last executing test programs: 1m12.668352825s ago: executing program 1 (id=514): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x380c8c0, &(0x7f0000000400)={[{@errors_remount}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@data_ordered}]}, 0x0, 0x61c, &(0x7f0000001200)="$eJzs3U9sHFf9APDvrmPvOnHq9PcrUkFAQlsIqKqdOG0U9dJWSEilqkAKnHpILXtjWV5nI/8psbGEc+LAhQOISogDnDlxKOKA1BNC3DggwY1LOSBVyALFlVA1aGZnN7vrWf9pvU5sfz7Samfmzbzve2PPm523O/MCOLUuRcRmRIxExNsRMR6lbHkpf8WrzVe63oOtjZntrY2ZUiTJzX+dyXPYqJ/pyfNcRPywNbP5cHmlY53ltfWF6Xq9tpTPT64s3p1cXlt/YX5xeq42V7szNXX96vUrN669NHVodb24+JsPvzH/xnd//7svfPDnza99P63fK3laWreOVUtJknRtO1pUib28ku/DGI6xPIdyRKT7641PU5HHyFBen5GCtOojKA8Hk/4//l9EPJNPt/njAcCJlSTjkYx3zj9U7ppLklLBOgDA8ZNe849FqTyRX/+PRbk8MZH14VWfirPlemN55fnbjdU7s2laxIUYLt+er9euZH2FEZUYLqXzV7O0LD2bn+qZvxYRT0bETyqj2fzETKM++6g+9ADAKXeu5/z/n0q5XPRdTgHfEADAcXawM3nyg57fxgAAx8+Pz+1YNPxICgIAHB09+QBw+mTn/+ZdvP1vb/04/8Xg0RULABigas+9/0X2XAEAOFYK+//fOv9w+un248AAgBOidf73qz8AOBW+/eab6SupRil7/vXsO2urC413XpitLS9MLK7OTMw0lj4zNNdozGXP7Fns3HaoIL96o3H36ouxem9ypba8Mrm8tn5rsbF6Z+VW9lzvW7V9PlsAABigJy++/7dSRGy+PJq9ojWWg+/74cQrPsx7R/QBTqKia/jd/NR3BHBifIIz/eggygEcvaLTuQMcTpc+P+5t3w5c+BPhtKF4t3+e2hF4vF3+bJ/+/97PBp0dhZX42GMA4PjLD2sd/nAKHbT/v5svA+A42/3E78GgcJIlSaljPP9Ro/sDwCnQewX/27/s+IjQr4vAxT+cEHs93EtPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOw0lr1K5Yl8LPCxKJcnJiLOR8SFGC7dnq/XrkTEExHx18pw5fb8a3961GUGAD6t8j9L+fhfl8efG+tNHSl9VMneI+J7P7851DFAcHv5yrs3f3ZvemVlaaowQCV+MfhaAABtZ3oXtM7T2fvVfGE5f9/amHmwtTHTN7evH34BP3ytObhoGnd7a2NmuKPozcKPZ2MUn/13qasypV0GJj6IzYsR8XQz/oN2/cvt9Av5yKe98dPY5w8j/v2O+M+ez/4GzZRSVLriV7q2K2dpzfd0X/z/aDtpfreBmTcPocxwUryftj+v9h7/kR1Zl7L3anZknT3T3ZhW40c7G9dPoNX+bSfN9m+7I36a/7fOV7O2pqj9u7TfGC/+4fW+afeHks+diWjF3u5of5qq2VRR/Of2Gf/vn//iM/12VvLLiMs38pnC+M2pyZXFu5PLa+u//uZ7f5yrzdXuTE1dv3r9yo1rL01NZn3Uk62e6g6thvDlkSf61z/ibBTU/6MkSdr1LxXW/8v59F7/B7/679tvfWmX+F99tmj/l+Opdvyd+z+t2lf2iNsyffa9vsN3p/Fni+ofrXit+CNd26XLnu/NrM8/5Af/WJ/dZ1EBgCOwvLa+MF2v15b2M1GO9YXp1oXmvrfqmhjd98qvjx8s5+l6PQ5engNOtC7Cm0uG050QpXyd6qCCntuxZKSrGPvPcDjaSy4Odkcd7sT9A6xcGVQxyn0OmfSAWF8YinqrP2rPDPP1Nge2x+7tsc6l3TfPKtHbUlQG2g4BR6/7oAcAAAAAAAAAAAAAAB5Hy9/JH/l3yDchVZfcWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDg/S8AAP//STm2Ow==") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) 1m12.314365276s ago: executing program 1 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") lchown(&(0x7f0000000340)='./file1\x00', 0xee01, 0x0) 1m12.014734264s ago: executing program 1 (id=534): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x60}}, 0x4000000) 1m11.91230569s ago: executing program 1 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./bus\x00') 1m11.89355222s ago: executing program 1 (id=538): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) 1m11.827090615s ago: executing program 1 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) syz_usb_connect(0x1, 0x69, &(0x7f0000000100)=ANY=[@ANYBLOB="0e0100037f8e3208480b091043b201020301090257000108ce0022090406"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1m11.791167536s ago: executing program 32 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) syz_usb_connect(0x1, 0x69, &(0x7f0000000100)=ANY=[@ANYBLOB="0e0100037f8e3208480b091043b201020301090257000108ce0022090406"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1m10.625373105s ago: executing program 0 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) 1m10.475616133s ago: executing program 0 (id=576): socket(0x11, 0xa, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fbff", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1m10.453059225s ago: executing program 0 (id=578): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@delalloc}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x1000) fallocate(r0, 0x0, 0x0, 0x8800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 1m10.137164194s ago: executing program 0 (id=586): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x6f}}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x560, &(0x7f0000000f00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f00000003c0)=ANY=[], 0x361, 0x0) 1m9.753588846s ago: executing program 0 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 1m9.311862642s ago: executing program 0 (id=607): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0xc3002000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m9.311765302s ago: executing program 33 (id=607): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0xc3002000, 0x0, 0x0, 0x0, 0x0, 0x0) 41.152285424s ago: executing program 5 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x6) write(0xffffffffffffffff, 0x0, 0x0) 41.139022976s ago: executing program 5 (id=1432): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x68681, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0xc103) 40.152079344s ago: executing program 5 (id=1448): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000000000000000000000006e0318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 40.116715936s ago: executing program 5 (id=1451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0xff, 0x6}) 39.973406494s ago: executing program 5 (id=1454): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) 39.411881217s ago: executing program 5 (id=1460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 39.411751117s ago: executing program 34 (id=1460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 6.356901247s ago: executing program 6 (id=2049): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x36) 6.286726321s ago: executing program 6 (id=2053): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x18ca0283, 0x0) 5.367886185s ago: executing program 6 (id=2077): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x1, r2, 0x4000) 4.574492792s ago: executing program 6 (id=2103): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x552d, &(0x7f000000d000)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r1) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 4.234775622s ago: executing program 6 (id=2114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x1, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1, 0x2, r2}) 4.070896882s ago: executing program 6 (id=2117): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) 2.596181708s ago: executing program 7 (id=2149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.574624869s ago: executing program 7 (id=2151): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.524922792s ago: executing program 7 (id=2153): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e22, @private=0xfffffffe}}) 2.504666904s ago: executing program 7 (id=2154): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lstat(0x0, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 2.448323207s ago: executing program 7 (id=2156): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x4, r2}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[], 0x0) 2.417652748s ago: executing program 7 (id=2159): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000002000000f9"], 0x0, 0x0, 0x0, 0x0}, 0x0) setns(r0, 0x0) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 1.70915729s ago: executing program 3 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.570223888s ago: executing program 2 (id=2191): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 1.569469418s ago: executing program 3 (id=2181): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) 1.548724829s ago: executing program 2 (id=2182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1.531375901s ago: executing program 2 (id=2183): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.444705936s ago: executing program 2 (id=2184): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f000054d000/0x4000)=nil, 0x4000}, 0x1}) 1.388043939s ago: executing program 2 (id=2186): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000006580)={0x2020}, 0xffffff80) 792.181474ms ago: executing program 4 (id=2206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) read(r2, &(0x7f0000000380)=""/189, 0x8) 666.658951ms ago: executing program 4 (id=2207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014006500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={0x13, 0x70, 0x40000}, 0x20) 666.325022ms ago: executing program 4 (id=2208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10) 666.118321ms ago: executing program 4 (id=2209): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) 658.824832ms ago: executing program 4 (id=2210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000003b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 652.356072ms ago: executing program 3 (id=2211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) unshare(0x20040600) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 570.703957ms ago: executing program 3 (id=2212): recvmsg(0xffffffffffffffff, 0x0, 0x10000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x46}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 474.362723ms ago: executing program 2 (id=2213): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x50) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) 432.137735ms ago: executing program 3 (id=2214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 397.806877ms ago: executing program 3 (id=2215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 4 (id=2216): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): -90 [ 55.321113][ T2114] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.768: inode #1: comm syz.5.768: iget: illegal inode # [ 55.338531][ T2114] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.768: error while reading EA inode 1 err=-117 [ 55.350852][ T2114] EXT4-fs (loop5): 1 orphan inode deleted [ 55.356454][ T2114] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,max_batch_time=0x0000000000000000,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 55.392314][ T2114] EXT4-fs (loop5): shut down requested (2) [ 55.500703][ T2131] netlink: 'syz.4.775': attribute type 25 has an invalid length. [ 55.508812][ T2131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.775'. [ 55.528980][ T2122] tipc: Started in network mode [ 55.535583][ T2122] tipc: Node identity ac14140f, cluster identity 4711 [ 55.542364][ T2122] tipc: Enabled bearer , priority 10 [ 55.615728][ T2139] netem: change failed [ 55.636635][ T2142] loop6: detected capacity change from 0 to 512 [ 55.666982][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 55.667024][ T30] audit: type=1400 audit(1740163173.338:1051): avc: denied { mounton } for pid=2141 comm="syz.6.780" path="/syzcgroup/unified/syz6/file0" dev="cgroup2" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 55.734228][ T357] usb 4-1: USB disconnect, device number 3 [ 55.753812][ T1119] usb 4-1-port1: config error [ 55.797971][ T2154] loop2: detected capacity change from 0 to 256 [ 55.978323][ T2173] loop2: detected capacity change from 0 to 512 [ 55.992415][ T2173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.007285][ T2173] EXT4-fs (loop2): 1 truncate cleaned up [ 56.012990][ T2173] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.181063][ T30] audit: type=1400 audit(1740163173.848:1052): avc: denied { create } for pid=2187 comm="syz.6.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 56.262002][ T2194] loop3: detected capacity change from 0 to 512 [ 56.300883][ T2194] EXT4-fs (loop3): 1 orphan inode deleted [ 56.306920][ T2194] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.318216][ T2194] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.343463][ T30] audit: type=1400 audit(1740163174.008:1053): avc: denied { execute } for pid=2193 comm="syz.3.803" path="/153/file1/blkio.bfq.avg_queue_size" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.386844][ T30] audit: type=1400 audit(1740163174.058:1054): avc: denied { write } for pid=2201 comm="syz.6.808" name="uinput" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.413879][ T357] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 56.465588][ T2210] loop4: detected capacity change from 0 to 2048 [ 56.488017][ T2210] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 56.534174][ T2210] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 56.543857][ T295] tipc: Node number set to 2886997007 [ 56.621879][ T30] audit: type=1326 audit(1740163174.288:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.6.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472fb5169 code=0x7ffc0000 [ 56.655677][ T30] audit: type=1326 audit(1740163174.288:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.6.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff472fb5169 code=0x7ffc0000 [ 56.679265][ T30] audit: type=1326 audit(1740163174.288:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.6.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472fb5169 code=0x7ffc0000 [ 56.702719][ T30] audit: type=1326 audit(1740163174.288:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.6.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472fb5169 code=0x7ffc0000 [ 56.726693][ T357] usb 3-1: Using ep0 maxpacket: 16 [ 56.738639][ T30] audit: type=1326 audit(1740163174.288:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.6.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff472fb5169 code=0x7ffc0000 [ 56.762613][ T30] audit: type=1326 audit(1740163174.288:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.6.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472fb5169 code=0x7ffc0000 [ 56.794572][ T2210] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.811: bg 0: block 234: padding at end of block bitmap is not set [ 56.809032][ T2210] EXT4-fs (loop4): Remounting filesystem read-only [ 56.863835][ T357] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.878687][ T357] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 56.933726][ T357] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 56.943327][ T357] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 23872, setting to 1024 [ 56.982107][ T357] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 57.008630][ T357] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 57.043006][ T2236] loop5: detected capacity change from 0 to 8192 [ 57.056125][ T2241] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.133844][ T357] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.152978][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 57.161697][ T357] usb 3-1: SerialNumber: syz [ 57.203837][ T2173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.224298][ T357] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 57.240736][ T2230] loop6: detected capacity change from 0 to 40427 [ 57.242900][ T357] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 57.297866][ T2230] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 57.306132][ T2230] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 57.315575][ T2230] F2FS-fs (loop6): invalid crc value [ 57.322351][ T2230] F2FS-fs (loop6): Found nat_bits in checkpoint [ 57.371485][ T2230] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 57.378580][ T2230] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 57.429997][ T357] usb 3-1: USB disconnect, device number 4 [ 57.529720][ T312] attempt to access beyond end of device [ 57.529720][ T312] loop6: rw=1, want=81112, limit=40427 [ 57.544473][ T2269] loop3: detected capacity change from 0 to 256 [ 57.551546][ T2269] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.557893][ T312] attempt to access beyond end of device [ 57.557893][ T312] loop6: rw=1, want=81920, limit=40427 [ 57.569389][ T2269] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 57.581536][ T2269] FAT-fs (loop3): Filesystem has been set read-only [ 57.583730][ T417] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.596470][ T312] attempt to access beyond end of device [ 57.596470][ T312] loop6: rw=1, want=52520, limit=40427 [ 57.610320][ T312] attempt to access beyond end of device [ 57.610320][ T312] loop6: rw=1, want=53248, limit=40427 [ 57.636531][ T312] attempt to access beyond end of device [ 57.636531][ T312] loop6: rw=1, want=65432, limit=40427 [ 57.650793][ T312] attempt to access beyond end of device [ 57.650793][ T312] loop6: rw=1, want=65880, limit=40427 [ 57.800537][ T2275] loop6: detected capacity change from 0 to 2048 [ 57.853804][ T417] usb 6-1: Using ep0 maxpacket: 16 [ 57.916487][ T2275] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 57.937045][ T2275] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 57.968386][ T357] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 58.001479][ T2283] loop4: detected capacity change from 0 to 256 [ 58.013894][ T417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.033931][ T417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.045652][ T2283] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 58.053934][ T417] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.064215][ T417] usb 6-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 58.073741][ T417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.082600][ T417] usb 6-1: config 0 descriptor?? [ 58.135655][ T2275] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.831: bg 0: block 234: padding at end of block bitmap is not set [ 58.152693][ T2275] EXT4-fs (loop6): Remounting filesystem read-only [ 58.153202][ T2290] binder: 2289:2290 ioctl c0306201 400000000080 returned -14 [ 58.309111][ T2306] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 58.349861][ T2312] loop2: detected capacity change from 0 to 256 [ 58.357488][ T357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.373562][ T2315] input: syz1 as /devices/virtual/input/input5 [ 58.379700][ T357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.391842][ T357] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.411360][ T357] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.426487][ T2312] FAT-fs (loop2): Directory bread(block 64) failed [ 58.433085][ T357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.445247][ T2312] FAT-fs (loop2): Directory bread(block 65) failed [ 58.451641][ T2312] FAT-fs (loop2): Directory bread(block 66) failed [ 58.463592][ T357] usb 4-1: config 0 descriptor?? [ 58.468777][ T2312] FAT-fs (loop2): Directory bread(block 67) failed [ 58.475371][ T2312] FAT-fs (loop2): Directory bread(block 68) failed [ 58.481771][ T2312] FAT-fs (loop2): Directory bread(block 69) failed [ 58.488440][ T2312] FAT-fs (loop2): Directory bread(block 70) failed [ 58.494967][ T2312] FAT-fs (loop2): Directory bread(block 71) failed [ 58.501605][ T2312] FAT-fs (loop2): Directory bread(block 72) failed [ 58.509072][ T2312] FAT-fs (loop2): Directory bread(block 73) failed [ 58.540726][ T2326] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 58.566107][ T417] hid (null): unknown global tag 0x83 [ 58.581346][ T417] hid (null): unknown global tag 0xc [ 58.589683][ T417] hid (null): global environment stack underflow [ 58.596886][ T417] hid-generic 0003:060B:430A.0003: unexpected long global item [ 58.604495][ T417] hid-generic: probe of 0003:060B:430A.0003 failed with error -22 [ 58.760157][ T26] usb 6-1: USB disconnect, device number 4 [ 58.763859][ T417] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.944745][ T357] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 58.962239][ T357] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 59.183832][ T417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.194803][ T417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.204434][ T417] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 59.213321][ T417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.222536][ T417] usb 7-1: config 0 descriptor?? [ 59.359669][ T2384] sch_fq: defrate 0 ignored. [ 59.387712][ T2389] loop2: detected capacity change from 0 to 512 [ 59.400300][ T2389] EXT4-fs (loop2): Ignoring removed orlov option [ 59.417730][ T2389] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.887: casefold flag without casefold feature [ 59.436819][ T2389] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.887: couldn't read orphan inode 15 (err -117) [ 59.458678][ T2389] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 59.647678][ T2424] loop2: detected capacity change from 0 to 512 [ 59.665228][ T2424] EXT4-fs (loop2): error: journal path ./bus is not a block device [ 59.773067][ T2432] SELinux: Context $ is not valid (left unmapped). [ 60.506252][ T26] usb 7-1: USB disconnect, device number 3 [ 60.695524][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 60.695540][ T30] audit: type=1400 audit(1740163178.368:1148): avc: denied { create } for pid=2462 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.699894][ T2461] loop5: detected capacity change from 0 to 512 [ 60.730723][ T30] audit: type=1400 audit(1740163178.368:1149): avc: denied { ioctl } for pid=2462 comm="syz.2.918" path="socket:[23222]" dev="sockfs" ino=23222 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.766101][ T30] audit: type=1400 audit(1740163178.368:1150): avc: denied { write } for pid=2462 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.804944][ T30] audit: type=1400 audit(1740163178.428:1151): avc: denied { append } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.823853][ T2461] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 60.836664][ T30] audit: type=1400 audit(1740163178.438:1152): avc: denied { create } for pid=2464 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.850131][ T2461] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.876352][ T30] audit: type=1400 audit(1740163178.438:1153): avc: denied { ioctl } for pid=2464 comm="syz.2.921" path="socket:[23230]" dev="sockfs" ino=23230 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.903173][ T30] audit: type=1400 audit(1740163178.458:1154): avc: denied { mounton } for pid=2460 comm="syz.5.920" path="/80/file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.932487][ T30] audit: type=1400 audit(1740163178.478:1155): avc: denied { create } for pid=2471 comm="syz.4.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.952465][ T30] audit: type=1400 audit(1740163178.488:1156): avc: denied { setopt } for pid=2471 comm="syz.4.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.985499][ T30] audit: type=1400 audit(1740163178.528:1157): avc: denied { mount } for pid=2460 comm="syz.5.920" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.120748][ T6] usb 4-1: USB disconnect, device number 4 [ 61.136440][ T2495] 9pnet: p9_errstr2errno: server reported unknown error @ [ 61.408457][ T2487] loop2: detected capacity change from 0 to 40427 [ 61.493019][ T2491] loop6: detected capacity change from 0 to 40427 [ 61.499495][ T2487] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 61.518089][ T2487] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 61.553966][ T2487] F2FS-fs (loop2): invalid crc value [ 61.575596][ T2491] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 61.588014][ T2491] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 61.603043][ T2487] F2FS-fs (loop2): Found nat_bits in checkpoint [ 61.624171][ T2491] F2FS-fs (loop6): invalid crc value [ 61.643972][ T2530] loop3: detected capacity change from 0 to 512 [ 61.651014][ T2491] F2FS-fs (loop6): Found nat_bits in checkpoint [ 61.703217][ T2487] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 61.712283][ T2487] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.738612][ T2491] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 61.748040][ T2491] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 61.765004][ T2530] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,grpjquota=,nolazytime,,errors=continue. Quota mode: writeback. [ 61.800973][ T2530] ext4 filesystem being mounted at /176/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.884922][ T1730] attempt to access beyond end of device [ 61.884922][ T1730] loop6: rw=2049, want=45112, limit=40427 [ 62.141450][ T1576] attempt to access beyond end of device [ 62.141450][ T1576] loop2: rw=1, want=81920, limit=40427 [ 62.162948][ T2564] 9pnet: p9_errstr2errno: server reported unknown error @ [ 62.181878][ T1576] attempt to access beyond end of device [ 62.181878][ T1576] loop2: rw=1, want=52240, limit=40427 [ 62.207532][ T1576] attempt to access beyond end of device [ 62.207532][ T1576] loop2: rw=1, want=53248, limit=40427 [ 62.274926][ T1576] attempt to access beyond end of device [ 62.274926][ T1576] loop2: rw=1, want=64200, limit=40427 [ 62.516761][ T2586] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 62.566818][ T2584] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 62.587307][ T2594] loop5: detected capacity change from 0 to 512 [ 62.609928][ T2584] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 62.652607][ T2603] SELinux: security_context_str_to_sid(“) failed for (dev ?, type ?) errno=-22 [ 62.670440][ T2603] incfs: Backing dir is not set, filesystem can't be mounted. [ 62.680301][ T2603] incfs: mount failed -2 [ 62.685443][ T2594] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,grpquota,abort,,errors=continue. Quota mode: writeback. [ 62.703946][ T2594] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.810574][ T2594] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #19: comm syz.5.974: corrupted inode contents [ 62.822600][ T2594] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #19: comm syz.5.974: mark_inode_dirty error [ 62.832884][ T2623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.986'. [ 62.842829][ T2594] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #19: comm syz.5.974: corrupted inode contents [ 62.866566][ T2594] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2961: inode #19: comm syz.5.974: mark_inode_dirty error [ 62.878792][ T2594] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2964: inode #19: comm syz.5.974: mark inode dirty (error -117) [ 62.895470][ T2594] EXT4-fs warning (device loop5): ext4_evict_inode:303: xattr delete (err -117) [ 62.966721][ T2635] device veth0_vlan left promiscuous mode [ 62.973638][ T2635] device veth0_vlan entered promiscuous mode [ 63.017621][ T2645] loop6: detected capacity change from 0 to 256 [ 63.133464][ T2645] FAT-fs (loop6): Directory bread(block 64) failed [ 63.152187][ T2645] FAT-fs (loop6): Directory bread(block 65) failed [ 63.163785][ T2645] FAT-fs (loop6): Directory bread(block 66) failed [ 63.180307][ T2645] FAT-fs (loop6): Directory bread(block 67) failed [ 63.193837][ T2645] FAT-fs (loop6): Directory bread(block 68) failed [ 63.206477][ T2643] loop3: detected capacity change from 0 to 40427 [ 63.213074][ T2645] FAT-fs (loop6): Directory bread(block 69) failed [ 63.226783][ T2645] FAT-fs (loop6): Directory bread(block 70) failed [ 63.238116][ T2645] FAT-fs (loop6): Directory bread(block 71) failed [ 63.244701][ T2645] FAT-fs (loop6): Directory bread(block 72) failed [ 63.251133][ T2645] FAT-fs (loop6): Directory bread(block 73) failed [ 63.274753][ T2643] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 63.287954][ T2643] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 63.306746][ T2643] F2FS-fs (loop3): invalid crc value [ 63.331863][ T2643] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.358383][ T2664] loop6: detected capacity change from 0 to 512 [ 63.384322][ T2643] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 63.391703][ T2643] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 63.414220][ T2664] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,grpquota,abort,,errors=continue. Quota mode: writeback. [ 63.429221][ T2664] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.477677][ T291] attempt to access beyond end of device [ 63.477677][ T291] loop3: rw=2049, want=45112, limit=40427 [ 63.485887][ T2671] loop4: detected capacity change from 0 to 512 [ 63.489253][ T2664] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #19: comm syz.6.1002: corrupted inode contents [ 63.506791][ T2664] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #19: comm syz.6.1002: mark_inode_dirty error [ 63.518179][ T2664] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #19: comm syz.6.1002: corrupted inode contents [ 63.536987][ T2664] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2961: inode #19: comm syz.6.1002: mark_inode_dirty error [ 63.540504][ T2671] EXT4-fs (loop4): Unrecognized mount option "permit_directio" or missing value [ 63.562854][ T2664] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2964: inode #19: comm syz.6.1002: mark inode dirty (error -117) [ 63.581720][ T2664] EXT4-fs warning (device loop6): ext4_evict_inode:303: xattr delete (err -117) [ 63.621202][ T357] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.876859][ T2697] loop6: detected capacity change from 0 to 512 [ 63.970208][ T2697] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,grpjquota=,nolazytime,,errors=continue. Quota mode: writeback. [ 63.999908][ T2697] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.022484][ T357] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.039095][ T357] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.150843][ T357] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.159745][ T357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.182107][ T357] usb 6-1: SerialNumber: syz [ 64.216784][ T2699] loop2: detected capacity change from 0 to 40427 [ 64.237504][ T2699] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 64.245211][ T2699] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 64.261856][ T2699] F2FS-fs (loop2): invalid crc value [ 64.289486][ T2699] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.331056][ T2723] overlayfs: missing 'lowerdir' [ 64.358296][ T2699] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 64.365652][ T2699] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.404460][ T2733] loop4: detected capacity change from 0 to 512 [ 64.450336][ T289] attempt to access beyond end of device [ 64.450336][ T289] loop2: rw=2049, want=45112, limit=40427 [ 64.478242][ T2733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1031: inode #1: comm syz.4.1031: iget: illegal inode # [ 64.494395][ T357] usb 6-1: 0:2 : does not exist [ 64.506887][ T357] usb 6-1: USB disconnect, device number 5 [ 64.546256][ T2733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1031: error while reading EA inode 1 err=-117 [ 64.576871][ T2733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1031: inode #1: comm syz.4.1031: iget: illegal inode # [ 64.616723][ T2733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1031: error while reading EA inode 1 err=-117 [ 64.635596][ T2733] EXT4-fs (loop4): 1 orphan inode deleted [ 64.664007][ T2733] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 64.740816][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.906142][ T2787] loop3: detected capacity change from 0 to 128 [ 64.970186][ T2797] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 65.088491][ T2811] input: syz0 as /devices/virtual/input/input6 [ 65.107262][ T2813] tipc: New replicast peer: 255.255.255.255 [ 65.113673][ T2813] tipc: Enabled bearer , priority 10 [ 65.418059][ T2854] 9pnet: p9_errstr2errno: server reported unknown error õ1 g [ 65.488417][ T2861] loop4: detected capacity change from 0 to 256 [ 65.488996][ T2860] loop2: detected capacity change from 0 to 512 [ 65.501523][ T2859] xt_hashlimit: size too large, truncated to 1048576 [ 65.541802][ T2860] EXT4-fs (loop2): Unrecognized mount option "permit_directio" or missing value [ 65.569940][ T2861] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 65.718738][ T2868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1092'. [ 66.083711][ T2888] loop4: detected capacity change from 0 to 512 [ 66.141141][ T2888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.182695][ T2888] EXT4-fs (loop4): 1 orphan inode deleted [ 66.188327][ T2888] EXT4-fs (loop4): 1 truncate cleaned up [ 66.194497][ T2888] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 66.248880][ T2888] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 66.322182][ T2888] EXT4-fs (loop4): Remounting filesystem read-only [ 66.341177][ T2903] loop2: detected capacity change from 0 to 512 [ 66.377600][ T2907] netlink: 'syz.5.1110': attribute type 15 has an invalid length. [ 66.396360][ T2903] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.421413][ T2903] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm \: corrupted in-inode xattr [ 66.442044][ T2903] EXT4-fs (loop2): Remounting filesystem read-only [ 66.448670][ T2903] EXT4-fs (loop2): 1 truncate cleaned up [ 66.454228][ T2903] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,errors=remount-ro,noload,. Quota mode: none. [ 66.524523][ T2914] loop5: detected capacity change from 0 to 512 [ 66.575360][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 66.575360][ T2919] syz.2.1114[2919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.575377][ T30] audit: type=1400 audit(1740163184.035:1364): avc: denied { integrity } for pid=2918 comm="syz.2.1114" lockdown_reason="use of bpf to write user RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 66.589663][ T2919] syz.2.1114[2919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.636885][ T2914] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000001000000,minixdf,,errors=continue. Quota mode: writeback. [ 66.663828][ T2924] device wireguard0 entered promiscuous mode [ 66.676863][ T2914] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.693309][ T30] audit: type=1400 audit(1740163184.147:1365): avc: denied { read write } for pid=2913 comm="syz.5.1113" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.716399][ T30] audit: type=1400 audit(1740163184.147:1366): avc: denied { open } for pid=2913 comm="syz.5.1113" path="/112/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.740157][ T2929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2929 comm=syz.2.1119 [ 66.748868][ T30] audit: type=1400 audit(1740163184.194:1367): avc: denied { ioctl } for pid=2913 comm="syz.5.1113" path="/112/bus/file2" dev="loop5" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.758771][ T2931] 9pnet: p9_errstr2errno: server reported unknown error õ1 g [ 66.776690][ T2929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2929 comm=syz.2.1119 [ 66.836759][ T2935] loop5: detected capacity change from 0 to 512 [ 66.876982][ T30] audit: type=1326 audit(1740163184.325:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2938 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 66.925419][ T2943] loop4: detected capacity change from 0 to 128 [ 66.933079][ T30] audit: type=1326 audit(1740163184.325:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2938 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 66.959463][ T30] audit: type=1326 audit(1740163184.325:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2938 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 66.963449][ T2935] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1120: inode #1: comm syz.5.1120: iget: illegal inode # [ 66.983386][ T30] audit: type=1400 audit(1740163184.344:1371): avc: denied { write } for pid=2936 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.014491][ T30] audit: type=1326 audit(1740163184.344:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2938 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 67.038223][ T30] audit: type=1326 audit(1740163184.363:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2940 comm="syz.6.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff472fb5169 code=0x7ffc0000 [ 67.072619][ T2935] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1120: error while reading EA inode 1 err=-117 [ 67.085260][ T2935] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1120: inode #1: comm syz.5.1120: iget: illegal inode # [ 67.101592][ T2935] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1120: error while reading EA inode 1 err=-117 [ 67.114769][ T2943] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.119480][ T2955] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 67.130908][ T2955] syzkaller0: linktype set to 769 [ 67.142190][ T2935] EXT4-fs (loop5): 1 orphan inode deleted [ 67.147861][ T2935] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 67.171259][ T2943] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.266608][ T2963] wireguard: wg2: Could not create IPv6 socket [ 67.272803][ T2963] device wg2 entered promiscuous mode [ 67.292214][ T2967] incfs: Error accessing: ./file0. [ 67.304071][ T2967] incfs: mount failed -20 [ 67.424137][ T2976] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1138'. [ 67.885760][ T3032] loop2: detected capacity change from 0 to 128 [ 67.947775][ T3032] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.958385][ T3032] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.105764][ T320] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.208835][ T3039] loop3: detected capacity change from 0 to 40427 [ 68.235620][ T3039] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 68.243183][ T3039] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 68.259536][ T3039] F2FS-fs (loop3): invalid crc value [ 68.266178][ T3039] F2FS-fs (loop3): Found nat_bits in checkpoint [ 68.316623][ T3054] incfs: Error accessing: ./file0. [ 68.322225][ T3039] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 68.329252][ T3054] incfs: mount failed -20 [ 68.333591][ T3039] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 68.386068][ T320] usb 6-1: Using ep0 maxpacket: 32 [ 68.407205][ T312] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 68.421613][ T312] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 68.485746][ T3067] loop6: detected capacity change from 0 to 512 [ 68.512052][ T320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.531155][ T320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.542793][ T320] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.553321][ T320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.579890][ T3067] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1179: casefold flag without casefold feature [ 68.595784][ T320] usb 6-1: config 0 descriptor?? [ 68.601342][ T3067] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1179: couldn't read orphan inode 15 (err -117) [ 68.613571][ T3067] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.640792][ T320] hub 6-1:0.0: USB hub found [ 68.864860][ T320] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 68.905319][ T3106] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«QÿNd [ 68.982296][ T357] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.988515][ T3114] loop2: detected capacity change from 0 to 16 [ 69.000440][ T3114] erofs: (device loop2): mounted with root inode @ nid 36. [ 69.031809][ T3118] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 69.101476][ T3127] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1205'. [ 69.325947][ T320] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 69.334309][ T320] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 69.367158][ T357] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.378332][ T357] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.387891][ T357] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.411726][ T357] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.423541][ T357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.438313][ T357] usb 7-1: config 0 descriptor?? [ 69.490804][ T3144] loop2: detected capacity change from 0 to 2048 [ 69.503765][ T3144] EXT4-fs (loop2): Ignoring removed oldalloc option [ 69.518760][ T3144] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,oldalloc,,errors=continue. Quota mode: none. [ 69.581776][ T3144] EXT4-fs (loop2): shut down requested (2) [ 69.628312][ T3157] loop2: detected capacity change from 0 to 128 [ 69.666500][ T26] usb 6-1: USB disconnect, device number 6 [ 69.847034][ T3161] loop4: detected capacity change from 0 to 40427 [ 69.944694][ T3161] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 69.952366][ T3161] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 69.956376][ T357] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 69.961913][ T3161] F2FS-fs (loop4): invalid crc value [ 69.973461][ T357] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 69.975078][ T3161] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.029999][ T3161] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.036878][ T3161] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.100385][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 70.115434][ T320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 70.115701][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 70.370762][ T3197] loop4: detected capacity change from 0 to 256 [ 70.426084][ T3197] FAT-fs (loop4): Directory bread(block 64) failed [ 70.432825][ T3197] FAT-fs (loop4): Directory bread(block 65) failed [ 70.439623][ T3197] FAT-fs (loop4): Directory bread(block 66) failed [ 70.446052][ T3197] FAT-fs (loop4): Directory bread(block 67) failed [ 70.452738][ T3197] FAT-fs (loop4): Directory bread(block 68) failed [ 70.459622][ T3197] FAT-fs (loop4): Directory bread(block 69) failed [ 70.466085][ T3197] FAT-fs (loop4): Directory bread(block 70) failed [ 70.472795][ T3197] FAT-fs (loop4): Directory bread(block 71) failed [ 70.486378][ T3197] FAT-fs (loop4): Directory bread(block 72) failed [ 70.492996][ T3197] FAT-fs (loop4): Directory bread(block 73) failed [ 70.500192][ T320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.520316][ T320] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.628597][ T320] usb 3-1: New USB device found, idVendor=20b7, idProduct=0000, bcdDevice= 0.00 [ 70.637642][ T320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 70.645488][ T320] usb 3-1: SerialNumber: syz [ 70.971178][ T320] usb 3-1: 0:2 : does not exist [ 70.975912][ T320] usb 3-1: unit 48 not found! [ 70.981899][ T320] usb 3-1: USB disconnect, device number 5 [ 71.216726][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.923961][ T3205] loop2: detected capacity change from 0 to 2048 [ 71.953702][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 71.953718][ T30] audit: type=1326 audit(1740163189.059:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 72.005857][ T30] audit: type=1326 audit(1740163189.087:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 72.006890][ T3205] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.039395][ T30] audit: type=1326 audit(1740163189.087:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 72.102596][ T3224] loop4: detected capacity change from 0 to 16 [ 72.153508][ T3227] loop3: detected capacity change from 0 to 256 [ 72.184289][ T3224] erofs: (device loop4): mounted with root inode @ nid 36. [ 72.199251][ T3227] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 72.219421][ T3224] overlayfs: failed to set xattr on upper [ 72.227209][ T30] audit: type=1400 audit(1740163189.311:1516): avc: denied { unlink } for pid=3223 comm="syz.4.1243" name="#11" dev="tmpfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.250135][ T320] usb 7-1: USB disconnect, device number 4 [ 72.293968][ T30] audit: type=1326 audit(1740163189.321:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3237 comm="syz.2.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 72.318444][ T30] audit: type=1326 audit(1740163189.321:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3237 comm="syz.2.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 72.342020][ T30] audit: type=1326 audit(1740163189.321:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3237 comm="syz.2.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 72.383928][ T3243] loop3: detected capacity change from 0 to 128 [ 72.390380][ T3241] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1250'. [ 72.398914][ T30] audit: type=1326 audit(1740163189.321:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3237 comm="syz.2.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 72.436361][ T30] audit: type=1326 audit(1740163189.321:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3237 comm="syz.2.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 72.465446][ T30] audit: type=1326 audit(1740163189.321:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3237 comm="syz.2.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 72.466234][ T3243] EXT4-fs (loop3): Test dummy encryption mode enabled [ 72.551327][ T3243] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 72.564173][ T3243] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.601200][ T3263] loop4: detected capacity change from 0 to 4096 [ 72.601866][ T3264] loop6: detected capacity change from 0 to 512 [ 72.617810][ T3263] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 72.621220][ T3243] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 72.657196][ T3243] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 72.672465][ T3269] loop2: detected capacity change from 0 to 2048 [ 72.688411][ T3263] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 72.719015][ T3263] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #15: comm syz.4.1260: corrupted inode contents [ 72.731239][ T3263] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #15: comm syz.4.1260: mark_inode_dirty error [ 72.752016][ T3269] Alternate GPT is invalid, using primary GPT. [ 72.762845][ T3263] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #15: comm syz.4.1260: corrupted inode contents [ 72.774815][ T3269] loop2: p2 p3 p7 [ 72.780595][ T3263] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.1260: mark_inode_dirty error [ 72.792490][ T3263] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #15: comm syz.4.1260: corrupted inode contents [ 72.805057][ T3275] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0006 with DS=0xf [ 72.814625][ T3263] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.1260: mark_inode_dirty error [ 72.834210][ T3263] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #15: comm syz.4.1260: corrupted inode contents [ 72.848107][ T3264] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,delalloc,,errors=continue. Quota mode: writeback. [ 72.851356][ T3263] EXT4-fs error (device loop4): ext4_truncate:4303: inode #15: comm syz.4.1260: mark_inode_dirty error [ 72.875067][ T3263] EXT4-fs error (device loop4) in ext4_setattr:5609: Corrupt filesystem [ 72.875511][ T100] Alternate GPT is invalid, using primary GPT. [ 72.889467][ T100] loop2: p2 p3 p7 [ 72.894169][ T3264] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.913724][ T3273] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #15: comm syz.4.1260: corrupted inode contents [ 72.950642][ T292] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 73.051335][ T324] udevd[324]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 73.064214][ T1619] udevd[1619]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 73.064214][ T523] udevd[523]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 73.156543][ T3314] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 73.164882][ T523] udevd[523]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 73.176701][ T1619] udevd[1619]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 73.193163][ T324] udevd[324]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 73.262649][ T3321] loop4: detected capacity change from 0 to 128 [ 73.330678][ T3321] EXT4-fs (loop4): Ignoring removed nobh option [ 73.338351][ T3333] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3333 comm=syz.2.1291 [ 73.357652][ T3321] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 73.424150][ T3321] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.455294][ T3340] loop2: detected capacity change from 0 to 512 [ 73.573432][ T3340] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.612480][ T3340] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.795580][ T3367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3367 comm=syz.4.1305 [ 73.866486][ T3373] serio: Serial port ptm0 [ 74.007289][ T3385] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1313'. [ 74.060993][ T3395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3395 comm=syz.5.1318 [ 74.081459][ T3393] loop6: detected capacity change from 0 to 1024 [ 74.089298][ T3399] loop2: detected capacity change from 0 to 1024 [ 74.115646][ T3399] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.124666][ T3399] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,i_version,data=ordered,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 74.153033][ T3393] EXT4-fs (loop6): Ignoring removed oldalloc option [ 74.168967][ T3393] EXT4-fs (loop6): Ignoring removed orlov option [ 74.179478][ T3393] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 74.190121][ T3393] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.192356][ T3404] serio: Serial port ptm0 [ 74.210241][ T3393] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c018, mo2=0002] [ 74.218167][ T3393] System zones: 0-1, 3-12 [ 74.223259][ T3393] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,max_dir_size_kb=0x0000000000000009,sysvgroups,oldalloc,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,dioread_nolock,,errors=continue. Quota mode: none. [ 74.333374][ T3424] loop6: detected capacity change from 0 to 128 [ 74.396915][ T3428] netlink: 'syz.5.1331': attribute type 2 has an invalid length. [ 74.405948][ T3424] EXT4-fs (loop6): Ignoring removed nobh option [ 74.422529][ T3424] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 74.444779][ T3424] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.775211][ T3468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3468 comm=syz.3.1347 [ 74.819330][ T3474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 74.829825][ T3476] loop6: detected capacity change from 0 to 256 [ 74.877698][ T3476] attempt to access beyond end of device [ 74.877698][ T3476] loop6: rw=2049, want=324, limit=256 [ 74.896417][ T3476] attempt to access beyond end of device [ 74.896417][ T3476] loop6: rw=34817, want=293, limit=256 [ 74.951673][ T3489] loop3: detected capacity change from 0 to 256 [ 75.020239][ T3489] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 75.100914][ T3507] loop4: detected capacity change from 0 to 512 [ 75.150695][ T3516] netem: change failed [ 75.165408][ T3507] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.177869][ T3507] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.364477][ T3542] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1383'. [ 75.505713][ T3563] loop2: detected capacity change from 0 to 512 [ 75.634617][ T3563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.668110][ T3563] EXT4-fs (loop2): 1 truncate cleaned up [ 75.679705][ T3563] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.866854][ T3606] loop3: detected capacity change from 0 to 128 [ 75.884278][ T3610] loop5: detected capacity change from 0 to 128 [ 75.936829][ T3610] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 75.950807][ T3610] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.969962][ T3610] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 75.983311][ T3610] EXT4-fs (loop5): re-mounted. Opts: usrquota,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 76.036344][ T3621] serio: Serial port ptm0 [ 76.133354][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 76.410255][ T3660] loop4: detected capacity change from 0 to 512 [ 76.509701][ T3660] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.1434: corrupted inode contents [ 76.521556][ T3660] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.1434: mark_inode_dirty error [ 76.533530][ T3660] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.1434: corrupted inode contents [ 76.545921][ T3660] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.1434: mark_inode_dirty error [ 76.557639][ T3660] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.1434: Failed to acquire dquot type 0 [ 76.561023][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.576061][ T3660] EXT4-fs (loop4): 1 orphan inode deleted [ 76.579418][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.585314][ T3660] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.604759][ T3660] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.689241][ T6] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.698478][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.707024][ T6] usb 3-1: SerialNumber: syz [ 76.993167][ T3676] loop4: detected capacity change from 0 to 128 [ 77.016468][ T3674] loop6: detected capacity change from 0 to 4096 [ 77.026529][ T3676] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.039552][ T6] usb 3-1: 0:2 : does not exist [ 77.042589][ T3676] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.048943][ T6] usb 3-1: USB disconnect, device number 6 [ 77.059115][ T3674] EXT4-fs (loop6): Test dummy encryption mode enabled [ 77.082681][ T3674] EXT4-fs (loop6): Ignoring removed orlov option [ 77.094138][ T3674] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 77.094138][ T3674] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 77.094138][ T3674] [ 77.117448][ T3674] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,nolazytime,orlov,data_err=abort,errors=remount-ro,grpid,nouser_xattr,. Quota mode: writeback. [ 77.144839][ T3674] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 77.179971][ T3684] x_tables: duplicate underflow at hook 4 [ 77.278110][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.313293][ T3698] loop5: detected capacity change from 0 to 1024 [ 77.367958][ T3698] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 77.391340][ T30] kauditd_printk_skb: 699 callbacks suppressed [ 77.391396][ T30] audit: type=1400 audit(1740163194.151:2220): avc: denied { create } for pid=3697 comm="syz.5.1451" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.418054][ T30] audit: type=1400 audit(1740163194.151:2221): avc: denied { mounton } for pid=3697 comm="syz.5.1451" path="/185/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.446407][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.458327][ T30] audit: type=1400 audit(1740163194.151:2222): avc: denied { write } for pid=3697 comm="syz.5.1451" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.487425][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.514374][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.535189][ T30] audit: type=1400 audit(1740163194.151:2223): avc: denied { add_name } for pid=3697 comm="syz.5.1451" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.576845][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.593630][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.604670][ T30] audit: type=1400 audit(1740163194.151:2224): avc: denied { setattr } for pid=3697 comm="syz.5.1451" name="work" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.633567][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.664665][ T30] audit: type=1400 audit(1740163194.151:2225): avc: denied { remove_name } for pid=3697 comm="syz.5.1451" name="#17" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.688639][ T30] audit: type=1400 audit(1740163194.151:2226): avc: denied { rename } for pid=3697 comm="syz.5.1451" name="#17" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.689993][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.710765][ T30] audit: type=1400 audit(1740163194.161:2227): avc: denied { unlink } for pid=3697 comm="syz.5.1451" name="#17" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.744275][ T30] audit: type=1400 audit(1740163194.161:2228): avc: denied { unlink } for pid=3697 comm="syz.5.1451" name="#18" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.767584][ T30] audit: type=1400 audit(1740163194.161:2229): avc: denied { read } for pid=3697 comm="syz.5.1451" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.795119][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.812075][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.830378][ T3708] loop4: detected capacity change from 0 to 40427 [ 77.834032][ T1554] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 77.861915][ T3708] F2FS-fs (loop4): invalid crc value [ 77.888527][ T3708] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.932259][ T1576] tipc: Disabling bearer [ 77.941211][ T1576] tipc: Disabling bearer [ 77.946803][ T1576] tipc: Left network mode [ 77.976173][ T3708] F2FS-fs (loop4): Start checkpoint disabled! [ 77.997900][ T3708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 78.072068][ T3708] overlayfs: failed to resolve './file1': -2 [ 78.128817][ T326] attempt to access beyond end of device [ 78.128817][ T326] loop4: rw=2049, want=40984, limit=40427 [ 78.305840][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.314145][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.321521][ T3728] device bridge_slave_0 entered promiscuous mode [ 78.328616][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.335499][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.342858][ T3728] device bridge_slave_1 entered promiscuous mode [ 78.387470][ T3734] loop3: detected capacity change from 0 to 40427 [ 78.413806][ T3748] devpts: called with bogus options [ 78.445627][ T3734] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 78.461612][ T3734] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.478229][ T3734] F2FS-fs (loop3): invalid crc value [ 78.483543][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.490421][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.495536][ T3734] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.497565][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.510483][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.579908][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.587663][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.596124][ T3734] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 78.603091][ T3734] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.603811][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.646064][ T1576] device bridge_slave_1 left promiscuous mode [ 78.652484][ T1576] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.672674][ T1576] device bridge_slave_0 left promiscuous mode [ 78.672764][ T1576] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.688024][ T1576] device veth1_macvtap left promiscuous mode [ 78.694169][ T1576] device veth0_vlan left promiscuous mode [ 78.819269][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.827577][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.834463][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.842149][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.850388][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.857288][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.877258][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.894399][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.909948][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.931224][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.939997][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.947578][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.957726][ T3728] device veth0_vlan entered promiscuous mode [ 78.971926][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.991281][ T3728] device veth1_macvtap entered promiscuous mode [ 79.007704][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.028553][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.112815][ T45] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 79.122249][ T45] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 80.895185][ T3824] loop4: detected capacity change from 0 to 128 [ 80.922254][ T26] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 81.014052][ T3834] loop3: detected capacity change from 0 to 4096 [ 81.033350][ T3834] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.060270][ T3834] fs-verity: sha256 using implementation "sha256-avx2" [ 81.075650][ T3834] fs-verity (loop3, inode 16): fs-verity keyring is empty, rejecting signed file! [ 81.237515][ T3814] loop2: detected capacity change from 0 to 131072 [ 81.255882][ T3814] F2FS-fs (loop2): invalid crc value [ 81.294485][ T3852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3852 comm=syz.4.1515 [ 81.298686][ T3814] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.307253][ T26] usb 7-1: config 1 has an invalid interface number: 129 but max is 1 [ 81.327903][ T26] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 81.341625][ T3852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3852 comm=syz.4.1515 [ 81.356357][ T26] usb 7-1: config 1 has no interface number 2 [ 81.367298][ T26] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.373642][ T3814] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 81.385720][ T26] usb 7-1: too many endpoints for config 1 interface 129 altsetting 3: 64, using maximum allowed: 30 [ 81.404965][ T26] usb 7-1: config 1 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 81.420142][ T26] usb 7-1: config 1 interface 129 has no altsetting 0 [ 81.539255][ T3866] input: syz0 as /devices/virtual/input/input7 [ 81.595745][ T26] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.607495][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 81.611565][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.624884][ T3868] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 81.642382][ T26] usb 7-1: Product: syz [ 81.652617][ T26] usb 7-1: Manufacturer: syz [ 81.662766][ T26] usb 7-1: SerialNumber: syz [ 81.767882][ T3859] loop3: detected capacity change from 0 to 40427 [ 81.832374][ T3859] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.863565][ T3859] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.914790][ T3859] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.999023][ T3894] loop7: detected capacity change from 0 to 1024 [ 82.009798][ T3896] loop4: detected capacity change from 0 to 1024 [ 82.038742][ T3859] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 82.045891][ T3896] EXT4-fs (loop4): Ignoring removed orlov option [ 82.053117][ T3896] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 82.060465][ T3859] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.079721][ T3894] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.126341][ T3896] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nolazytime,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 82.156993][ T312] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.167772][ T3896] syz.4.1534[3896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.171981][ T3896] syz.4.1534[3896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.182730][ T3859] attempt to access beyond end of device [ 82.182730][ T3859] loop3: rw=2049, want=45224, limit=40427 [ 82.205633][ T312] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 82.221307][ T3859] attempt to access beyond end of device [ 82.221307][ T3859] loop3: rw=2049, want=45224, limit=40427 [ 82.242818][ T312] EXT4-fs (loop7): This should not happen!! Data will be lost [ 82.242818][ T312] [ 82.260565][ T312] EXT4-fs (loop7): Total free blocks count 0 [ 82.268762][ T312] EXT4-fs (loop7): Free/Dirty block details [ 82.275107][ T312] EXT4-fs (loop7): free_blocks=68451041280 [ 82.281004][ T312] EXT4-fs (loop7): dirty_blocks=16 [ 82.285959][ T312] EXT4-fs (loop7): Block reservation details [ 82.291800][ T312] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 82.722369][ T3916] loop4: detected capacity change from 0 to 40427 [ 82.807779][ T3916] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 82.819166][ T3916] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 82.842390][ T3916] F2FS-fs (loop4): invalid crc value [ 82.851178][ T3946] syz.7.1555[3946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.851273][ T3946] syz.7.1555[3946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.868412][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 82.868427][ T30] audit: type=1400 audit(1740163199.278:2346): avc: denied { write } for pid=3948 comm="syz.2.1538" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.910287][ T3916] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.921192][ T26] cdc_ncm 7-1:1.0: bind() failure [ 82.942544][ T26] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 82.964301][ T26] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 82.975715][ T30] audit: type=1400 audit(1740163199.381:2347): avc: denied { wake_alarm } for pid=3953 comm="syz.2.1556" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.000938][ T26] usb 7-1: USB disconnect, device number 5 [ 83.018886][ T3916] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.028112][ T3916] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.043115][ T3957] input: syz1 as /devices/virtual/input/input8 [ 83.084242][ T30] audit: type=1400 audit(1740163199.484:2348): avc: denied { mount } for pid=3958 comm="syz.2.1558" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 83.148689][ T30] audit: type=1326 audit(1740163199.540:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 83.208354][ T30] audit: type=1326 audit(1740163199.540:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 83.235161][ T30] audit: type=1326 audit(1740163199.540:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 83.259538][ T30] audit: type=1326 audit(1740163199.540:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 83.283743][ T30] audit: type=1326 audit(1740163199.540:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 83.307426][ T30] audit: type=1326 audit(1740163199.540:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 83.331604][ T30] audit: type=1326 audit(1740163199.540:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b2a6169 code=0x7ffc0000 [ 83.372365][ T3973] netem: incorrect ge model size [ 83.377182][ T3973] netem: change failed [ 83.494569][ T312] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 83.510948][ T312] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 83.520104][ T1119] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 83.776289][ T1119] usb 3-1: Using ep0 maxpacket: 16 [ 83.865035][ T4004] loop4: detected capacity change from 0 to 512 [ 83.904664][ T1119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.923926][ T4004] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.936881][ T1119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.957351][ T1119] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 83.977036][ T4004] EXT4-fs (loop4): 1 truncate cleaned up [ 83.986292][ T1119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.994558][ T4004] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 84.006681][ T3995] loop6: detected capacity change from 0 to 40427 [ 84.041000][ T1119] usb 3-1: config 0 descriptor?? [ 84.115328][ T3995] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 84.135536][ T3995] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 1) [ 84.150703][ T3995] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 84.239011][ T4002] loop7: detected capacity change from 0 to 40427 [ 84.330574][ T4002] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 84.342812][ T4002] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 84.357066][ T4002] F2FS-fs (loop7): invalid crc value [ 84.384559][ T4002] F2FS-fs (loop7): Found nat_bits in checkpoint [ 84.436765][ T4041] futex_wake_op: syz.3.1593 tries to shift op by -1; fix this program [ 84.474922][ T4002] F2FS-fs (loop7): Start checkpoint disabled! [ 84.500922][ T4002] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 84.510834][ T4002] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 84.520335][ T4050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4050 comm=syz.4.1596 [ 84.544359][ T4050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4050 comm=syz.4.1596 [ 84.577221][ T4002] attempt to access beyond end of device [ 84.577221][ T4002] loop7: rw=2049, want=53384, limit=40427 [ 84.611932][ T1119] wacom 0003:056A:00B3.0008: unknown main item tag 0x0 [ 84.624692][ T1119] wacom 0003:056A:00B3.0008: unknown main item tag 0x0 [ 84.641599][ T1119] wacom 0003:056A:00B3.0008: item fetching failed at offset 2/5 [ 84.651956][ T1119] wacom 0003:056A:00B3.0008: parse failed [ 84.653312][ T312] attempt to access beyond end of device [ 84.653312][ T312] loop7: rw=2049, want=40992, limit=40427 [ 84.668986][ T1119] wacom: probe of 0003:056A:00B3.0008 failed with error -22 [ 84.829063][ T1119] usb 3-1: USB disconnect, device number 7 [ 84.892438][ T4086] loop7: detected capacity change from 0 to 128 [ 85.030132][ T4100] loop3: detected capacity change from 0 to 1024 [ 85.057185][ T4103] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1621'. [ 85.074711][ T4100] EXT4-fs (loop3): Ignoring removed orlov option [ 85.089340][ T4107] loop4: detected capacity change from 0 to 256 [ 85.121247][ T4100] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000006,commit=0x0000000000000005,orlov,barrier=0x0000000000000003,max_batch_time=0x0000000000000000,bsdgroups,,errors=continue. Quota mode: writeback. [ 85.195846][ T4117] loop4: detected capacity change from 0 to 16 [ 85.218633][ T4122] loop3: detected capacity change from 0 to 16 [ 85.230159][ T4117] erofs: (device loop4): mounted with root inode @ nid 36. [ 85.243466][ T4122] erofs: (device loop3): mounted with root inode @ nid 36. [ 85.264945][ T48] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[9000] [ 85.284996][ T4122] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 85.420774][ T4139] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 85.577221][ T4170] loop7: detected capacity change from 0 to 512 [ 85.660120][ T4170] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 85.685091][ T4170] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.785865][ T295] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.855877][ T4204] loop2: detected capacity change from 0 to 512 [ 85.900812][ T4204] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 85.909787][ T4204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.943442][ T4204] EXT4-fs (loop2): 1 truncate cleaned up [ 85.949107][ T4204] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue. Quota mode: none. [ 86.046160][ T4227] loop4: detected capacity change from 0 to 512 [ 86.085237][ T417] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.129595][ T4227] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 86.142175][ T4227] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.170785][ T295] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 86.180071][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.204321][ T295] usb 4-1: config 0 descriptor?? [ 86.209781][ T4227] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #19: comm syz.4.1676: corrupted inode contents [ 86.224529][ T4227] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.1676: mark_inode_dirty error [ 86.236545][ T4227] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #19: comm syz.4.1676: corrupted inode contents [ 86.252100][ T4227] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2961: inode #19: comm syz.4.1676: mark_inode_dirty error [ 86.271417][ T4227] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2964: inode #19: comm syz.4.1676: mark inode dirty (error -117) [ 86.284156][ T4227] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 86.386505][ T4251] syz.2.1687[4251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.386604][ T4251] syz.2.1687[4251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.469168][ T4263] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1692'. [ 86.502120][ T417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.513903][ T417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.524546][ T417] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.537607][ T417] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.547188][ T417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.556109][ T417] usb 7-1: config 0 descriptor?? [ 86.886875][ T357] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.016753][ T4282] loop7: detected capacity change from 0 to 128 [ 87.090988][ T417] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 87.099933][ T417] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 87.143380][ T357] usb 5-1: Using ep0 maxpacket: 32 [ 87.271696][ T357] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.279780][ T357] usb 5-1: config 0 has no interface number 0 [ 87.285910][ T357] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.296925][ T357] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.311521][ T357] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 87.320861][ T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.330204][ T357] usb 5-1: config 0 descriptor?? [ 87.829912][ T417] usb 7-1: USB disconnect, device number 6 [ 88.595936][ T295] usb 4-1: Cannot set autoneg [ 88.607622][ T295] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 88.616470][ T295] usb 4-1: USB disconnect, device number 5 [ 88.636360][ T4299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1708'. [ 88.692420][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 88.692438][ T30] audit: type=1400 audit(1740163204.723:2611): avc: denied { ioctl } for pid=4307 comm="syz.2.1712" path="socket:[29415]" dev="sockfs" ino=29415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.725115][ T30] audit: type=1400 audit(1740163204.723:2612): avc: denied { unmount } for pid=4305 comm="syz.7.1711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.747040][ T357] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.000A/input/input9 [ 88.770374][ T30] audit: type=1400 audit(1740163204.723:2613): avc: denied { getopt } for pid=4307 comm="syz.2.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.792008][ T357] uclogic 0003:28BD:0094.000A: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 88.805962][ T30] audit: type=1400 audit(1740163204.797:2614): avc: denied { read } for pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=794 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.842967][ T30] audit: type=1400 audit(1740163204.797:2615): avc: denied { open } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=794 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.870414][ T30] audit: type=1400 audit(1740163204.872:2616): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=794 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.895673][ T30] audit: type=1326 audit(1740163204.919:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 88.924539][ T30] audit: type=1326 audit(1740163204.919:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 88.951578][ T30] audit: type=1326 audit(1740163204.919:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 88.976179][ T30] audit: type=1326 audit(1740163204.947:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6051c169 code=0x7ffc0000 [ 89.002957][ T357] usb 5-1: USB disconnect, device number 5 [ 89.052345][ T4323] xt_bpf: check failed: parse error [ 89.084846][ T4326] futex_wake_op: syz.2.1720 tries to shift op by 36; fix this program [ 89.147769][ T4337] loop2: detected capacity change from 0 to 512 [ 89.227058][ T4352] device wireguard0 entered promiscuous mode [ 89.251103][ T4337] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1725: casefold flag without casefold feature [ 89.264096][ T4337] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1725: couldn't read orphan inode 15 (err -117) [ 89.280616][ T4337] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.479562][ T4372] IPv4: Oversized IP packet from 127.202.26.0 [ 89.524008][ T4362] loop3: detected capacity change from 0 to 40427 [ 89.556615][ T4380] syz.7.1745[4380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.556743][ T4380] syz.7.1745[4380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.585207][ T4385] loop4: detected capacity change from 0 to 512 [ 89.616192][ T4362] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 89.629665][ T4362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.674899][ T4385] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1747: casefold flag without casefold feature [ 89.703153][ T4362] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.741696][ T4385] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1747: couldn't read orphan inode 15 (err -117) [ 89.788512][ T4385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.818485][ T4362] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.846917][ T4362] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.971460][ T4362] attempt to access beyond end of device [ 89.971460][ T4362] loop3: rw=2049, want=77960, limit=40427 [ 90.059433][ T1576] attempt to access beyond end of device [ 90.059433][ T1576] loop3: rw=1, want=77832, limit=40427 [ 90.096958][ T1576] attempt to access beyond end of device [ 90.096958][ T1576] loop3: rw=1, want=77856, limit=40427 [ 90.148511][ T291] attempt to access beyond end of device [ 90.148511][ T291] loop3: rw=2051, want=77848, limit=40427 [ 90.163296][ T291] F2FS-fs (loop3): Issue discard(9729, 9729, 2) failed, ret: -5 [ 90.282903][ T4435] device wireguard0 entered promiscuous mode [ 90.391744][ T4440] loop2: detected capacity change from 0 to 128 [ 90.452796][ T4427] loop6: detected capacity change from 0 to 40427 [ 90.514828][ T4427] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 90.542740][ T4427] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 90.576445][ T4427] F2FS-fs (loop6): invalid crc value [ 90.604687][ T4433] loop4: detected capacity change from 0 to 40427 [ 90.616295][ T4427] F2FS-fs (loop6): Found nat_bits in checkpoint [ 90.639218][ T4433] F2FS-fs (loop4): invalid crc value [ 90.652716][ T4433] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.712036][ T4427] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 90.732405][ T4427] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 90.745744][ T4433] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.154739][ T4477] device wireguard0 entered promiscuous mode [ 91.202113][ T4482] loop6: detected capacity change from 0 to 256 [ 91.250811][ T4482] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 91.322872][ T4482] exFAT-fs (loop6): hint_cluster is invalid (17) [ 91.384539][ T4494] input: syz1 as /devices/virtual/input/input10 [ 91.531215][ T4509] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 91.559665][ T4511] loop4: detected capacity change from 0 to 128 [ 91.569086][ T4509] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 91.646600][ T4511] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.665072][ T4511] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.727012][ T4525] device wireguard0 entered promiscuous mode [ 91.742399][ T4511] overlayfs: upper fs does not support tmpfile. [ 91.931091][ T4535] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 92.048658][ T4520] loop7: detected capacity change from 0 to 40427 [ 92.110006][ T4520] F2FS-fs (loop7): invalid crc value [ 92.121930][ T4520] F2FS-fs (loop7): Found nat_bits in checkpoint [ 92.133048][ T4548] loop2: detected capacity change from 0 to 128 [ 92.267068][ T4520] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 92.319880][ T4563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4563 comm=syz.6.1820 [ 92.342205][ T4563] device ipip0 entered promiscuous mode [ 92.510545][ T4578] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 92.532425][ T4580] incfs: Error accessing: ./file0. [ 92.537420][ T4580] incfs: mount failed -20 [ 92.592730][ T4584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4584 comm=syz.3.1831 [ 92.637661][ T4584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4584 comm=syz.3.1831 [ 92.651892][ T4594] loop2: detected capacity change from 0 to 256 [ 92.681229][ T4594] exfat: Deprecated parameter 'utf8' [ 92.692254][ T4594] exfat: Deprecated parameter 'namecase' [ 92.698283][ T4600] af_packet: tpacket_rcv: packet too big, clamped from 64726 to 4294967272. macoff=96 [ 92.713012][ T4594] exfat: Deprecated parameter 'utf8' [ 92.768984][ T4594] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 93.174945][ T4658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4658 comm=syz.7.1863 [ 93.208440][ T4658] device ipip0 entered promiscuous mode [ 93.288516][ T4638] loop2: detected capacity change from 0 to 40427 [ 93.332258][ T4669] loop7: detected capacity change from 0 to 512 [ 93.333315][ T4638] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 93.364532][ T4638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.384449][ T4638] F2FS-fs (loop2): invalid crc value [ 93.411483][ T4638] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.446172][ T4669] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.464312][ T4669] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.531471][ T4638] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 93.538964][ T4638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.826264][ T4697] device wireguard0 entered promiscuous mode [ 93.861821][ T4702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4702 comm=syz.2.1875 [ 93.874603][ T4700] loop6: detected capacity change from 0 to 128 [ 93.889463][ T4702] device ipip0 entered promiscuous mode [ 93.919704][ T4700] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.930475][ T4700] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.990506][ T4700] overlayfs: upper fs does not support tmpfile. [ 94.083025][ T4717] loop6: detected capacity change from 0 to 512 [ 94.171776][ T4717] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,dioread_lock,errors=remount-ro,max_batch_time=0x0000000000000080,. Quota mode: writeback. [ 94.204119][ T4717] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.224925][ T4717] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 12: comm syz.6.1883: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 94.267151][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.280934][ T4717] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 13: comm syz.6.1883: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 94.324790][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.355951][ T4717] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 14: comm syz.6.1883: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 94.398868][ T4721] loop4: detected capacity change from 0 to 1024 [ 94.417756][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.437982][ T4717] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 15: comm syz.6.1883: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 94.477276][ T4721] EXT4-fs (loop4): Unrecognized mount option "euid=00000000000000000000" or missing value [ 94.483044][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.508278][ T4717] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 16: comm syz.6.1883: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 94.561970][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.569169][ T4717] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 17: comm syz.6.1883: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 94.576748][ T4711] loop3: detected capacity change from 0 to 131072 [ 94.596199][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.602724][ T4717] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #2: block 18: comm syz.6.1883: lblock 23 mapped to illegal pblock 18 (length 1) [ 94.624130][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.631475][ T4717] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 19: comm syz.6.1883: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 94.652513][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.659203][ T4717] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 20: comm syz.6.1883: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 94.670477][ T4711] F2FS-fs (loop3): invalid crc value [ 94.693845][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.706044][ T4717] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 21: comm syz.6.1883: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 94.727434][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 94.727451][ T30] audit: type=1400 audit(1740163210.373:2827): avc: denied { connect } for pid=4722 comm="syz.7.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.753839][ T4717] EXT4-fs (loop6): Remounting filesystem read-only [ 94.762183][ T4711] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 94.812321][ T30] audit: type=1326 audit(1740163210.448:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 94.851191][ T30] audit: type=1326 audit(1740163210.448:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 94.876854][ T30] audit: type=1326 audit(1740163210.448:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 94.910921][ T4711] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 94.917010][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 94.952874][ T30] audit: type=1326 audit(1740163210.448:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 94.982796][ T30] audit: type=1326 audit(1740163210.448:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 95.014245][ T30] audit: type=1326 audit(1740163210.457:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 95.084714][ T30] audit: type=1326 audit(1740163210.485:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 95.134349][ T4751] loop4: detected capacity change from 0 to 1024 [ 95.159056][ T4755] loop6: detected capacity change from 0 to 512 [ 95.167226][ T30] audit: type=1326 audit(1740163210.485:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 95.190980][ T30] audit: type=1326 audit(1740163210.485:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 95.202429][ T4751] EXT4-fs (loop4): Ignoring removed bh option [ 95.229633][ T4751] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.246728][ T4755] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 95.264611][ T4755] EXT4-fs (loop6): Ignoring removed bh option [ 95.277997][ T4755] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 95.305044][ T4755] EXT4-fs (loop6): 1 truncate cleaned up [ 95.325753][ T4755] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 95.345031][ T4751] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 95.396722][ T4762] syz.7.1901[4762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.396809][ T4762] syz.7.1901[4762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.449960][ T4753] loop2: detected capacity change from 0 to 40427 [ 95.556608][ T4753] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 95.564381][ T4753] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.580018][ T4753] F2FS-fs (loop2): invalid crc value [ 95.614978][ T4753] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.671777][ T4790] syz.3.1912[4790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.671856][ T4790] syz.3.1912[4790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.692329][ T4753] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 95.722145][ T4753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.844466][ T417] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.968220][ T4808] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1920'. [ 96.092421][ T1576] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 96.102570][ T1576] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 96.122318][ T417] usb 5-1: Using ep0 maxpacket: 16 [ 96.272038][ T417] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.282343][ T417] usb 5-1: config 0 has no interfaces? [ 96.288003][ T417] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.297216][ T417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.305959][ T417] usb 5-1: config 0 descriptor?? [ 96.456828][ T4822] loop6: detected capacity change from 0 to 2048 [ 96.575037][ T417] usb 5-1: USB disconnect, device number 6 [ 96.580693][ T4822] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 96.970856][ T4842] device batadv_slave_0 entered promiscuous mode [ 96.985203][ T4842] device lo entered promiscuous mode [ 96.991083][ T4841] device lo left promiscuous mode [ 96.996117][ T4841] device batadv_slave_0 left promiscuous mode [ 97.035746][ T4844] netlink: 'syz.7.1933': attribute type 4 has an invalid length. [ 97.068991][ T4849] syz.6.1935[4849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.069114][ T4849] syz.6.1935[4849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.070836][ T4844] netlink: 'syz.7.1933': attribute type 4 has an invalid length. [ 97.195596][ T4858] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.236215][ T4860] loop7: detected capacity change from 0 to 8192 [ 97.277099][ T4858] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 97.449716][ T320] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 97.742723][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1965'. [ 97.843396][ T320] usb 4-1: config 1 has an invalid interface number: 129 but max is 1 [ 97.851462][ T320] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 97.860483][ T320] usb 4-1: config 1 has no interface number 2 [ 97.866998][ T320] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.881835][ T320] usb 4-1: too many endpoints for config 1 interface 129 altsetting 3: 64, using maximum allowed: 30 [ 97.906907][ T320] usb 4-1: config 1 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 97.923909][ T320] usb 4-1: config 1 interface 129 has no altsetting 0 [ 98.071601][ T4935] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.110607][ T320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.119758][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.128158][ T320] usb 4-1: Product: syz [ 98.132362][ T320] usb 4-1: Manufacturer: syz [ 98.136774][ T320] usb 4-1: SerialNumber: syz [ 99.361229][ T320] cdc_ncm 4-1:1.0: bind() failure [ 99.382651][ T320] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 99.404038][ T320] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 99.411424][ T320] usb 4-1: USB disconnect, device number 6 [ 108.743258][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 108.743274][ T30] audit: type=1400 audit(1740163223.480:2910): avc: denied { read write } for pid=4947 comm="syz.2.1976" name="ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.777801][ T30] audit: type=1400 audit(1740163223.480:2911): avc: denied { open } for pid=4947 comm="syz.2.1976" path="/dev/ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.807536][ T30] audit: type=1400 audit(1740163223.489:2912): avc: denied { nlmsg_write } for pid=4948 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 108.836954][ T30] audit: type=1400 audit(1740163223.573:2913): avc: denied { ioctl } for pid=4947 comm="syz.2.1976" path="/dev/ppp" dev="devtmpfs" ino=150 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.869825][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1980'. [ 108.907423][ T30] audit: type=1400 audit(1740163223.629:2914): avc: denied { append } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.949393][ T30] audit: type=1400 audit(1740163223.629:2915): avc: denied { read write } for pid=292 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.992182][ T30] audit: type=1400 audit(1740163223.629:2916): avc: denied { open } for pid=292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.040644][ T30] audit: type=1400 audit(1740163223.629:2917): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.131261][ T30] audit: type=1400 audit(1740163223.704:2918): avc: denied { prog_load } for pid=4964 comm="syz.4.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.211640][ T30] audit: type=1400 audit(1740163223.704:2919): avc: denied { bpf } for pid=4964 comm="syz.4.1982" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.296336][ T5002] loop6: detected capacity change from 0 to 512 [ 109.403556][ T5009] loop7: detected capacity change from 0 to 1024 [ 109.443170][ T5002] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #3: comm syz.6.1997: corrupted inode contents [ 109.455321][ T5002] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.1997: mark_inode_dirty error [ 109.477450][ T5002] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #3: comm syz.6.1997: corrupted inode contents [ 109.501450][ T5002] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.1997: mark_inode_dirty error [ 109.516373][ T5002] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.1997: Failed to acquire dquot type 0 [ 109.577642][ T5002] EXT4-fs (loop6): 1 orphan inode deleted [ 109.612863][ T5002] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.634695][ T5022] loop3: detected capacity change from 0 to 128 [ 109.641651][ T5002] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.675598][ T5024] fuse: Invalid rootmode [ 109.688330][ T5024] device veth0_to_team entered promiscuous mode [ 109.696706][ T5026] netlink: 'syz.4.2008': attribute type 27 has an invalid length. [ 109.721230][ T5022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.740593][ T5022] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.785625][ T5026] bridge0: port 3(syz_tun) entered disabled state [ 109.794961][ T5026] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.802065][ T5026] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.880292][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.903744][ T5037] bridge0: port 3(syz_tun) entered blocking state [ 109.910064][ T5037] bridge0: port 3(syz_tun) entered forwarding state [ 109.920306][ T5037] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.927188][ T5037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.935379][ T5037] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.942257][ T5037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.964241][ T5037] device veth0_vlan left promiscuous mode [ 109.970170][ T5037] device veth0_vlan entered promiscuous mode [ 109.977531][ T5037] device veth1_macvtap left promiscuous mode [ 109.983997][ T5037] device veth1_macvtap entered promiscuous mode [ 109.993784][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.001516][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.025314][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.030455][ T5047] loop2: detected capacity change from 0 to 512 [ 110.034389][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.049840][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.051490][ T5047] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 110.058710][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.065334][ T5047] EXT4-fs (loop2): Ignoring removed bh option [ 110.073343][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.078568][ T5047] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.087024][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.098218][ T5047] EXT4-fs (loop2): 1 truncate cleaned up [ 110.104738][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.110106][ T5047] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 110.121367][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.147053][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 110.155164][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.163973][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 110.172139][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.180536][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.188587][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.196860][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.205076][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.213342][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 110.220780][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 110.228319][ T5040] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2012'. [ 110.327839][ T5061] cgroup: Name too long [ 110.471414][ T5067] loop6: detected capacity change from 0 to 512 [ 110.575344][ T5067] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 110.595601][ T5067] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.687800][ T5080] loop2: detected capacity change from 0 to 512 [ 110.774555][ T5080] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 110.807373][ T5080] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.982950][ T5115] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 110.996974][ T5115] 9pnet: Insufficient options for proto=fd [ 111.039062][ T5121] loop3: detected capacity change from 0 to 128 [ 111.130126][ T5121] attempt to access beyond end of device [ 111.130126][ T5121] loop3: rw=34817, want=241, limit=128 [ 111.170000][ T1576] attempt to access beyond end of device [ 111.170000][ T1576] loop3: rw=1, want=1041, limit=128 [ 111.213275][ T5142] loop2: detected capacity change from 0 to 128 [ 111.306373][ T10] attempt to access beyond end of device [ 111.306373][ T10] loop2: rw=1, want=1041, limit=128 [ 111.510151][ T5179] loop2: detected capacity change from 0 to 512 [ 111.550137][ T5179] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 111.564090][ T5179] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.184677][ T5201] loop2: detected capacity change from 0 to 8192 [ 112.690665][ T357] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.923668][ T5258] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.935113][ T5258] FAT-fs (loop5): unable to read boot sector [ 112.947311][ T357] usb 5-1: Using ep0 maxpacket: 32 [ 112.993955][ T5254] loop6: detected capacity change from 0 to 40427 [ 113.036932][ T5254] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 113.044658][ T320] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.056654][ T5254] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 113.068562][ T5254] F2FS-fs (loop6): invalid crc value [ 113.076941][ T5254] F2FS-fs (loop6): Found nat_bits in checkpoint [ 113.097023][ T357] usb 5-1: config 67 has an invalid interface number: 38 but max is 0 [ 113.105114][ T357] usb 5-1: config 67 has no interface number 0 [ 113.125846][ T5254] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 113.133039][ T5254] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 113.179574][ T1730] attempt to access beyond end of device [ 113.179574][ T1730] loop6: rw=2049, want=45104, limit=40427 [ 113.310708][ T320] usb 4-1: Using ep0 maxpacket: 16 [ 113.311457][ T357] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=a9.d3 [ 113.324922][ T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.352296][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.359939][ T357] usb 5-1: Product: syz [ 113.363942][ T357] usb 5-1: Manufacturer: syz [ 113.369196][ T357] usb 5-1: SerialNumber: syz [ 113.421601][ T357] usb_ehset_test: probe of 5-1:67.38 failed with error -32 [ 113.439203][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.439998][ T5299] loop2: detected capacity change from 0 to 512 [ 113.450473][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.466803][ T320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.479556][ T320] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 113.488545][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.497443][ T320] usb 4-1: config 0 descriptor?? [ 113.538305][ T5299] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2121: inode #1: comm syz.2.2121: iget: illegal inode # [ 113.551429][ T5299] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2121: error while reading EA inode 1 err=-117 [ 113.563828][ T5299] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2121: inode #1: comm syz.2.2121: iget: illegal inode # [ 113.576949][ T5299] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2121: error while reading EA inode 1 err=-117 [ 113.589479][ T5299] EXT4-fs (loop2): 1 orphan inode deleted [ 113.595011][ T5299] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 113.636887][ T357] usb 5-1: USB disconnect, device number 7 [ 113.729066][ T5309] device pim6reg1 entered promiscuous mode [ 113.846524][ T5315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2128'. [ 113.927055][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 113.935250][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 113.944013][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 113.951969][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 113.960461][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 113.968857][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 113.977648][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 113.985536][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 113.996186][ T320] koneplus 0003:1E7D:2E22.000B: item fetching failed at offset 0/2 [ 114.004415][ T320] koneplus 0003:1E7D:2E22.000B: parse failed [ 114.010571][ T320] koneplus: probe of 0003:1E7D:2E22.000B failed with error -22 [ 114.056842][ T5325] syz.7.2132 (5325) used greatest stack depth: 19232 bytes left [ 114.196819][ T30] kauditd_printk_skb: 341 callbacks suppressed [ 114.196834][ T30] audit: type=1326 audit(1740163228.583:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.236703][ T320] usb 4-1: USB disconnect, device number 7 [ 114.258408][ T30] audit: type=1326 audit(1740163228.583:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.283351][ T30] audit: type=1326 audit(1740163228.593:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.307811][ T30] audit: type=1326 audit(1740163228.593:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.332294][ T30] audit: type=1326 audit(1740163228.621:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.356550][ T30] audit: type=1326 audit(1740163228.621:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.369893][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 114.383724][ T30] audit: type=1326 audit(1740163228.621:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.412669][ T30] audit: type=1326 audit(1740163228.621:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.413873][ T5335] loop7: detected capacity change from 0 to 512 [ 114.437542][ T30] audit: type=1326 audit(1740163228.621:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.466006][ T30] audit: type=1326 audit(1740163228.621:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad9ca9169 code=0x7ffc0000 [ 114.511819][ T5335] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.523018][ T5335] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.579636][ T5344] loop4: detected capacity change from 0 to 512 [ 114.602259][ T5344] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.624722][ T5344] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.021674][ T5384] capability: warning: `syz.3.2158' uses 32-bit capabilities (legacy support in use) [ 115.274086][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2173'. [ 115.283435][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 115.292268][ T295] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 115.333524][ T5418] netlink: 'syz.3.2175': attribute type 27 has an invalid length. [ 115.352902][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.359889][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.401171][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.408065][ T5419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.416470][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.423341][ T5419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.437675][ T5419] device veth0_vlan left promiscuous mode [ 115.443704][ T5419] device veth0_vlan entered promiscuous mode [ 115.451138][ T5419] device veth1_macvtap left promiscuous mode [ 115.457870][ T5419] device veth1_macvtap entered promiscuous mode [ 115.466931][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.475638][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.483413][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.492186][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.500791][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.509961][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.518498][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.526679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.534795][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.542978][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.551093][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.559206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 115.566431][ T295] usb 8-1: Using ep0 maxpacket: 16 [ 115.567171][ T417] Bluetooth: hci0: command 0x1003 tx timeout [ 115.576669][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.578145][ T4919] Bluetooth: hci0: sending frame failed (-49) [ 115.587644][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 115.599657][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.607594][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.615654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.623823][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.631774][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.709913][ T295] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.721115][ T295] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.730912][ T295] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.743604][ T295] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 115.752788][ T295] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.764826][ T295] usb 8-1: config 0 descriptor?? [ 115.850150][ T5436] ÿÿÿÿÿÿ: renamed from vlan1 [ 116.001334][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'. [ 116.013383][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2185'. [ 116.168095][ T5462] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2194'. [ 116.274336][ T295] koneplus 0003:1E7D:2E22.000C: item fetching failed at offset 0/2 [ 116.282333][ T295] koneplus 0003:1E7D:2E22.000C: parse failed [ 116.288510][ T295] koneplus: probe of 0003:1E7D:2E22.000C failed with error -22 [ 116.290874][ T5474] devpts: called with bogus options [ 116.322890][ T5476] loop4: detected capacity change from 0 to 2048 [ 116.463646][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.471687][ T5478] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 116.491829][ T295] usb 8-1: USB disconnect, device number 2 [ 116.807864][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.816102][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 116.826582][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 116.834891][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 116.843374][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 116.852012][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 116.860589][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 116.877493][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.269223][ T417] Bluetooth: hci0: command 0x1001 tx timeout [ 118.275136][ T4919] Bluetooth: hci0: sending frame failed (-49) [ 118.388968][ C0] ================================================================== [ 118.396863][ C0] BUG: KASAN: use-after-free in dev_map_generic_redirect+0xa0/0x6f0 [ 118.404673][ C0] Read of size 8 at addr ffff88810c4ed880 by task rcub/0/15 [ 118.411789][ C0] [ 118.413961][ C0] CPU: 0 PID: 15 Comm: rcub/0 Not tainted 5.15.178-syzkaller-00193-g058abb720bd1 #0 [ 118.423167][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.433063][ C0] Call Trace: [ 118.436226][ C0] [ 118.438888][ C0] dump_stack_lvl+0x151/0x1c0 [ 118.443390][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 118.448853][ C0] ? panic+0x760/0x760 [ 118.452761][ C0] print_address_description+0x87/0x3b0 [ 118.458141][ C0] kasan_report+0x179/0x1c0 [ 118.462478][ C0] ? dev_map_generic_redirect+0xa0/0x6f0 [ 118.467946][ C0] ? dev_map_generic_redirect+0xa0/0x6f0 [ 118.473415][ C0] __asan_report_load8_noabort+0x14/0x20 [ 118.478880][ C0] dev_map_generic_redirect+0xa0/0x6f0 [ 118.484178][ C0] ? ____kasan_slab_free+0x131/0x160 [ 118.489299][ C0] ? bq_enqueue+0x3e0/0x3e0 [ 118.493636][ C0] ? bpf_prog_run_generic_xdp+0x965/0x1070 [ 118.499283][ C0] xdp_do_generic_redirect+0x42e/0xb40 [ 118.504577][ C0] do_xdp_generic+0x50b/0x7c0 [ 118.509090][ C0] ? generic_xdp_tx+0x490/0x490 [ 118.513775][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 118.519068][ C0] ? migrate_disable+0xd9/0x190 [ 118.523754][ C0] __netif_receive_skb_core+0x1706/0x3640 [ 118.529314][ C0] ? __wake_up+0x120/0x1c0 [ 118.533574][ C0] ? set_rps_cpu+0x5e0/0x5e0 [ 118.537988][ C0] ? kfree_skbmem+0x104/0x170 [ 118.542503][ C0] ? consume_skb+0xc4/0x250 [ 118.546845][ C0] ? netlink_broadcast_filtered+0x11e0/0x1220 [ 118.552778][ C0] ? neigh_fill_info+0x91b/0xd30 [ 118.557518][ C0] __netif_receive_skb+0x11c/0x530 [ 118.562465][ C0] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 118.567847][ C0] ? __kasan_check_write+0x14/0x20 [ 118.572793][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 118.577395][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 118.582599][ C0] ? rtnl_notify+0x9c/0xd0 [ 118.586854][ C0] process_backlog+0x31c/0x650 [ 118.591455][ C0] __napi_poll+0xc4/0x5a0 [ 118.595621][ C0] net_rx_action+0x47d/0xc50 [ 118.600047][ C0] ? net_tx_action+0x550/0x550 [ 118.604648][ C0] ? hrtimer_interrupt+0x867/0xaa0 [ 118.609597][ C0] handle_softirqs+0x25e/0x5c0 [ 118.614205][ C0] __irq_exit_rcu+0x52/0xf0 [ 118.618533][ C0] irq_exit_rcu+0x9/0x10 [ 118.622611][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 118.628081][ C0] [ 118.630856][ C0] [ 118.633630][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 118.639461][ C0] RIP: 0010:rt_mutex_slowlock_block+0x2f7/0x5a0 [ 118.645541][ C0] Code: 84 c0 0f 85 e5 00 00 00 83 3b 00 0f 84 16 01 00 00 4c 89 ef be 08 00 00 00 e8 25 59 cb fc 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 ef e8 2f 57 cb fc 49 f7 45 00 08 00 00 00 0f 85 e5 00 [ 118.665060][ C0] RSP: 0018:ffffc900000f7bf0 EFLAGS: 00000246 [ 118.670962][ C0] RAX: 1ffff1102004d4f0 RBX: ffff88810d8262f4 RCX: ffffffff84e77aab [ 118.678774][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88810026a780 [ 118.686588][ C0] RBP: ffffc900000f7c90 R08: dffffc0000000000 R09: ffffed102004d4f1 [ 118.694396][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 118.702208][ C0] R13: ffff88810026a780 R14: ffffffff86bab538 R15: ffffc900000f7ce0 [ 118.710023][ C0] ? rt_mutex_slowlock_block+0x2eb/0x5a0 [ 118.715497][ C0] rt_mutex_slowlock+0x184/0x300 [ 118.720262][ C0] ? rt_mutex_adjust_prio_chain+0x1810/0x1810 [ 118.726162][ C0] ? finish_task_switch+0x167/0x7b0 [ 118.731198][ C0] ? __schedule+0xcd4/0x1590 [ 118.735624][ C0] rt_mutex_lock+0x14a/0x210 [ 118.740051][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 118.744736][ C0] ? percpu_down_write+0x5e0/0x5e0 [ 118.749685][ C0] ? __kasan_check_write+0x14/0x20 [ 118.754631][ C0] rcu_boost_kthread+0x231/0x6e0 [ 118.759406][ C0] kthread+0x421/0x510 [ 118.763309][ C0] ? rcu_preempt_deferred_qs_handler+0x40/0x40 [ 118.769298][ C0] ? kthread_blkcg+0xd0/0xd0 [ 118.773725][ C0] ret_from_fork+0x1f/0x30 [ 118.777981][ C0] [ 118.780842][ C0] [ 118.783011][ C0] Allocated by task 6: [ 118.786917][ C0] ____kasan_kmalloc+0xdb/0x110 [ 118.791602][ C0] __kasan_kmalloc+0x9/0x10 [ 118.795943][ C0] kmem_cache_alloc_trace+0x11a/0x270 [ 118.801149][ C0] dst_cow_metrics_generic+0x55/0x1c0 [ 118.806361][ C0] icmp6_dst_alloc+0x385/0x560 [ 118.810961][ C0] ndisc_send_skb+0x27f/0xc90 [ 118.815470][ C0] ndisc_send_rs+0x532/0x6a0 [ 118.819898][ C0] addrconf_dad_completed+0x8bf/0xd80 [ 118.825105][ C0] addrconf_dad_work+0xdc1/0x1710 [ 118.827025][ C1] sched: RT throttling activated [ 118.834740][ C0] process_one_work+0x6bb/0xc10 [ 118.839427][ C0] worker_thread+0xad5/0x12a0 [ 118.843938][ C0] kthread+0x421/0x510 [ 118.847847][ C0] ret_from_fork+0x1f/0x30 [ 118.852106][ C0] [ 118.854265][ C0] Freed by task 312: [ 118.857998][ C0] kasan_set_track+0x4b/0x70 [ 118.862425][ C0] kasan_set_free_info+0x23/0x40 [ 118.867201][ C0] ____kasan_slab_free+0x126/0x160 [ 118.872144][ C0] __kasan_slab_free+0x11/0x20 [ 118.876747][ C0] slab_free_freelist_hook+0xbd/0x190 [ 118.881959][ C0] kfree+0xcc/0x270 [ 118.885602][ C0] ip6_dst_destroy+0x8d/0x450 [ 118.890114][ C0] dst_destroy+0xbe/0x280 [ 118.894280][ C0] dst_destroy_rcu+0x19/0x20 [ 118.898705][ C0] rcu_do_batch+0x57a/0xc10 [ 118.903043][ C0] rcu_core+0x517/0x1020 [ 118.907123][ C0] rcu_core_si+0x9/0x10 [ 118.911115][ C0] handle_softirqs+0x25e/0x5c0 [ 118.915718][ C0] __irq_exit_rcu+0x52/0xf0 [ 118.920057][ C0] irq_exit_rcu+0x9/0x10 [ 118.924134][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 118.929606][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 118.935420][ C0] [ 118.937589][ C0] The buggy address belongs to the object at ffff88810c4ed880 [ 118.937589][ C0] which belongs to the cache kmalloc-96 of size 96 [ 118.951302][ C0] The buggy address is located 0 bytes inside of [ 118.951302][ C0] 96-byte region [ffff88810c4ed880, ffff88810c4ed8e0) [ 118.964146][ C0] The buggy address belongs to the page: [ 118.969626][ C0] page:ffffea0004313b40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c4ed [ 118.979680][ C0] flags: 0x4000000000000200(slab|zone=1) [ 118.985159][ C0] raw: 4000000000000200 ffffea0004402140 0000000400000004 ffff888100042900 [ 118.993580][ C0] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 119.001995][ C0] page dumped because: kasan: bad access detected [ 119.008250][ C0] page_owner tracks the page as allocated [ 119.013791][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 5644165951, free_ts 0 [ 119.028463][ C0] post_alloc_hook+0x1a3/0x1b0 [ 119.033058][ C0] prep_new_page+0x1b/0x110 [ 119.037399][ C0] get_page_from_freelist+0x3550/0x35d0 [ 119.042870][ C0] __alloc_pages+0x27e/0x8f0 [ 119.047297][ C0] new_slab+0x9a/0x4e0 [ 119.051201][ C0] ___slab_alloc+0x39e/0x830 [ 119.055635][ C0] __slab_alloc+0x4a/0x90 [ 119.059796][ C0] kmem_cache_alloc_trace+0x147/0x270 [ 119.065003][ C0] class_read+0x5c/0xf20 [ 119.069081][ C0] policydb_read+0xb7f/0x2cc0 [ 119.073592][ C0] security_load_policy+0x1b3/0x13e0 [ 119.078715][ C0] sel_write_load+0x2dd/0x5a0 [ 119.083228][ C0] vfs_write+0x406/0x1110 [ 119.087394][ C0] ksys_write+0x199/0x2c0 [ 119.091557][ C0] __x64_sys_write+0x7b/0x90 [ 119.096072][ C0] x64_sys_call+0x2f/0x9a0 [ 119.100324][ C0] page_owner free stack trace missing [ 119.105532][ C0] [ 119.107701][ C0] Memory state around the buggy address: [ 119.113176][ C0] ffff88810c4ed780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 119.121080][ C0] ffff88810c4ed800: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 119.128970][ C0] >ffff88810c4ed880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 119.136864][ C0] ^ [ 119.140774][ C0] ffff88810c4ed900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 119.148669][ C0] ffff88810c4ed980: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 119.156568][ C0] ================================================================== [ 119.164472][ C0] Disabling lock debugging due to kernel taint [ 120.965653][ T417] Bluetooth: hci0: command 0x1009 tx timeout