x9a0 [ 94.402779][ T1772] ? __this_cpu_preempt_check+0x13/0x20 [ 94.408151][ T1772] ? xfd_validate_state+0x6f/0x170 [ 94.413106][ T1772] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 94.418837][ T1772] ? save_fpregs_to_fpstate+0x220/0x220 [ 94.424210][ T1772] ? fpregs_restore_userregs+0x130/0x290 [ 94.429678][ T1772] __x64_sys_madvise+0xa8/0xc0 [ 94.434276][ T1772] x64_sys_call+0xec/0x9a0 [ 94.438528][ T1772] do_syscall_64+0x3b/0xb0 [ 94.442906][ T1772] ? clear_bhb_loop+0x55/0xb0 [ 94.447394][ T1772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.453109][ T1772] RIP: 0033:0x7f9f0f779eb9 [ 94.457372][ T1772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.476806][ T1772] RSP: 002b:00007f9f104c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 94.485051][ T1772] RAX: ffffffffffffffda RBX: 00007f9f0f915f80 RCX: 00007f9f0f779eb9 [ 94.492902][ T1772] RDX: 0000000000000019 RSI: 0000000000600702 RDI: 0000000020000000 [ 94.500760][ T1772] RBP: 00007f9f0f7e793e R08: 0000000000000000 R09: 0000000000000000 [ 94.508677][ T1772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.516476][ T1772] R13: 0000000000000000 R14: 00007f9f0f915f80 R15: 00007ffdfa38cb18 [ 94.524291][ T1772] [ 94.527158][ T1772] Modules linked in: [ 94.530892][ T1772] CR2: 0000000000000000 [ 94.534890][ T1772] ---[ end trace 0000000000000000 ]--- [ 94.540257][ T1772] RIP: 0010:0x0 [ 94.543562][ T1772] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 94.550881][ T1772] RSP: 0018:ffffc90002e0eff8 EFLAGS: 00010246 [ 94.556747][ T1772] RAX: 1ffff920005c1eb8 RBX: dffffc0000000000 RCX: 0000000000040000 [ 94.564558][ T1772] RDX: ffffc9000e67d000 RSI: ffffea0004806e00 RDI: ffff888111e26780 [ 94.572371][ T1772] RBP: ffffc90002e0f150 R08: ffffffff81a46b48 R09: fffff94000900dc7 [ 94.580532][ T1772] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002e0f5c0 [ 94.588342][ T1772] R13: ffffea0004806e00 R14: ffffc90002e0f5d8 R15: 0000000000000000 [ 94.596155][ T1772] FS: 00007f9f104c46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 94.605009][ T1772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.611428][ T1772] CR2: ffffffffffffffd6 CR3: 000000012c40f000 CR4: 00000000003506a0 [ 94.619241][ T1772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.627056][ T1772] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.634870][ T1772] Kernel panic - not syncing: Fatal exception [ 94.640886][ T1772] Kernel Offset: disabled [ 94.644947][ T1772] Rebooting in 86400 seconds..