last executing test programs: 1m33.578623665s ago: executing program 1 (id=1348): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES64, @ANYRESOCT, @ANYRES8], 0xfe, 0x1535, &(0x7f0000003800)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x20000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x5, 0xfffffd77, 0x4, 0x401, 0xfffffffc}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 1m32.524369253s ago: executing program 1 (id=1351): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) fcntl$setstatus(r3, 0x4, 0x40400) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000010000000f000000240007800800020001000000040004"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000140)=""/16, &(0x7f0000000180)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f0000000040)="0bbb268dd6f7a80400000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000003000000", 0x30) close_range(r0, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETFMT(r7, 0xffffffff80000400, 0x0, &(0x7f0000000cc0)) 1m32.422503062s ago: executing program 1 (id=1352): socket$packet(0x11, 0x3, 0x300) write$char_usb(0xffffffffffffffff, &(0x7f0000000440)="98b621d3bb9e81bb498db61d72ee02128070cffd259c7a837f2faf920528684285914e4b", 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000002e460f01c50f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x45}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0xfffe, @local}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}}}, 0x108) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x800000) 1m31.50773592s ago: executing program 1 (id=1355): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010004, &(0x7f0000000280)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@uni_xlate}, {@fat=@check_strict}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_win95}, {@shortname_winnt}, {@numtail}, {@shortname_win95}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@uni_xlate}, {@rodir}]}, 0x1, 0x36c, &(0x7f0000000a80)="$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") mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r2, 0x2b, 0x0, 0xfffffffa, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000400)='cpuset.mem_exclusive\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r6}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r4, r2, 0x35, 0x28, 0x0, @void, @void, @void, @value=r6, r3}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r1, 0xe, 0x0, @val=@netkit={@void, @value=r5, @void, @void, r3}}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r7}, 0x10) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet6(0xa, 0x800, 0x84) 1m30.748612498s ago: executing program 1 (id=1358): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = epoll_create(0x3) close_range(r0, 0xffffffffffffffff, 0x2) (async, rerun: 64) clock_adjtime(0x3, &(0x7f0000004c40)={0x3, 0xb, 0xdc, 0xfffffffffffffeff, 0x2, 0x5, 0x80000000, 0x3, 0x0, 0x0, 0x6, 0x0, 0x100000000, 0x8, 0x100000001, 0x9, 0x400, 0x80000001, 0x6, 0x6, 0xff, 0x69, 0xd7, 0x3}) (rerun: 64) r1 = epoll_create1(0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000840)={'syz1\x00', {0x0, 0x1}, 0x3e, [0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) recvmmsg(r4, &(0x7f0000004a80)=[{{&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000100)=""/217, 0xd9}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000280)=""/145, 0x91}], 0x4}, 0x1}, {{&(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/225, 0xe1}], 0x4, &(0x7f00000007c0)=""/162, 0xa2}, 0x8}, {{&(0x7f0000000880)=@isdn, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/86, 0x56}, {&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f00000009c0)=""/86, 0x56}, {&(0x7f0000000a40)=""/96, 0x60}, {&(0x7f0000000ac0)=""/242, 0xf2}], 0x5, &(0x7f0000000c40)=""/56, 0x38}, 0x4}, {{&(0x7f0000000c80)=@generic, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000d00)=""/243, 0xf3}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x2, &(0x7f0000001e40)=""/119, 0x77}, 0x1}, {{&(0x7f0000001ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/131, 0x83}, {&(0x7f0000003000)=""/41, 0x29}, {&(0x7f0000003040)=""/108, 0x6c}, {&(0x7f00000030c0)=""/44, 0x2c}, {&(0x7f0000003100)=""/147, 0x93}], 0x6, &(0x7f0000003240)=""/73, 0x49}, 0xb82e}, {{&(0x7f00000032c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003340)=""/219, 0xdb}, {&(0x7f0000003440)=""/219, 0xdb}, {&(0x7f0000003540)=""/16, 0x10}, {&(0x7f0000003580)=""/146, 0x92}, {&(0x7f0000003640)=""/218, 0xda}], 0x5, &(0x7f00000037c0)=""/82, 0x52}, 0xffffff01}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000003840)=""/142, 0x8e}, {&(0x7f0000003900)=""/18, 0x12}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/141, 0x8d}], 0x4, &(0x7f0000004a40)=""/42, 0x2a}, 0x7}], 0x7, 0x10042, 0x0) 1m30.567278648s ago: executing program 1 (id=1362): socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES64=0x0, @ANYRES16=r1], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="e2ec3c1cac9fe9742fc1c9fd5a88ef785f8506950a4c8cf7a05fba8470f8a7dd2ba5b2a1ea1fad6e448752c0e14c7839415fe9cfce73fbef12575f0d3567946718c8709b8f67c41645a338dc972476ed08a1dbfc101fb60057c7e96f1b68c6d4df1086554c5996d77f26bdb2528de8fc3a0250bae50af33a", @ANYRES8=r1, @ANYRES16=0x0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x4, 0x0, 0x42, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) 1m29.347892345s ago: executing program 32 (id=1362): socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES64=0x0, @ANYRES16=r1], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="e2ec3c1cac9fe9742fc1c9fd5a88ef785f8506950a4c8cf7a05fba8470f8a7dd2ba5b2a1ea1fad6e448752c0e14c7839415fe9cfce73fbef12575f0d3567946718c8709b8f67c41645a338dc972476ed08a1dbfc101fb60057c7e96f1b68c6d4df1086554c5996d77f26bdb2528de8fc3a0250bae50af33a", @ANYRES8=r1, @ANYRES16=0x0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x4, 0x0, 0x42, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) 4.813385862s ago: executing program 0 (id=1691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb02c7}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}}, 0x0) 4.768821772s ago: executing program 5 (id=1697): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 4.743587102s ago: executing program 0 (id=1698): r0 = socket$inet6(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8001) sendto(r0, &(0x7f0000000640)="a80e9c09f5ff75e7", 0x8, 0x20000800, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) 4.668892422s ago: executing program 3 (id=1699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 4.668452512s ago: executing program 5 (id=1700): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 4.237482971s ago: executing program 5 (id=1701): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.780683939s ago: executing program 0 (id=1705): syz_usb_ep_write(0xffffffffffffffff, 0x76, 0x5, &(0x7f0000000400)="1469cf97b4") r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/224, 0xe0}], 0x1}, 0xfffffff8}], 0x1, 0x0, 0x0) 3.731015399s ago: executing program 5 (id=1706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.717066979s ago: executing program 3 (id=1707): unshare(0x2a020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x5, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 3.401611228s ago: executing program 3 (id=1708): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.401184968s ago: executing program 5 (id=1709): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1c, 0x25, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x9}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0xc25292fd4b224f3e, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x42}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_fd, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000ac0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x8, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b80), 0x10, 0x8828, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x95, &(0x7f00000003c0)=""/149, 0x41000, 0x10, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x7, 0x200, 0x8001}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000840)=[{0x4, 0x4, 0x7, 0x5}, {0x3, 0x1, 0xa, 0xb}], 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x80841, 0x8) write$tcp_mem(r8, &(0x7f0000000180)={0x9, 0x20, 0x8000000000000000, 0x20, 0x7}, 0x48) 3.401002408s ago: executing program 3 (id=1710): syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.400795558s ago: executing program 2 (id=1711): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x10, 0x7d, 0x20f}) 1.583128414s ago: executing program 5 (id=1712): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffe3e) 1.453880034s ago: executing program 4 (id=1714): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$notify(r0, 0x402, 0x8) 1.357352083s ago: executing program 4 (id=1715): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x19}}}]}, 0x78}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000280), 0x0, 0x46, 0x0) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000000)) 1.234430503s ago: executing program 2 (id=1716): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x11) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000280)={0x3, 0x300, 0x101}) 1.234056613s ago: executing program 4 (id=1717): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0e}}], 0x1, 0x2002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 1.217533293s ago: executing program 2 (id=1718): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 1.161448193s ago: executing program 4 (id=1719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x34}}, 0x0) 1.161152883s ago: executing program 2 (id=1720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3f1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.120878613s ago: executing program 4 (id=1721): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x4, 0xffffffffffffbf32, 0xffff, 0xc8, 0x2, 0x7, 0xfffffffffffffffc, 0x10001, 0x20003f}) 1.113437523s ago: executing program 0 (id=1722): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrandom(0x0, 0x0, 0x0) 760.912962ms ago: executing program 3 (id=1723): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x24, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0xfd67}, {&(0x7f00000000c0)='\x00\x00', 0x2}], 0x2}}], 0x1, 0x8080) 78.68885ms ago: executing program 0 (id=1724): socket(0x2b, 0x5, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) mkdirat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 78.18645ms ago: executing program 3 (id=1725): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x1, 0x0, &(0x7f0000000300)) 77.68717ms ago: executing program 4 (id=1726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000000)={[{@noinit_itable}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r3, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 53.46968ms ago: executing program 2 (id=1727): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f0000000280)={0x8, 0x0, 0x4}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008ca) 542.88µs ago: executing program 2 (id=1728): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 0 (id=1729): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@mb_optimize_scan}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000360002000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): t:6788: comm syz.0.805: Failed to acquire dquot type 0 [ 303.253386][ T3564] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 303.263588][ T3564] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 303.272788][ T3564] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.805: Failed to acquire dquot type 0 [ 303.284058][ T3564] EXT4-fs (loop0): 1 orphan inode deleted [ 303.289612][ T3564] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 303.298410][ T3564] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.475222][ T296] EXT4-fs (loop0): unmounting filesystem. [ 303.977224][ T3591] overlayfs: failed to clone upperpath [ 306.357616][ T3611] 9pnet_fd: Insufficient options for proto=fd [ 312.842710][ T3627] loop0: detected capacity change from 0 to 256 [ 312.849414][ T3627] FAT-fs (loop0): Unrecognized mount option "co" or missing value [ 314.855145][ T3665] loop0: detected capacity change from 0 to 512 [ 314.879372][ T3665] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 314.887895][ T3665] EXT4-fs (loop0): orphan cleanup on readonly fs [ 314.894702][ T3665] EXT4-fs warning (device loop0): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 314.909443][ T3665] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 314.916494][ T3665] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #16: comm syz.0.828: iget: immutable or append flags not allowed on symlinks [ 315.122816][ T3665] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.828: couldn't read orphan inode 16 (err -117) [ 315.347496][ T3665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 316.121213][ T3675] tipc: Enabling of bearer rejected, failed to enable media [ 316.138778][ T3677] syz.0.828[3677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.138862][ T3677] syz.0.828[3677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.219777][ T3675] overlayfs: failed to clone upperpath [ 316.392971][ T3682] futex_wake_op: syz.2.831 tries to shift op by 32; fix this program [ 320.287017][ T3720] futex_wake_op: syz.2.839 tries to shift op by 32; fix this program [ 321.097870][ T296] EXT4-fs (loop0): unmounting filesystem. [ 321.119052][ T28] audit: type=1400 audit(1737334551.344:402): avc: denied { getopt } for pid=3747 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.140672][ T28] audit: type=1326 audit(1737334551.364:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.4.845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26c1f85d29 code=0x0 [ 321.141191][ T3743] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 321.172075][ T3743] FAT-fs (loop7): unable to read boot sector [ 322.012044][ T429] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 322.298436][ T429] usb 2-1: Using ep0 maxpacket: 16 [ 322.307501][ T429] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.501553][ T28] audit: type=1326 audit(1737334552.584:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.4.850" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26c1f85d29 code=0x0 [ 323.764758][ T429] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 323.775532][ T429] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.786621][ T429] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.814814][ T429] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.831836][ T429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.839667][ T429] usb 2-1: Product: syz [ 323.851853][ T429] usb 2-1: Manufacturer: syz [ 323.856310][ T429] usb 2-1: SerialNumber: syz [ 323.886855][ T429] usb 2-1: can't set config #1, error -71 [ 323.896283][ T429] usb 2-1: USB disconnect, device number 8 [ 324.898886][ T3787] futex_wake_op: syz.2.857 tries to shift op by 32; fix this program [ 325.456305][ T3782] loop0: detected capacity change from 0 to 256 [ 325.575654][ T3782] exfat: Deprecated parameter 'utf8' [ 325.674569][ T3782] exfat: Deprecated parameter 'namecase' [ 325.739684][ T3782] exfat: Deprecated parameter 'utf8' [ 325.791318][ T3782] exfat: Bad value for 'uid' [ 327.632179][ T28] audit: type=1326 audit(1737334557.004:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26c1f85d29 code=0x0 [ 328.682652][ T3827] netlink: 76 bytes leftover after parsing attributes in process `syz.4.867'. [ 329.006754][ T3845] futex_wake_op: syz.2.871 tries to shift op by 32; fix this program [ 332.284793][ T3869] loop0: detected capacity change from 0 to 512 [ 332.342276][ T28] audit: type=1326 audit(1737334561.514:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdaab85d29 code=0x0 [ 332.559276][ T3869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 332.568556][ T3869] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.862357][ T3875] loop1: detected capacity change from 0 to 8192 [ 332.902579][ T3875] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.150115][ T296] EXT4-fs (loop0): unmounting filesystem. [ 333.244398][ T3893] overlayfs: unrecognized mount option "/" or missing value [ 333.319704][ T28] audit: type=1326 audit(1737334563.544:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 333.376594][ T3899] fuse: Unknown parameter 'grTVoup00000000000000000000' [ 333.420930][ T28] audit: type=1326 audit(1737334563.544:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 333.495209][ T3905] loop0: detected capacity change from 0 to 256 [ 333.541230][ T28] audit: type=1326 audit(1737334563.544:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 333.565593][ T28] audit: type=1326 audit(1737334563.544:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 333.589006][ T28] audit: type=1326 audit(1737334563.544:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 334.421682][ T28] audit: type=1326 audit(1737334563.584:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 334.451529][ T28] audit: type=1326 audit(1737334563.584:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 334.487648][ T28] audit: type=1326 audit(1737334563.584:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 334.530634][ T28] audit: type=1326 audit(1737334563.584:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 334.617002][ T28] audit: type=1326 audit(1737334563.584:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 334.758080][ T3921] overlayfs: failed to clone lowerpath [ 335.495453][ T3927] loop1: detected capacity change from 0 to 256 [ 335.525874][ T3927] exfat: Deprecated parameter 'utf8' [ 335.531024][ T3927] exfat: Deprecated parameter 'namecase' [ 335.546854][ T3927] exfat: Deprecated parameter 'utf8' [ 335.568727][ T3927] exfat: Bad value for 'uid' [ 338.571901][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 338.571922][ T28] audit: type=1326 audit(1737334568.774:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 338.630586][ T28] audit: type=1326 audit(1737334568.774:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 338.679203][ T28] audit: type=1326 audit(1737334568.774:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 338.716768][ T28] audit: type=1326 audit(1737334568.774:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f26c1f85d63 code=0x7ffc0000 [ 338.740077][ T28] audit: type=1326 audit(1737334568.774:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f26c1f847df code=0x7ffc0000 [ 338.772014][ T3966] loop1: detected capacity change from 0 to 512 [ 338.910974][ T28] audit: type=1326 audit(1737334568.774:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f26c1f85db7 code=0x7ffc0000 [ 339.033664][ T28] audit: type=1326 audit(1737334568.774:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26c1f84690 code=0x7ffc0000 [ 339.102906][ T28] audit: type=1326 audit(1737334568.774:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f26c1f8498a code=0x7ffc0000 [ 339.126234][ T28] audit: type=1326 audit(1737334568.774:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 339.156845][ T28] audit: type=1326 audit(1737334568.774:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 339.164460][ T3966] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 340.031497][ T3976] tipc: Enabling of bearer rejected, failed to enable media [ 340.040251][ T3966] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.051809][ T3976] overlayfs: failed to resolve './file0': -2 [ 340.111326][ T3982] syz.2.906 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 342.652972][ T295] EXT4-fs (loop1): unmounting filesystem. [ 344.368543][ T4030] loop0: detected capacity change from 0 to 1024 [ 344.464368][ T4030] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 345.022214][ T4030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 345.372201][ T4058] tipc: Started in network mode [ 345.377183][ T4058] tipc: Node identity fc01, cluster identity 4711 [ 345.383607][ T4058] tipc: Enabling of bearer rejected, failed to enable media [ 345.413781][ T4058] overlayfs: failed to clone upperpath [ 345.890560][ T4046] loop1: detected capacity change from 0 to 40427 [ 345.901051][ T296] EXT4-fs (loop0): unmounting filesystem. [ 345.907640][ T4046] F2FS-fs (loop1): fault_injection options not supported [ 345.917888][ T4046] F2FS-fs (loop1): invalid crc value [ 345.927511][ T4046] F2FS-fs (loop1): Found nat_bits in checkpoint [ 345.934176][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 345.934193][ T28] audit: type=1326 audit(1737334576.164:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4062 comm="syz.4.925" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26c1f85d29 code=0x0 [ 346.128784][ T4074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 346.142439][ T4046] F2FS-fs (loop1): Start checkpoint disabled! [ 346.161188][ T4046] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 346.400701][ T324] kworker/u4:3: attempt to access beyond end of device [ 346.400701][ T324] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 346.422753][ T324] kworker/u4:3: attempt to access beyond end of device [ 346.422753][ T324] loop1: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 346.880309][ T4088] loop1: detected capacity change from 0 to 512 [ 346.907541][ T4088] EXT4-fs (loop1): Test dummy encryption mode enabled [ 346.928688][ T4088] EXT4-fs error (device loop1): __ext4_iget:5057: inode #11: block 1: comm syz.1.929: invalid block [ 346.951921][ T4088] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.929: couldn't read orphan inode 11 (err -117) [ 347.029242][ T4088] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 347.040644][ T4088] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 347.702777][ T4100] loop0: detected capacity change from 0 to 128 [ 347.709561][ T4100] EXT4-fs (loop0): Test dummy encryption mode enabled [ 347.733065][ T295] EXT4-fs (loop1): unmounting filesystem. [ 347.784521][ T4100] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 348.003555][ T4100] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.295193][ T4108] loop1: detected capacity change from 0 to 512 [ 348.389282][ T4108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 348.398524][ T4108] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.767035][ T296] EXT4-fs (loop0): unmounting filesystem. [ 348.955557][ T4118] loop0: detected capacity change from 0 to 8192 [ 348.981309][ T4118] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 349.252429][ T4136] syz.4.944[4136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.252507][ T4136] syz.4.944[4136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.264112][ T4134] overlayfs: unrecognized mount option "/" or missing value [ 349.916788][ T28] audit: type=1400 audit(1737334580.144:494): avc: denied { map } for pid=4143 comm="syz.2.946" path="socket:[26766]" dev="sockfs" ino=26766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 351.238126][ T4161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.951'. [ 351.272888][ T295] EXT4-fs (loop1): unmounting filesystem. [ 351.289433][ T4161] sch_fq: defrate 6 ignored. [ 351.426406][ T4171] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.443835][ T4171] FAT-fs (loop9): unable to read boot sector [ 351.450447][ T28] audit: type=1400 audit(1737334581.674:495): avc: denied { setattr } for pid=4166 comm="syz.4.965" name="file0" dev="tmpfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 351.487724][ T4174] loop0: detected capacity change from 0 to 256 [ 351.513488][ T4174] exfat: Deprecated parameter 'namecase' [ 351.521538][ T4174] exfat: Deprecated parameter 'utf8' [ 351.527209][ T4174] exfat: Deprecated parameter 'namecase' [ 351.550718][ T4174] exfat: Deprecated parameter 'utf8' [ 351.556740][ T4174] exfat: Bad value for 'gid' [ 351.635493][ T28] audit: type=1326 audit(1737334581.864:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 351.726884][ T4174] loop0: detected capacity change from 0 to 512 [ 351.778039][ T28] audit: type=1326 audit(1737334581.884:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 351.846885][ T4170] device vlan2 entered promiscuous mode [ 351.855606][ T28] audit: type=1326 audit(1737334581.884:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f00fdb85d63 code=0x7ffc0000 [ 351.883741][ T28] audit: type=1326 audit(1737334581.894:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00fdb847df code=0x7ffc0000 [ 351.973025][ T28] audit: type=1326 audit(1737334581.894:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f00fdb85db7 code=0x7ffc0000 [ 351.996365][ T28] audit: type=1326 audit(1737334581.894:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00fdb84690 code=0x7ffc0000 [ 352.020409][ T28] audit: type=1326 audit(1737334581.954:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00fdb8592b code=0x7ffc0000 [ 352.048608][ T28] audit: type=1326 audit(1737334581.984:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00fdb8498a code=0x7ffc0000 [ 352.269703][ T28] audit: type=1326 audit(1737334581.984:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00fdb8498a code=0x7ffc0000 [ 353.125241][ T4202] loop0: detected capacity change from 0 to 512 [ 353.450291][ T4202] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 353.459511][ T4202] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.092914][ T296] EXT4-fs (loop0): unmounting filesystem. [ 355.659184][ T4223] loop0: detected capacity change from 0 to 512 [ 355.673459][ T4223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.776878][ T4223] EXT4-fs (loop0): orphan cleanup on readonly fs [ 355.785078][ T4223] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.968: Failed to acquire dquot type 1 [ 355.798770][ T4223] EXT4-fs (loop0): 1 truncate cleaned up [ 355.804810][ T4223] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 356.531294][ T296] EXT4-fs (loop0): unmounting filesystem. [ 356.620514][ T4241] loop0: detected capacity change from 0 to 1024 [ 356.643617][ T4241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 356.843078][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 356.843100][ T28] audit: type=1326 audit(1737334587.034:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4396985d29 code=0x0 [ 357.539438][ T296] EXT4-fs (loop0): unmounting filesystem. [ 357.549208][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 357.557880][ T28] audit: type=1400 audit(1737334587.464:534): avc: denied { mounton } for pid=4240 comm="syz.0.973" path="/164/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.594955][ T4261] loop0: detected capacity change from 0 to 128 [ 357.617688][ T4261] EXT4-fs (loop0): Test dummy encryption mode enabled [ 357.624498][ T28] audit: type=1400 audit(1737334587.764:535): avc: denied { rmdir } for pid=296 comm="syz-executor" name=".index" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 357.648375][ T4261] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 357.657097][ T4261] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.607375][ T296] EXT4-fs (loop0): unmounting filesystem. [ 359.249265][ T28] audit: type=1326 audit(1737334588.974:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.1.982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4396985d29 code=0x0 [ 359.582148][ T28] audit: type=1326 audit(1737334589.784:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00fdb85d29 code=0x0 [ 360.090531][ T28] audit: type=1400 audit(1737334589.844:538): avc: denied { append } for pid=4291 comm="syz.1.985" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 360.125171][ T28] audit: type=1400 audit(1737334590.314:539): avc: denied { ioctl } for pid=4301 comm="syz.1.988" path="/163/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 360.612972][ T4309] loop0: detected capacity change from 0 to 128 [ 360.631798][ T4309] EXT4-fs (loop0): Test dummy encryption mode enabled [ 360.656432][ T4309] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 360.668653][ T4309] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 360.997691][ T28] audit: type=1326 audit(1737334591.224:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.3.993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdaab85d29 code=0x0 [ 361.803200][ T296] EXT4-fs (loop0): unmounting filesystem. [ 362.034838][ T28] audit: type=1326 audit(1737334592.264:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.995" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4396985d29 code=0x0 [ 363.339236][ T28] audit: type=1326 audit(1737334593.564:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.2.1000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09bd85d29 code=0x0 [ 365.240120][ T4383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'. [ 365.248955][ T4383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'. [ 365.310851][ T4394] syz.3.1012 (4394): attempted to duplicate a private mapping with mremap. This is not supported. [ 365.463132][ T4396] loop0: detected capacity change from 0 to 512 [ 368.271762][ T4396] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 368.783162][ T28] audit: type=1326 audit(1737334599.014:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.3.1016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdaab85d29 code=0x0 [ 370.485792][ T28] audit: type=1326 audit(1737334600.714:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09bd85d29 code=0x7ffc0000 [ 370.514686][ T28] audit: type=1326 audit(1737334600.714:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09bd85d29 code=0x7ffc0000 [ 370.566657][ T28] audit: type=1326 audit(1737334600.744:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff09bd85d29 code=0x7ffc0000 [ 370.601755][ T28] audit: type=1326 audit(1737334600.744:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff09bd85d63 code=0x7ffc0000 [ 370.706619][ T4425] syz.0.1014[4425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.706716][ T4425] syz.0.1014[4425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.710077][ T28] audit: type=1326 audit(1737334600.744:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff09bd847df code=0x7ffc0000 [ 370.817149][ T28] audit: type=1326 audit(1737334600.744:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff09bd85db7 code=0x7ffc0000 [ 370.840368][ T28] audit: type=1326 audit(1737334600.744:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff09bd84690 code=0x7ffc0000 [ 370.873748][ T28] audit: type=1326 audit(1737334600.744:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff09bd8498a code=0x7ffc0000 [ 370.914052][ T4446] futex_wake_op: syz.4.1023 tries to shift op by 32; fix this program [ 370.923063][ T28] audit: type=1326 audit(1737334600.744:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09bd85d29 code=0x7ffc0000 [ 371.260637][ T4448] futex_wake_op: syz.2.1024 tries to shift op by 32; fix this program [ 373.768742][ T4494] loop0: detected capacity change from 0 to 256 [ 373.889478][ T4494] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 373.908565][ T4500] usb usb7: usbfs: process 4500 (syz.1.1042) did not claim interface 5 before use [ 375.664671][ T4507] futex_wake_op: syz.0.1039 tries to shift op by 32; fix this program [ 375.691330][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 375.691352][ T28] audit: type=1326 audit(2000000003.260:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.1040" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09bd85d29 code=0x0 [ 375.882803][ T28] audit: type=1326 audit(2000000005.100:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 375.906701][ T28] audit: type=1326 audit(2000000005.100:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 375.935361][ T28] audit: type=1326 audit(2000000005.110:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 376.001093][ T28] audit: type=1326 audit(2000000005.110:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f26c1f85d63 code=0x7ffc0000 [ 376.029951][ T28] audit: type=1326 audit(2000000005.110:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f26c1f847df code=0x7ffc0000 [ 376.064824][ T4525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'. [ 376.080002][ T4525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1050'. [ 376.093490][ T28] audit: type=1326 audit(2000000005.110:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f26c1f85db7 code=0x7ffc0000 [ 376.101729][ T300] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 376.135948][ T28] audit: type=1326 audit(2000000005.130:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26c1f84690 code=0x7ffc0000 [ 376.159497][ T28] audit: type=1326 audit(2000000005.130:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f26c1f8498a code=0x7ffc0000 [ 376.183230][ T28] audit: type=1326 audit(2000000005.130:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 376.193018][ T4528] loop0: detected capacity change from 0 to 8192 [ 377.216783][ T300] usb 2-1: Using ep0 maxpacket: 32 [ 377.237392][ T300] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.276142][ T300] usb 2-1: config 0 has no interfaces? [ 377.286971][ T300] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 377.301713][ T300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.374669][ T300] usb 2-1: config 0 descriptor?? [ 377.416765][ T4543] loop0: detected capacity change from 0 to 8192 [ 378.064092][ T4544] futex_wake_op: syz.2.1055 tries to shift op by 32; fix this program [ 378.081820][ T1272] usb 2-1: USB disconnect, device number 9 [ 379.479482][ T4560] netlink: 'syz.2.1057': attribute type 4 has an invalid length. [ 379.490834][ T4560] netlink: 'syz.2.1057': attribute type 4 has an invalid length. [ 379.770707][ T4570] fuse: Invalid rootmode [ 381.794410][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 381.794516][ T28] audit: type=1326 audit(2000000009.690:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.1.1066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4396985d29 code=0x0 [ 381.914367][ T300] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 383.098160][ T300] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.125955][ T300] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 383.227984][ T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 383.236345][ T300] usb 1-1: SerialNumber: syz [ 383.247804][ T4605] loop1: detected capacity change from 0 to 8192 [ 383.292508][ T300] usb-storage 1-1:1.0: USB Mass Storage device detected [ 383.327178][ T4605] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.359021][ T300] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 383.371089][ T28] audit: type=1326 audit(2000000012.580:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaab85d29 code=0x7ffc0000 [ 384.303566][ T429] usb 1-1: USB disconnect, device number 4 [ 384.319324][ T28] audit: type=1326 audit(2000000012.620:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaab85d29 code=0x7ffc0000 [ 384.343721][ T28] audit: type=1326 audit(2000000013.510:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcdaab85d29 code=0x7ffc0000 [ 384.368106][ T28] audit: type=1326 audit(2000000013.510:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdaab85d63 code=0x7ffc0000 [ 384.405166][ T28] audit: type=1326 audit(2000000013.510:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdaab847df code=0x7ffc0000 [ 384.439164][ T28] audit: type=1326 audit(2000000013.510:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcdaab85db7 code=0x7ffc0000 [ 384.531744][ T28] audit: type=1326 audit(2000000013.510:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdaab84690 code=0x7ffc0000 [ 384.599594][ T4626] overlayfs: unrecognized mount option "/" or missing value [ 384.732589][ T28] audit: type=1326 audit(2000000013.510:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcdaab8498a code=0x7ffc0000 [ 384.821043][ T28] audit: type=1326 audit(2000000013.510:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaab85d29 code=0x7ffc0000 [ 385.757435][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 385.769945][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 386.841762][ T4645] futex_wake_op: syz.4.1080 tries to shift op by 32; fix this program [ 387.084143][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 387.084159][ T28] audit: type=1400 audit(2000000016.300:695): avc: denied { create } for pid=4656 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 387.110046][ T28] audit: type=1400 audit(2000000016.320:696): avc: denied { nlmsg_write } for pid=4656 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 387.319679][ T28] audit: type=1326 audit(2000000016.530:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaab85d29 code=0x7ffc0000 [ 387.353396][ T28] audit: type=1326 audit(2000000016.530:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaab85d29 code=0x7ffc0000 [ 387.432993][ T4671] loop0: detected capacity change from 0 to 8192 [ 387.472542][ T28] audit: type=1326 audit(2000000016.530:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcdaab85d29 code=0x7ffc0000 [ 387.496009][ T28] audit: type=1326 audit(2000000016.530:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdaab85d63 code=0x7ffc0000 [ 387.577054][ T28] audit: type=1326 audit(2000000016.530:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdaab847df code=0x7ffc0000 [ 387.644042][ T28] audit: type=1326 audit(2000000016.530:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcdaab85db7 code=0x7ffc0000 [ 388.124441][ T28] audit: type=1326 audit(2000000016.530:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdaab84690 code=0x7ffc0000 [ 388.200843][ T28] audit: type=1326 audit(2000000016.530:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcdaab8498a code=0x7ffc0000 [ 388.720319][ T4701] futex_wake_op: syz.4.1096 tries to shift op by 32; fix this program [ 389.522347][ T4718] loop1: detected capacity change from 0 to 128 [ 389.536537][ T4718] EXT4-fs (loop1): Test dummy encryption mode enabled [ 389.547635][ T4718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 389.556319][ T4718] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 390.574904][ T4735] tipc: Started in network mode [ 390.579691][ T4735] tipc: Node identity fc01, cluster identity 4711 [ 390.585979][ T4735] tipc: Enabling of bearer rejected, failed to enable media [ 390.600528][ T4735] overlayfs: failed to resolve './file1': -2 [ 390.683707][ T4738] tipc: Enabling of bearer rejected, failed to enable media [ 390.697341][ T4738] overlayfs: failed to resolve './file1': -2 [ 391.427289][ T4746] loop0: detected capacity change from 0 to 256 [ 391.569819][ T4755] loop0: detected capacity change from 0 to 256 [ 391.589991][ T4755] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 392.127669][ T4759] futex_wake_op: syz.0.1109 tries to shift op by 32; fix this program [ 392.478226][ T4764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1111'. [ 392.701481][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 392.701498][ T28] audit: type=1326 audit(2000000021.910:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.0.1110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00fdb85d29 code=0x0 [ 394.107124][ T28] audit: type=1326 audit(2000000021.940:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.2.1114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09bd85d29 code=0x0 [ 394.209730][ T4785] tipc: Enabling of bearer rejected, failed to enable media [ 394.238359][ T4785] overlayfs: failed to clone upperpath [ 394.602991][ T295] EXT4-fs (loop1): unmounting filesystem. [ 394.796601][ T4793] loop1: detected capacity change from 0 to 256 [ 394.803046][ T4793] exfat: Deprecated parameter 'utf8' [ 394.811172][ T4793] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc8efe311, utbl_chksum : 0xe619d30d) [ 394.936514][ T4793] device syzkaller0 entered promiscuous mode [ 394.993916][ T4798] loop0: detected capacity change from 0 to 256 [ 395.016446][ T4798] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 395.419818][ T4805] futex_wake_op: syz.0.1120 tries to shift op by 32; fix this program [ 395.698174][ T4807] loop1: detected capacity change from 0 to 256 [ 395.714068][ T4807] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 396.028567][ T28] audit: type=1326 audit(2000000025.220:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09bd85d29 code=0x0 [ 396.183797][ T4826] bridge0: port 3(syz_tun) entered blocking state [ 396.183908][ T4826] bridge0: port 3(syz_tun) entered disabled state [ 396.195564][ T4826] device syz_tun entered promiscuous mode [ 396.910881][ T4822] tty tty4: ldisc open failed (-12), clearing slot 3 [ 397.159194][ T4840] tipc: Enabling of bearer rejected, failed to enable media [ 397.192751][ T4840] overlayfs: failed to resolve './file0': -2 [ 397.970300][ T4844] loop0: detected capacity change from 0 to 128 [ 398.006698][ T4844] EXT4-fs (loop0): Test dummy encryption mode enabled [ 398.042380][ T4844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 398.061032][ T4844] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 398.953068][ T296] EXT4-fs (loop0): unmounting filesystem. [ 399.269754][ T28] audit: type=1400 audit(2000000028.480:738): avc: denied { read write } for pid=4858 comm="syz.0.1135" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 399.406171][ T28] audit: type=1400 audit(2000000028.520:739): avc: denied { open } for pid=4858 comm="syz.0.1135" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 399.482446][ T4847] loop1: detected capacity change from 0 to 40427 [ 399.571733][ T429] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 399.599072][ T4847] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 399.698596][ T4847] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 399.872787][ T4847] F2FS-fs (loop1): Found nat_bits in checkpoint [ 399.922906][ T429] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 399.941710][ T429] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 399.971708][ T429] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 400.001735][ T429] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 63626, setting to 64 [ 400.033144][ T429] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.051686][ T429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.059518][ T429] usb 1-1: Product: syz [ 400.076082][ T429] usb 1-1: Manufacturer: syz [ 400.080553][ T429] usb 1-1: SerialNumber: syz [ 400.097845][ T4859] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.113159][ T4847] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 400.135500][ T4847] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 400.305560][ T4859] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.669324][ T28] audit: type=1326 audit(2000000029.870:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.1140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09bd85d29 code=0x0 [ 400.913911][ T4859] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.132942][ T4859] loop0: detected capacity change from 0 to 512 [ 401.141245][ T4859] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 401.154313][ T4859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 401.166007][ T4859] EXT4-fs (loop0): 1 truncate cleaned up [ 401.171552][ T4859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 401.181918][ T4859] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.1135: Siphash requires key [ 401.275556][ T429] cdc_ncm 1-1:1.0: bind() failure [ 401.282571][ T429] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 401.297095][ T429] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 401.313392][ T429] usb 1-1: USB disconnect, device number 5 [ 401.535618][ T4917] tipc: Enabling of bearer rejected, failed to enable media [ 401.563779][ T4917] overlayfs: failed to clone upperpath [ 401.901608][ T4925] futex_wake_op: syz.2.1144 tries to shift op by 32; fix this program [ 402.147833][ T4927] loop1: detected capacity change from 0 to 512 [ 402.266585][ T296] EXT4-fs (loop0): unmounting filesystem. [ 402.401809][ T4927] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 402.410929][ T4927] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.632833][ T4935] loop0: detected capacity change from 0 to 128 [ 402.661540][ T4935] EXT4-fs (loop0): Test dummy encryption mode enabled [ 402.711552][ T4935] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 402.726825][ T4935] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.115147][ T295] EXT4-fs (loop1): unmounting filesystem. [ 403.588776][ T296] EXT4-fs (loop0): unmounting filesystem. [ 404.288883][ T4959] FAULT_INJECTION: forcing a failure. [ 404.288883][ T4959] name failslab, interval 1, probability 0, space 0, times 1 [ 405.285187][ T4959] CPU: 0 PID: 4959 Comm: syz.1.1152 Not tainted 6.1.118-syzkaller-00021-gd12538e9da37 #0 [ 405.294843][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 405.304910][ T4959] Call Trace: [ 405.308034][ T4959] [ 405.310817][ T4959] dump_stack_lvl+0x151/0x1b7 [ 405.315636][ T4959] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 405.320921][ T4959] ? __sys_accept4+0xa7/0x120 [ 405.325434][ T4959] ? x64_sys_call+0x798/0x9a0 [ 405.329948][ T4959] ? do_syscall_64+0x3b/0xb0 [ 405.334376][ T4959] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.340280][ T4959] dump_stack+0x15/0x18 [ 405.344269][ T4959] should_fail_ex+0x3d0/0x520 [ 405.348784][ T4959] __should_failslab+0xaf/0xf0 [ 405.353391][ T4959] should_failslab+0x9/0x20 [ 405.357724][ T4959] slab_pre_alloc_hook+0x2e/0x1b0 [ 405.362587][ T4959] kmem_cache_alloc_lru+0x49/0x270 [ 405.367529][ T4959] ? __d_alloc+0x34/0x700 [ 405.371700][ T4959] __d_alloc+0x34/0x700 [ 405.375692][ T4959] ? kasan_save_alloc_info+0x1f/0x30 [ 405.380813][ T4959] ? __kasan_slab_alloc+0x6c/0x80 [ 405.385674][ T4959] d_alloc_pseudo+0x1d/0x70 [ 405.390014][ T4959] alloc_file_pseudo+0x131/0x2f0 [ 405.394783][ T4959] ? security_inode_alloc+0x29/0x120 [ 405.399910][ T4959] ? alloc_empty_file_noaccount+0x80/0x80 [ 405.405464][ T4959] ? _raw_spin_lock+0xa4/0x1b0 [ 405.410063][ T4959] ? _raw_spin_trylock_bh+0x190/0x190 [ 405.415270][ T4959] ? inode_init_always+0x737/0x970 [ 405.420217][ T4959] sock_alloc_file+0xbb/0x260 [ 405.424730][ T4959] do_accept+0x3c5/0x6f0 [ 405.428812][ T4959] ? __ia32_sys_listen+0x70/0x70 [ 405.433590][ T4959] __sys_accept4+0xa7/0x120 [ 405.437928][ T4959] __x64_sys_accept4+0x9a/0xb0 [ 405.442520][ T4959] x64_sys_call+0x798/0x9a0 [ 405.446864][ T4959] do_syscall_64+0x3b/0xb0 [ 405.451113][ T4959] ? clear_bhb_loop+0x55/0xb0 [ 405.455636][ T4959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.461357][ T4959] RIP: 0033:0x7f4396985d29 [ 405.465616][ T4959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.485051][ T4959] RSP: 002b:00007f439780c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 405.493294][ T4959] RAX: ffffffffffffffda RBX: 00007f4396b75fa0 RCX: 00007f4396985d29 [ 405.501107][ T4959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 405.508925][ T4959] RBP: 00007f439780c090 R08: 0000000000000000 R09: 0000000000000000 [ 405.516737][ T4959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.524628][ T4959] R13: 0000000000000000 R14: 00007f4396b75fa0 R15: 00007ffc717e3768 [ 405.532448][ T4959] [ 405.548815][ T4969] loop0: detected capacity change from 0 to 256 [ 405.576563][ T4969] exfat: Deprecated parameter 'namecase' [ 405.587644][ T4969] exfat: Deprecated parameter 'utf8' [ 405.598291][ T4969] exfat: Deprecated parameter 'namecase' [ 405.610217][ T4969] exfat: Deprecated parameter 'utf8' [ 405.626328][ T4969] exfat: Bad value for 'gid' [ 405.713216][ T28] audit: type=1326 audit(2000000034.930:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 405.738558][ T28] audit: type=1326 audit(2000000034.930:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 405.741853][ T4969] loop0: detected capacity change from 0 to 512 [ 405.766709][ T28] audit: type=1326 audit(2000000034.930:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f00fdb85d63 code=0x7ffc0000 [ 405.904344][ T28] audit: type=1326 audit(2000000034.930:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00fdb847df code=0x7ffc0000 [ 406.120193][ T28] audit: type=1326 audit(2000000034.930:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f00fdb85db7 code=0x7ffc0000 [ 406.125897][ T4619] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 406.185468][ T28] audit: type=1326 audit(2000000034.930:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00fdb84690 code=0x7ffc0000 [ 406.501691][ T4982] overlayfs: failed to resolve './file0': -2 [ 407.296031][ T4986] netlink: 'syz.1.1160': attribute type 27 has an invalid length. [ 407.320436][ T4989] loop0: detected capacity change from 0 to 512 [ 407.340386][ T28] audit: type=1326 audit(2000000034.930:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00fdb8592b code=0x7ffc0000 [ 407.383603][ T4989] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 407.394379][ T4989] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 407.403607][ T4989] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.1161: Failed to acquire dquot type 0 [ 407.415203][ T4989] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 407.425801][ T4989] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.1161: Failed to acquire dquot type 0 [ 407.437506][ T4989] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.1161: Failed to acquire dquot type 0 [ 407.448966][ T4989] EXT4-fs (loop0): 1 orphan inode deleted [ 407.454591][ T4989] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 407.463328][ T4989] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.601128][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 407.705952][ T4997] futex_wake_op: syz.4.1159 tries to shift op by 32; fix this program [ 407.946459][ T4987] device veth0_vlan left promiscuous mode [ 407.961156][ T4987] device veth0_vlan entered promiscuous mode [ 407.975489][ T4987] device veth1_macvtap left promiscuous mode [ 407.990447][ T4987] device veth1_macvtap entered promiscuous mode [ 408.036654][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 408.078761][ T5003] loop1: detected capacity change from 0 to 128 [ 408.122756][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.130551][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.138908][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.147693][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.154606][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.163237][ T296] EXT4-fs (loop0): unmounting filesystem. [ 408.169009][ T5003] EXT4-fs (loop1): Test dummy encryption mode enabled [ 408.178883][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.187651][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.698330][ T5003] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 409.105294][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.112220][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.744100][ T5021] x_tables: duplicate underflow at hook 4 [ 409.763185][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 409.785782][ T5003] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 409.810496][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 409.906744][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.067277][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 410.207704][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.231126][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.269427][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.290136][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.314862][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 410.418427][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.426599][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.434926][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.443461][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.451697][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.459545][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.482754][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.490676][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.498848][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.507330][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 410.515759][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.298681][ T5033] overlayfs: failed to resolve './file0': -2 [ 411.390510][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.657348][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.667915][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.675645][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 411.683840][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 411.693757][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 411.701355][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 411.782888][ T295] EXT4-fs (loop1): unmounting filesystem. [ 411.795299][ T5042] loop0: detected capacity change from 0 to 8192 [ 411.809459][ T5042] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 412.196685][ T5056] 9pnet_fd: Insufficient options for proto=fd [ 412.334205][ T5060] overlayfs: unrecognized mount option "/" or missing value [ 412.892516][ T5080] overlayfs: failed to clone upperpath [ 413.611115][ T5083] device vlan2 entered promiscuous mode [ 414.947731][ T5098] loop0: detected capacity change from 0 to 256 [ 415.010272][ T5104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1190'. [ 415.016089][ T5098] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 415.032842][ T5106] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 415.324533][ T5114] futex_wake_op: syz.0.1186 tries to shift op by 32; fix this program [ 421.388179][ T5135] overlayfs: failed to clone upperpath [ 422.515770][ T5149] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 422.597330][ T5151] FAULT_INJECTION: forcing a failure. [ 422.597330][ T5151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.610703][ T5151] CPU: 1 PID: 5151 Comm: syz.1.1205 Not tainted 6.1.118-syzkaller-00021-gd12538e9da37 #0 [ 422.620463][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 422.630369][ T5151] Call Trace: [ 422.633482][ T5151] [ 422.636285][ T5151] dump_stack_lvl+0x151/0x1b7 [ 422.640770][ T5151] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 422.646066][ T5151] dump_stack+0x15/0x18 [ 422.650055][ T5151] should_fail_ex+0x3d0/0x520 [ 422.654570][ T5151] should_fail+0xb/0x10 [ 422.658563][ T5151] should_fail_usercopy+0x1a/0x20 [ 422.663425][ T5151] _copy_from_user+0x1e/0xc0 [ 422.665586][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 422.665601][ T28] audit: type=1400 audit(2000000051.730:777): avc: denied { create } for pid=5142 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 422.667847][ T5151] bpf_test_init+0x12e/0x190 [ 422.697886][ T5151] bpf_prog_test_run_xdp+0x414/0x1130 [ 422.703089][ T5151] ? __sched_text_start+0x8/0x8 [ 422.707778][ T5151] ? dev_put+0x80/0x80 [ 422.711684][ T5151] ? __kasan_check_write+0x14/0x20 [ 422.716629][ T5151] ? fput+0x15b/0x1b0 [ 422.720450][ T5151] ? dev_put+0x80/0x80 [ 422.724358][ T5151] bpf_prog_test_run+0x3b0/0x630 [ 422.729125][ T5151] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 422.735113][ T5151] ? bpf_prog_query+0x260/0x260 [ 422.739799][ T5151] ? __sys_bpf+0x2c6/0x7f0 [ 422.744052][ T5151] ? __sys_bpf+0x590/0x7f0 [ 422.748309][ T5151] __sys_bpf+0x59f/0x7f0 [ 422.752388][ T5151] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 422.758207][ T5151] ? __ia32_sys_read+0x90/0x90 [ 422.762801][ T5151] ? debug_smp_processor_id+0x17/0x20 [ 422.768011][ T5151] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 422.773912][ T5151] __x64_sys_bpf+0x7c/0x90 [ 422.778252][ T5151] x64_sys_call+0x87f/0x9a0 [ 422.782591][ T5151] do_syscall_64+0x3b/0xb0 [ 422.786843][ T5151] ? clear_bhb_loop+0x55/0xb0 [ 422.791360][ T5151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.797087][ T5151] RIP: 0033:0x7f4396985d29 [ 422.801340][ T5151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.820785][ T5151] RSP: 002b:00007f439780c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.829026][ T5151] RAX: ffffffffffffffda RBX: 00007f4396b75fa0 RCX: 00007f4396985d29 [ 422.836840][ T5151] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 422.844662][ T5151] RBP: 00007f439780c090 R08: 0000000000000000 R09: 0000000000000000 [ 422.852465][ T5151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.860361][ T5151] R13: 0000000000000000 R14: 00007f4396b75fa0 R15: 00007ffc717e3768 [ 422.868176][ T5151] [ 423.573203][ T28] audit: type=1326 audit(2000000052.790:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.0.1206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00fdb85d29 code=0x0 [ 430.072226][ T5184] overlayfs: failed to clone upperpath [ 430.767846][ T5200] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 432.143236][ T28] audit: type=1400 audit(2000000060.610:779): avc: denied { bind } for pid=5203 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.184827][ T28] audit: type=1400 audit(2000000060.710:780): avc: denied { listen } for pid=5203 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.024649][ T28] audit: type=1400 audit(2000000061.110:781): avc: denied { accept } for pid=5203 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.067893][ T5221] xt_hashlimit: size too large, truncated to 1048576 [ 434.295988][ T5228] loop0: detected capacity change from 0 to 256 [ 434.303662][ T5228] exfat: Unknown parameter './file0' [ 434.811872][ T5228] loop0: detected capacity change from 0 to 4096 [ 435.199177][ T5228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 436.069533][ T296] EXT4-fs (loop0): unmounting filesystem. [ 436.309463][ T5254] loop1: detected capacity change from 0 to 128 [ 436.320322][ T5254] EXT4-fs (loop1): Test dummy encryption mode enabled [ 436.328184][ T5254] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 436.337844][ T5254] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 437.409928][ T5258] futex_wake_op: syz.2.1233 tries to shift op by 32; fix this program [ 438.729935][ T28] audit: type=1400 audit(2000000066.970:782): avc: denied { create } for pid=5246 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 439.080372][ T28] audit: type=1326 audit(2000000068.250:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.2.1235" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09bd85d29 code=0x0 [ 440.401765][ T295] EXT4-fs (loop1): unmounting filesystem. [ 440.585180][ T5292] loop0: detected capacity change from 0 to 16 [ 440.596440][ T5292] erofs: (device loop0): mounted with root inode @ nid 36. [ 440.682565][ T5293] syz.0.1238: attempt to access beyond end of device [ 440.682565][ T5293] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 442.180875][ T5308] serio: Serial port ptm0 [ 442.276483][ T5314] loop1: detected capacity change from 0 to 256 [ 442.314246][ T5314] exfat: Deprecated parameter 'namecase' [ 442.319742][ T5314] exfat: Deprecated parameter 'utf8' [ 442.325279][ T5314] exfat: Deprecated parameter 'namecase' [ 442.330746][ T5314] exfat: Deprecated parameter 'utf8' [ 442.335936][ T5314] exfat: Bad value for 'gid' [ 442.425188][ T4619] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 442.473161][ T28] audit: type=1326 audit(2000000071.690:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.1247" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdaab85d29 code=0x0 [ 442.989621][ T5320] loop1: detected capacity change from 0 to 256 [ 443.000152][ T5320] exfat: Deprecated parameter 'utf8' [ 443.005691][ T5320] exfat: Deprecated parameter 'namecase' [ 443.013107][ T5320] exfat: Deprecated parameter 'utf8' [ 443.018270][ T5320] exfat: Bad value for 'uid' [ 443.023518][ T28] audit: type=1326 audit(2000000072.240:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.4.1249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26c1f85d29 code=0x0 [ 443.036779][ T5332] loop0: detected capacity change from 0 to 128 [ 443.052834][ T5332] EXT4-fs (loop0): Test dummy encryption mode enabled [ 443.060934][ T5332] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 443.071958][ T5332] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 444.772406][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1251'. [ 444.806700][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1251'. [ 444.964203][ T5356] incfs: Options parsing error. -22 [ 444.969284][ T5356] incfs: mount failed -22 [ 445.134519][ T296] EXT4-fs (loop0): unmounting filesystem. [ 445.336514][ T5371] device vlan3 entered promiscuous mode [ 445.350980][ T28] audit: type=1326 audit(2000000074.560:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.1.1255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4396985d29 code=0x0 [ 446.663357][ T5378] loop0: detected capacity change from 0 to 8192 [ 446.670600][ T5378] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 448.414697][ T5384] overlayfs: unrecognized mount option "/" or missing value [ 449.116327][ T5400] loop1: detected capacity change from 0 to 512 [ 449.156875][ T5400] EXT4-fs (loop1): orphan cleanup on readonly fs [ 449.163685][ T5400] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1265: bg 0: block 248: padding at end of block bitmap is not set [ 449.179800][ T28] audit: type=1326 audit(2000000078.400:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 449.203547][ T5400] Quota error (device loop1): write_blk: dquota write failed [ 449.210662][ T5404] loop0: detected capacity change from 0 to 512 [ 449.210782][ T5400] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 449.226686][ T5400] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.1265: Failed to acquire dquot type 1 [ 449.238981][ T28] audit: type=1326 audit(2000000078.420:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 449.262666][ T5400] EXT4-fs (loop1): 1 truncate cleaned up [ 449.268358][ T5400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 449.278840][ T5404] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 449.290203][ T5404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 449.298285][ T5404] System zones: 1-12 [ 449.298448][ T295] EXT4-fs (loop1): unmounting filesystem. [ 449.302658][ T5404] EXT4-fs (loop0): orphan cleanup on readonly fs [ 449.313942][ T28] audit: type=1326 audit(2000000078.420:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 449.337313][ T5404] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1267: invalid indirect mapped block 12 (level 1) [ 449.352212][ T28] audit: type=1326 audit(2000000078.420:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f00fdb85d63 code=0x7ffc0000 [ 449.356622][ T5404] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1267: invalid indirect mapped block 2 (level 2) [ 449.402779][ T5404] EXT4-fs (loop0): 1 truncate cleaned up [ 449.415062][ T5404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 449.424016][ T28] audit: type=1326 audit(2000000078.420:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00fdb847df code=0x7ffc0000 [ 449.448523][ T28] audit: type=1326 audit(2000000078.420:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f00fdb85db7 code=0x7ffc0000 [ 449.471852][ T28] audit: type=1326 audit(2000000078.420:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00fdb84690 code=0x7ffc0000 [ 449.502617][ T5410] loop1: detected capacity change from 0 to 256 [ 449.521352][ T5410] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 449.764918][ T5414] futex_wake_op: syz.1.1269 tries to shift op by 32; fix this program [ 450.287258][ T296] EXT4-fs (loop0): unmounting filesystem. [ 451.272368][ T5423] overlayfs: failed to clone upperpath [ 451.920648][ T5430] device vlan2 entered promiscuous mode [ 455.336033][ T5441] loop0: detected capacity change from 0 to 8192 [ 456.425473][ T5444] device vlan3 entered promiscuous mode [ 458.891362][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 458.900698][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 458.900726][ T28] audit: type=1400 audit(2000000087.770:906): avc: denied { ioctl } for pid=5438 comm="syz.4.1276" path="socket:[30930]" dev="sockfs" ino=30930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 459.409539][ T5452] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 459.510086][ T5467] loop1: detected capacity change from 0 to 128 [ 459.532393][ T5467] EXT4-fs (loop1): Test dummy encryption mode enabled [ 459.540698][ T5467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 459.557698][ T5467] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 461.113834][ T5475] netlink: 'syz.0.1285': attribute type 17 has an invalid length. [ 462.724872][ T5485] netlink: 'syz.2.1286': attribute type 4 has an invalid length. [ 462.738829][ T5485] netlink: 'syz.2.1286': attribute type 4 has an invalid length. [ 462.795588][ T295] EXT4-fs (loop1): unmounting filesystem. [ 464.136303][ T5494] loop0: detected capacity change from 0 to 8192 [ 464.195961][ T5494] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 464.529050][ T5510] netlink: 'syz.2.1291': attribute type 4 has an invalid length. [ 465.390647][ T5513] overlayfs: unrecognized mount option "/" or missing value [ 465.883822][ T5492] loop1: detected capacity change from 0 to 256 [ 465.980811][ T5492] exfat: Deprecated parameter 'utf8' [ 465.988373][ T5492] exfat: Deprecated parameter 'namecase' [ 465.999005][ T5492] exfat: Deprecated parameter 'utf8' [ 466.005371][ T5492] exfat: Bad value for 'uid' [ 467.861968][ T5541] loop1: detected capacity change from 0 to 128 [ 467.999761][ T5541] EXT4-fs (loop1): Test dummy encryption mode enabled [ 468.113690][ T5541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 468.233325][ T5541] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 468.460764][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 470.633904][ T295] EXT4-fs (loop1): unmounting filesystem. [ 470.701710][ T28] audit: type=1326 audit(2000000099.870:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.3.1307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdaab85d29 code=0x0 [ 474.431706][ T401] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 474.465193][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 474.522599][ T5594] @: renamed from bond_slave_0 [ 474.578845][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 474.599402][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 474.677680][ T28] audit: type=1400 audit(2000000103.890:908): avc: denied { setopt } for pid=5583 comm="syz.2.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.006662][ T28] audit: type=1400 audit(2000000104.220:909): avc: denied { create } for pid=5595 comm="syz.4.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 475.191204][ T28] audit: type=1326 audit(2000000104.400:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.1318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00fdb85d29 code=0x0 [ 476.320759][ T5621] loop1: detected capacity change from 0 to 256 [ 476.347464][ T5621] exfat: Unknown parameter 'name}t' [ 477.507093][ T5628] futex_wake_op: syz.4.1322 tries to shift op by 32; fix this program [ 477.956224][ T5634] loop0: detected capacity change from 0 to 128 [ 477.966258][ T28] audit: type=1400 audit(2000000107.180:911): avc: denied { accept } for pid=5635 comm="syz.4.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.971787][ T5634] EXT4-fs (loop0): Test dummy encryption mode enabled [ 477.993569][ T5634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 478.002291][ T5634] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.140238][ T5642] loop1: detected capacity change from 0 to 512 [ 478.153749][ T5642] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1326: casefold flag without casefold feature [ 478.166602][ T5642] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1326: couldn't read orphan inode 15 (err -117) [ 478.178586][ T5642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 478.241172][ T5645] device vlan4 entered promiscuous mode [ 478.456494][ T295] EXT4-fs (loop1): unmounting filesystem. [ 478.765677][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 479.518410][ T296] EXT4-fs (loop0): unmounting filesystem. [ 480.224891][ T5663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1331'. [ 481.249137][ T5671] netlink: 'syz.2.1335': attribute type 16 has an invalid length. [ 481.256828][ T5671] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1335'. [ 481.312090][ T5663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=5663 comm=syz.1.1331 [ 481.490198][ T28] audit: type=1326 audit(2000000110.700:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.2.1337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09bd85d29 code=0x0 [ 482.272326][ T28] audit: type=1400 audit(2000000111.470:913): avc: denied { getopt } for pid=5696 comm="syz.1.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 483.218040][ T5707] loop1: detected capacity change from 0 to 512 [ 484.452010][ T5690] syz.3.1339 (5690) used greatest stack depth: 19800 bytes left [ 484.757070][ T5719] device vlan4 entered promiscuous mode [ 484.766806][ T5707] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 484.775625][ T5707] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.844586][ T5705] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.851631][ T5705] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.981963][ T28] audit: type=1400 audit(2000000114.200:914): avc: denied { block_suspend } for pid=5715 comm="syz.3.1345" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 485.080121][ T295] EXT4-fs (loop1): unmounting filesystem. [ 485.089796][ T5716] fuse: Unknown parameter 'gd' [ 485.130906][ T5728] loop1: detected capacity change from 0 to 256 [ 485.144320][ T28] audit: type=1400 audit(2000000114.300:915): avc: denied { sqpoll } for pid=5715 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 485.167056][ T5728] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7bdf4db, utbl_chksum : 0xe619d30d) [ 485.199778][ T28] audit: type=1400 audit(2000000114.410:916): avc: denied { mounton } for pid=5727 comm="syz.1.1348" path="/224/file0/file0" dev="loop1" ino=1048652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.520603][ T28] audit: type=1400 audit(2000000114.730:917): avc: denied { append } for pid=5727 comm="syz.1.1348" path="/224/file0/blkio.bfq.io_merged_recursive" dev="loop1" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.559424][ T28] audit: type=1400 audit(2000000114.730:918): avc: denied { map } for pid=5727 comm="syz.1.1348" path="/224/file0/blkio.bfq.io_merged_recursive" dev="loop1" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 486.080153][ T28] audit: type=1400 audit(2000000115.290:919): avc: denied { remove_name } for pid=295 comm="syz-executor" name=".index" dev="loop1" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 486.112483][ T28] audit: type=1400 audit(2000000115.290:920): avc: denied { rmdir } for pid=295 comm="syz-executor" name=".index" dev="loop1" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 486.136054][ T28] audit: type=1400 audit(2000000115.290:921): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="loop1" ino=1048657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 486.163855][ T5740] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 486.277040][ T5743] kvm: vcpu 0: requested 4 ns lapic timer period limited to 200000 ns [ 486.777506][ T5750] loop0: detected capacity change from 0 to 1024 [ 486.786480][ T5750] EXT4-fs: Ignoring removed nobh option [ 486.792291][ T5750] EXT4-fs: Ignoring removed bh option [ 486.798345][ T5750] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 486.813450][ T5750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 486.832471][ T5756] loop1: detected capacity change from 0 to 256 [ 486.844259][ T296] EXT4-fs (loop0): unmounting filesystem. [ 486.846976][ T5756] FAT-fs (loop1): Directory bread(block 64) failed [ 486.857323][ T5756] FAT-fs (loop1): Directory bread(block 65) failed [ 486.864973][ T5756] FAT-fs (loop1): Directory bread(block 66) failed [ 486.871573][ T5756] FAT-fs (loop1): Directory bread(block 67) failed [ 486.878623][ T5756] FAT-fs (loop1): Directory bread(block 68) failed [ 486.885301][ T5756] FAT-fs (loop1): Directory bread(block 69) failed [ 486.892175][ T5756] FAT-fs (loop1): Directory bread(block 70) failed [ 487.790985][ T5756] FAT-fs (loop1): Directory bread(block 71) failed [ 487.797585][ T5756] FAT-fs (loop1): Directory bread(block 72) failed [ 487.804156][ T5756] FAT-fs (loop1): Directory bread(block 73) failed [ 487.873264][ T295] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 487.880769][ T295] FAT-fs (loop1): Filesystem has been set read-only [ 487.888455][ T28] audit: type=1400 audit(2000000117.080:922): avc: denied { create } for pid=5755 comm="syz.1.1355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 488.023904][ T5762] loop0: detected capacity change from 0 to 8192 [ 488.356643][ T5771] device vlan3 entered promiscuous mode [ 489.528702][ T28] audit: type=1400 audit(2000000118.740:923): avc: denied { mounton } for pid=5786 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 489.707338][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.723281][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.752410][ T5786] device bridge_slave_0 entered promiscuous mode [ 489.759340][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.766622][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.774041][ T5786] device bridge_slave_1 entered promiscuous mode [ 489.917779][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.924684][ T5786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.931811][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.938653][ T5786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.106774][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.152631][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.162730][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.184154][ T5802] device ip6tnl1 entered promiscuous mode [ 490.241046][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.249259][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.256147][ T5581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.265815][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.274038][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.281078][ T5581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.312560][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.322929][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.341079][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 490.357234][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.368574][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.377060][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.393236][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 490.404536][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.418515][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.430772][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.443347][ T5786] device veth0_vlan entered promiscuous mode [ 490.470350][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.479836][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.490113][ T5786] device veth1_macvtap entered promiscuous mode [ 490.503496][ T324] device bridge_slave_1 left promiscuous mode [ 490.509926][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.525184][ T5807] loop0: detected capacity change from 0 to 2048 [ 490.531746][ T324] device bridge_slave_0 left promiscuous mode [ 490.538637][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.549361][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 491.070353][ T5818] futex_wake_op: syz.2.1373 tries to shift op by 32; fix this program [ 491.088668][ T28] audit: type=1400 audit(2000000120.257:924): avc: denied { mounton } for pid=5786 comm="syz-executor" path="/root/syzkaller.vJeSpW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 491.116318][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.147558][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.194158][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.216476][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.232973][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.278658][ T5821] netlink: 'syz.0.1370': attribute type 4 has an invalid length. [ 491.302360][ T5824] netlink: 'syz.0.1370': attribute type 4 has an invalid length. [ 491.317233][ T5826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1375'. [ 492.568169][ T296] EXT4-fs (loop0): unmounting filesystem. [ 493.269758][ T5853] loop5: detected capacity change from 0 to 128 [ 493.289527][ T5853] EXT4-fs (loop5): Test dummy encryption mode enabled [ 493.317410][ T5853] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 493.331647][ T5853] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 493.418841][ T300] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 493.500919][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 493.508050][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 493.541159][ T5864] device veth0_vlan left promiscuous mode [ 493.547123][ T5864] device veth0_vlan entered promiscuous mode [ 493.554804][ T5864] device veth1_macvtap left promiscuous mode [ 493.562151][ T5864] device veth1_macvtap entered promiscuous mode [ 493.585444][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 493.604780][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 493.627015][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.637518][ T300] usb 1-1: Using ep0 maxpacket: 32 [ 493.640129][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.649370][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.650932][ T300] usb 1-1: unable to get BOS descriptor or descriptor too short [ 493.656756][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.678292][ T300] usb 1-1: config 139 has an invalid interface number: 37 but max is 0 [ 493.679418][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.694263][ T300] usb 1-1: config 139 has an invalid interface association descriptor of length 2, skipping [ 493.696166][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.710979][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.715306][ T300] usb 1-1: config 139 has no interface number 0 [ 493.733067][ T300] usb 1-1: config 139 interface 37 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 493.751084][ T300] usb 1-1: config 139 interface 37 has no altsetting 0 [ 493.767288][ T300] usb 1-1: New USB device found, idVendor=7392, idProduct=4085, bcdDevice=49.58 [ 493.782815][ T300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.796798][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.799121][ T300] usb 1-1: Product: syz [ 493.805161][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 493.816730][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 493.824975][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 493.833308][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 493.841471][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 493.849935][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 493.858036][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 493.861769][ T300] usb 1-1: Manufacturer: syz [ 493.866215][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 493.870575][ T300] usb 1-1: SerialNumber: syz [ 493.888201][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.897031][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.905525][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.914408][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.922994][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 493.931363][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.014639][ T5875] futex_wake_op: syz.4.1386 tries to shift op by 32; fix this program [ 494.033345][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.045283][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.056905][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 494.068900][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 494.129906][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 494.220947][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 494.248512][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 494.283416][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 494.311100][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.312709][ T5786] EXT4-fs (loop5): unmounting filesystem. [ 494.321533][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.342729][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 494.354580][ T28] audit: type=1400 audit(2000000123.597:925): avc: denied { map } for pid=5877 comm="syz.5.1387" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 494.394877][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 494.426493][ T28] audit: type=1400 audit(2000000123.627:926): avc: denied { call } for pid=5877 comm="syz.5.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 494.508479][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 494.976633][ T28] audit: type=1326 audit(2000000124.207:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.3.1391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdaab85d29 code=0x0 [ 495.934172][ T300] usb 1-1: USB disconnect, device number 7 [ 495.968141][ T5907] loop0: detected capacity change from 0 to 256 [ 495.978632][ T5907] exfat: Deprecated parameter 'namecase' [ 495.984239][ T5907] exfat: Deprecated parameter 'utf8' [ 495.989532][ T5907] exfat: Deprecated parameter 'namecase' [ 495.995402][ T5907] exfat: Deprecated parameter 'utf8' [ 496.000911][ T5907] exfat: Bad value for 'gid' [ 497.821251][ T5932] loop0: detected capacity change from 0 to 256 [ 497.869490][ T5933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1402'. [ 497.878613][ T28] audit: type=1400 audit(2000000126.987:928): avc: denied { write } for pid=5927 comm="syz.2.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 497.901525][ T5932] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 497.901662][ T28] audit: type=1400 audit(2000000126.987:929): avc: denied { nlmsg_read } for pid=5927 comm="syz.2.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 498.771989][ T5937] futex_wake_op: syz.0.1403 tries to shift op by 32; fix this program [ 498.823149][ T5934] device vlan2 entered promiscuous mode [ 499.070433][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 499.113962][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 499.123245][ T5942] netlink: 'syz.0.1405': attribute type 6 has an invalid length. [ 499.147572][ T5942] netlink: 'syz.0.1405': attribute type 7 has an invalid length. [ 499.172302][ T5942] netlink: 'syz.0.1405': attribute type 8 has an invalid length. [ 499.251438][ T5948] loop5: detected capacity change from 0 to 8192 [ 499.267701][ T5948] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 499.472073][ T5957] tipc: Enabling of bearer rejected, failed to enable media [ 499.534913][ T5957] overlayfs: failed to clone upperpath [ 499.886332][ T5962] overlayfs: unrecognized mount option "/" or missing value [ 499.967450][ T5966] syz.0.1411[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.967558][ T5966] syz.0.1411[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.432207][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1414'. [ 500.549000][ T5994] futex_wake_op: syz.2.1416 tries to shift op by 32; fix this program [ 501.168521][ T6009] tipc: Enabling of bearer rejected, failed to enable media [ 501.629756][ T6009] overlayfs: failed to resolve './file0': -2 [ 502.752356][ T6020] loop5: detected capacity change from 0 to 256 [ 502.781000][ T6020] exfat: Deprecated parameter 'namecase' [ 502.797262][ T6020] exfat: Deprecated parameter 'utf8' [ 502.802940][ T6020] exfat: Deprecated parameter 'namecase' [ 502.808479][ T6020] exfat: Deprecated parameter 'utf8' [ 502.921873][ T6020] exfat: Bad value for 'gid' [ 503.285781][ T6019] device vlan3 entered promiscuous mode [ 503.325251][ T6028] loop0: detected capacity change from 0 to 2048 [ 503.391674][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 503.411726][ T6028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 503.436990][ T6028] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 503.490437][ T6033] loop5: detected capacity change from 0 to 8192 [ 503.515060][ T6028] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 503.551486][ T6033] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 503.572513][ T6041] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 503.662695][ T6028] EXT4-fs (loop0): This should not happen!! Data will be lost [ 503.662695][ T6028] [ 503.681446][ T6028] EXT4-fs (loop0): Total free blocks count 0 [ 503.687639][ T6028] EXT4-fs (loop0): Free/Dirty block details [ 503.691238][ T6041] EXT4-fs (loop0): This should not happen!! Data will be lost [ 503.691238][ T6041] [ 503.693387][ T6028] EXT4-fs (loop0): free_blocks=2415919104 [ 503.693404][ T6028] EXT4-fs (loop0): dirty_blocks=32 [ 503.703054][ T6041] EXT4-fs (loop0): Total free blocks count 0 [ 503.839144][ T6050] overlayfs: unrecognized mount option "/" or missing value [ 504.209021][ T6048] loop0: detected capacity change from 0 to 40427 [ 504.267793][ T6048] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 504.279285][ T6048] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 504.331019][ T6048] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 504.402029][ T6048] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 504.414412][ T6048] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 504.636550][ T28] audit: type=1400 audit(2000000133.389:930): avc: denied { bind } for pid=6063 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 504.663846][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.384588][ T6073] loop5: detected capacity change from 0 to 1024 [ 505.391091][ T6073] EXT4-fs: dax option not supported [ 505.483891][ T6075] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 506.151234][ T296] syz-executor: attempt to access beyond end of device [ 506.151234][ T296] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 506.242284][ T5451] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 506.559841][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 507.042379][ T28] audit: type=1326 audit(2000000135.592:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.5.1444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf9e385d29 code=0x0 [ 510.021371][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1449'. [ 510.041572][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1449'. [ 510.837263][ T28] audit: type=1400 audit(2000000139.198:932): avc: denied { write } for pid=6122 comm="syz.5.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.856687][ T28] audit: type=1326 audit(2000000139.198:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9e385d29 code=0x7ffc0000 [ 510.880090][ T28] audit: type=1326 audit(2000000139.198:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9e385d29 code=0x7ffc0000 [ 510.903726][ T28] audit: type=1326 audit(2000000139.198:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf9e384690 code=0x7ffc0000 [ 510.962134][ T28] audit: type=1326 audit(2000000139.198:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9e385d29 code=0x7ffc0000 [ 510.987108][ T28] audit: type=1326 audit(2000000139.198:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9e385d29 code=0x7ffc0000 [ 511.010629][ T28] audit: type=1326 audit(2000000139.198:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcf9e385d29 code=0x7ffc0000 [ 511.033983][ T28] audit: type=1326 audit(2000000139.198:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9e385d29 code=0x7ffc0000 [ 511.057296][ T28] audit: type=1326 audit(2000000139.198:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9e385d29 code=0x7ffc0000 [ 511.080598][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 511.080631][ T28] audit: type=1326 audit(2000000139.198:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcf9e385d29 code=0x7ffc0000 [ 511.093391][ T6111] loop0: detected capacity change from 0 to 40427 [ 511.120268][ T6123] tipc: Failed to remove unknown binding: 66,1,1/0:258822775/258822777 [ 511.137813][ T6123] tipc: Failed to remove unknown binding: 66,1,1/0:258822775/258822777 [ 511.179951][ T6111] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 511.199087][ T6111] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 511.208394][ T6111] F2FS-fs (loop0): invalid crc value [ 511.219074][ T6111] F2FS-fs (loop0): Found nat_bits in checkpoint [ 511.287108][ T6111] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 511.294521][ T6111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 511.328496][ T6111] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 511.635521][ T5698] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 511.827826][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 511.833980][ T5698] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.841877][ T5698] usb 1-1: config 0 has no interface number 0 [ 511.847695][ T5698] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.858578][ T5698] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.868163][ T5698] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 511.877065][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.885477][ T5698] usb 1-1: config 0 descriptor?? [ 513.434552][ T5698] usbhid 1-1:0.1: can't add hid device: -71 [ 513.440437][ T5698] usbhid: probe of 1-1:0.1 failed with error -71 [ 513.505076][ T5698] usb 1-1: USB disconnect, device number 8 [ 513.706391][ T6172] loop0: detected capacity change from 0 to 256 [ 513.712864][ T6172] exfat: Deprecated parameter 'namecase' [ 513.718399][ T6172] exfat: Deprecated parameter 'utf8' [ 513.723626][ T6172] exfat: Deprecated parameter 'namecase' [ 513.729128][ T6172] exfat: Deprecated parameter 'utf8' [ 513.734439][ T6172] exfat: Bad value for 'gid' [ 513.748825][ T6174] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 513.771973][ T5451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 514.263601][ T6173] syz.2.1465 (6173) used greatest stack depth: 18912 bytes left [ 514.851282][ T6207] xt_bpf: check failed: parse error [ 514.890250][ T6207] loop0: detected capacity change from 0 to 256 [ 514.976676][ T6207] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 515.589897][ T6216] loop0: detected capacity change from 0 to 256 [ 515.953055][ T6216] exfat: Deprecated parameter 'namecase' [ 515.963187][ T6216] exfat: Deprecated parameter 'utf8' [ 515.974942][ T6216] exfat: Deprecated parameter 'namecase' [ 515.980469][ T6216] exfat: Deprecated parameter 'utf8' [ 516.254794][ T6216] exfat: Bad value for 'gid' [ 516.494014][ T6231] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1484'. [ 517.336083][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 517.770375][ T6247] xt_bpf: check failed: parse error [ 518.066896][ T6257] 9pnet_fd: Insufficient options for proto=fd [ 518.657798][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 518.657841][ T28] audit: type=1400 audit(2000000146.496:1022): avc: denied { mounton } for pid=6264 comm="syz.0.1495" path="/265/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 518.750394][ T28] audit: type=1400 audit(2000000146.598:1023): avc: denied { map } for pid=6264 comm="syz.0.1495" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 518.773523][ T28] audit: type=1400 audit(2000000146.598:1024): avc: denied { execute } for pid=6264 comm="syz.0.1495" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 519.045766][ T6280] netlink: 'syz.2.1499': attribute type 11 has an invalid length. [ 519.156203][ T6286] tty tty3: ldisc open failed (-12), clearing slot 2 [ 522.645389][ T6341] loop5: detected capacity change from 0 to 512 [ 522.654057][ T6341] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1516: casefold flag without casefold feature [ 522.666862][ T6341] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1516: couldn't read orphan inode 15 (err -117) [ 522.679142][ T6341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 524.991427][ T6348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1517'. [ 527.126074][ T6365] device vlan3 entered promiscuous mode [ 528.104232][ T5786] EXT4-fs (loop5): unmounting filesystem. [ 528.235800][ T28] audit: type=1400 audit(2000000155.420:1025): avc: denied { setopt } for pid=6372 comm="syz.5.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.261954][ T28] audit: type=1400 audit(2000000155.466:1026): avc: denied { bind } for pid=6372 comm="syz.5.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.358466][ T6378] tipc: Enabling of bearer rejected, failed to enable media [ 528.408734][ T6378] overlayfs: failed to resolve './file0': -2 [ 528.688193][ T6382] xt_bpf: check failed: parse error [ 529.679828][ T6388] overlayfs: failed to resolve './file0': -2 [ 530.271252][ T6401] loop5: detected capacity change from 0 to 8192 [ 530.360030][ T6405] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 530.407387][ T6408] netlink: 'syz.4.1534': attribute type 4 has an invalid length. [ 530.414964][ T6408] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1534'. [ 530.428396][ T6410] loop0: detected capacity change from 0 to 16 [ 530.434623][ T6410] erofs: Unknown parameter 't5;} 7_cN"Lam)p'6~' [ 530.900587][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1535'. [ 531.105487][ T6410] binder: 6409:6410 ioctl 4040aea0 200001c0 returned -22 [ 531.571124][ T28] audit: type=1400 audit(2000000158.591:1027): avc: denied { ioctl } for pid=6417 comm="syz.3.1537" path="socket:[34395]" dev="sockfs" ino=34395 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 531.964005][ T6431] futex_wake_op: syz.4.1539 tries to shift op by 32; fix this program [ 532.254210][ T6435] device veth0_vlan left promiscuous mode [ 532.267715][ T6435] device veth0_vlan entered promiscuous mode [ 532.304682][ T6435] loop0: detected capacity change from 0 to 1024 [ 532.334563][ T6435] EXT4-fs: Ignoring removed nobh option [ 532.350316][ T6435] EXT4-fs: Ignoring removed nobh option [ 532.397801][ T6435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 532.545595][ T296] EXT4-fs (loop0): unmounting filesystem. [ 533.140806][ T6451] overlayfs: failed to clone upperpath [ 533.546818][ T6462] loop5: detected capacity change from 0 to 2048 [ 533.901867][ T6462] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 534.124676][ T6462] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 534.852920][ T6481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6481 comm=syz.0.1553 [ 534.879778][ T6477] incfs_lookup_dentry err:-13 [ 534.884305][ T6477] incfs: Can't find or create .index dir in ./file0 [ 534.903248][ T6477] incfs: mount failed -13 [ 534.908283][ T6477] overlayfs: unrecognized mount option "measure" or missing value [ 536.111751][ T5786] EXT4-fs (loop5): unmounting filesystem. [ 537.081345][ T28] audit: type=1326 audit(2000000163.754:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.3.1559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdaab85d29 code=0x0 [ 537.141405][ T1272] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 537.323735][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 537.344634][ T1272] usb 6-1: Using ep0 maxpacket: 16 [ 537.349843][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1561'. [ 537.359937][ T1272] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 537.379422][ T1272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.404376][ T1272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.423107][ T1272] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 537.455644][ T1272] usb 6-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00 [ 537.456727][ T6522] loop0: detected capacity change from 0 to 128 [ 537.473345][ T1272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.491489][ T1272] usb 6-1: config 0 descriptor?? [ 537.501328][ T6522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 537.516270][ T6522] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.545860][ T6522] device dummy0 entered promiscuous mode [ 537.560753][ T6522] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks [ 537.577790][ T6522] EXT4-fs warning (device loop0): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 537.646209][ T28] audit: type=1326 audit(2000000164.278:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz.2.1566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09bd85d29 code=0x0 [ 537.670246][ T6521] device dummy0 left promiscuous mode [ 537.689094][ T296] EXT4-fs (loop0): unmounting filesystem. [ 537.931398][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.943403][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.974491][ T1272] apple 0003:05AC:024E.0002: hidraw0: USB HID v0.00 Device [HID 05ac:024e] on usb-dummy_hcd.5-1/input0 [ 538.181912][ T1272] usb 6-1: USB disconnect, device number 2 [ 540.409446][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1577'. [ 540.962470][ T6584] loop0: detected capacity change from 0 to 128 [ 540.997732][ T6592] loop5: detected capacity change from 0 to 256 [ 541.016204][ T6592] exfat: Deprecated parameter 'namecase' [ 541.024763][ T6592] exfat: Deprecated parameter 'utf8' [ 541.030014][ T6592] exfat: Deprecated parameter 'namecase' [ 541.035921][ T6592] exfat: Deprecated parameter 'utf8' [ 541.041138][ T6592] exfat: Bad value for 'gid' [ 541.047100][ T6584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 541.063423][ T6584] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 541.121586][ T28] audit: type=1400 audit(2000000167.533:1030): avc: denied { read } for pid=6583 comm="syz.0.1581" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 541.171991][ T28] audit: type=1400 audit(2000000167.533:1031): avc: denied { rename } for pid=6583 comm="syz.0.1581" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 541.217841][ T296] EXT4-fs (loop0): unmounting filesystem. [ 544.451018][ T6602] device vlan2 entered promiscuous mode [ 544.456561][ T6602] device syz_tun entered promiscuous mode [ 545.242652][ T28] audit: type=1400 audit(2000000171.368:1032): avc: denied { create } for pid=6604 comm="syz.3.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 545.302485][ T28] audit: type=1400 audit(2000000171.368:1033): avc: denied { create } for pid=6610 comm="syz.4.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 545.322249][ T28] audit: type=1400 audit(2000000171.415:1034): avc: denied { sys_admin } for pid=6604 comm="syz.3.1587" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 545.343704][ T28] audit: type=1400 audit(2000000171.424:1035): avc: denied { associate } for pid=6615 comm="syz.3.1587" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 545.368927][ T6620] overlayfs: failed to clone upperpath [ 546.605651][ T28] audit: type=1400 audit(2000000172.650:1036): avc: denied { append } for pid=6635 comm="syz.0.1594" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 546.742324][ T6638] random: crng reseeded on system resumption [ 546.809061][ T6639] loop0: detected capacity change from 0 to 512 [ 546.862154][ T28] audit: type=1400 audit(2000000172.790:1037): avc: denied { open } for pid=6635 comm="syz.0.1594" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 547.062784][ T6639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 547.083792][ T6639] System zones: 1-12 [ 547.088120][ T6639] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1594: Directory hole found for htree index block 0 [ 547.180484][ T6639] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 547.188542][ T6639] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1594: Directory hole found for htree index block 0 [ 547.311401][ T6639] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 547.329578][ T6639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 547.420906][ T28] audit: type=1400 audit(2000000173.417:1038): avc: denied { ioctl } for pid=6635 comm="syz.0.1594" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 547.505350][ T296] EXT4-fs (loop0): unmounting filesystem. [ 551.177323][ T6675] loop0: detected capacity change from 0 to 128 [ 552.030749][ T6680] tipc: Started in network mode [ 552.035683][ T6680] tipc: Node identity fc01, cluster identity 4711 [ 552.042224][ T6680] tipc: Enabling of bearer rejected, failed to enable media [ 552.262121][ T6682] futex_wake_op: syz.4.1605 tries to shift op by 32; fix this program [ 554.249132][ T6709] futex_wake_op: syz.3.1612 tries to shift op by 32; fix this program [ 554.786701][ T28] audit: type=1400 audit(2000000180.311:1039): avc: denied { nlmsg_write } for pid=6710 comm="syz.2.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 555.103385][ T6725] syz.2.1619[6725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.103517][ T6725] syz.2.1619[6725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.398630][ T6736] tipc: Enabling of bearer rejected, failed to enable media [ 555.433372][ T6728] overlayfs: failed to clone lowerpath [ 555.851548][ T28] audit: type=1400 audit(2000000181.311:1040): avc: denied { mount } for pid=6738 comm="syz.0.1622" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 555.914108][ T28] audit: type=1400 audit(2000000181.330:1041): avc: denied { watch } for pid=6738 comm="syz.0.1622" path="/290/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 555.967533][ T28] audit: type=1400 audit(2000000181.396:1042): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 556.068614][ T6750] loop0: detected capacity change from 0 to 8192 [ 556.121212][ T6750] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 556.138014][ T28] audit: type=1400 audit(2000000181.573:1043): avc: denied { ioctl } for pid=6753 comm="syz.2.1626" path="socket:[35461]" dev="sockfs" ino=35461 ioctlcmd=0x7004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 556.181018][ T28] audit: type=1400 audit(2000000181.573:1044): avc: denied { write } for pid=6753 comm="syz.2.1626" path="socket:[35461]" dev="sockfs" ino=35461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 556.245653][ T28] audit: type=1400 audit(2000000181.676:1045): avc: denied { relabelfrom } for pid=6759 comm="syz.2.1628" name="" dev="pipefs" ino=35860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 556.362115][ T6761] overlayfs: unrecognized mount option "/" or missing value [ 557.603108][ T28] audit: type=1400 audit(2000000182.939:1046): avc: denied { read } for pid=6772 comm="syz.0.1630" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 557.703087][ T28] audit: type=1400 audit(2000000182.976:1047): avc: denied { open } for pid=6772 comm="syz.0.1630" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 557.849673][ T28] audit: type=1400 audit(2000000183.182:1048): avc: denied { create } for pid=6776 comm="syz.3.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 557.886554][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1633'. [ 558.894838][ T6795] tipc: Enabling of bearer rejected, failed to enable media [ 558.932075][ T6801] tipc: Can't bind to reserved service type 2 [ 558.954108][ T6801] syz.4.1637[6801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.954187][ T6801] syz.4.1637[6801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 559.364488][ T6814] device vlan3 entered promiscuous mode [ 564.387306][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 564.387333][ T28] audit: type=1326 audit(2000000189.290:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 564.819381][ T28] audit: type=1326 audit(2000000189.328:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 564.937205][ T28] audit: type=1326 audit(2000000189.403:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 565.073185][ T28] audit: type=1326 audit(2000000189.403:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 565.495534][ T28] audit: type=1326 audit(2000000189.412:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26c1fb85e5 code=0x7ffc0000 [ 565.706794][ T513] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 565.788141][ T28] audit: type=1326 audit(2000000189.459:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 565.920614][ T513] usb 6-1: Using ep0 maxpacket: 32 [ 565.926830][ T513] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 565.947220][ T513] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 565.964519][ T28] audit: type=1326 audit(2000000189.459:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 566.003849][ T513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.047398][ T513] usb 6-1: Product: syz [ 566.059277][ T513] usb 6-1: Manufacturer: syz [ 566.078114][ T28] audit: type=1326 audit(2000000189.468:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 566.101558][ T513] usb 6-1: SerialNumber: syz [ 566.123782][ T513] usb 6-1: config 0 descriptor?? [ 566.130446][ T6843] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 566.207785][ T28] audit: type=1326 audit(2000000189.468:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 566.232693][ T28] audit: type=1326 audit(2000000189.477:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f26c1f85d29 code=0x7ffc0000 [ 566.547784][ T6863] overlayfs: failed to resolve './file0': -2 [ 566.576540][ T6865] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1656'. [ 566.586978][ T6865] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 567.696616][ T6879] overlayfs: missing 'lowerdir' [ 567.881377][ T102] udevd[102]: worker [6820] terminated by signal 33 (Unknown signal 33) [ 567.941399][ T102] udevd[102]: worker [6820] failed while handling '/devices/virtual/misc/kvm' [ 568.304258][ T1272] usb 6-1: USB disconnect, device number 3 [ 569.459079][ T1272] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 570.627282][ T6920] device vlan3 entered promiscuous mode [ 571.971442][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 571.971463][ T28] audit: type=1400 audit(2000000196.381:1073): avc: denied { lock } for pid=6928 comm="syz.4.1672" path="socket:[36125]" dev="sockfs" ino=36125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 572.000712][ T1272] usb 6-1: Using ep0 maxpacket: 16 [ 572.007858][ T1272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.031307][ T1272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.051259][ T1272] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 572.069470][ T1272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.091699][ T1272] usb 6-1: config 0 descriptor?? [ 572.217115][ T1272] usbhid 6-1:0.0: can't add hid device: -71 [ 572.224863][ T1272] usbhid: probe of 6-1:0.0 failed with error -71 [ 572.247151][ T1272] usb 6-1: USB disconnect, device number 4 [ 572.568174][ T28] audit: type=1400 audit(2000000196.933:1074): avc: denied { ioctl } for pid=6943 comm="syz.5.1679" path="socket:[35751]" dev="sockfs" ino=35751 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 573.789283][ T6971] 9pnet: Could not find request transport: rdma [ 574.702770][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 575.007947][ T437] tipc: Subscription rejected, illegal request [ 576.501542][ T7026] kernel profiling enabled (shift: 9) [ 578.439478][ T28] audit: type=1326 audit(2000000201.638:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 578.576528][ T28] audit: type=1326 audit(2000000201.638:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 578.733423][ T28] audit: type=1326 audit(2000000201.638:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 578.781287][ T28] audit: type=1326 audit(2000000201.638:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 578.786323][ T7071] loop0: detected capacity change from 0 to 512 [ 578.854968][ T28] audit: type=1326 audit(2000000201.638:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fdb85d29 code=0x7ffc0000 [ 579.073937][ T7071] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 579.105213][ T7071] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 579.131858][ T7071] EXT4-fs (loop0): 1 truncate cleaned up [ 579.144345][ T7071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 579.190969][ T7071] ================================================================== [ 579.198887][ T7071] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x909/0x1fa0 [ 579.206426][ T7071] Read of size 18446744073709551572 at addr ffff888112233050 by task syz.0.1729/7071 [ 579.215714][ T7071] [ 579.217889][ T7071] CPU: 1 PID: 7071 Comm: syz.0.1729 Not tainted 6.1.118-syzkaller-00021-gd12538e9da37 #0 [ 579.227519][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 579.237411][ T7071] Call Trace: [ 579.240547][ T7071] [ 579.243316][ T7071] dump_stack_lvl+0x151/0x1b7 [ 579.247837][ T7071] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 579.253229][ T7071] ? _printk+0xd1/0x111 [ 579.257219][ T7071] ? __virt_addr_valid+0x242/0x2f0 [ 579.262169][ T7071] print_report+0x158/0x4e0 [ 579.266510][ T7071] ? __virt_addr_valid+0x242/0x2f0 [ 579.271453][ T7071] ? kasan_complete_mode_report_info+0x57/0x1b0 [ 579.277532][ T7071] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 579.282825][ T7071] kasan_report+0x13c/0x170 [ 579.287189][ T7071] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 579.292459][ T7071] kasan_check_range+0x294/0x2a0 [ 579.297235][ T7071] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 579.302524][ T7071] memmove+0x2d/0x70 [ 579.306258][ T7071] ext4_xattr_set_entry+0x909/0x1fa0 [ 579.311391][ T7071] ? ext4_xattr_inode_lookup_create+0x1a60/0x1a60 [ 579.317627][ T7071] ? memcpy+0x56/0x70 [ 579.321457][ T7071] ext4_xattr_block_set+0x99c/0x37f0 [ 579.326574][ T7071] ? ext4_drop_inode+0x90/0x1a0 [ 579.331255][ T7071] ? __getblk_gfp+0x3d/0x7d0 [ 579.335682][ T7071] ? ext4_xattr_block_find+0x320/0x320 [ 579.340977][ T7071] ? xattr_find_entry+0x23c/0x300 [ 579.345846][ T7071] ? ext4_xattr_block_find+0x2ac/0x320 [ 579.351133][ T7071] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 579.356896][ T7071] ? ext4_xattr_set+0x3d0/0x3d0 [ 579.361548][ T7071] ? rwsem_write_trylock+0x153/0x340 [ 579.366666][ T7071] ? dquot_initialize_needed+0x13d/0x370 [ 579.372137][ T7071] __ext4_expand_extra_isize+0x31a/0x420 [ 579.377604][ T7071] __ext4_mark_inode_dirty+0x4bb/0x7d0 [ 579.382905][ T7071] ? sb_end_intwrite+0x130/0x130 [ 579.387674][ T7071] ? current_time+0x1ba/0x300 [ 579.392185][ T7071] ? atime_needs_update+0x810/0x810 [ 579.397221][ T7071] ? __kasan_check_write+0x14/0x20 [ 579.402165][ T7071] ? drop_nlink+0xa9/0x110 [ 579.406423][ T7071] __ext4_unlink+0x6ed/0xba0 [ 579.410850][ T7071] ? __ext4_read_dirblock+0x8e0/0x8e0 [ 579.416058][ T7071] ? rwsem_mark_wake+0x770/0x770 [ 579.420832][ T7071] ext4_unlink+0x142/0x3f0 [ 579.425085][ T7071] vfs_unlink+0x38c/0x630 [ 579.429335][ T7071] do_unlinkat+0x483/0x920 [ 579.433589][ T7071] ? fsnotify_link_count+0x100/0x100 [ 579.438713][ T7071] ? strncpy_from_user+0x169/0x2b0 [ 579.443657][ T7071] ? getname_flags+0x1fd/0x520 [ 579.448258][ T7071] __x64_sys_unlink+0x49/0x50 [ 579.452768][ T7071] x64_sys_call+0x289/0x9a0 [ 579.457112][ T7071] do_syscall_64+0x3b/0xb0 [ 579.461359][ T7071] ? clear_bhb_loop+0x55/0xb0 [ 579.465886][ T7071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.471606][ T7071] RIP: 0033:0x7f00fdb85d29 [ 579.475943][ T7071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.495386][ T7071] RSP: 002b:00007f00fe940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 579.503636][ T7071] RAX: ffffffffffffffda RBX: 00007f00fdd75fa0 RCX: 00007f00fdb85d29 [ 579.511448][ T7071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 579.519257][ T7071] RBP: 00007f00fdc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 579.527073][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.534881][ T7071] R13: 0000000000000000 R14: 00007f00fdd75fa0 R15: 00007ffe3898f5e8 [ 579.542696][ T7071] [ 579.545550][ T7071] [ 579.547720][ T7071] Allocated by task 7071: [ 579.551889][ T7071] kasan_set_track+0x4b/0x70 [ 579.556318][ T7071] kasan_save_alloc_info+0x1f/0x30 [ 579.561271][ T7071] __kasan_kmalloc+0x9c/0xb0 [ 579.565699][ T7071] __kmalloc_node_track_caller+0xb3/0x1e0 [ 579.571244][ T7071] kmemdup+0x29/0x60 [ 579.574975][ T7071] ext4_xattr_block_set+0x80f/0x37f0 [ 579.580106][ T7071] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 579.585824][ T7071] __ext4_expand_extra_isize+0x31a/0x420 [ 579.591299][ T7071] __ext4_mark_inode_dirty+0x4bb/0x7d0 [ 579.596587][ T7071] __ext4_unlink+0x6ed/0xba0 [ 579.601013][ T7071] ext4_unlink+0x142/0x3f0 [ 579.605267][ T7071] vfs_unlink+0x38c/0x630 [ 579.609433][ T7071] do_unlinkat+0x483/0x920 [ 579.613685][ T7071] __x64_sys_unlink+0x49/0x50 [ 579.618203][ T7071] x64_sys_call+0x289/0x9a0 [ 579.622538][ T7071] do_syscall_64+0x3b/0xb0 [ 579.626791][ T7071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.632523][ T7071] [ 579.634689][ T7071] The buggy address belongs to the object at ffff888112233000 [ 579.634689][ T7071] which belongs to the cache kmalloc-1k of size 1024 [ 579.648580][ T7071] The buggy address is located 80 bytes inside of [ 579.648580][ T7071] 1024-byte region [ffff888112233000, ffff888112233400) [ 579.661687][ T7071] [ 579.663854][ T7071] The buggy address belongs to the physical page: [ 579.670105][ T7071] page:ffffea0004488c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112230 [ 579.680176][ T7071] head:ffffea0004488c00 order:3 compound_mapcount:0 compound_pincount:0 [ 579.688328][ T7071] flags: 0x4000000000010200(slab|head|zone=1) [ 579.694249][ T7071] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 579.702662][ T7071] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 579.711076][ T7071] page dumped because: kasan: bad access detected [ 579.717338][ T7071] page_owner tracks the page as allocated [ 579.722873][ T7071] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 297, tgid 297 (syz-executor), ts 29414449620, free_ts 29334984750 [ 579.743274][ T7071] post_alloc_hook+0x213/0x220 [ 579.747869][ T7071] prep_new_page+0x1b/0x110 [ 579.752210][ T7071] get_page_from_freelist+0x2f41/0x2fc0 [ 579.757591][ T7071] __alloc_pages+0x234/0x610 [ 579.762022][ T7071] alloc_slab_page+0x6c/0xf0 [ 579.766444][ T7071] new_slab+0x90/0x3e0 [ 579.770353][ T7071] ___slab_alloc+0x6f9/0xb80 [ 579.774777][ T7071] __slab_alloc+0x5d/0xa0 [ 579.778947][ T7071] __kmem_cache_alloc_node+0x207/0x2a0 [ 579.784238][ T7071] __kmalloc_node_track_caller+0xa2/0x1e0 [ 579.789794][ T7071] __alloc_skb+0x125/0x2d0 [ 579.794049][ T7071] inet6_rt_notify+0x2db/0x560 [ 579.798652][ T7071] fib6_add+0x23ac/0x3df0 [ 579.802810][ T7071] ip6_route_add+0x8a/0x130 [ 579.807154][ T7071] add_v4_addrs+0xa3a/0xfc0 [ 579.811494][ T7071] addrconf_init_auto_addrs+0x3e1/0x1050 [ 579.816964][ T7071] page last free stack trace: [ 579.821483][ T7071] free_unref_page_prepare+0x83d/0x850 [ 579.826770][ T7071] free_unref_page+0xb2/0x5c0 [ 579.831281][ T7071] __free_pages+0x61/0xf0 [ 579.835447][ T7071] __free_slab+0xce/0x1a0 [ 579.839616][ T7071] __unfreeze_partials+0x165/0x1a0 [ 579.844563][ T7071] put_cpu_partial+0xa9/0x100 [ 579.849185][ T7071] __slab_free+0x1c8/0x280 [ 579.853430][ T7071] ___cache_free+0xc6/0xd0 [ 579.857686][ T7071] qlist_free_all+0xc5/0x140 [ 579.862110][ T7071] kasan_quarantine_reduce+0x15a/0x180 [ 579.867408][ T7071] __kasan_slab_alloc+0x24/0x80 [ 579.872094][ T7071] slab_post_alloc_hook+0x53/0x2c0 [ 579.877039][ T7071] kmem_cache_alloc_lru+0x102/0x270 [ 579.882077][ T7071] sock_alloc_inode+0x28/0xc0 [ 579.886586][ T7071] new_inode_pseudo+0x65/0x1d0 [ 579.891188][ T7071] __sock_create+0x132/0x7e0 [ 579.895618][ T7071] [ 579.897787][ T7071] Memory state around the buggy address: [ 579.903264][ T7071] ffff888112232f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 579.911161][ T7071] ffff888112232f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 579.919056][ T7071] >ffff888112233000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.926950][ T7071] ^ [ 579.933461][ T7071] ffff888112233080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.941361][ T7071] ffff888112233100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.949254][ T7071] ================================================================== [ 579.980288][ T28] audit: type=1400 audit(2000000203.855:1080): avc: denied { create } for pid=7075 comm="syz.3.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 579.998914][ T7071] Disabling lock debugging due to kernel taint [ 580.033688][ T296] EXT4-fs (loop0): unmounting filesystem.