last executing test programs: 6.431752122s ago: executing program 1 (id=6316): bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000004000000000000006ccc03af5f00000000c758cdf58d553b6c95e8fb897fac015a7cf173ef89845d0dc61d316844681f74da8dc89643c1f8e8b5f021bf256ee7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="a90300000000000000003200000008004001"], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.493909225s ago: executing program 1 (id=6323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff020000000000000000000000000001"], 0x0) 5.342488639s ago: executing program 1 (id=6324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resuid}, {@grpjquota_path}, {@resuid}, {@jqfmt_vfsv0}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x100409e}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$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") read$FUSE(r0, &(0x7f0000004680)={0x2020}, 0x204f) 5.166300014s ago: executing program 1 (id=6325): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000641100fc020000000000100000000000000000ff02000000000000000000000000000100000e22006490780200"], 0x0) 5.120678208s ago: executing program 1 (id=6327): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x183000, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) 1.554786252s ago: executing program 0 (id=6362): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000641100fc020000000000100000000000000000ff02000000000000000000000000000100000e22006490780200"], 0x0) 1.273514477s ago: executing program 0 (id=6364): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) dup(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "af5c9b03673de8f2cb8e82ba7715ce02ffdd63a14cdaf4b08b5ef2d411a89de497c95241534c2f4e1250f3c54cec9bdb2f695678357169dcbf923bff46c475858791f3973a4468894d073edfa750f65a5e2d3a91158ebc555c4350bc0942131113aaa45a20a22244a5348cfc664c8606590e5e8328bde1a1d791f6af5df705830799950c90d295ec13f6db80abab48f180703d9c15ec36e6e7976a5a1fccab4415821fe53727549055a59fc4c1333ddd86346a3ef948e221dffb82c0a4dc17274f2f1497bb23d2a43427489bdc3adc777a9919eade5233ab8cd5bd6350014f6b199add6c3027f60374713e0baedae215e8d318a111d6c10365668d43dabe74cca3e96a5cea98f8beb7aa7557eb9c74223f4ea4d5edaf90b8f372fc9c414dcbee228b593f8102b1adff180b223d0edc3f9a7a05b2bc1947d401b0fadd00903474cbc61ed5f3a06c92d7e745302453ee71a96fa1e33addfb723114e3a3abd967220a41479d2ff3e9a2e7bcf886b6bdd2117ed61e0a6611c030fc9c4bd071c26c38febbf1aa5e1127de256e9687eb2e17845839987e14bfbc381f3194c36c4dedbdfb2ab3ef59fe44868d4393ccef007bb8118f227a2ef308b3222972afe3ff02b528bdae546e5450cd967b1fb3edc00317e8c73c603dec0a7d40ad74f62a3aab30b47e29f3850c897312b9f604acfbac680b5cb3df75beb6f1940475b4a3ef6c4c61b41da6c639970c69fa01f34edcb9689f3cf712b3c498cfa84ecbfbcfe953f827b74fc40d3f5a208a762b0170dfdc7b9fe3cf7cfe0caef20fa24506c67bd53fef7639df1f225b3a0416f2961257cd85fb5fc6297871efb495a9e9e2debf449ece4473092123cfc600b3ce5ab97adc67006de3947823a37400da90092e53a169dbd0187257965fd380ef6198bc0c9e9ba25433271bc7eee770616ddc4c61b49f164bd0d3c27c4809405d103c1362a84bea35bcc97e1553a1cadeff9c0f02128f63b5e9431c5037aee7ae26d9fb69065cc48641d71150f6285e8d2a7cabf3440ab17dd4cc32d3d91d731c2d20a1732b2ca1f21b3edfbbf3700a7d1416d15740c1eb2a41ea07ca4f0c9733c836e8e1ccf281ccf216eea85a7607ebbba5cf66030897b3d4b3358568cdf6f0eaa836ac60cd9240a22e1641eae6f648da7b02c04af5157d4fffa4f41023644dadf4e0a891bd1208174bb6e126c0a19159cd558624706e66bbb1c2712fa75e0a00d47f53e283ed731961b9b1dcc338fd500fa88568fff259ad649629d1a38d0cfccd180a923ce3e182d48c9f6a60847bcc6228f1806a62c12926c88759c5ceb692922f3bd35d0fb72e0bb1beee7a1d2301bc167b85b28d31d3ebbc67b83b5ec264b659e114906581c04f54dc81334a327e979b67a20417b6309fe8392e1c96f41516abc3789c4449fbe88cee0bf84f08df996d8f30275655e2743d244181b39d4903164c0f51500da470de107d71360ae2ab36eb97f5b03020616b3e76f1f2269ea966d37eebd0d413129f3f03a97a6be614e2e1dc154cbc33273b9fb4fda0ec4c8677af285652c95cc5be5be6a427d90251e34df5f3722faede844ded8fbaa285a8a90eefc3ac65796f755b40d7f62a06cfbdd24b093b3d3727a013d2663a64fec1ee840107e2c2d6ab71451ce145d212c349ed4982b21dc1a2f7e7d96e777711debaf5767cc929eba297b83cee6eb799715274d9a1a183c1502e8084ef2eec7eba36f3e3852071c54b0f60dbb915eecc920afa4bf0607ef417e5b4b00223acca3ba43a0345594bdd4c67d6209f7d04d161775f628ee7141dbe65d4f84b556045f3fc15da1a5c121e608a91c60c5fb239590628db73073950c0c015be65205ce3de153d475b7cf10732b26267d47e1da34a9caadd2f68a5a046e5785d77c6a88b88880e0d7e0867fb13e32e10bf7ab4021edeb770138094b3648f0d687dd7ef10eb32b04077c065469c86dec4f57a7647540ead1787768118aef4dd2837c8e0d33c7b1ea0de4add6b4e698bfac8ae14e00181397a178431c17aa08168802ef3c7f36bdbab5c8aca6877831da87a00d0456765de66e4e384daae13c65f9bf96e8b19c435f8c615bbe47a010a43bdec7ffb26409ef2d6decdd55c75e10469c511bce49d9d372fd1e35380b74f15347df00ff32c25a465068272a6d3c19bee560f97019c4bbc7246161fce7c534f156f561c5c6f82c8684c30fedbc743cc24cec369933b1bb941f5c788a49d424909979ff37f45b7415f12ad91f06be17efdc993334e0d14462179648e2d34f170ad80a541f817b83564d3eadc383825afc35cc4b8196bed08c021250492740d7f9e87ba9b47d6c9a5f0a7e1c6b2dbfccfb71c191fad288d99e85b8a93b7eef887a3a2aff5b51d5834ec9a7e05a6ee1e889ab5fb9b57b0aa8fcde0e1f780d686258f5a3144aa4061ce1d8c38a8edc571ad631c8579ee7655a112495cf34f09539e56c5003e49eb103e33044ce3858dd4707e21eb40eaab41a6d598b47946a191c24a3bd8d405d1e71fe94c93854a6791be8cab8fcfc9e9a2a16d8ff125095e0fb00aa6f081ea7676ec5ef507664e4e01437d02ed11534f5208e8d9127b0d3ca3fce1139a56738e860b1ac0e9df6e594e456cb562da98b949fc9aabf0f9f8c78b80fb029bf5abae6fa32e369622f3022d3cc50dc5983e0ef2d29277f24b66c9ff310f76961dbf4247610ffa71e6c5a73272a0fa6b98b1841e2522e1af13791442d14ed4c063bb5705bc028dfcd1792f4c6f4d4b2d377dc42bd63c539692e9d5fedd024fb719790e21be10619445868d3e04fc7e6b1c775b80d88f82d3d52ecb8a6727d964da889c8ddc1894620be82d328b6636983cba688cee89116f9a4d10879d1f9201edc22425582b065a2f19c70912f03d03cc40e07d43aab3b50b09680f0bbe5df0f634a84f8685f2699f38d0bdaba9793209451f6e3d0119da82685892bf2ffdfd1352f24228e6b6af6ef0ef400cc2f3cf7ef410c5b5ddfd136996be6e82c25cc45506bd5daf031d1d96ccba627ad70b999d91f76ae1e94555649f475142ac1c2a2208c0d75a1fc275ce13aa962300d2df2a58dafb8856d782168307f13b093feeeade68c67e38cf739f7e5a93409be1080e70d09e2735661b29066aa0faeff38d264f36f98faa272fceca0e85c13ac608d0846616e1df356626b9930ddc8cb71ab2f241017080704985b02b9b418441f8120215367637a3281afae0b5d52e162c4e5a139c7989071616896b9822521a2d599e6db3f3380dfdda059fed996d2282ae0ca2af9ad0e35ba3d07b15732844d6df6d8a4962d0e1e6b9a98b6e1470aab87bf5555da2414efd5f0f3cc910e01b3de8be939817c09b2ff61082b18a489bc8d550db30af0271835dd1277dfa2e522b8e3fa85ecb3ef44226f4dc6a6d20c78c831308e3c9d7f1aba4b3a18acf45992e7e725ac8c033313d830ab6a678369a2953b9dee615493fb6f16fd24d5df16c1986a32765612928c86c660ada8e4236d6b3bde073cd5dcc890f2b33a76608b58ccb3541088c079c729698c9409438d1e4c713ccc825db511c2bcdec06add7f74fcb37116623523083c29af3fde91644a4b46908d138033474a14a465002215c4da91386e9d9cd1f9900ec87499b720a33a667bf2cc454cc52846843a3e917d83ef9098d7b3e1da3b98a6e5ae23d4c8c1e5e7cfb6662f633edcee6db17d54a09e672e38143e6b3b1e94a7097dae8a3e208000ce4ecc41e1acb49be1a94a2c84b6709b6cd1fdb62b87c8cc6e1333b571f4960368e2fe3bda8947bf7b28714e652d0d2a38245e5e3b17314fc4660bacc42ac8070b482af77e39f2e724ac3686b05191e637e94c4125ca94dafdd550fbab5c21f4301d6687f47be9426c984b29adcd468ab27c25d12b33129567d76538232d7948c0d9c284e7d6a86402eed406718fc3ca10e551efc5e67a033be2810ecc5e12d34fe8f9ef2c6cf021c2d3398cb1e531584082f079f1f5d7a0cea4140f5ae829de00d169301fdee640e714984627adbb80d7da10bfabaf20c18752030a1328b303a0afefbae662869b60a9c677f449e2173b2719e061f4de7af9cb145eb7758418580facdeecac772b608ba2d02d03ba76ec0d724d11cf4d0e9abb301c44af974ab6568efbebe5b4c08dc545c802effb6ea7ff100c5a3613e0765c6f8be9fcec52700248634e0118351c65741d60a2b6b1409cc434ba6d9b0b024d40c0434db69fa932e973596ba7a752cd88462e64301c8a2cd145dc26eb2719137a5792760e8708ef1994ebe57e5cae14cbbecb0b14aee55cdcf598c00743de7a624db916bb51b88239e5db350d772801c197c064b8555995fb9c7ba32360cf7bc76cfa2d210f6f7d58dd4292e89adb35049f6827ab8dee8991d307494862e4f0581564641ee85d5a37c5d16e6c0f81e23f727f0fec342a12e512c3228c35db3f3b2ab24f8082945eb74d27ac0972e009ed2a139216bc76f59c8ec87cab4faffa42c373677a3669a842cf124a15c148d95cbd90243030126a485927749caa7eb19a0e99e8c7cb151e2e833b272481a1e3b1102a511b2466be7d7371d2b811b2baefa23de0b374f00cdea5e16f097ca45c69d586b3d9137196e914fb123805ba9682fa3ab477990f8858bbdf23d6565f9a51df849f9036ab574d44bc2d2542b2b9b19fe993122fe710544b3f9bb73bf0050122af5afce33b04c36fa070100b4c790d7cf3e258e872b02df00854f59ff91a95653a30b7d38b854e741055384062307d37ccd1606c67a11e89a9afad4b51c906c995283e3fddaf4a0dbc5b6197f212f0fbd081e32c1d1402117fb3445f1904cbfd0fe397d11594d8b9330f4cd826f40948024d60178dd035bc5daecd925438406a613ef852007a67ee7e430b9d235bd36fe65337e0eff2253ecbbe1ffd4435298e587bf002f22efe807809a22e4cb6326885be697324138d5a2ff90e189d558b1cb5f8679f826259f0753e7d9427e468ae752dfe9f69f092d4faafe2b5caf05e85ea36132f982f84b2f1e3044cb2bf164bcc60f20048e3ca9b55c45231a836c71242904452bcab450eb8ca96b97930d5447055fa962614782ccb481762d8d4bf2be1240ee3054405fa16e38c1ea3637227eb48b7b0c2952a3a599ea1d6553def4832d18045c934a6a759b0f37bc5c406cfd04079e6b217852542b9c289a9c3aab15088e74cb218b07dc4931413cad071b61a20e3075e6e722b4c1b9a280d2b83616fbdcb4ea12fa33cf59611b282ac5da4de801745ac4840394cda429d8f52de427fc28751f3c504e85147f3eb3c8f6fdbcde90e9461a97c263c818c822839e055fa9c7ad068c09245d6cb38ae12e0190e84303ec137c5316c3a8b0fc66d849208c2b55e10f9b259ca5"}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$FUSE(r6, &(0x7f0000003000)={0x2020}, 0x2020) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x100000000000, 0x60583) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef) 1.174277716s ago: executing program 4 (id=6365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x240) 1.026835039s ago: executing program 4 (id=6367): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="189f7fd96b87e650b353f7702500f90000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xc, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) gettid() syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8541) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 995.225942ms ago: executing program 4 (id=6368): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="b8"], 0xb8) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 976.461054ms ago: executing program 4 (id=6369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 798.954949ms ago: executing program 3 (id=6377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resuid}, {@grpjquota_path}, {@resuid}, {@jqfmt_vfsv0}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x100409e}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$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") read$FUSE(r0, &(0x7f0000004680)={0x2020}, 0x204f) 538.651022ms ago: executing program 2 (id=6380): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="b8"], 0xb8) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 508.299105ms ago: executing program 2 (id=6381): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000008b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) writev(0xffffffffffffffff, &(0x7f0000002800)=[{&(0x7f0000002500)}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 444.019971ms ago: executing program 3 (id=6382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x0, 0x0) 360.052998ms ago: executing program 0 (id=6383): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r1}, 0x38) 325.240481ms ago: executing program 0 (id=6384): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 324.856301ms ago: executing program 2 (id=6385): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 300.707933ms ago: executing program 3 (id=6386): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x8}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 280.094975ms ago: executing program 0 (id=6387): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_destroy(0x0) 273.110126ms ago: executing program 3 (id=6388): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0x0, 0x0) 272.765776ms ago: executing program 2 (id=6389): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 258.024327ms ago: executing program 0 (id=6390): r0 = add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x9003, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) keyctl$set_timeout(0xf, r0, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0082a1464e47180000f504000000040078e4"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r6}, 0x38) 254.379737ms ago: executing program 2 (id=6391): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="189f7fd96b87e650b353f7702500f90000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xc, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) gettid() syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8541) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 238.132439ms ago: executing program 2 (id=6392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x314, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x0, 0xa, 0x16, {0x16, 0x22, "0223af01cc9fdde749b9d412b966694fad442cea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 209.297391ms ago: executing program 3 (id=6393): syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resuid}, {@grpjquota_path}, {@resuid}, {@jqfmt_vfsv0}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x100409e}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$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") read$FUSE(r0, &(0x7f0000004680)={0x2020}, 0x204f) 85.868292ms ago: executing program 1 (id=6394): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x183000, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000f78500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000d1088500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) 68.792904ms ago: executing program 3 (id=6395): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000008b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) writev(0xffffffffffffffff, &(0x7f0000002800)=[{&(0x7f0000002500)}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 57.129385ms ago: executing program 4 (id=6396): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r1}, 0x38) 0s ago: executing program 4 (id=6397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x200) sendfile(r1, r2, 0x0, 0xe066) kernel console output (not intermixed with test programs): set=0, inode=0, rec_len=1025, size=2048 fake=0 [ 990.192069][T19815] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 990.227545][T19958] loop2: detected capacity change from 0 to 1024 [ 990.254597][T17921] device bridge_slave_1 left promiscuous mode [ 990.261101][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.268493][T17921] device bridge_slave_0 left promiscuous mode [ 990.270100][T19958] EXT4-fs (loop2): Ignoring removed orlov option [ 990.274472][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.287853][T19958] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 990.295184][T17921] device veth1_macvtap left promiscuous mode [ 990.301407][T17921] device veth0_vlan left promiscuous mode [ 990.313299][T19958] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,sysvgroups,bsddf,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 990.415811][T19949] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.422662][T19949] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.429796][T19949] device bridge_slave_0 entered promiscuous mode [ 990.439825][T19949] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.446908][T19949] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.454232][T19949] device bridge_slave_1 entered promiscuous mode [ 990.524588][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 990.533067][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 990.545553][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 990.554350][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 990.562416][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.569275][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.576513][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 990.584706][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 990.592681][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.599508][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.607175][T19969] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.614141][T19969] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.633712][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 990.641197][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 990.648986][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 990.657656][T19969] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.664525][T19969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.671640][T19969] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.678490][T19969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.688587][T19969] device bridge0 entered promiscuous mode [ 990.694985][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5558'. [ 990.704281][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5558'. [ 990.742640][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 990.762636][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 990.770483][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 990.778075][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 990.786354][T19949] device veth0_vlan entered promiscuous mode [ 990.805867][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 990.815905][T19949] device veth1_macvtap entered promiscuous mode [ 990.843579][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 990.857796][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 991.726282][T19993] loop2: detected capacity change from 0 to 128 [ 991.736738][T19979] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.743645][T19979] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.751121][T19979] device bridge_slave_0 entered promiscuous mode [ 991.758467][T19979] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.765549][T19979] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.778287][T19979] device bridge_slave_1 entered promiscuous mode [ 991.824939][T19993] attempt to access beyond end of device [ 991.824939][T19993] loop2: rw=0, want=240, limit=128 [ 991.846460][T20009] syz.4.5571[20009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.846537][T20009] syz.4.5571[20009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.859110][T20009] 9pnet: Could not find request transport: rdma [ 991.923592][T20018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 991.959691][T19979] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.966533][T19979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.973653][T19979] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.980414][T19979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.019942][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 992.027942][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.036204][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.037990][T20026] hub 6-0:1.0: USB hub found [ 992.047681][T20026] hub 6-0:1.0: 1 port detected [ 992.067888][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 992.075957][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.082845][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.090075][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 992.098558][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.105466][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.121537][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 992.123282][T20033] loop4: detected capacity change from 0 to 512 [ 992.129585][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 992.151266][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 992.167743][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 992.176406][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 992.184143][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 992.192591][T20033] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 992.209343][T20033] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 992.219239][T19979] device veth0_vlan entered promiscuous mode [ 992.236095][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 992.245173][T19979] device veth1_macvtap entered promiscuous mode [ 992.270235][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 992.291781][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 992.343781][T20046] loop0: detected capacity change from 0 to 2048 [ 992.350287][T17921] device bridge_slave_1 left promiscuous mode [ 992.356254][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.363606][T17921] device bridge_slave_0 left promiscuous mode [ 992.369535][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.377484][T17921] device veth1_macvtap left promiscuous mode [ 992.383320][T17921] device veth0_vlan left promiscuous mode [ 992.412512][T20046] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 992.432176][T20046] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,abort,mblk_io_submit,nouid32,dioread_lock,grpjquota=,bsddf,,errors=continue. Quota mode: none. [ 992.464584][T19979] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 992.485163][T19979] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 992.507900][T19979] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 992.536848][T19979] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 992.540241][T20053] tmpfs: Unsupported parameter 'mpol' [ 992.556065][T19979] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 992.585889][T19979] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 992.594576][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5593'. [ 992.611863][T19979] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 992.639776][T19979] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 992.658872][T19979] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 992.680050][T19979] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 992.749442][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5597'. [ 992.794623][T20072] loop1: detected capacity change from 0 to 512 [ 992.832269][T20072] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 992.842978][T20072] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 992.886633][T20074] loop3: detected capacity change from 0 to 512 [ 992.932381][T20072] loop1: detected capacity change from 0 to 256 [ 992.951996][T20074] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 992.966013][T20072] FAT-fs (loop1): Directory bread(block 64) failed [ 992.967840][T20074] ext4 filesystem being mounted at /119/bus supports timestamps until 2038 (0x7fffffff) [ 992.982934][T20072] FAT-fs (loop1): Directory bread(block 65) failed [ 993.026698][T20072] FAT-fs (loop1): Directory bread(block 66) failed [ 993.049668][T20072] FAT-fs (loop1): Directory bread(block 67) failed [ 993.063810][T20072] FAT-fs (loop1): Directory bread(block 68) failed [ 993.070298][T20072] FAT-fs (loop1): Directory bread(block 69) failed [ 993.084410][T20072] FAT-fs (loop1): Directory bread(block 70) failed [ 993.090802][T20072] FAT-fs (loop1): Directory bread(block 71) failed [ 993.097108][T20072] FAT-fs (loop1): Directory bread(block 72) failed [ 993.120378][T20072] FAT-fs (loop1): Directory bread(block 73) failed [ 993.150397][T20082] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.167486][T20082] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.174983][T20082] device bridge_slave_0 entered promiscuous mode [ 993.183208][T20082] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.190077][T20082] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.205884][T20082] device bridge_slave_1 entered promiscuous mode [ 993.219752][T20092] loop4: detected capacity change from 0 to 128 [ 993.321197][T20082] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.328065][T20082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.335181][T20082] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.341967][T20082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.375256][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 993.384811][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.393029][T20092] attempt to access beyond end of device [ 993.393029][T20092] loop4: rw=0, want=241, limit=128 [ 993.404042][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.405266][T11803] attempt to access beyond end of device [ 993.405266][T11803] loop1: rw=1, want=1832, limit=256 [ 993.429106][T11803] attempt to access beyond end of device [ 993.429106][T11803] loop1: rw=1, want=4744, limit=256 [ 993.433981][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 993.443263][T11803] attempt to access beyond end of device [ 993.443263][T11803] loop1: rw=1, want=7184, limit=256 [ 993.458397][T16870] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.465304][T16870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.465442][T11803] attempt to access beyond end of device [ 993.465442][T11803] loop1: rw=1, want=13144, limit=256 [ 993.473135][ T4772] attempt to access beyond end of device [ 993.473135][ T4772] loop4: rw=1, want=1041, limit=128 [ 993.487550][T11803] attempt to access beyond end of device [ 993.487550][T11803] loop1: rw=1, want=16784, limit=256 [ 993.494736][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 993.507664][T11803] attempt to access beyond end of device [ 993.507664][T11803] loop1: rw=1, want=20616, limit=256 [ 993.512454][T16870] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.529204][T16870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.544097][T11803] attempt to access beyond end of device [ 993.544097][T11803] loop1: rw=1, want=25392, limit=256 [ 993.555426][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 993.561622][T11803] attempt to access beyond end of device [ 993.561622][T11803] loop1: rw=1, want=33800, limit=256 [ 993.570839][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 993.604712][T17921] device bridge_slave_1 left promiscuous mode [ 993.610916][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.619696][T17921] device bridge_slave_0 left promiscuous mode [ 993.626063][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.637158][T17921] device bridge_slave_1 left promiscuous mode [ 993.644301][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.652190][T17921] device bridge_slave_0 left promiscuous mode [ 993.658275][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.668045][T17921] device veth1_macvtap left promiscuous mode [ 993.673893][T17921] device veth0_vlan left promiscuous mode [ 993.679649][T17921] device veth1_macvtap left promiscuous mode [ 993.688044][T17921] device veth0_vlan left promiscuous mode [ 993.906684][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 993.916070][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 993.923988][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 993.931202][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 993.939322][T20082] device veth0_vlan entered promiscuous mode [ 993.974982][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 993.974999][ T30] audit: type=1400 audit(1726221330.963:5400): avc: denied { lock } for pid=20122 comm="syz.1.5620" path="socket:[111883]" dev="sockfs" ino=111883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 994.008740][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 994.017046][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 994.026509][T20082] device veth1_macvtap entered promiscuous mode [ 994.044867][T20130] 9pnet: Could not find request transport: r [ 994.053511][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 994.067273][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 994.075761][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 994.084102][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 994.092660][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 994.122002][ T30] audit: type=1404 audit(1726221331.113:5401): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 994.137650][ T30] audit: type=1404 audit(1726221331.113:5402): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 994.153706][ T30] audit: type=1400 audit(1726221331.113:5403): avc: denied { read write } for pid=16506 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 994.183656][T20140] loop3: detected capacity change from 0 to 2048 [ 994.185585][T10103] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 994.215191][ T30] audit: type=1400 audit(1726221331.113:5404): avc: denied { open } for pid=16506 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 994.240249][ T30] audit: type=1400 audit(1726221331.113:5405): avc: denied { ioctl } for pid=16506 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 994.266075][ T30] audit: type=1400 audit(1726221331.173:5406): avc: denied { prog_load } for pid=20141 comm="syz.1.5628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 994.285671][ T30] audit: type=1400 audit(1726221331.173:5407): avc: denied { bpf } for pid=20141 comm="syz.1.5628" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 994.307878][ T30] audit: type=1400 audit(1726221331.173:5408): avc: denied { perfmon } for pid=20141 comm="syz.1.5628" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 994.328757][T20140] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 994.328911][ T30] audit: type=1400 audit(1726221331.193:5409): avc: denied { create } for pid=20141 comm="syz.1.5628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 994.371643][T20140] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,abort,mblk_io_submit,nouid32,dioread_lock,grpjquota=,bsddf,,errors=continue. Quota mode: none. [ 994.431572][T20140] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 994.439604][T20140] EXT4-fs (loop3): shut down requested (0) [ 994.441163][T10103] usb 3-1: Using ep0 maxpacket: 8 [ 994.483614][T18940] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 994.492985][T18940] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 994.501878][T18940] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 994.510522][T18940] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 994.521705][T18940] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 994.530359][T18940] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 994.539350][T18940] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 994.548886][T18940] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 994.580733][T10103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.594423][T10103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.604071][T10103] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 994.613162][T10103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.626417][T10103] usb 3-1: config 0 descriptor?? [ 995.080400][T20187] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.087565][T20187] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.090698][T10103] usbhid 3-1:0.0: can't add hid device: -71 [ 995.100177][T10103] usbhid: probe of 3-1:0.0 failed with error -71 [ 995.101312][T20187] device bridge_slave_0 entered promiscuous mode [ 995.107667][T10103] usb 3-1: USB disconnect, device number 18 [ 995.120020][T20187] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.126903][T20187] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.134155][T20187] device bridge_slave_1 entered promiscuous mode [ 995.213579][T20187] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.220549][T20187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.224486][T20198] loop4: detected capacity change from 0 to 2048 [ 995.227660][T20187] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.240568][T20187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.265262][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 995.272808][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.279885][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.297003][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 995.302471][T20198] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 995.305392][T14824] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.322094][T14824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.332650][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 995.341510][T14824] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.348375][T14824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.372442][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 995.383123][T20202] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 995.397823][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 995.420652][T20206] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5655'. [ 995.432402][T20208] loop1: detected capacity change from 0 to 1024 [ 995.439711][T20206] device gretap0 entered promiscuous mode [ 995.459529][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 995.479211][T20208] EXT4-fs (loop1): Ignoring removed orlov option [ 995.484314][T20213] loop2: detected capacity change from 0 to 1024 [ 995.496862][T20210] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5656'. [ 995.506035][T20208] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 995.519758][T20187] device veth0_vlan entered promiscuous mode [ 995.531729][T20213] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 995.572923][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 995.581205][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 995.581686][T20208] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 995.588496][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 995.617828][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.627391][T20187] device veth1_macvtap entered promiscuous mode [ 995.634702][T20213] 9pnet_virtio: no channels available for device ./file1 [ 995.673630][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.697943][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.740024][T20232] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 995.791421][T17921] device bridge_slave_1 left promiscuous mode [ 995.797363][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.809567][T20237] syz.3.5647[20237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 995.809646][T20237] syz.3.5647[20237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 995.839244][T17921] device bridge_slave_0 left promiscuous mode [ 995.897570][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.092982][T17921] device veth1_macvtap left promiscuous mode [ 996.102521][T17921] device veth0_vlan left promiscuous mode [ 996.182181][T20247] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5669' sets config #62634 [ 996.375424][T20259] loop2: detected capacity change from 0 to 256 [ 996.396200][T20262] loop3: detected capacity change from 0 to 2048 [ 996.473067][T20262] EXT4-fs (loop3): Unrecognized mount option "obj_user=team_slave_0" or missing value [ 996.507807][T20259] FAT-fs (loop2): Directory bread(block 64) failed [ 997.066110][T20259] FAT-fs (loop2): Directory bread(block 65) failed [ 997.085624][T20267] loop4: detected capacity change from 0 to 512 [ 997.091815][T20259] FAT-fs (loop2): Directory bread(block 66) failed [ 997.098144][T20259] FAT-fs (loop2): Directory bread(block 67) failed [ 997.109643][T20259] FAT-fs (loop2): Directory bread(block 68) failed [ 997.121533][T20259] FAT-fs (loop2): Directory bread(block 69) failed [ 997.127931][T20259] FAT-fs (loop2): Directory bread(block 70) failed [ 997.145652][T20259] FAT-fs (loop2): Directory bread(block 71) failed [ 997.153794][T20259] FAT-fs (loop2): Directory bread(block 72) failed [ 997.160826][T20259] FAT-fs (loop2): Directory bread(block 73) failed [ 997.258621][T20277] loop4: detected capacity change from 0 to 128 [ 997.271559][T20279] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 997.309617][T20277] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 997.328957][T20277] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 997.560080][T20307] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 997.898128][T20327] loop2: detected capacity change from 0 to 128 [ 997.916683][T20327] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 997.927405][T20327] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 997.933200][T20332] loop3: detected capacity change from 0 to 2048 [ 998.032259][T20332] EXT4-fs (loop3): Unrecognized mount option "obj_user=team_slave_0" or missing value [ 998.045466][T20346] loop2: detected capacity change from 0 to 512 [ 998.056176][T20346] EXT4-fs (loop2): Ignoring removed oldalloc option [ 998.065116][T20346] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.5710: Parent and EA inode have the same ino 15 [ 998.065303][T20346] EXT4-fs (loop2): Remounting filesystem read-only [ 998.084203][T20346] EXT4-fs error (device loop2): ext4_evict_inode:294: comm syz.2.5710: couldn't truncate inode 15 (err -30) [ 998.084475][T20346] EXT4-fs (loop2): 1 orphan inode deleted [ 998.101129][T20346] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 998.193504][T20354] sysfs: Unknown parameter 'nr_inodes' [ 998.483367][T20391] loop2: detected capacity change from 0 to 256 [ 998.945977][T20412] loop1: detected capacity change from 0 to 512 [ 999.269477][T20412] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 999.272419][T20416] loop2: detected capacity change from 0 to 2048 [ 999.286639][T20412] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038 (0x7fffffff) [ 999.298683][ T30] kauditd_printk_skb: 440 callbacks suppressed [ 999.298696][ T30] audit: type=1400 audit(1726221336.293:5850): avc: denied { create } for pid=20407 comm="syz.1.5737" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 999.299879][T20412] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.5737: corrupted inode contents [ 999.349484][T20412] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz.1.5737: mark_inode_dirty error [ 999.361194][T20412] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.5737: corrupted inode contents [ 999.372984][T20412] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.5737: mark_inode_dirty error [ 999.374327][T20421] loop2: p1 < > p4 [ 999.390719][T20412] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 999.401112][T20421] loop2: p4 size 8388608 extends beyond EOD, truncated [ 999.432463][T20416] loop2: p1 < > p4 [ 999.448175][T20427] loop4: detected capacity change from 0 to 1024 [ 999.451004][T20416] loop2: p4 size 8388608 extends beyond EOD, truncated [ 999.494832][ T30] audit: type=1326 audit(1726221336.483:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acc03bef9 code=0x7ffc0000 [ 999.519273][ T30] audit: type=1326 audit(1726221336.503:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acc03bef9 code=0x7ffc0000 [ 999.549707][ T30] audit: type=1326 audit(1726221336.503:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4acc03bef9 code=0x7ffc0000 [ 999.567558][T20434] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 999.597066][T20439] syz.2.5747[20439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.597153][T20439] syz.2.5747[20439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.605164][ T30] audit: type=1326 audit(1726221336.503:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acc03bef9 code=0x7ffc0000 [ 999.612347][T20427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 999.619857][ T30] audit: type=1326 audit(1726221336.503:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acc03bef9 code=0x7ffc0000 [ 999.676928][ T30] audit: type=1326 audit(1726221336.533:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4acc03bef9 code=0x7ffc0000 [ 999.711369][ T30] audit: type=1326 audit(1726221336.533:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acc03bef9 code=0x7ffc0000 [ 999.734708][ T30] audit: type=1326 audit(1726221336.533:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acc03bef9 code=0x7ffc0000 [ 999.765060][ T30] audit: type=1326 audit(1726221336.533:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4acc03bef9 code=0x7ffc0000 [ 999.798225][ T380] udevd[380]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 999.813677][ T381] udevd[381]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 999.825897][T20445] hub 2-0:1.0: USB hub found [ 999.832648][T20445] hub 2-0:1.0: 1 port detected [ 999.849224][ T381] udevd[381]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 999.849466][ T380] udevd[380]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 999.863011][T20450] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 999.878269][T20446] loop3: detected capacity change from 0 to 2048 [ 999.958743][T20458] loop1: detected capacity change from 0 to 2048 [ 999.978395][ T380] udevd[380]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 999.988174][T20446] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1000.003755][ T381] udevd[381]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1000.027858][T20446] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,abort,mblk_io_submit,nouid32,dioread_lock,grpjquota=,bsddf,,errors=continue. Quota mode: none. [ 1000.048443][T20458] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.5756: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1000.091794][T20458] EXT4-fs (loop1): get root inode failed [ 1000.097293][T20458] EXT4-fs (loop1): mount failed [ 1000.215612][T20187] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /10/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.246016][T20187] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.305265][T20187] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /10/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.326042][T20187] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.345478][T20187] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /10/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.368569][T20187] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.387397][T20187] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /10/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.407982][T20187] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.426642][T20187] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /10/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.447460][T20187] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1000.463147][T20458] loop1: detected capacity change from 0 to 512 [ 1000.474450][T20458] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 1000.576776][T20499] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5773'. [ 1000.830158][T20508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.833894][T20520] loop4: detected capacity change from 0 to 2048 [ 1000.842522][T20508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.850528][T20508] device bridge_slave_0 entered promiscuous mode [ 1000.861127][T20508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.868002][T20508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.875319][T20508] device bridge_slave_1 entered promiscuous mode [ 1000.887998][T20520] FAT-fs (loop4): Unrecognized mount option "·" or missing value [ 1001.048475][T20508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.055432][T20508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.062563][T20508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.069299][T20508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.096358][T20531] loop4: detected capacity change from 0 to 2048 [ 1001.122331][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1001.131032][ T693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.148055][T20531] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1001.148068][ T693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.171391][ T4772] device bridge_slave_1 left promiscuous mode [ 1001.177327][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.185715][ T4772] device bridge_slave_0 left promiscuous mode [ 1001.191817][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.200096][ T4772] device veth1_macvtap left promiscuous mode [ 1001.206445][ T4772] device veth0_vlan left promiscuous mode [ 1001.216864][T20531] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,abort,mblk_io_submit,nouid32,dioread_lock,grpjquota=,bsddf,,errors=continue. Quota mode: none. [ 1001.278289][T19949] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /50/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.301477][T19949] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.320219][T19949] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /50/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.342113][T19949] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.364861][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1001.372872][T19949] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /50/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.393394][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.400222][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.407427][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1001.415436][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.422280][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.429932][T19949] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.448433][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1001.535073][T19949] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /50/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.557478][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1001.571717][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1001.580394][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1001.692536][T19949] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.799463][T19949] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /50/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.827222][T20508] device veth0_vlan entered promiscuous mode [ 1001.839257][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1001.847028][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1001.864124][T19949] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1001.871335][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1001.889774][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1001.928797][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1001.941825][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1001.954460][T20548] loop1: detected capacity change from 0 to 256 [ 1001.964576][T20508] device veth1_macvtap entered promiscuous mode [ 1001.998553][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1002.006119][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1002.014415][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1002.022905][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1002.031827][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1002.085135][T20554] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1002.158928][T20565] Unsupported ieee802154 address type: 0 [ 1002.180128][T20567] loop3: detected capacity change from 0 to 512 [ 1002.192664][T20567] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1002.203030][T20567] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5803: bg 0: block 248: padding at end of block bitmap is not set [ 1002.221371][T20567] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.5803: Failed to acquire dquot type 1 [ 1002.245641][T20567] EXT4-fs (loop3): 1 truncate cleaned up [ 1002.258547][T20567] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1002.277398][T20567] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1002.296256][T20567] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 1002.307216][T20570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.323602][T20570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.331166][T20570] device bridge_slave_0 entered promiscuous mode [ 1002.338122][T20570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.345767][T20570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.353188][T20570] device bridge_slave_1 entered promiscuous mode [ 1002.360145][T20580] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.5803: Failed to acquire dquot type 1 [ 1002.558932][T20570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.565978][T20570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.573045][T20570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.579816][T20570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.610862][T20610] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1002.623293][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.640562][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.933057][T20620] x_tables: duplicate underflow at hook 1 [ 1002.967866][T20619] loop1: detected capacity change from 0 to 2048 [ 1002.982383][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1002.989843][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1003.008652][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1003.017494][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1003.026924][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.033789][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.041619][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1003.050333][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1003.058484][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.065348][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.073141][T20619] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1003.080563][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1003.088881][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1003.096860][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1003.097233][T20619] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,abort,mblk_io_submit,nouid32,dioread_lock,grpjquota=,bsddf,,errors=continue. Quota mode: none. [ 1003.104802][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1003.143758][T16506] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /254/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.148521][T20624] device pim6reg1 entered promiscuous mode [ 1003.170052][T16506] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.187432][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1003.189851][T16506] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /254/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.203373][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1003.232404][T16506] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.251317][T20570] device veth0_vlan entered promiscuous mode [ 1003.251323][T16506] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /254/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.257443][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1003.286009][T16506] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.304955][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1003.322959][T20570] device veth1_macvtap entered promiscuous mode [ 1003.330151][T16506] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /254/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.351895][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1003.359284][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1003.379492][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1003.382604][T16506] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.397319][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1003.409847][T16506] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /254/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.434328][T16506] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1003.435415][ T693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1003.478298][T20648] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1003.487657][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1003.497323][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1003.518672][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1003.527758][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1003.541802][ T8] device bridge_slave_1 left promiscuous mode [ 1003.560514][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.583212][ T8] device bridge_slave_0 left promiscuous mode [ 1003.589162][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.611327][ T8] device veth1_macvtap left promiscuous mode [ 1003.630218][ T8] device veth0_vlan left promiscuous mode [ 1004.098980][T20656] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1004.111936][T20671] tipc: Started in network mode [ 1004.116637][T20671] tipc: Node identity f7, cluster identity 4711 [ 1004.123110][T20671] tipc: Node number set to 247 [ 1004.237595][T20688] loop4: detected capacity change from 0 to 1024 [ 1004.290427][T20688] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1004.326478][ T30] kauditd_printk_skb: 315 callbacks suppressed [ 1004.326492][ T30] audit: type=1326 audit(1726221341.313:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="syz.3.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69acf8ef9 code=0x7ffc0000 [ 1004.384903][ T30] audit: type=1326 audit(1726221341.313:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="syz.3.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff69acf8ef9 code=0x7ffc0000 [ 1004.414565][ T30] audit: type=1326 audit(1726221341.313:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="syz.3.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69acf8ef9 code=0x7ffc0000 [ 1004.493556][ T30] audit: type=1326 audit(1726221341.313:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="syz.3.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff69acf8ef9 code=0x7ffc0000 [ 1004.523686][ T30] audit: type=1326 audit(1726221341.313:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="syz.3.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69acf8ef9 code=0x7ffc0000 [ 1004.547551][ T30] audit: type=1326 audit(1726221341.313:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="syz.3.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff69acf8ef9 code=0x7ffc0000 [ 1004.590999][T20704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.597842][T20704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.605367][T20704] device bridge_slave_0 entered promiscuous mode [ 1004.612636][T20704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.619464][T20704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.626973][T20704] device bridge_slave_1 entered promiscuous mode [ 1004.633496][ T30] audit: type=1326 audit(1726221341.313:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="syz.3.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69acf8ef9 code=0x7ffc0000 [ 1004.658441][ T30] audit: type=1326 audit(1726221341.313:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="syz.3.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7ff69acf8ef9 code=0x7ffc0000 [ 1004.689457][ T30] audit: type=1326 audit(1726221341.313:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20702 comm="syz.3.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69acf8ef9 code=0x7ffc0000 [ 1004.712927][ T30] audit: type=1326 audit(1726221341.353:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20705 comm="syz.2.5863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1004.722262][T20739] loop3: detected capacity change from 0 to 1024 [ 1004.831395][T20739] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1004.855438][T20746] loop4: detected capacity change from 0 to 8192 [ 1004.862079][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5882'. [ 1004.904319][T20704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.911189][T20704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.918283][T20704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.925069][T20704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.951735][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5880'. [ 1004.993150][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1004.999978][T20763] loop3: detected capacity change from 0 to 512 [ 1005.013944][T14824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.021923][T14824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.055627][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1005.063644][T14824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.070477][T14824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.078038][T20763] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1005.078842][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1005.096134][T14824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.102983][T14824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.110592][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1005.118566][T14824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1005.127485][T20763] EXT4-fs (loop3): 1 truncate cleaned up [ 1005.132992][T20763] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1005.161496][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1005.171894][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1005.184027][T20704] device veth0_vlan entered promiscuous mode [ 1005.193668][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1005.225792][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1005.235121][T20774] loop4: detected capacity change from 0 to 4096 [ 1005.242378][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1005.249631][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1005.261977][ T8] device bridge_slave_1 left promiscuous mode [ 1005.268914][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.277594][ T8] device bridge_slave_0 left promiscuous mode [ 1005.283814][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.286058][T20774] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1005.306654][ T8] device veth1_macvtap left promiscuous mode [ 1005.313361][ T8] device veth0_vlan left promiscuous mode [ 1005.393242][T20796] loop4: detected capacity change from 0 to 1024 [ 1005.471931][T20796] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1005.508257][T20704] device veth1_macvtap entered promiscuous mode [ 1005.516124][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1005.524366][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1005.532507][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1005.552622][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1005.560835][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1005.569041][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1005.577851][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1005.588647][T20808] loop3: detected capacity change from 0 to 2048 [ 1005.662350][T20828] loop1: detected capacity change from 0 to 1024 [ 1005.679911][T14824] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x4 [ 1005.687709][T14824] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x2 [ 1005.698841][T20808] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1005.723808][T14824] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x3 [ 1005.751566][T20828] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1005.811081][T14824] hid-generic 0000:3000000:0000.007C: hidraw0: HID v0.00 Device [sy] on syz0 [ 1005.918187][T20846] syz.3.5922[20846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1005.918263][T20846] syz.3.5922[20846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1006.237799][T20852] device pim6reg1 entered promiscuous mode [ 1006.293280][T20860] loop1: detected capacity change from 0 to 128 [ 1006.386308][T20860] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1006.414176][T20860] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1006.610403][T20890] loop4: detected capacity change from 0 to 1024 [ 1006.644978][T20892] loop1: detected capacity change from 0 to 512 [ 1006.692171][T20890] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1006.728291][T20892] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1006.746346][T20892] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1006.764583][T20892] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1006.783007][T20892] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1006.790250][T20892] EXT4-fs (loop1): mount failed [ 1006.799562][T20908] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5947'. [ 1006.808548][T20908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5947'. [ 1006.965998][T20912] loop3: detected capacity change from 0 to 256 [ 1006.974308][T20898] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 1007.029032][T20898] incfs: Backing dir is not set, filesystem can't be mounted. [ 1007.036853][T20898] incfs: mount failed -2 [ 1007.119167][T20912] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1007.140447][T20908] incfs: ino conflict with backing FS 1 [ 1007.147173][T20908] overlayfs: failed to resolve './file2': -2 [ 1007.751230][T20933] loop1: detected capacity change from 0 to 128 [ 1008.669700][T20943] loop4: detected capacity change from 0 to 1024 [ 1008.692538][T20943] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1008.912840][T20967] device syzkaller0 entered promiscuous mode [ 1008.973962][ T4772] device bridge_slave_1 left promiscuous mode [ 1008.980100][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.998800][ T4772] device bridge_slave_0 left promiscuous mode [ 1009.005255][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.033589][T20974] loop4: detected capacity change from 0 to 1024 [ 1009.043936][ T4772] device veth1_macvtap left promiscuous mode [ 1009.121975][T20974] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1009.448558][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 1009.448576][ T30] audit: type=1326 audit(1726221346.433:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1009.478376][ T30] audit: type=1326 audit(1726221346.433:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1009.511219][ T30] audit: type=1326 audit(1726221346.473:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1009.535163][ T30] audit: type=1326 audit(1726221346.473:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1009.566850][ T30] audit: type=1326 audit(1726221346.473:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1009.590699][ T30] audit: type=1326 audit(1726221346.473:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1009.597193][T20987] incfs_lookup_dentry err:-5 [ 1009.618514][T20987] incfs: Can't find or create .index dir in ./file0 [ 1009.625678][T20987] incfs: mount failed -5 [ 1009.627199][ T30] audit: type=1326 audit(1726221346.473:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1009.653325][ T30] audit: type=1326 audit(1726221346.473:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1009.951076][ T30] audit: type=1326 audit(1726221346.473:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1009.995349][ T30] audit: type=1326 audit(1726221346.473:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.0.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d5adf7f33 code=0x7ffc0000 [ 1010.298231][T21007] loop4: detected capacity change from 0 to 512 [ 1010.674186][T21010] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1010.737786][T21007] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 1010.758384][T21007] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 1010.828149][T21018] loop3: detected capacity change from 0 to 512 [ 1010.869586][T21020] loop4: detected capacity change from 0 to 1024 [ 1010.881842][T21018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1010.893582][T21018] EXT4-fs (loop3): 1 truncate cleaned up [ 1010.899034][T21018] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 1010.976159][T21020] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1011.444294][ T26] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1011.872021][T21034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5988'. [ 1011.880838][T21034] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5988'. [ 1012.154092][T21046] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1012.240737][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 1012.306306][T21047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.325256][T21047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.345362][T21047] device bridge_slave_0 entered promiscuous mode [ 1012.352471][T21047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.359313][T21047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.366663][T21047] device bridge_slave_1 entered promiscuous mode [ 1012.370753][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.400685][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.418875][T21066] loop1: detected capacity change from 0 to 512 [ 1012.427937][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1012.458461][ T26] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1012.473267][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.488853][T21066] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.6001: inline data xattr refers to an external xattr inode [ 1012.489082][ T26] usb 1-1: config 0 descriptor?? [ 1012.503913][T21066] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6001: couldn't read orphan inode 12 (err -117) [ 1012.520230][T21066] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,resuid=0x0000000000000000,grpjquota=,resuid=0x0000000000000000,jqfmt=vfsv0,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 1012.573711][T21047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.580622][T21047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.587697][T21047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.594470][T21047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.633373][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1012.641237][T16870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.648368][T16870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.670125][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1012.678195][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.685065][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.692837][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1012.700896][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.707874][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.717587][T11803] device bridge_slave_1 left promiscuous mode [ 1012.724007][T11803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.731767][T11803] device bridge_slave_0 left promiscuous mode [ 1012.737758][T11803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.746166][T11803] device veth1_macvtap left promiscuous mode [ 1012.752090][T11803] device veth0_vlan left promiscuous mode [ 1012.831493][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1012.839456][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1012.865775][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1012.877973][T21047] device veth0_vlan entered promiscuous mode [ 1012.891616][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1012.899630][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1012.906910][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1012.944451][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1012.954022][T21047] device veth1_macvtap entered promiscuous mode [ 1012.960713][T21073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.967611][T21073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.974997][T21073] device bridge_slave_0 entered promiscuous mode [ 1012.982270][T21073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.989115][T21073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.996650][T21073] device bridge_slave_1 entered promiscuous mode [ 1013.026601][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1013.035762][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.044868][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1013.052830][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.060365][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.067994][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.080539][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.087703][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.112409][T21084] loop3: detected capacity change from 0 to 256 [ 1013.118766][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.126173][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.139687][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.225423][ T26] microsoft 0003:045E:07DA.007D: unknown main item tag 0x0 [ 1013.248978][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1013.250735][ T26] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.007D/input/input60 [ 1013.260945][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1013.279616][ T26] microsoft 0003:045E:07DA.007D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1013.560673][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1013.570180][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1013.578447][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.585307][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.592932][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1013.601126][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1013.609265][T21093] futex_wake_op: syz.2.6008 tries to shift op by -1; fix this program [ 1013.617948][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.624796][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.644658][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1013.652300][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1013.660126][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1013.677549][T21097] loop4: detected capacity change from 0 to 256 [ 1013.687431][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1013.699156][ T20] usb 1-1: USB disconnect, device number 29 [ 1013.708267][T21086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1013.716087][T21086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1013.724370][T21086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1013.747330][T21073] device veth0_vlan entered promiscuous mode [ 1013.764275][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1013.784069][T21073] device veth1_macvtap entered promiscuous mode [ 1013.804687][T21103] loop4: detected capacity change from 0 to 2048 [ 1013.812133][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1013.827639][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1013.853014][T21105] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1013.880156][T21103] EXT4-fs (loop4): Unrecognized mount option "obj_user=team_slave_0" or missing value [ 1014.176157][T11803] device bridge_slave_1 left promiscuous mode [ 1014.244915][T11803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.268466][T11803] device bridge_slave_0 left promiscuous mode [ 1014.274667][T11803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.340040][T11803] device veth1_macvtap left promiscuous mode [ 1014.346011][T11803] device veth0_vlan left promiscuous mode [ 1014.459058][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1014.459205][ T30] audit: type=1400 audit(1726221351.443:6418): avc: denied { ioctl } for pid=21114 comm="syz.3.6018" path="socket:[117081]" dev="sockfs" ino=117081 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1014.771281][T21121] device vlan2 entered promiscuous mode [ 1014.776669][T21121] device ip6gretap0 entered promiscuous mode [ 1015.205468][ T30] audit: type=1326 audit(1726221352.193:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21135 comm="syz.0.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1015.216067][T21138] loop3: detected capacity change from 0 to 512 [ 1015.264422][ T30] audit: type=1326 audit(1726221352.223:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21135 comm="syz.0.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1015.271322][T21140] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1015.312119][T21142] loop4: detected capacity change from 0 to 1024 [ 1015.320655][ T30] audit: type=1326 audit(1726221352.223:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21135 comm="syz.0.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1015.353397][T21138] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1015.364731][ T30] audit: type=1326 audit(1726221352.223:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21135 comm="syz.0.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1015.388579][T21138] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1015.390192][T21142] EXT4-fs (loop4): Ignoring removed orlov option [ 1015.404953][ T30] audit: type=1326 audit(1726221352.223:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21135 comm="syz.0.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1015.429260][ T30] audit: type=1326 audit(1726221352.223:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21135 comm="syz.0.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1015.438745][T21142] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1015.461237][T21138] EXT4-fs (loop3): 1 truncate cleaned up [ 1015.470707][T21138] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,mblk_io_submit,noload,,errors=continue. Quota mode: none. [ 1015.511536][T21142] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1015.603906][ T30] audit: type=1400 audit(1726221352.593:6425): avc: denied { write } for pid=21141 comm="syz.4.6027" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1015.669126][ T30] audit: type=1400 audit(1726221352.633:6426): avc: denied { ioctl } for pid=21141 comm="syz.4.6027" path="/41/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1015.753841][ T30] audit: type=1400 audit(1726221352.743:6427): avc: denied { create } for pid=21141 comm="syz.4.6027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1015.828908][T21130] overlayfs: conflicting lowerdir path [ 1016.451629][T21165] EXT4-fs (sda1): shut down requested (2) [ 1016.457217][T21165] Aborting journal on device sda1-8. [ 1016.515591][T21172] loop4: detected capacity change from 0 to 512 [ 1016.523387][T21172] EXT4-fs (loop4): Ignoring removed nobh option [ 1016.631420][T21172] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1016.736102][T21172] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.6034: inode #1: comm syz.4.6034: iget: illegal inode # [ 1016.833315][T21172] EXT4-fs (loop4): Remounting filesystem read-only [ 1016.839652][T21172] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.6034: error while reading EA inode 1 err=-117 [ 1016.862325][T21181] loop3: detected capacity change from 0 to 256 [ 1016.868790][T21172] EXT4-fs error (device loop4): ext4_evict_inode:294: comm syz.4.6034: couldn't truncate inode 15 (err -30) [ 1016.880363][T21172] EXT4-fs (loop4): 1 orphan inode deleted [ 1016.885970][T21172] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nobh,debug_want_extra_isize=0x000000000000005c,minixdf,errors=remount-ro,grpquota,nomblk_io_submit,. Quota mode: writeback. [ 1016.908304][T21172] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6034: invalid indirect mapped block 234881024 (level 0) [ 1016.922302][T21172] EXT4-fs (loop4): Remounting filesystem read-only [ 1017.052943][T21186] loop4: detected capacity change from 0 to 256 [ 1017.135206][T21188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1017.627711][T21199] ip6t_rpfilter: unknown options [ 1017.670659][ T399] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1018.650742][ T399] usb 5-1: Using ep0 maxpacket: 8 [ 1018.775769][T21208] loop3: detected capacity change from 0 to 256 [ 1018.810786][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.829443][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.839349][ T399] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1018.848491][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.859840][ T399] usb 5-1: config 0 descriptor?? [ 1019.015078][T21222] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 1019.025928][T21222] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1019.253446][T21224] loop1: detected capacity change from 0 to 128 [ 1019.339568][T21227] loop3: detected capacity change from 0 to 256 [ 1019.346332][T21224] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1019.353195][ T399] usbhid 5-1:0.0: can't add hid device: -71 [ 1019.356890][T21224] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1019.359141][ T399] usbhid: probe of 5-1:0.0 failed with error -71 [ 1019.371724][T21224] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 1019.378470][ T399] usb 5-1: USB disconnect, device number 8 [ 1019.483244][T21232] loop3: detected capacity change from 0 to 2048 [ 1019.546798][T21232] EXT4-fs (loop3): Unrecognized mount option "obj_user=team_slave_0" or missing value [ 1019.559343][T21234] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1019.823085][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1019.823154][ T30] audit: type=1400 audit(1726221356.813:6486): avc: denied { mounton } for pid=21240 comm="syz.2.6057" path="/129/file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1020.223305][T21264] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1020.704063][T21266] overlayfs: conflicting lowerdir path [ 1021.666064][ T30] audit: type=1400 audit(1726221358.643:6487): avc: denied { name_bind } for pid=21278 comm="syz.0.6071" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1021.772434][ T8883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1022.170780][ T8883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.181704][ T8883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.191430][ T8883] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1022.210923][ T8883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.219620][ T8883] usb 5-1: config 0 descriptor?? [ 1022.584805][T21298] loop3: detected capacity change from 0 to 128 [ 1022.667582][T21300] loop1: detected capacity change from 0 to 512 [ 1022.704326][T21298] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1022.716069][T21300] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1022.722544][T21300] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.6078: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 1022.741626][T21300] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.6078: Bad quota inode: 4, type: 1 [ 1022.752654][T21300] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1022.767561][T21300] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1022.770373][T21298] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1022.777259][T21298] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 1022.791148][T21300] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1022.895890][T21308] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1023.070967][ T8883] hid (null): bogus close delimiter [ 1023.280744][ T8883] usb 5-1: string descriptor 0 read error: -22 [ 1023.512446][ T8883] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.007E/input/input61 [ 1023.571587][ T8883] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.007E/input/input62 [ 1023.592532][ T8883] uclogic 0003:256C:006D.007E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1023.640676][ T30] audit: type=1400 audit(1726221360.623:6488): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3629 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1023.732226][ T1880] usb 5-1: USB disconnect, device number 9 [ 1024.294375][ T30] audit: type=1326 audit(1726221361.283:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.2.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1024.319241][ T30] audit: type=1326 audit(1726221361.283:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.2.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1024.344152][ T30] audit: type=1326 audit(1726221361.313:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.2.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1024.370676][ T8883] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1024.378139][ T30] audit: type=1326 audit(1726221361.313:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.2.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1024.401889][ T30] audit: type=1326 audit(1726221361.313:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.2.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1024.432603][ T30] audit: type=1326 audit(1726221361.333:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.2.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1024.456688][ T30] audit: type=1326 audit(1726221361.333:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.2.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1025.345128][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6096'. [ 1025.353903][T21367] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6096'. [ 1025.712009][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1025.712026][ T30] audit: type=1326 audit(1726221362.693:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21373 comm="syz.2.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1025.744132][ T30] audit: type=1326 audit(1726221362.703:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21373 comm="syz.2.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1025.767676][ T30] audit: type=1326 audit(1726221362.703:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21373 comm="syz.2.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1025.791290][ T30] audit: type=1326 audit(1726221362.703:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21373 comm="syz.2.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1025.814802][ T30] audit: type=1326 audit(1726221362.703:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21373 comm="syz.2.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1025.838800][ T30] audit: type=1326 audit(1726221362.703:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21373 comm="syz.2.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1025.893363][T21386] device vlan2 entered promiscuous mode [ 1025.898754][T21386] device ip6gretap0 entered promiscuous mode [ 1025.936841][ T30] audit: type=1326 audit(1726221362.703:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21373 comm="syz.2.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1026.047724][ T8883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.058703][ T8883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.068401][ T8883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1026.081111][ T8883] usb 4-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 1026.089899][ T8883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.098983][ T8883] usb 4-1: config 0 descriptor?? [ 1026.712469][ T8883] wacom 0003:056A:0314.007F: item fetching failed at offset 3/7 [ 1026.727966][ T8883] wacom 0003:056A:0314.007F: parse failed [ 1026.735548][ T8883] wacom: probe of 0003:056A:0314.007F failed with error -22 [ 1026.836942][ T30] audit: type=1326 audit(1726221363.823:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7ad38ef9 code=0x7ffc0000 [ 1026.861164][ T30] audit: type=1326 audit(1726221363.823:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e7ad38ef9 code=0x7ffc0000 [ 1026.889838][T21416] loop1: detected capacity change from 0 to 256 [ 1026.917066][ T8883] usb 4-1: USB disconnect, device number 9 [ 1026.926206][ T30] audit: type=1326 audit(1726221363.823:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7ad38ef9 code=0x7ffc0000 [ 1027.277906][T21423] loop1: detected capacity change from 0 to 256 [ 1027.356182][T21423] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 1027.598399][T21431] ------------[ cut here ]------------ [ 1027.603755][T21431] WARNING: CPU: 1 PID: 21431 at mm/page_alloc.c:5754 __alloc_pages+0x770/0x8f0 [ 1027.612541][T21431] Modules linked in: [ 1027.616244][T21431] CPU: 1 PID: 21431 Comm: syz.1.6123 Not tainted 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1027.626096][T21431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1027.635960][T21431] RIP: 0010:__alloc_pages+0x770/0x8f0 [ 1027.641158][T21431] Code: df e9 aa fb ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fb ff ff e8 0f 13 05 00 48 ba 00 00 00 00 00 fc ff df e9 a6 fb ff ff <0f> 0b 45 31 e4 e9 73 fc ff ff 48 8d 4c 24 40 80 e1 07 80 c1 03 38 [ 1027.660681][T21431] RSP: 0018:ffffc900009d7a20 EFLAGS: 00010246 [ 1027.666629][T21431] RAX: 0000000000000004 RBX: 0000000000040dc0 RCX: ffffc900009d7a03 [ 1027.674466][T21431] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc900009d7ab8 [ 1027.682288][T21431] RBP: ffffc900009d7b30 R08: dffffc0000000000 R09: ffffc900009d7a90 [ 1027.690041][T21431] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1027.697869][T21431] R13: 1ffff9200013af4c R14: 1ffff9200013af4e R15: 1ffff9200013af48 [ 1027.705702][T21431] FS: 00007f4e799706c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1027.705724][T21431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1027.705739][T21431] CR2: 0000001b3120dff8 CR3: 000000011ea71000 CR4: 00000000003506a0 [ 1027.705756][T21431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1027.705768][T21431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1027.705779][T21431] Call Trace: [ 1027.705784][T21431] [ 1027.705791][T21431] ? show_regs+0x58/0x60 [ 1027.705813][T21431] ? __warn+0x160/0x2f0 [ 1027.705830][T21431] ? __alloc_pages+0x770/0x8f0 [ 1027.705853][T21431] ? report_bug+0x3d9/0x5b0 [ 1027.705875][T21431] ? __alloc_pages+0x770/0x8f0 [ 1027.705908][T21431] ? handle_bug+0x41/0x70 [ 1027.705927][T21431] ? exc_invalid_op+0x1b/0x50 [ 1027.781114][T21431] ? asm_exc_invalid_op+0x1b/0x20 [ 1027.786000][T21431] ? __alloc_pages+0x770/0x8f0 [ 1027.790654][T21431] ? prep_new_page+0x110/0x110 [ 1027.795202][T21431] kmalloc_order+0x4a/0x160 [ 1027.799533][T21431] kmalloc_order_trace+0x1a/0xb0 [ 1027.804305][T21431] __kmalloc+0x19c/0x270 [ 1027.808366][T21431] input_mt_init_slots+0xcf/0xa50 [ 1027.813494][T21431] ? uinput_create_device+0x1a1/0x630 [ 1027.818668][T21431] uinput_create_device+0x522/0x630 [ 1027.824387][T21431] uinput_ioctl_handler+0xa63/0x16a0 [ 1027.829496][T21431] ? selinux_file_ioctl+0x3cc/0x540 [ 1027.834560][T21431] ? uinput_release+0x50/0x50 [ 1027.839053][T21431] ? __fget_files+0x1c3/0x380 [ 1027.843578][T21431] uinput_ioctl+0x28/0x30 [ 1027.847726][T21431] ? uinput_poll+0x120/0x120 [ 1027.852165][T21431] __se_sys_ioctl+0x114/0x190 [ 1027.856682][T21431] __x64_sys_ioctl+0x7b/0x90 [ 1027.861134][T21431] x64_sys_call+0x98/0x9a0 [ 1027.865356][T21431] do_syscall_64+0x3b/0xb0 [ 1027.869597][T21431] ? clear_bhb_loop+0x35/0x90 [ 1027.874746][T21431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1027.880465][T21431] RIP: 0033:0x7f4e7ad38ef9 [ 1027.884839][T21431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.904307][T21431] RSP: 002b:00007f4e79970038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.912513][T21431] RAX: ffffffffffffffda RBX: 00007f4e7aef1130 RCX: 00007f4e7ad38ef9 [ 1027.920307][T21431] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 1027.928135][T21431] RBP: 00007f4e7adabb76 R08: 0000000000000000 R09: 0000000000000000 [ 1027.935942][T21431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.943756][T21431] R13: 0000000000000000 R14: 00007f4e7aef1130 R15: 00007ffe509dc418 [ 1027.951583][T21431] [ 1027.954423][T21431] ---[ end trace ffeb9521b93e5f09 ]--- [ 1028.902937][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1029.209011][T21455] tipc: Started in network mode [ 1029.213846][T21455] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1029.223010][T21455] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1029.231378][T21455] tipc: Enabled bearer , priority 10 [ 1029.504810][T21461] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 1029.520228][T21461] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1029.850712][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.861561][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.871154][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1029.880033][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.888352][ T26] usb 4-1: config 0 descriptor?? [ 1030.360696][ T20] tipc: Node number set to 1 [ 1030.430681][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 1030.436506][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 1030.444041][ T26] usb 4-1: USB disconnect, device number 10 [ 1030.863977][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1030.863995][ T30] audit: type=1326 audit(1726221367.853:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1030.897741][T21476] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1030.900381][ T30] audit: type=1326 audit(1726221367.853:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1030.927899][ T30] audit: type=1326 audit(1726221367.853:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1030.955288][ T30] audit: type=1326 audit(1726221367.853:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1031.025045][ T30] audit: type=1326 audit(1726221367.853:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1031.066391][T21483] loop1: detected capacity change from 0 to 256 [ 1031.082843][ T30] audit: type=1326 audit(1726221367.853:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1031.106687][ T30] audit: type=1326 audit(1726221367.853:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1031.133564][ T30] audit: type=1326 audit(1726221367.853:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1031.157141][ T30] audit: type=1326 audit(1726221367.853:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1031.180776][ T30] audit: type=1326 audit(1726221367.853:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1031.267494][T21495] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1031.315615][T21495] tipc: Enabled bearer , priority 10 [ 1031.362073][T21502] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1031.412336][T21086] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1031.820769][T21086] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1031.829693][T21086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.838229][T21086] usb 5-1: config 0 descriptor?? [ 1032.029121][ T1880] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1032.590727][ T1880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.601594][ T1880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.611183][ T1880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1032.623859][ T1880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1032.632694][ T1880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.641233][ T1880] usb 3-1: config 0 descriptor?? [ 1032.847315][T21524] device syzkaller0 entered promiscuous mode [ 1032.917784][T21528] tipc: Started in network mode [ 1032.922565][T21528] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1032.932480][T21528] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1032.941265][T21528] tipc: Enabled bearer , priority 10 [ 1032.972233][T21532] loop1: detected capacity change from 0 to 256 [ 1033.060736][T21086] usb 5-1: Cannot set MAC address [ 1033.065640][T21086] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 1033.077346][T21086] usb 5-1: USB disconnect, device number 10 [ 1033.550649][ T313] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1033.800660][ T313] usb 4-1: Using ep0 maxpacket: 8 [ 1034.529717][T21086] tipc: Node number set to 1 [ 1034.620982][T21558] device syzkaller0 entered promiscuous mode [ 1034.651090][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.663933][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.664198][T21573] tipc: Enabling of bearer rejected, already enabled [ 1034.674991][ T313] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1034.690235][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.722874][ T313] usb 4-1: config 0 descriptor?? [ 1034.865921][T21593] loop4: detected capacity change from 0 to 2048 [ 1034.926489][T21602] tipc: Enabling of bearer rejected, already enabled [ 1034.934035][T21593] EXT4-fs (loop4): Unrecognized mount option "obj_user=team_slave_0" or missing value [ 1034.950821][ T1880] usbhid 3-1:0.0: can't add hid device: -71 [ 1034.956660][ T1880] usbhid: probe of 3-1:0.0 failed with error -71 [ 1034.969291][ T1880] usb 3-1: USB disconnect, device number 19 [ 1035.279609][T21604] device syzkaller0 entered promiscuous mode [ 1035.390259][ T313] usbhid 4-1:0.0: can't add hid device: -71 [ 1035.396321][ T313] usbhid: probe of 4-1:0.0 failed with error -71 [ 1035.405875][ T313] usb 4-1: USB disconnect, device number 11 [ 1035.605610][T21621] loop3: detected capacity change from 0 to 128 [ 1035.684859][T21621] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1035.754307][T21621] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1035.766982][T21621] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038 (0x7fffffff) [ 1037.161233][ T20] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1037.235214][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1037.235230][ T30] audit: type=1326 audit(1726221374.203:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21651 comm="syz.0.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1037.265431][ T30] audit: type=1326 audit(1726221374.203:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21651 comm="syz.0.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1037.296308][ T30] audit: type=1326 audit(1726221374.203:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21651 comm="syz.0.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1037.419960][ T30] audit: type=1326 audit(1726221374.203:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21651 comm="syz.0.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1037.443641][ T30] audit: type=1326 audit(1726221374.203:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21651 comm="syz.0.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1037.467014][ T30] audit: type=1326 audit(1726221374.203:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21651 comm="syz.0.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1037.506159][T21666] usb usb7: usbfs: process 21666 (syz.0.6210) did not claim interface 0 before use [ 1037.657626][ T30] audit: type=1326 audit(1726221374.203:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21651 comm="syz.0.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1037.684342][ T30] audit: type=1326 audit(1726221374.283:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7ad38ef9 code=0x7ffc0000 [ 1037.802581][ T1880] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1037.807684][ T30] audit: type=1326 audit(1726221374.283:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e7ad38ef9 code=0x7ffc0000 [ 1037.836354][ T30] audit: type=1326 audit(1726221374.303:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21650 comm="syz.2.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1037.970706][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.981849][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.991716][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1038.000943][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.009683][ T20] usb 5-1: config 0 descriptor?? [ 1038.904768][T21682] loop3: detected capacity change from 0 to 256 [ 1038.915057][ T1880] usb 3-1: Using ep0 maxpacket: 8 [ 1038.954454][T21682] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 1039.016572][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 1039.023018][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 1039.030419][ T20] usb 5-1: USB disconnect, device number 11 [ 1039.274125][ T1880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.313691][ T1880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.681065][ T1880] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1040.009867][ T1880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.115901][T21714] loop4: detected capacity change from 0 to 256 [ 1040.191284][ T1880] usb 3-1: config 0 descriptor?? [ 1040.205594][T21713] usb usb7: usbfs: process 21713 (syz.0.6228) did not claim interface 0 before use [ 1041.425613][T21745] loop3: detected capacity change from 0 to 128 [ 1041.470799][ T1880] usbhid 3-1:0.0: can't add hid device: -71 [ 1041.531848][T21752] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1041.571774][T21749] usb usb7: usbfs: process 21749 (syz.0.6240) did not claim interface 0 before use [ 1041.758588][ T1880] usbhid: probe of 3-1:0.0 failed with error -71 [ 1041.766090][ T1880] usb 3-1: USB disconnect, device number 20 [ 1041.774786][T21755] loop1: detected capacity change from 0 to 256 [ 1041.852347][T21745] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1041.861185][T21745] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1041.877366][T21745] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038 (0x7fffffff) [ 1042.043321][ T456] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1042.258603][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1042.258625][ T30] audit: type=1326 audit(1726221379.233:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21750 comm="syz.4.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2dae0bafb code=0x7ffc0000 [ 1042.600514][ T30] audit: type=1326 audit(1726221379.293:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21750 comm="syz.4.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2dae0bafb code=0x7ffc0000 [ 1042.789981][ T30] audit: type=1326 audit(1726221379.753:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz.0.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1042.840581][ T456] usb 5-1: Using ep0 maxpacket: 8 [ 1042.845962][ T30] audit: type=1326 audit(1726221379.753:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz.0.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1042.901985][ T30] audit: type=1326 audit(1726221379.753:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz.0.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1042.925483][ T30] audit: type=1326 audit(1726221379.753:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz.0.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1042.949713][ T30] audit: type=1326 audit(1726221379.753:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz.0.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1042.973209][ T30] audit: type=1326 audit(1726221379.753:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz.0.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1042.998226][T21790] loop1: detected capacity change from 0 to 256 [ 1043.010822][ T456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.013324][ T30] audit: type=1326 audit(1726221379.753:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz.0.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5adf7ef9 code=0x7ffc0000 [ 1043.022029][ T456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.062524][ T456] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1043.075433][ T456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.086976][ T456] usb 5-1: config 0 descriptor?? [ 1043.092207][ T30] audit: type=1326 audit(1726221379.863:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21750 comm="syz.4.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2dae0bafb code=0x7ffc0000 [ 1043.122839][T21787] usb usb7: usbfs: process 21787 (syz.0.6253) did not claim interface 0 before use [ 1043.351915][T21797] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1043.500757][ T456] usbhid 5-1:0.0: can't add hid device: -71 [ 1043.506732][ T456] usbhid: probe of 5-1:0.0 failed with error -71 [ 1043.517104][ T456] usb 5-1: USB disconnect, device number 12 [ 1043.580750][T21086] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1043.940782][T21086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.952487][T21086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.964915][T21086] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1043.978314][T21086] usb 4-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 1045.277140][T21817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.285426][T21817] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 1045.294863][T21817] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1045.320743][T21086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.341337][T21086] usb 4-1: config 0 descriptor?? [ 1045.369483][T21827] loop1: detected capacity change from 0 to 256 [ 1045.821080][ T456] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1045.880829][T21086] usbhid 4-1:0.0: can't add hid device: -71 [ 1045.886888][T21086] usbhid: probe of 4-1:0.0 failed with error -71 [ 1045.917235][T21086] usb 4-1: USB disconnect, device number 12 [ 1046.070655][ T456] usb 5-1: Using ep0 maxpacket: 8 [ 1046.191539][ T456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.202566][ T456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.212398][ T456] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1046.221451][ T456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.233308][ T456] usb 5-1: config 0 descriptor?? [ 1046.466950][T21872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1046.475819][T21872] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1047.101991][T21873] usb usb7: usbfs: process 21873 (syz.3.6285) did not claim interface 0 before use [ 1047.184875][T21885] tipc: Enabling of bearer rejected, already enabled [ 1047.210702][ T456] usbhid 5-1:0.0: can't add hid device: -71 [ 1047.240677][ T456] usbhid: probe of 5-1:0.0 failed with error -71 [ 1047.249569][ T456] usb 5-1: USB disconnect, device number 13 [ 1047.319082][T21900] loop3: detected capacity change from 0 to 256 [ 1049.138050][T21922] tipc: Started in network mode [ 1049.145064][T21922] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1049.170769][T21922] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1049.181011][T21922] tipc: Enabled bearer , priority 10 [ 1049.193127][T21922] loop1: detected capacity change from 0 to 1024 [ 1049.326564][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1049.326580][ T30] audit: type=1326 audit(1726221386.313:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1049.351481][T21922] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1049.359314][ T30] audit: type=1326 audit(1726221386.313:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1049.393335][ T30] audit: type=1326 audit(1726221386.313:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c1a1bef9 code=0x7ffc0000 [ 1049.393750][T21924] usb usb7: usbfs: process 21924 (syz.0.6306) did not claim interface 0 before use [ 1049.424211][ T30] audit: type=1326 audit(1726221386.313:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17c1a1a890 code=0x7ffc0000 [ 1049.449698][ T30] audit: type=1326 audit(1726221386.313:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17c1a1bafb code=0x7ffc0000 [ 1049.476589][ T30] audit: type=1326 audit(1726221386.313:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17c1a1bafb code=0x7ffc0000 [ 1049.502019][ T30] audit: type=1326 audit(1726221386.313:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17c1a1bafb code=0x7ffc0000 [ 1049.525788][ T30] audit: type=1326 audit(1726221386.313:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17c1a1bafb code=0x7ffc0000 [ 1049.590691][T17243] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1049.598084][ T20] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1049.620877][ T30] audit: type=1326 audit(1726221386.613:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17c1a1bafb code=0x7ffc0000 [ 1049.652598][ T30] audit: type=1326 audit(1726221386.643:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21936 comm="syz.2.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17c1a1bafb code=0x7ffc0000 [ 1050.060235][T17243] usb 4-1: Using ep0 maxpacket: 32 [ 1050.065400][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 1050.200720][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.214394][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.300636][ T26] tipc: Node number set to 1 [ 1050.449157][ T20] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1050.458175][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.466666][ T20] usb 3-1: config 0 descriptor?? [ 1050.823650][T21974] loop1: detected capacity change from 0 to 512 [ 1050.870863][T17243] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1050.879805][T17243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.887611][T17243] usb 4-1: Product: syz [ 1050.891657][T17243] usb 4-1: Manufacturer: syz [ 1050.896116][T17243] usb 4-1: SerialNumber: syz [ 1050.898147][T21974] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.6324: inline data xattr refers to an external xattr inode [ 1050.901813][T17243] usb 4-1: config 0 descriptor?? [ 1050.917406][T21974] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6324: couldn't read orphan inode 12 (err -117) [ 1050.919916][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 1050.934876][T21974] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,resuid=0x0000000000000000,grpjquota=,resuid=0x0000000000000000,jqfmt=vfsv0,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 1050.937744][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 1050.981590][ T20] usb 3-1: USB disconnect, device number 21 [ 1051.754277][T21995] syz.3.6310[21995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1051.754613][T21995] syz.3.6310[21995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1051.990751][T17243] (unnamed net_device) (uninitialized): Assigned a random MAC address: 02:cd:fc:ca:68:58 [ 1052.013595][T17243] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 1052.080708][T22000] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 1052.091773][T22000] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1052.211520][T17243] usb 4-1: USB disconnect, device number 13 [ 1052.699114][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6335'. [ 1052.707907][T22012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6335'. [ 1053.014670][T22021] overlayfs: statfs failed on './file0' [ 1053.490922][T22034] device syzkaller0 entered promiscuous mode [ 1053.598687][T22052] overlayfs: statfs failed on './file0' [ 1054.370717][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1054.370736][ T30] audit: type=1326 audit(1726221391.343:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.3.6356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1054.497197][T22071] loop3: detected capacity change from 0 to 512 [ 1054.526848][ T30] audit: type=1326 audit(1726221391.343:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.3.6356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1054.556500][ T30] audit: type=1326 audit(1726221391.343:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.3.6356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1054.824255][T22071] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.6360: inline data xattr refers to an external xattr inode [ 1054.866675][ T30] audit: type=1326 audit(1726221391.343:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.3.6356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1054.890209][ T30] audit: type=1326 audit(1726221391.343:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.3.6356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1054.915055][ T30] audit: type=1326 audit(1726221391.343:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.3.6356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1054.915833][T22071] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6360: couldn't read orphan inode 12 (err -117) [ 1054.954623][T22071] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,resuid=0x0000000000000000,grpjquota=,resuid=0x0000000000000000,jqfmt=vfsv0,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 1054.955866][ T30] audit: type=1326 audit(1726221391.413:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22061 comm="syz.3.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1055.006692][ T30] audit: type=1326 audit(1726221391.413:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22061 comm="syz.3.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1055.030417][ T30] audit: type=1326 audit(1726221391.413:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22061 comm="syz.3.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1055.035071][T22087] device syzkaller0 entered promiscuous mode [ 1055.053772][ T30] audit: type=1326 audit(1726221391.413:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22061 comm="syz.3.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d3e3ef9 code=0x7ffc0000 [ 1055.169859][T22094] overlayfs: statfs failed on './file0' [ 1055.580346][T22114] loop3: detected capacity change from 0 to 512 [ 1055.625703][T22123] overlayfs: statfs failed on './file0' [ 1055.633977][T22114] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.6377: inline data xattr refers to an external xattr inode [ 1055.649097][T22114] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6377: couldn't read orphan inode 12 (err -117) [ 1055.670765][T22114] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,resuid=0x0000000000000000,grpjquota=,resuid=0x0000000000000000,jqfmt=vfsv0,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 1055.866848][T22132] usb usb7: usbfs: process 22132 (syz.2.6385) did not claim interface 0 before use [ 1055.967101][T22151] loop3: detected capacity change from 0 to 512 [ 1055.992074][T22152] binder: 22143:22152 ioctl 4018620d 0 returned -22 [ 1056.003671][T22151] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.6393: inline data xattr refers to an external xattr inode [ 1056.018769][T22151] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6393: couldn't read orphan inode 12 (err -117) [ 1056.031030][T22151] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,resuid=0x0000000000000000,grpjquota=,resuid=0x0000000000000000,jqfmt=vfsv0,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 1056.178275][T22160] loop4: detected capacity change from 0 to 256 [ 1056.203156][ T4772] tipc: Disabling bearer [ 1056.208507][ T4772] tipc: Left network mode [ 1056.212984][ T20] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1056.270679][ T456] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1056.510628][ T456] usb 1-1: Using ep0 maxpacket: 16 [ 1056.540757][ T20] usb 3-1: device descriptor read/all, error -71 [ 1056.570688][ T456] usb 1-1: device descriptor read/all, error -71 [ 1056.701511][ T4772] device bridge_slave_1 left promiscuous mode [ 1056.707436][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.714785][ T4772] device bridge_slave_0 left promiscuous mode [ 1056.720799][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.728654][ T4772] device veth1_macvtap left promiscuous mode [ 1056.734581][ T4772] device veth0_vlan left promiscuous mode [ 1057.143568][ T4772] tipc: Disabling bearer [ 1057.148638][ T4772] tipc: Left network mode [ 1057.152925][ T4772] tipc: Disabling bearer [ 1057.157976][ T4772] tipc: Left network mode [ 1057.162352][ T4772] tipc: Disabling bearer [ 1057.167402][ T4772] tipc: Left network mode [ 1057.213137][ T4772] device ip6gretap0 left promiscuous mode [ 1057.221481][ T4772] device ip6gretap0 left promiscuous mode [ 1057.681902][ T4772] device bridge_slave_1 left promiscuous mode [ 1057.687910][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.695198][ T4772] device bridge_slave_0 left promiscuous mode [ 1057.701210][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.709147][ T4772] device bridge_slave_1 left promiscuous mode [ 1057.715148][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.722540][ T4772] device bridge_slave_0 left promiscuous mode [ 1057.728446][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.736818][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.744085][ T4772] device bridge_slave_0 left promiscuous mode [ 1057.749985][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.758375][ T4772] device bridge_slave_1 left promiscuous mode [ 1057.764312][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.771577][ T4772] device bridge_slave_0 left promiscuous mode [ 1057.777481][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.785878][ T4772] device veth1_macvtap left promiscuous mode [ 1057.791824][ T4772] device veth1_macvtap left promiscuous mode [ 1057.797612][ T4772] device veth0_vlan left promiscuous mode [ 1057.803356][ T4772] device veth1_macvtap left promiscuous mode [ 1057.809159][ T4772] device veth0_vlan left promiscuous mode [ 1057.814950][ T4772] device veth1_macvtap left promiscuous mode [ 1057.820866][ T4772] device veth0_vlan left promiscuous mode